last executing test programs: 10.988177974s ago: executing program 1 (id=1135): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000000c0)="ec", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)='>', 0x1}) close(r0) 10.707297207s ago: executing program 1 (id=1137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x400000b2, 0x0, 0x3}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) 8.044879722s ago: executing program 1 (id=1143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="0f01c8c4e1f9e72490dad3650f01cbabb9be090000b800980000ba000000000f300ffb3eb95f0200000f320f38c99b000001002e660fc736", 0x38}], 0xaaaaaaaaaaaab5a, 0x44, 0x0, 0x0) 7.412093177s ago: executing program 3 (id=1144): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x7000000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 7.315685715s ago: executing program 3 (id=1145): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) getsockname$l2tp(0xffffffffffffffff, 0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/10, 0xa}, 0x40000010) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x640100ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2000, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socket$inet6_mptcp(0xa, 0x1, 0x106) 7.29378601s ago: executing program 0 (id=1146): r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) close(r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x20000040) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) (fail_nth: 12) 7.179300369s ago: executing program 1 (id=1147): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x0, 0x1, 0xffffffff, 0x1, 0x6, 0xffffffff00000000, 0xd, 0xf22, 0xda}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='a', 0x1, 0x9004) lseek(0xffffffffffffffff, 0x5, 0x4) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) unshare(0x40000080) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 6.632060753s ago: executing program 0 (id=1148): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x4, 0x1e, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hopopts={{0x68, 0x29, 0x36, {0x5e, 0x9, '\x00', [@pad1, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x966, 0x1, 0x1]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast1]}}}], 0x1e8}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r8 = syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x2c2) 6.575771177s ago: executing program 4 (id=1149): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) 5.973840202s ago: executing program 4 (id=1150): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x2000c450) r0 = syz_io_uring_setup(0x3cc0, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x3e8}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 5.707533857s ago: executing program 4 (id=1151): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) mount$fuse(0x40000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) 5.348296854s ago: executing program 4 (id=1152): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket(0xa, 0x3, 0x3a) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xa, @loopback, 0x8}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x7ff, 0x2, 0xfffffffc, 0x7, 0x1005, 0xb9, 0x3}, 0x20) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r9, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) syz_emit_ethernet(0xa4, &(0x7f00000010c0)={@multicast, @broadcast, @val={@val={0x88a8, 0x3, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0xa}}, {@generic={0x5, "692dd6245aae1fd1dc3cdc2b815499fbcc40dc3aaf19b7fac1b7d663f5aeb78987b70d1b78f31dd0a2add015f0dde874dcd20308fbb71b976834bb74f58e45805fdda8f819c9cd8bebb6d1bc8cf4ef4da7fb9bda67c33bab8ae5a561b6bac207c20dce15b02d593a59ea85be010342bc63d1c3674780c580f695af60c4b7ddab71d2060e3ca3eba4a26d83802f02"}}}, &(0x7f0000001180)={0x1, 0x1, [0xc75, 0xcc8, 0xdca, 0xea8]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) preadv(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76) splice(r8, 0x0, r0, 0x0, 0x20000000000002, 0x8) 5.021198482s ago: executing program 0 (id=1153): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="20150700000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000360912092b7383b1e8e792490f3b073aabef5e3048d4e92797f6667864a2ef606fd71cb428c"], 0x0, 0x0}) mremap(&(0x7f00005f4000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = syz_open_dev$evdev(0x0, 0x0, 0x4c8342) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfe3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x32314742, 0x1, @stepwise={0x9, 0x15a5, 0x7, 0x7fff, 0x3ff, 0x9}}) r5 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x80) add_key(&(0x7f0000000040)='rxrpc_s\x00', 0x0, &(0x7f0000000100)="100c06", 0x3, 0xfffffffffffffffe) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000240)={0x15, 0xfffffffffffffec9, 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f00000001c0)=0x5, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x200080c4, &(0x7f0000006080)={0xa, 0x4e24, 0x6, @loopback, 0x7}, 0x1c) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000880)={0x3, 0x0, 0x0}) prctl$PR_SET_IO_FLUSHER(0x43, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r7 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r7, &(0x7f0000000340)="097c54fc37b886bd04d47f27a627e3fcb5adf2af5878909217d05f7a85e42c0f12ed5cacc1f32a2658c6ec00004103", 0x2f) openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) 4.198683935s ago: executing program 2 (id=1154): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b87033400ff001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 4.097145843s ago: executing program 1 (id=1155): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x10, r2) syz_clone3(&(0x7f0000000280)={0x298228280, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x33}, &(0x7f0000000140)=""/162, 0xa2, &(0x7f0000000200)=""/31, 0x0}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x44, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaaaa0000240012800b00010065727370616e00001400028006000200e80a"], 0x50}}, 0x0) r6 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) syz_pidfd_open(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}}, 0x0) lseek(0xffffffffffffffff, 0x36, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x218300, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=r8, 0x1e, 0x1, 0x3, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008811}, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 4.095675956s ago: executing program 3 (id=1156): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffe, 0x42) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e1d, 0x1, @mcast1={0xff, 0x5}, 0x8}, 0x7a) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x14) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x8, 0x6, 0x74, 0x1, 0x5}, 0x14) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) timer_create(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2d, 'cpu'}]}, 0x5) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4011) write$UHID_INPUT(r0, &(0x7f0000001600)={0x8, {"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", 0x1000}}, 0x1006) 3.21191033s ago: executing program 2 (id=1157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="0f01c8c4e1f9e72490dad3650f01cbabb9be090000b800980000ba000000000f300ffb3eb95f0200000f320f38c99b000001002e660fc736", 0x38}], 0xaaaaaaaaaaaab5a, 0x44, 0x0, 0x0) 3.13510494s ago: executing program 1 (id=1158): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0xfffc, @local}, 0x10) listen(0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffbf8, @remote, 0x7}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8000000, 0x0, 0x9, 0x2) unshare(0x22020600) unshare(0x2a020400) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) 3.133952592s ago: executing program 3 (id=1159): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') lseek(r2, 0x20000093, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@empty, @remote, 0x11, 0x1f}}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x194, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x9, 0x7, 0x5, 0x722, 0x13, 0x7, 0x7c, 0x34, 0xb763599953cb0915, {0x40e7ff, 0x6fd8e84b}, 0x3, 0xed}}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x150, r4, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7c}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x20008890) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 2.50679653s ago: executing program 3 (id=1160): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000010c0)={0x1, @pix={0x3, 0x8000, 0x32315659, 0x8, 0x10, 0x6, 0x5, 0x6, 0x1, 0x7, 0x2, 0x6}}) syz_usb_connect(0x3, 0xf5, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b047e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402512eaedaa7f443b370d3f6406fa415e7e0f3e632183d4a081f423d406302"], 0x0) 2.463382333s ago: executing program 2 (id=1161): r0 = open(&(0x7f0000000540)='./file0/file0\x00', 0x4240e0, 0x236) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x8, 0x2, 0x2, 0x0, 0x0, 0x7, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x140075, 0x7ffe, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x8, 0xb18da5af2506eebd) dup(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000380)=""/134, 0x86}, {&(0x7f0000000440)=""/113, 0x71}, {&(0x7f00000004c0)=""/80, 0x50}], 0x4, &(0x7f0000000640)=""/161, 0xa1}, 0x4}, {{&(0x7f0000000700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000600)=""/45, 0x2d}, 0x3ff}], 0x2, 0x40010163, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r8, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) quotactl_fd$Q_GETFMT(r9, 0xffffffff80000402, 0x0, &(0x7f0000000140)) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, r3) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 2.346848559s ago: executing program 4 (id=1162): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0xe000000000000000, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.791899458s ago: executing program 4 (id=1163): socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x410200, 0x101) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x10640, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x6000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) gettid() mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.524620574s ago: executing program 2 (id=1164): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 38) 782.071009ms ago: executing program 2 (id=1165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) 560.020429ms ago: executing program 0 (id=1166): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x44, "ee8f83d826b49ee950cf1d3fdea9826c19c86017d677c83c429101ce1e5e17445513f6b6824b729351333242fc6e3671d714f4796305134b26088840253403d30b7f3b40"}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) utimensat(r2, 0x0, &(0x7f0000000080), 0x0) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000000200)=""/4, &(0x7f0000000000)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpriority(0x2, 0xffffffffffffffff, 0x9) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400), 0x2a, 0x40) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x200c4010) 413.833239ms ago: executing program 2 (id=1167): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) shutdown(r0, 0x1) 199.963894ms ago: executing program 0 (id=1168): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d867", 0x8c}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix={0x5, 0x1ec0000, 0x33565348, 0x5, 0x9, 0xddc7, 0x0, 0x2, 0x0, 0x6, 0x2, 0x3}}) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x4048000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x3d0}}], 0x1, 0x810) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000801000030400001ec0688b123e0007"], 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) 1.999551ms ago: executing program 3 (id=1169): r0 = socket$inet(0x2, 0x800, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_io_uring_setup(0x1e7f, &(0x7f0000000540)={0x0, 0xac24, 0x8, 0x1023, 0x1c3, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r7, 0xffff) close(0x3) fcntl$addseals(r7, 0x409, 0x7) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) fcntl$lock(r3, 0x24, &(0x7f0000000140)={0x2, 0x0, 0x100000000, 0x6, r8}) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000001c0)={r7, 0x1, 0x0, 0x8000}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x99b, 0x3a5, 0x2b, 0x0, 0x0) unshare(0x22020400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 0s ago: executing program 0 (id=1170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) r1 = open(&(0x7f0000000040)='./file0\x00', 0x541000, 0x100) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x7, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x40) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x33, 0x8, 0x0, 0x1, 0x10000, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @value=r2}, 0x50) pipe(&(0x7f00000003c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r5, &(0x7f0000000a40)=[{&(0x7f0000000680)='E', 0x1}], 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r6, 0x6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x7f, 0x1}}) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x101000, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, r12, 0x10, 0x70bd2c, 0x4, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0xff07, 0x0, 0x40000}, 0x2000000) kernel console output (not intermixed with test programs): .105194][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 278.115281][ T10] usb 3-1: Product: syz [ 278.146244][ T5923] dw2102: command 0x51 transfer failed. [ 278.151962][ T10] usb 3-1: Manufacturer: syz [ 278.157312][ T5923] dvb-usb: bulk message failed: -22 (5/0) [ 278.163276][ T10] usb 3-1: SerialNumber: syz [ 278.193621][ T5923] dw2102: i2c probe for address 0x68 failed. [ 278.204649][ T10] usb 3-1: config 0 descriptor?? [ 278.209818][ T5923] dvb-usb: bulk message failed: -22 (5/0) [ 278.237809][ T5923] dw2102: i2c probe for address 0x69 failed. [ 278.244241][ T5923] dvb-usb: bulk message failed: -22 (5/0) [ 278.257654][ T5923] dw2102: i2c probe for address 0x6a failed. [ 278.264880][ T5923] dw2102: probing for demodulator failed. Is the external power switched on? [ 278.280449][ T5923] dvb-usb: no frontend was attached by 'TeVii S662' [ 278.402541][ T5923] rc_core: IR keymap rc-tt-1500 not found [ 278.408763][ T5923] Registered IR keymap rc-empty [ 278.432943][ T5923] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 278.464611][ T5923] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input15 [ 278.486214][ T5926] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 278.509509][ T5923] dvb-usb: schedule remote query interval to 250 msecs. [ 278.516756][ T5923] dw2102: su3000_power_ctrl: 0, initialized 1 [ 278.529446][ T5923] dvb-usb: TeVii S662 successfully initialized and connected. [ 278.653319][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 278.693746][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 278.706927][ T5919] usb 4-1: USB disconnect, device number 22 [ 278.721206][ T5926] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 278.758239][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.770677][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.820013][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 278.857011][ T8336] dvb-usb: bulk message failed: -22 (6/0) [ 278.863402][ T8336] dw2102: i2c transfer failed. [ 278.883994][ T10] usb 3-1: media controller created [ 278.913088][ T5926] usb 2-1: config 0 descriptor?? [ 278.962084][ T8338] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 278.968205][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.980571][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 279.084369][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 279.156860][ T8341] macvtap1: entered promiscuous mode [ 279.168361][ T8341] batadv0: entered promiscuous mode [ 279.194726][ T8341] macvtap1: entered allmulticast mode [ 279.201022][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 279.202404][ T5919] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 279.216204][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 279.228310][ T8341] batadv0: entered allmulticast mode [ 279.245258][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 279.266007][ T8341] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 279.296755][ T8342] batadv0: left allmulticast mode [ 279.304619][ T8342] batadv0: left promiscuous mode [ 279.345069][ T10] usb 3-1: USB disconnect, device number 26 [ 279.594375][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 279.710175][ T5829] rndis_host 1-1:0.109: More than one union descriptor, skipping ... [ 279.743587][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.691'. [ 279.762333][ T5829] usb 1-1: bad CDC descriptors [ 279.778310][ T8346] netlink: 104 bytes leftover after parsing attributes in process `syz.3.692'. [ 279.793336][ T5829] cdc_acm 1-1:0.109: More than one union descriptor, skipping ... [ 279.823504][ T5829] usb 1-1: USB disconnect, device number 35 [ 279.920541][ T5926] usbhid 2-1:0.0: can't add hid device: -71 [ 279.935953][ T5926] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 279.964412][ T5926] usb 2-1: USB disconnect, device number 38 [ 280.214375][ T5917] usb 5-1: 0:2 : does not exist [ 280.232742][ T5917] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 280.348978][ T5917] usb 5-1: USB disconnect, device number 37 [ 280.485003][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 280.506020][ T6119] udevd[6119]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.599997][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 280.972878][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.704'. [ 280.986200][ T5926] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 281.166227][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 281.580048][ T5926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.592008][ T5926] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 281.603118][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.641566][ T5926] usb 4-1: config 0 descriptor?? [ 281.795625][ T5926] dvb-usb: found a 'TeVii S662' in warm state. [ 281.815619][ T5926] dw2102: su3000_power_ctrl: 1, initialized 0 [ 281.843257][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 281.856202][ T5829] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 281.866217][ T5919] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 281.891428][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 281.948455][ T5926] dvbdev: DVB: registering new adapter (TeVii S662) [ 282.074349][ T5926] usb 4-1: media controller created [ 282.124132][ T5829] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 282.132436][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 282.132477][ T5926] dw2102: i2c transfer failed. [ 282.152603][ T5919] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 282.161254][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.179058][ T5829] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 282.196510][ T8371] dvb-usb: bulk message failed: -22 (3/0) [ 282.213820][ T8371] dw2102: i2c transfer failed. [ 282.223160][ T5919] usb 3-1: config 0 has no interface number 0 [ 282.229565][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 282.242072][ T5926] dw2102: i2c transfer failed. [ 282.247061][ T5919] usb 3-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 282.247425][ T5829] usb 1-1: config 0 has no interface number 0 [ 282.279310][ T8371] dw2102: i2c wr: len=78 is too big! [ 282.279310][ T8371] [ 282.290419][ T5919] usb 3-1: config 0 interface 113 has no altsetting 0 [ 282.299172][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 282.305607][ T5926] dw2102: i2c transfer failed. [ 282.353849][ T5829] usb 1-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 282.368143][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.368165][ T5919] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 282.386317][ T5829] usb 1-1: Product: syz [ 282.387432][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.402564][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 282.410144][ T5829] usb 1-1: Manufacturer: syz [ 282.410493][ T5926] dw2102: i2c transfer failed. [ 282.414929][ T5829] usb 1-1: SerialNumber: syz [ 282.421038][ T5919] usb 3-1: Product: syz [ 282.429557][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 282.435861][ T5919] usb 3-1: Manufacturer: syz [ 282.441134][ T5919] usb 3-1: SerialNumber: syz [ 282.441195][ T5926] dw2102: i2c transfer failed. [ 282.452444][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 282.459426][ T5919] usb 3-1: config 0 descriptor?? [ 282.465498][ T5926] dw2102: i2c transfer failed. [ 282.471507][ T5926] dvb-usb: MAC address: 02:02:02:02:02:02 [ 282.473488][ T5919] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 282.474886][ T5829] usb 1-1: config 0 descriptor?? [ 282.525221][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.573918][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 282.580198][ T5926] dw2102: command 0x0e transfer failed. [ 282.588077][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 282.594726][ T5926] dw2102: command 0x0e transfer failed. [ 282.762270][ T8384] netlink: 10 bytes leftover after parsing attributes in process `syz.0.703'. [ 282.908787][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 282.914855][ T5926] dw2102: command 0x0e transfer failed. [ 282.930530][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 282.942104][ T5926] dw2102: command 0x0e transfer failed. [ 282.953977][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 282.961514][ T5926] dw2102: command 0x51 transfer failed. [ 282.974619][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 282.985900][ T5926] dw2102: i2c probe for address 0x68 failed. [ 283.019141][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 283.029207][ T5926] dw2102: i2c probe for address 0x69 failed. [ 283.039702][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 283.049703][ T5926] dw2102: i2c probe for address 0x6a failed. [ 283.056372][ T5926] dw2102: probing for demodulator failed. Is the external power switched on? [ 283.065387][ T5926] dvb-usb: no frontend was attached by 'TeVii S662' [ 283.162895][ T5926] rc_core: IR keymap rc-tt-1500 not found [ 283.169355][ T5926] Registered IR keymap rc-empty [ 283.176286][ T5926] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 283.195182][ T5926] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input16 [ 283.206241][ T5923] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 283.218208][ T5926] dvb-usb: schedule remote query interval to 250 msecs. [ 283.226349][ T5926] dw2102: su3000_power_ctrl: 0, initialized 1 [ 283.236696][ T5926] dvb-usb: TeVii S662 successfully initialized and connected. [ 283.386236][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 283.392818][ T5923] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 283.405336][ T5923] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 283.415597][ T5923] usb 5-1: can't read configurations, error -61 [ 283.489355][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 283.498315][ T5926] dw2102: i2c transfer failed. [ 283.556753][ T5923] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 283.625960][ T5926] usb 4-1: USB disconnect, device number 23 [ 283.716442][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 283.731004][ T5926] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 283.732183][ T5923] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 283.762454][ T5923] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 283.771111][ T5923] usb 5-1: can't read configurations, error -61 [ 283.778371][ T5923] usb usb5-port1: attempt power cycle [ 284.122722][ T5829] rndis_host 1-1:0.109: More than one union descriptor, skipping ... [ 284.131645][ T5923] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 284.140434][ T5829] usb 1-1: bad CDC descriptors [ 284.150336][ T5829] cdc_acm 1-1:0.109: More than one union descriptor, skipping ... [ 284.167089][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 284.188372][ T8406] kvm: pic: non byte write [ 284.199876][ T5923] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 284.210982][ T5923] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 284.219687][ T5923] usb 5-1: can't read configurations, error -61 [ 284.228603][ T5829] usb 1-1: USB disconnect, device number 36 [ 284.426223][ T5923] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 284.437187][ T5926] usb 3-1: USB disconnect, device number 27 [ 284.496976][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 284.506314][ T5923] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 284.543288][ T5923] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 284.570716][ T8423] FAULT_INJECTION: forcing a failure. [ 284.570716][ T8423] name failslab, interval 1, probability 0, space 0, times 0 [ 284.572570][ T5923] usb 5-1: can't read configurations, error -61 [ 284.620599][ T5923] usb usb5-port1: unable to enumerate USB device [ 284.630160][ T8423] CPU: 1 UID: 0 PID: 8423 Comm: syz.0.715 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.630194][ T8423] Tainted: [L]=SOFTLOCKUP [ 284.630202][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.630214][ T8423] Call Trace: [ 284.630222][ T8423] [ 284.630231][ T8423] dump_stack_lvl+0x189/0x250 [ 284.630260][ T8423] ? __pfx____ratelimit+0x10/0x10 [ 284.630281][ T8423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.630304][ T8423] ? __pfx__printk+0x10/0x10 [ 284.630329][ T8423] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 284.630365][ T8423] should_fail_ex+0x414/0x560 [ 284.630398][ T8423] should_failslab+0xa8/0x100 [ 284.630423][ T8423] kmem_cache_alloc_noprof+0x88/0x710 [ 284.630449][ T8423] ? sk_filter_trim_cap+0x1e1/0xd60 [ 284.630483][ T8423] ? skb_clone+0x212/0x3a0 [ 284.630512][ T8423] skb_clone+0x212/0x3a0 [ 284.630539][ T8423] __netlink_deliver_tap+0x404/0x850 [ 284.630576][ T8423] ? netlink_deliver_tap+0x2e/0x1b0 [ 284.630602][ T8423] netlink_deliver_tap+0x19c/0x1b0 [ 284.630628][ T8423] netlink_dump+0x92b/0xe90 [ 284.630661][ T8423] ? __pfx_netlink_dump+0x10/0x10 [ 284.630696][ T8423] ? kmem_cache_free+0x197/0x620 [ 284.630713][ T8423] ? netlink_recvmsg+0x5b2/0xa30 [ 284.630738][ T8423] netlink_recvmsg+0x676/0xa30 [ 284.630768][ T8423] ? __pfx_netlink_recvmsg+0x10/0x10 [ 284.630793][ T8423] ? aa_sock_msg_perm+0xf1/0x1b0 [ 284.630817][ T8423] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 284.630831][ T8423] ? security_socket_recvmsg+0x7e/0x2e0 [ 284.630854][ T8423] ? __pfx_netlink_recvmsg+0x10/0x10 [ 284.630875][ T8423] sock_recvmsg+0x22c/0x270 [ 284.630902][ T8423] ____sys_recvmsg+0x1c9/0x460 [ 284.630939][ T8423] ? __pfx_____sys_recvmsg+0x10/0x10 [ 284.630974][ T8423] ? import_iovec+0x74/0xa0 [ 284.630997][ T8423] ___sys_recvmsg+0x1b5/0x510 [ 284.631023][ T8423] ? __pfx____sys_recvmsg+0x10/0x10 [ 284.631067][ T8423] ? __fget_files+0x3a0/0x420 [ 284.631098][ T8423] do_recvmmsg+0x307/0x770 [ 284.631126][ T8423] ? __pfx_do_recvmmsg+0x10/0x10 [ 284.631159][ T8423] ? _copy_from_user+0x94/0xb0 [ 284.631196][ T8423] __x64_sys_recvmmsg+0x1af/0x240 [ 284.631219][ T8423] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 284.631245][ T8423] ? do_syscall_64+0xbe/0xf80 [ 284.631266][ T8423] do_syscall_64+0xfa/0xf80 [ 284.631283][ T8423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.631301][ T8423] ? clear_bhb_loop+0x60/0xb0 [ 284.631321][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.631337][ T8423] RIP: 0033:0x7fe4b4d8f749 [ 284.631355][ T8423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.631369][ T8423] RSP: 002b:00007fe4b2ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 284.631388][ T8423] RAX: ffffffffffffffda RBX: 00007fe4b4fe5fa0 RCX: 00007fe4b4d8f749 [ 284.631400][ T8423] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 284.631411][ T8423] RBP: 00007fe4b2ff6090 R08: 0000200000003700 R09: 0000000000000000 [ 284.631421][ T8423] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 284.631431][ T8423] R13: 00007fe4b4fe6038 R14: 00007fe4b4fe5fa0 R15: 00007fe4b510fa28 [ 284.631460][ T8423] [ 285.686514][ T5829] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 285.857470][ T5829] usb 3-1: Using ep0 maxpacket: 32 [ 285.865290][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.890071][ T5829] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 285.911048][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.948137][ T5829] usb 3-1: config 0 descriptor?? [ 285.956241][ T5923] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 285.981939][ T5829] dvb-usb: found a 'TeVii S662' in warm state. [ 285.989916][ T5829] dw2102: su3000_power_ctrl: 1, initialized 0 [ 286.000475][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.723'. [ 286.004093][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 286.028658][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 286.062947][ T5829] dvbdev: DVB: registering new adapter (TeVii S662) [ 286.091707][ T5829] usb 3-1: media controller created [ 286.106176][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 286.119757][ T5923] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 286.129437][ T5923] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 286.140772][ T5829] dw2102: i2c transfer failed. [ 286.152839][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 286.160693][ T5923] usb 2-1: config 0 has no interface number 0 [ 286.172945][ T5829] dw2102: i2c transfer failed. [ 286.184379][ T5923] usb 2-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 286.196397][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 286.204942][ T8437] dvb-usb: bulk message failed: -22 (3/0) [ 286.212911][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.226160][ T5923] usb 2-1: Product: syz [ 286.226210][ T8437] dw2102: i2c transfer failed. [ 286.230434][ T5923] usb 2-1: Manufacturer: syz [ 286.240614][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 286.256262][ T5829] dw2102: i2c transfer failed. [ 286.268674][ T8437] dw2102: i2c wr: len=78 is too big! [ 286.268674][ T8437] [ 286.277782][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 286.283794][ T5829] dw2102: i2c transfer failed. [ 286.289455][ T5923] usb 2-1: SerialNumber: syz [ 286.312072][ T5923] usb 2-1: config 0 descriptor?? [ 286.319289][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 286.329665][ T5829] dw2102: i2c transfer failed. [ 286.334589][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 286.360562][ T5829] dw2102: i2c transfer failed. [ 286.376510][ T5829] dvb-usb: MAC address: 02:02:02:02:02:02 [ 286.442565][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.532109][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 286.544117][ T5829] dw2102: command 0x0e transfer failed. [ 286.564281][ T8443] netlink: 10 bytes leftover after parsing attributes in process `syz.1.721'. [ 286.599290][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 286.614737][ T5829] dw2102: command 0x0e transfer failed. [ 286.849057][ T8467] random: crng reseeded on system resumption [ 286.926217][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 286.932108][ T5829] dw2102: command 0x0e transfer failed. [ 286.938141][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 286.945260][ T5829] dw2102: command 0x0e transfer failed. [ 286.956709][ T5829] dvb-usb: bulk message failed: -22 (1/0) [ 286.983337][ T5829] dw2102: command 0x51 transfer failed. [ 287.102499][ T10] usb 4-1: device descriptor read/64, error -71 [ 287.180689][ T5829] dvb-usb: bulk message failed: -22 (5/0) [ 287.186835][ T5829] dw2102: i2c probe for address 0x68 failed. [ 287.193314][ T5829] dvb-usb: bulk message failed: -22 (5/0) [ 287.199238][ T5829] dw2102: i2c probe for address 0x69 failed. [ 287.205419][ T5829] dvb-usb: bulk message failed: -22 (5/0) [ 287.459762][ T5829] dw2102: i2c probe for address 0x6a failed. [ 287.501076][ T5829] dw2102: probing for demodulator failed. Is the external power switched on? [ 287.519355][ T5829] dvb-usb: no frontend was attached by 'TeVii S662' [ 287.546372][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 287.759689][ T8479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.730'. [ 287.906245][ T10] usb 4-1: device descriptor read/64, error -71 [ 287.996678][ T5829] rc_core: IR keymap rc-tt-1500 not found [ 288.003460][ T5829] Registered IR keymap rc-empty [ 288.014792][ T5829] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 288.023830][ T10] usb usb4-port1: attempt power cycle [ 288.062331][ T5829] input: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input17 [ 288.300971][ T5829] dvb-usb: schedule remote query interval to 250 msecs. [ 288.341025][ T5829] dw2102: su3000_power_ctrl: 0, initialized 1 [ 288.366249][ T8474] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 288.396282][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 288.417337][ T10] usb 4-1: device descriptor read/8, error -71 [ 288.431136][ T5829] dvb-usb: TeVii S662 successfully initialized and connected. [ 288.525070][ T5829] usb 3-1: USB disconnect, device number 28 [ 288.536387][ T8474] usb 1-1: Using ep0 maxpacket: 8 [ 288.546427][ T8474] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 288.630920][ T8474] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 288.675461][ T8474] usb 1-1: config 127 has no interface number 1 [ 288.745302][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 288.753685][ T8474] usb 1-1: config 127 interface 171 has no altsetting 0 [ 288.797221][ T10] usb 4-1: device descriptor read/8, error -71 [ 288.906032][ T8474] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 288.947201][ T10] usb usb4-port1: unable to enumerate USB device [ 288.954678][ T8474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.036928][ T8474] usb 1-1: Product: syz [ 289.093148][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.732'. [ 289.217320][ T8474] usb 1-1: Manufacturer: syz [ 289.224018][ T5829] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 289.237792][ T8474] usb 1-1: SerialNumber: syz [ 289.567965][ T5923] rndis_host 2-1:0.109: More than one union descriptor, skipping ... [ 289.645667][ T5923] usb 2-1: bad CDC descriptors [ 289.666004][ T5923] cdc_acm 2-1:0.109: More than one union descriptor, skipping ... [ 289.730349][ T5923] usb 2-1: USB disconnect, device number 39 [ 290.071302][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.733'. [ 291.026993][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.1.735'. [ 291.038057][ T8501] netlink: 80 bytes leftover after parsing attributes in process `syz.1.735'. [ 291.056435][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.1.735'. [ 291.065526][ T8501] netlink: 80 bytes leftover after parsing attributes in process `syz.1.735'. [ 291.118826][ T8501] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 291.212092][ T8504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.736'. [ 291.618034][ T8510] input: syz1 as /devices/virtual/input/input18 [ 291.759321][ T8474] xr_serial 1-1:127.171: xr_serial converter detected [ 291.804073][ T8474] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 291.847999][ T8474] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 291.889867][ T8474] usb 1-1: USB disconnect, device number 37 [ 291.919166][ T8474] xr_serial 1-1:127.171: device disconnected [ 292.152294][ T8520] program syz.0.741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.214180][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 292.452229][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 292.570161][ T8527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 292.886475][ T5926] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 293.046218][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 293.057378][ T5926] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 293.106192][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.131541][ T5926] usb 5-1: Product: syz [ 293.136006][ T5926] usb 5-1: Manufacturer: syz [ 293.176260][ T5926] usb 5-1: SerialNumber: syz [ 293.545312][ T5926] usb 5-1: config 0 descriptor?? [ 293.967290][ T5926] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 294.013473][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.064348][ T5926] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 294.106535][ T5926] usb 5-1: media controller created [ 294.224618][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 294.416544][ T10] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 294.581046][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 294.616257][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 294.636416][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.669906][ T10] usb 2-1: config 0 descriptor?? [ 294.676745][ T8545] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 294.716995][ T5926] zl10353_read_register: readreg error (reg=127, ret==0) [ 294.745266][ T5926] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 294.770685][ T5926] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 294.811429][ T5926] usb 5-1: USB disconnect, device number 42 [ 294.921268][ T5926] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 295.077888][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.752'. [ 295.123097][ T8554] netlink: 48 bytes leftover after parsing attributes in process `syz.2.752'. [ 295.139014][ T8554] syzkaller1: entered promiscuous mode [ 295.158891][ T10] elan 0003:04F3:0755.0012: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 295.176406][ T8554] syzkaller1: entered allmulticast mode [ 295.512942][ T8565] syzkaller1: entered promiscuous mode [ 295.512969][ T8565] syzkaller1: entered allmulticast mode [ 295.711529][ T8569] netlink: 'syz.4.756': attribute type 10 has an invalid length. [ 295.736184][ T8569] netlink: 40 bytes leftover after parsing attributes in process `syz.4.756'. [ 295.764520][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 295.861913][ T5923] usb 2-1: USB disconnect, device number 40 [ 295.931498][ T8578] input: syz1 as /devices/virtual/input/input19 [ 296.281577][ T8589] program syz.4.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.536443][ T8592] usb usb8: usbfs: process 8592 (syz.0.764) did not claim interface 0 before use [ 296.974793][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 296.974807][ T30] audit: type=1326 audit(1766114697.361:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.0.767" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4b4d8f749 code=0x0 [ 299.421016][ T8635] netlink: 68 bytes leftover after parsing attributes in process `syz.1.776'. [ 299.444976][ T8635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.776'. [ 300.540994][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 300.566303][ T8654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 300.612818][ T8654] fuse: Unknown parameter '000000000000000000070x0000000000000006' [ 301.320957][ T8661] kvm: MONITOR instruction emulated as NOP! [ 301.836525][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 302.127925][ T8673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.787'. [ 302.194867][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.222932][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 302.318058][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.336437][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.491731][ T10] usb 4-1: Product: syz [ 302.495936][ T10] usb 4-1: Manufacturer: syz [ 302.541624][ T10] usb 4-1: SerialNumber: syz [ 302.833931][ T8664] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 302.856342][ T8679] x_tables: unsorted underflow at hook 3 [ 303.070058][ T8664] netlink: 'syz.3.785': attribute type 30 has an invalid length. [ 303.540077][ T8664] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 303.761292][ T10] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 303.769911][ T10] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 303.791521][ T10] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 303.962165][ T10] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 304.037555][ T10] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 304.071240][ T10] usb 4-1: USB disconnect, device number 28 [ 304.099328][ T10] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 304.329966][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 304.706215][ T5926] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 304.886246][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 304.895678][ T5926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.968382][ T5926] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 304.978027][ T5919] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 304.995663][ T8711] fuse: Unknown parameter 'grou00000000000000000000' [ 305.059419][ T5926] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 305.084627][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.106187][ T5926] usb 5-1: Product: syz [ 305.110526][ T5926] usb 5-1: Manufacturer: syz [ 305.125605][ T5926] usb 5-1: SerialNumber: syz [ 305.146198][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 305.176570][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.188919][ T5926] gspca_main: spca501-2.14.0 probing 0000:0000 [ 305.206411][ T5919] usb 3-1: config 0 has no interfaces? [ 305.226520][ T5919] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 305.237793][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.267564][ T5919] usb 3-1: config 0 descriptor?? [ 305.286238][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 305.320899][ T8715] netlink: 'syz.1.796': attribute type 10 has an invalid length. [ 305.388359][ T8716] netlink: 'syz.1.796': attribute type 10 has an invalid length. [ 305.433911][ T8715] team0: Port device dummy0 added [ 305.493621][ T10] usb 4-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 110 [ 305.525848][ T10] usb 4-1: config 16 has an invalid descriptor of length 101, skipping remainder of the config [ 305.579079][ T10] usb 4-1: config 16 has no interfaces? [ 305.589886][ T8716] team0: Port device dummy0 removed [ 305.613513][ T10] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 305.650160][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.698985][ T8716] .`ÿÿÿþ: (slave dummy0): Enslaving as an active interface with an up link [ 305.716511][ T5926] gspca_spca501: reg write: error -110 [ 305.743079][ T5926] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 305.775663][ T5926] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 305.824639][ T5926] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 305.883887][ T5926] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 305.995317][ T6119] udevd[6119]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.266595][ T5919] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 307.521608][ T5917] usb 5-1: USB disconnect, device number 44 [ 307.586337][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.614595][ T5919] usb 2-1: config 0 has no interfaces? [ 307.662086][ T5919] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 307.718790][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.753755][ T106] usb 3-1: USB disconnect, device number 29 [ 307.805674][ T5919] usb 2-1: config 0 descriptor?? [ 307.815350][ T10] usb 4-1: USB disconnect, device number 29 [ 308.098125][ T30] audit: type=1326 audit(1766114708.481:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.4.800" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff52918f749 code=0x0 [ 308.356343][ T106] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 308.476200][ T5917] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 308.526168][ T106] usb 3-1: Using ep0 maxpacket: 16 [ 308.539777][ T106] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 308.555473][ T106] usb 3-1: config 0 has no interface number 0 [ 308.569489][ T106] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.592610][ T106] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 308.614700][ T106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.629327][ T106] usb 3-1: Product: syz [ 308.634187][ T106] usb 3-1: Manufacturer: syz [ 308.642993][ T106] usb 3-1: SerialNumber: syz [ 308.649998][ T5917] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 308.672859][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 308.708013][ T106] usb 3-1: config 0 descriptor?? [ 308.713123][ T5917] usb 4-1: Product: syz [ 308.722939][ T5917] usb 4-1: SerialNumber: syz [ 308.755095][ T5917] usb 4-1: config 0 descriptor?? [ 308.762549][ T106] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 308.988579][ T5917] ldusb 4-1:0.0: Interrupt in endpoint not found [ 309.011034][ T5917] usb 4-1: USB disconnect, device number 30 [ 309.044704][ T8738] trusted_key: encrypted_key: insufficient parameters specified [ 309.526924][ T5917] usb 2-1: USB disconnect, device number 41 [ 309.805371][ T6210] usb 3-1: Failed to submit usb control message: -110 [ 309.818503][ T6210] usb 3-1: unable to send the bmi data to the device: -110 [ 309.871843][ T6210] usb 3-1: unable to get target info from device [ 309.901534][ T6210] usb 3-1: could not get target info (-110) [ 309.929127][ T6210] usb 3-1: could not probe fw (-110) [ 310.818246][ T8783] netlink: 44 bytes leftover after parsing attributes in process `syz.3.812'. [ 310.895339][ T30] audit: type=1326 audit(1766114711.281:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.812" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f112678f749 code=0x0 [ 310.939185][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 311.261011][ T10] usb 3-1: USB disconnect, device number 30 [ 312.316204][ T106] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 312.476486][ T106] usb 4-1: Using ep0 maxpacket: 32 [ 312.488667][ T106] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.647556][ T106] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 312.657836][ T106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.676952][ T106] usb 4-1: config 0 descriptor?? [ 312.693119][ T106] dvb-usb: found a 'TeVii S662' in warm state. [ 312.703761][ T106] dw2102: su3000_power_ctrl: 1, initialized 0 [ 312.710207][ T106] dvb-usb: bulk message failed: -22 (2/0) [ 312.730015][ T106] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.746962][ T106] dvbdev: DVB: registering new adapter (TeVii S662) [ 312.762392][ T106] usb 4-1: media controller created [ 312.772607][ T106] dvb-usb: bulk message failed: -22 (6/0) [ 312.783274][ T106] dw2102: i2c transfer failed. [ 312.793908][ T106] dvb-usb: bulk message failed: -22 (6/0) [ 312.822343][ T106] dw2102: i2c transfer failed. [ 312.831253][ T106] dvb-usb: bulk message failed: -22 (6/0) [ 312.845220][ T106] dw2102: i2c transfer failed. [ 312.855034][ T106] dvb-usb: bulk message failed: -22 (6/0) [ 312.871289][ T106] dw2102: i2c transfer failed. [ 312.879316][ T106] dvb-usb: bulk message failed: -22 (6/0) [ 312.895078][ T106] dw2102: i2c transfer failed. [ 312.900393][ T106] dvb-usb: bulk message failed: -22 (6/0) [ 312.955890][ T106] dw2102: i2c transfer failed. [ 312.962555][ T8800] dvb-usb: bulk message failed: -22 (3/0) [ 312.968582][ T8800] dw2102: i2c transfer failed. [ 312.973886][ T8800] dw2102: i2c wr: len=78 is too big! [ 312.973886][ T8800] [ 312.981946][ T106] dvb-usb: MAC address: 02:02:02:02:02:02 [ 313.147467][ T106] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.235399][ T106] dvb-usb: bulk message failed: -22 (3/0) [ 313.251819][ T106] dw2102: command 0x0e transfer failed. [ 313.266211][ T106] dvb-usb: bulk message failed: -22 (3/0) [ 313.505764][ T106] dw2102: command 0x0e transfer failed. [ 313.568265][ T8828] random: crng reseeded on system resumption [ 313.860284][ T106] dvb-usb: bulk message failed: -22 (3/0) [ 313.868751][ T106] dw2102: command 0x0e transfer failed. [ 313.874638][ T106] dvb-usb: bulk message failed: -22 (3/0) [ 313.880563][ T106] dw2102: command 0x0e transfer failed. [ 313.886566][ T106] dvb-usb: bulk message failed: -22 (1/0) [ 313.892307][ T106] dw2102: command 0x51 transfer failed. [ 313.898119][ T106] dvb-usb: bulk message failed: -22 (5/0) [ 313.905030][ T106] dw2102: i2c probe for address 0x68 failed. [ 313.915145][ T106] dvb-usb: bulk message failed: -22 (5/0) [ 313.922139][ T106] dw2102: i2c probe for address 0x69 failed. [ 313.928339][ T106] dvb-usb: bulk message failed: -22 (5/0) [ 313.943754][ T106] dw2102: i2c probe for address 0x6a failed. [ 313.949988][ T106] dw2102: probing for demodulator failed. Is the external power switched on? [ 313.959993][ T106] dvb-usb: no frontend was attached by 'TeVii S662' [ 314.275289][ T106] rc_core: IR keymap rc-tt-1500 not found [ 314.281836][ T106] Registered IR keymap rc-empty [ 314.288482][ T106] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 314.336607][ T106] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input20 [ 314.483662][ T106] dvb-usb: schedule remote query interval to 250 msecs. [ 314.706148][ T106] dw2102: su3000_power_ctrl: 0, initialized 1 [ 314.727055][ T8849] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 314.754396][ T106] dvb-usb: TeVii S662 successfully initialized and connected. [ 314.830157][ T106] usb 4-1: USB disconnect, device number 31 [ 315.209451][ T106] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 315.827022][ T106] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 315.966823][ T8871] program syz.3.831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.026768][ T106] usb 3-1: Using ep0 maxpacket: 16 [ 316.044237][ T106] usb 3-1: config 0 has no interfaces? [ 316.088750][ T106] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 316.100974][ T106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.114188][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 316.132649][ T106] usb 3-1: Product: syz [ 316.143452][ T106] usb 3-1: Manufacturer: syz [ 316.224337][ T106] usb 3-1: SerialNumber: syz [ 316.287770][ T106] usb 3-1: config 0 descriptor?? [ 316.454797][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 317.463408][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.472889][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.102296][ T8899] random: crng reseeded on system resumption [ 319.192148][ T106] usb 3-1: USB disconnect, device number 31 [ 319.635901][ T8905] usb usb8: usbfs: process 8905 (syz.2.841) did not claim interface 0 before use [ 319.914120][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 320.269076][ T106] hid_parser_main: 1 callbacks suppressed [ 320.269094][ T106] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x4 [ 320.354625][ T106] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 320.409460][ T106] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x2 [ 320.475101][ T106] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 320.491937][ T106] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 320.506251][ T5919] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 320.514144][ T106] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 320.534709][ T106] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 320.554620][ T106] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 320.572154][ T106] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 320.663196][ T106] hid-generic 00A0:0006:0003.0013: unknown main item tag 0x0 [ 320.678008][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 320.693825][ T5919] usb 4-1: config 0 has no interfaces? [ 320.709355][ T5919] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 320.726196][ T106] hid-generic 00A0:0006:0003.0013: hidraw0: HID v0.05 Device [syz1] on syz0 [ 320.747651][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.791551][ T5919] usb 4-1: Product: syz [ 320.818930][ T5919] usb 4-1: Manufacturer: syz [ 320.832085][ T5919] usb 4-1: SerialNumber: syz [ 320.863513][ T5919] usb 4-1: config 0 descriptor?? [ 321.116190][ T106] usb 4-1: USB disconnect, device number 32 [ 321.160956][ T8924] fido_id[8924]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 322.943177][ T106] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 323.157695][ T106] usb 1-1: Using ep0 maxpacket: 16 [ 323.178022][ T106] usb 1-1: too many configurations: 14, using maximum allowed: 8 [ 323.205295][ T106] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.234800][ T106] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.256911][ T106] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.280341][ T106] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.306441][ T106] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.332830][ T106] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.479438][ T106] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.514334][ T106] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.556246][ T106] usb 1-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 323.587573][ T106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.596018][ T106] usb 1-1: Product: syz [ 323.620857][ T106] usb 1-1: Manufacturer: syz [ 323.625510][ T106] usb 1-1: SerialNumber: syz [ 323.648759][ T106] usb 1-1: config 0 descriptor?? [ 323.746286][ T5956] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 323.766767][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 323.869587][ T106] usb 1-1: USB disconnect, device number 38 [ 323.949325][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 323.963644][ T5956] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 323.972888][ T5956] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 323.992869][ T5956] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 324.015987][ T5956] usb 3-1: config 250 has no interface number 0 [ 324.027609][ T5956] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 324.062113][ T5956] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 324.089233][ T5956] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 324.118925][ T5956] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 324.145640][ T5956] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 324.179446][ T5956] usb 3-1: config 250 interface 228 has no altsetting 0 [ 324.198408][ T5956] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 324.213032][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 324.248621][ T5956] usb 3-1: Product: syz [ 324.253262][ T5956] usb 3-1: SerialNumber: syz [ 324.274178][ T5956] hub 3-1:250.228: bad descriptor, ignoring hub [ 324.286364][ T5956] hub 3-1:250.228: probe with driver hub failed with error -5 [ 324.469490][ T5956] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 32 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 324.626203][ T8979] input: syz0 as /devices/virtual/input/input22 [ 324.729568][ T8982] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.862'. [ 324.840813][ T5956] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 324.852340][ T5956] usb 3-1: device reset changed ep0 maxpacket size! [ 324.872072][ T5956] usb 3-1: USB disconnect, device number 32 [ 324.900613][ T5956] usblp0: removed [ 325.046269][ T106] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 325.206271][ T106] usb 4-1: Using ep0 maxpacket: 32 [ 325.206357][ T5956] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 325.225298][ T106] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 325.262632][ T106] usb 4-1: config 0 has no interface number 0 [ 325.270669][ T106] usb 4-1: config 0 interface 23 has no altsetting 0 [ 325.290383][ T106] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=e0.bf [ 325.304052][ T106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.313082][ T106] usb 4-1: Product: syz [ 325.320212][ T106] usb 4-1: Manufacturer: syz [ 325.325229][ T106] usb 4-1: SerialNumber: syz [ 325.339076][ T106] usb 4-1: config 0 descriptor?? [ 325.436240][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 325.461038][ T5956] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 325.487072][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.507589][ T5956] usb 3-1: Product: syz [ 325.519679][ T5956] usb 3-1: Manufacturer: syz [ 325.537235][ T5956] usb 3-1: SerialNumber: syz [ 325.630901][ T5956] usb 3-1: config 0 descriptor?? [ 325.644248][ T5956] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 325.773700][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 325.830114][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 325.855553][ T8989] erspan0: entered promiscuous mode [ 325.872082][ T8989] macvtap1: entered promiscuous mode [ 326.312844][ T5956] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 326.333897][ T8989] macvtap1: entered allmulticast mode [ 326.340987][ T8989] erspan0: entered allmulticast mode [ 326.364720][ T8992] erspan0: left allmulticast mode [ 326.393909][ T8992] erspan0: left promiscuous mode [ 326.525108][ T5956] usb 3-1: USB disconnect, device number 33 [ 327.367440][ T9008] bridge0: port 3(bond0) entered blocking state [ 327.383835][ T9008] bridge0: port 3(bond0) entered disabled state [ 327.413159][ T9008] bond0: entered allmulticast mode [ 327.454728][ T9008] bond_slave_0: entered allmulticast mode [ 327.471252][ T9009] fuse: Unknown parameter 'su' [ 327.489251][ T9008] bond_slave_1: entered allmulticast mode [ 327.515474][ T9008] bond0: entered promiscuous mode [ 327.545972][ T9008] bond_slave_0: entered promiscuous mode [ 327.549555][ T9010] netlink: 68 bytes leftover after parsing attributes in process `syz.0.870'. [ 327.561049][ T9010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.870'. [ 327.608936][ T9008] bond_slave_1: entered promiscuous mode [ 327.680512][ T9008] bridge0: port 3(bond0) entered blocking state [ 327.687060][ T9008] bridge0: port 3(bond0) entered forwarding state [ 327.740522][ T106] usb 4-1: USB disconnect, device number 33 [ 328.270999][ T106] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 328.436722][ T106] usb 4-1: Using ep0 maxpacket: 16 [ 328.442906][ T106] usb 4-1: too many configurations: 14, using maximum allowed: 8 [ 328.457882][ T106] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.479197][ T106] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.500717][ T106] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.529093][ T106] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.557190][ T106] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.584321][ T106] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.615582][ T106] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.645843][ T106] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.732021][ T106] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 328.742793][ T106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.782437][ T106] usb 4-1: Product: syz [ 328.817454][ T106] usb 4-1: Manufacturer: syz [ 328.843169][ T106] usb 4-1: SerialNumber: syz [ 328.885422][ T106] usb 4-1: config 0 descriptor?? [ 329.188877][ T5829] usb 4-1: USB disconnect, device number 34 [ 329.805252][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 329.914288][ T9033] netlink: 40 bytes leftover after parsing attributes in process `syz.0.877'. [ 330.142091][ T13] wlan0: Trigger new scan to find an IBSS to join [ 330.323744][ T9045] vim2m vim2m.0: vidioc_s_fmt queue busy [ 331.286868][ T5956] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 331.556502][ T5926] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 331.656159][ T5829] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 331.737399][ T5956] usb 1-1: Using ep0 maxpacket: 32 [ 331.816423][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 331.821744][ T5956] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 331.869673][ T5956] usb 1-1: config 0 has no interface number 0 [ 331.875934][ T5956] usb 1-1: config 0 interface 23 has no altsetting 0 [ 331.876781][ T5926] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 331.916202][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 331.923742][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.924687][ T5829] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 332.046568][ T5956] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=e0.bf [ 332.046655][ T5829] usb 2-1: config 0 has no interface number 0 [ 332.098222][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.136694][ T5926] usb 3-1: Product: syz [ 332.161483][ T5926] usb 3-1: Manufacturer: syz [ 332.172610][ T5956] usb 1-1: Product: syz [ 332.183225][ T5926] usb 3-1: SerialNumber: syz [ 332.191858][ T5956] usb 1-1: Manufacturer: syz [ 332.223752][ T5829] usb 2-1: config 0 interface 23 has no altsetting 0 [ 332.281488][ T5829] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=e0.bf [ 332.297289][ T5926] usb 3-1: config 0 descriptor?? [ 332.306161][ T5956] usb 1-1: SerialNumber: syz [ 332.313699][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.357307][ T5956] usb 1-1: config 0 descriptor?? [ 332.407305][ T5829] usb 2-1: Product: syz [ 332.426352][ T5829] usb 2-1: Manufacturer: syz [ 332.442518][ T5829] usb 2-1: SerialNumber: syz [ 332.508063][ T5829] usb 2-1: config 0 descriptor?? [ 332.732949][ T5926] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 332.830184][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.868241][ T5926] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 332.895627][ T5926] usb 3-1: media controller created [ 332.998644][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.145344][ T5926] zl10353_read_register: readreg error (reg=127, ret==0) [ 333.223080][ T5926] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 333.285427][ T5926] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 333.350179][ T5926] usb 3-1: USB disconnect, device number 34 [ 333.843391][ T5926] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 334.116512][ T1130] wlan0: Trigger new scan to find an IBSS to join [ 334.204831][ T5926] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 334.376350][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 334.407731][ T5926] usb 3-1: too many configurations: 14, using maximum allowed: 8 [ 334.442281][ T5926] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.464418][ T5926] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.499546][ T5926] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.576301][ T5926] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.606548][ T5926] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.611358][ T9082] FAULT_INJECTION: forcing a failure. [ 334.611358][ T9082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.657452][ T5926] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.678421][ T5926] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.708939][ T9082] CPU: 1 UID: 0 PID: 9082 Comm: syz.3.892 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.708959][ T9082] Tainted: [L]=SOFTLOCKUP [ 334.708964][ T9082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.708971][ T9082] Call Trace: [ 334.708977][ T9082] [ 334.708985][ T9082] dump_stack_lvl+0x189/0x250 [ 334.709020][ T9082] ? __pfx____ratelimit+0x10/0x10 [ 334.709039][ T9082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.709060][ T9082] ? __pfx__printk+0x10/0x10 [ 334.709084][ T9082] ? __might_fault+0xb0/0x130 [ 334.709107][ T9082] should_fail_ex+0x414/0x560 [ 334.709128][ T9082] _copy_from_user+0x2d/0xb0 [ 334.709149][ T9082] kvm_vm_ioctl+0x6e0/0xc60 [ 334.709172][ T9082] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 334.709214][ T9082] ? kasan_quarantine_put+0xdd/0x220 [ 334.709232][ T9082] ? lockdep_hardirqs_on+0x98/0x140 [ 334.709255][ T9082] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 334.709270][ T9082] ? do_vfs_ioctl+0xbe8/0x1430 [ 334.709281][ T9082] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 334.709294][ T9082] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 334.709351][ T9082] ? ksys_write+0x1e1/0x250 [ 334.709375][ T9082] ? bpf_lsm_file_ioctl+0x9/0x20 [ 334.709394][ T9082] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 334.709411][ T9082] __se_sys_ioctl+0xfc/0x170 [ 334.709424][ T9082] do_syscall_64+0xfa/0xf80 [ 334.709437][ T9082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.709448][ T9082] ? clear_bhb_loop+0x60/0xb0 [ 334.709464][ T9082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.709481][ T9082] RIP: 0033:0x7f112678f749 [ 334.709506][ T9082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.709521][ T9082] RSP: 002b:00007f1127562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.709542][ T9082] RAX: ffffffffffffffda RBX: 00007f11269e5fa0 RCX: 00007f112678f749 [ 334.709555][ T9082] RDX: 0000000000000000 RSI: 000000004040ae79 RDI: 0000000000000004 [ 334.709565][ T9082] RBP: 00007f1127562090 R08: 0000000000000000 R09: 0000000000000000 [ 334.709572][ T9082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.709579][ T9082] R13: 00007f11269e6038 R14: 00007f11269e5fa0 R15: 00007f1126b0fa28 [ 334.709598][ T9082] [ 335.106399][ T5829] usb 2-1: USB disconnect, device number 42 [ 335.128473][ T5926] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.148668][ T5926] usb 3-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 335.158218][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.166382][ T5926] usb 3-1: Product: syz [ 335.170656][ T5926] usb 3-1: Manufacturer: syz [ 335.176793][ T5926] usb 3-1: SerialNumber: syz [ 335.183847][ T5926] usb 3-1: config 0 descriptor?? [ 335.312313][ T6133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.403253][ T9087] IPVS: sh: FWM 3 0x00000003 - no destination available [ 335.412654][ T9087] IPVS: sh: FWM 3 0x00000003 - no destination available [ 335.435496][ T5829] usb 3-1: USB disconnect, device number 35 [ 335.470006][ T9088] netlink: 104 bytes leftover after parsing attributes in process `syz.3.894'. [ 336.468709][ T5829] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 336.547254][ T5956] usb 1-1: USB disconnect, device number 39 [ 336.727567][ T9100] vim2m vim2m.0: vidioc_s_fmt queue busy [ 336.806255][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 336.844107][ T5829] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 336.872365][ T5829] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 336.901962][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.923645][ T5829] usb 3-1: Product: syz [ 336.940071][ T9102] program syz.4.899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.952017][ T5829] usb 3-1: Manufacturer: syz [ 336.962306][ T5829] usb 3-1: SerialNumber: syz [ 336.986635][ T5829] usb 3-1: config 0 descriptor?? [ 337.031539][ T5829] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 337.140329][ T5829] usb 3-1: setting power ON [ 337.145081][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 337.202429][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.214445][ T9094] FAULT_INJECTION: forcing a failure. [ 337.214445][ T9094] name failslab, interval 1, probability 0, space 0, times 0 [ 337.252618][ T9094] CPU: 0 UID: 0 PID: 9094 Comm: syz.2.898 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.252652][ T9094] Tainted: [L]=SOFTLOCKUP [ 337.252660][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.252670][ T9094] Call Trace: [ 337.252686][ T9094] [ 337.252695][ T9094] dump_stack_lvl+0x189/0x250 [ 337.252721][ T9094] ? __pfx____ratelimit+0x10/0x10 [ 337.252741][ T9094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.252763][ T9094] ? __pfx__printk+0x10/0x10 [ 337.252797][ T9094] ? __pfx___might_resched+0x10/0x10 [ 337.252817][ T9094] ? fs_reclaim_acquire+0x7d/0x100 [ 337.252844][ T9094] should_fail_ex+0x414/0x560 [ 337.252878][ T9094] should_failslab+0xa8/0x100 [ 337.252904][ T9094] __kmalloc_noprof+0xdf/0x800 [ 337.252923][ T9094] ? tomoyo_encode+0x28b/0x550 [ 337.252953][ T9094] tomoyo_encode+0x28b/0x550 [ 337.252985][ T9094] tomoyo_realpath_from_path+0x58d/0x5d0 [ 337.253023][ T9094] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 337.253045][ T9094] tomoyo_path_number_perm+0x1e8/0x5a0 [ 337.253070][ T9094] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 337.253111][ T9094] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 337.253161][ T9094] ? __fget_files+0x2a/0x420 [ 337.253188][ T9094] ? __fget_files+0x3a0/0x420 [ 337.253210][ T9094] ? __fget_files+0x2a/0x420 [ 337.253238][ T9094] security_file_ioctl+0xcb/0x2d0 [ 337.253269][ T9094] __se_sys_ioctl+0x47/0x170 [ 337.253290][ T9094] do_syscall_64+0xfa/0xf80 [ 337.253312][ T9094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.253331][ T9094] ? clear_bhb_loop+0x60/0xb0 [ 337.253353][ T9094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.253371][ T9094] RIP: 0033:0x7fa52878f749 [ 337.253406][ T9094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.253423][ T9094] RSP: 002b:00007fa5296bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.253444][ T9094] RAX: ffffffffffffffda RBX: 00007fa5289e5fa0 RCX: 00007fa52878f749 [ 337.253457][ T9094] RDX: 0000200000000340 RSI: 0000000000000707 RDI: 0000000000000004 [ 337.253469][ T9094] RBP: 00007fa5296bd090 R08: 0000000000000000 R09: 0000000000000000 [ 337.253480][ T9094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.253491][ T9094] R13: 00007fa5289e6038 R14: 00007fa5289e5fa0 R15: 00007fa528b0fa28 [ 337.253523][ T9094] [ 337.253545][ T9094] ERROR: Out of memory at tomoyo_realpath_from_path. [ 337.505241][ T5829] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 337.529376][ T5829] usb 3-1: media controller created [ 337.552885][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.591381][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.901'. [ 337.609972][ T9094] dvb-usb: bulk message failed: -22 (3/0) [ 337.641223][ T5829] usb 3-1: selecting invalid altsetting 6 [ 337.660237][ T9110] macvtap1: entered promiscuous mode [ 337.665845][ T9110] macvtap1: entered allmulticast mode [ 337.682315][ T5829] usb 3-1: digital interface selection failed (-22) [ 337.698691][ T5829] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 337.710876][ T9110] veth1_vlan: entered allmulticast mode [ 337.718220][ T5829] usb 3-1: setting power OFF [ 337.736379][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 337.742350][ T5829] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 337.797739][ T5829] (NULL device *): no alternate interface [ 337.889930][ T9110] use of bytesused == 0 is deprecated and will be removed in the future, [ 337.907603][ T9110] use the actual size instead. [ 337.990757][ T5829] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 338.003976][ T5829] usb 3-1: USB disconnect, device number 36 [ 338.547551][ T9119] ALSA: seq fatal error: cannot create timer (-22) [ 340.317137][ T9141] netlink: 52 bytes leftover after parsing attributes in process `syz.1.906'. [ 340.424847][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'. [ 340.649417][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 340.666715][ T9148] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 340.739801][ T9150] program syz.3.911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.815738][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.911'. [ 340.848472][ T9151] tc_dump_action: action bad kind [ 341.286245][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 341.414983][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 341.516194][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 341.588821][ T10] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 341.606638][ T10] usb 5-1: config 0 has no interface number 0 [ 341.623119][ T10] usb 5-1: config 0 interface 23 has no altsetting 0 [ 341.685362][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=e0.bf [ 341.708851][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.728358][ T10] usb 5-1: Product: syz [ 341.750773][ T10] usb 5-1: Manufacturer: syz [ 341.776190][ T5829] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 341.845226][ T10] usb 5-1: SerialNumber: syz [ 341.913884][ T10] usb 5-1: config 0 descriptor?? [ 341.926252][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 341.989142][ T9165] fuse: Bad value for 'fd' [ 342.018116][ T5829] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.033448][ T30] audit: type=1326 audit(1766114742.391:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.1.915" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f621ad8f749 code=0x0 [ 342.072966][ T5829] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 342.098149][ T5829] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 342.122653][ T5829] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.232192][ T5829] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 342.242954][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.474950][ T5829] usb 1-1: GET_CAPABILITIES returned 0 [ 342.491335][ T5829] usbtmc 1-1:16.0: can't read capabilities [ 342.830886][ T24] usb 1-1: USB disconnect, device number 40 [ 344.056206][ T5829] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 344.160749][ T10] usb 5-1: USB disconnect, device number 45 [ 344.196250][ T5829] usb 1-1: device descriptor read/64, error -71 [ 344.301015][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'. [ 344.458059][ T5829] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 344.646409][ T5829] usb 1-1: device descriptor read/64, error -71 [ 344.751105][ T9197] program syz.3.922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.810642][ T5829] usb usb1-port1: attempt power cycle [ 345.176794][ T5829] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 345.197375][ T5829] usb 1-1: device descriptor read/8, error -71 [ 345.487690][ T5829] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 345.627367][ T5829] usb 1-1: device descriptor read/8, error -71 [ 345.736546][ T5829] usb usb1-port1: unable to enumerate USB device [ 346.196643][ T24] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 346.387835][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 346.402939][ T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 346.424672][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.468719][ T24] usb 2-1: config 0 descriptor?? [ 346.484169][ T9214] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 346.766636][ T9222] x_tables: ip_tables: ah match: only valid for protocol 51 [ 346.766699][ T9214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.820806][ T9227] netlink: 276 bytes leftover after parsing attributes in process `syz.0.933'. [ 346.893728][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 346.936566][ T9214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.971672][ T9227] netlink: 276 bytes leftover after parsing attributes in process `syz.0.933'. [ 347.199416][ T24] elan 0003:04F3:0755.0014: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 347.665401][ T9239] program syz.0.935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.982722][ T5956] usb 2-1: USB disconnect, device number 43 [ 348.612799][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'. [ 348.708092][ T9254] FAULT_INJECTION: forcing a failure. [ 348.708092][ T9254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.806252][ T9254] CPU: 0 UID: 0 PID: 9254 Comm: syz.2.941 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.806286][ T9254] Tainted: [L]=SOFTLOCKUP [ 348.806293][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.806304][ T9254] Call Trace: [ 348.806313][ T9254] [ 348.806322][ T9254] dump_stack_lvl+0x189/0x250 [ 348.806353][ T9254] ? __pfx____ratelimit+0x10/0x10 [ 348.806376][ T9254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.806402][ T9254] ? __pfx__printk+0x10/0x10 [ 348.806445][ T9254] should_fail_ex+0x414/0x560 [ 348.806482][ T9254] _copy_to_user+0x31/0xb0 [ 348.806509][ T9254] simple_read_from_buffer+0xe1/0x170 [ 348.806540][ T9254] proc_fail_nth_read+0x1b3/0x220 [ 348.806567][ T9254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.806593][ T9254] ? rw_verify_area+0x2a6/0x4d0 [ 348.806613][ T9254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.806637][ T9254] vfs_read+0x200/0xa30 [ 348.806665][ T9254] ? __pfx_vfs_read+0x10/0x10 [ 348.806706][ T9254] ksys_read+0x145/0x250 [ 348.806730][ T9254] ? __pfx_ksys_read+0x10/0x10 [ 348.806754][ T9254] ? do_syscall_64+0xbe/0xf80 [ 348.806782][ T9254] do_syscall_64+0xfa/0xf80 [ 348.806804][ T9254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.806824][ T9254] ? clear_bhb_loop+0x60/0xb0 [ 348.806850][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.806870][ T9254] RIP: 0033:0x7fa52878e15c [ 348.806890][ T9254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 348.806908][ T9254] RSP: 002b:00007fa5296bd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.806931][ T9254] RAX: ffffffffffffffda RBX: 00007fa5289e5fa0 RCX: 00007fa52878e15c [ 348.806946][ T9254] RDX: 000000000000000f RSI: 00007fa5296bd0a0 RDI: 0000000000000009 [ 348.806968][ T9254] RBP: 00007fa5296bd090 R08: 0000000000000000 R09: 0000000000000000 [ 348.806981][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.806994][ T9254] R13: 00007fa5289e6038 R14: 00007fa5289e5fa0 R15: 00007fa528b0fa28 [ 348.807030][ T9254] [ 349.338467][ T9266] hub 9-0:1.0: USB hub found [ 349.361281][ T9269] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 349.401898][ T9266] hub 9-0:1.0: 1 port detected [ 349.476559][ T30] audit: type=1326 audit(1766114749.861:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9262 comm="syz.1.945" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f621ad8f749 code=0x0 [ 350.486318][ T30] audit: type=1326 audit(1766114750.871:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9282 comm="syz.3.949" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f112678f749 code=0x0 [ 351.007877][ T5829] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 351.124768][ T9295] team_slave_0: entered promiscuous mode [ 351.130722][ T9295] team_slave_1: entered promiscuous mode [ 351.136475][ T9295] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 351.146033][ T9295] vlan2: entered promiscuous mode [ 351.152260][ T9295] team0: entered promiscuous mode [ 351.168387][ T5829] usb 1-1: config 0 has no interfaces? [ 351.174046][ T5829] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 351.193563][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.227718][ T5829] usb 1-1: config 0 descriptor?? [ 351.612982][ T5956] usb 1-1: USB disconnect, device number 45 [ 351.676955][ T9315] IPVS: sh: FWM 3 0x00000003 - no destination available [ 351.695218][ T9313] program syz.1.960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.874017][ T9334] bridge1: entered allmulticast mode [ 353.436190][ T5829] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 353.668268][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.703850][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.745003][ T5829] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 353.764900][ T5829] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 353.815824][ T5829] usb 5-1: Manufacturer: syz [ 353.833576][ T5829] usb 5-1: config 0 descriptor?? [ 354.133566][ T9368] IPVS: sh: FWM 3 0x00000003 - no destination available [ 354.204011][ T9367] program syz.1.973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.232809][ T5829] hid_parser_main: 1 callbacks suppressed [ 354.232827][ T5829] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 354.405388][ T5829] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 354.415530][ T5829] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 354.472820][ T5829] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 354.489086][ T5829] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 354.504185][ T5829] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 354.522102][ T5829] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 355.094974][ T5829] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 355.115220][ T5829] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device [ 355.151488][ T5829] pyra 0003:1E7D:2CF6.0015: couldn't install mouse [ 355.170426][ T5829] pyra 0003:1E7D:2CF6.0015: probe with driver pyra failed with error -71 [ 355.339640][ T5829] usb 5-1: USB disconnect, device number 46 [ 355.576682][ T5956] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 355.614983][ T9380] fido_id[9380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 355.726173][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 355.745035][ T5956] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 355.793457][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.835817][ T5956] usb 3-1: config 0 descriptor?? [ 356.061658][ T5956] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 356.090994][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 356.127268][ T5956] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 356.149339][ T5956] usb 3-1: media controller created [ 356.204336][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.323688][ T9379] dib0700: tx buffer length is larger than 4. Not supported. [ 356.343751][ T5956] DVB: Unable to find symbol dib7000p_attach() [ 356.362639][ T5956] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 356.557841][ T9411] fuse: Unknown parameter 'grou00000000000000000000' [ 356.599287][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'. [ 356.646148][ T5956] rc_core: IR keymap rc-dib0700-rc5 not found [ 356.672976][ T5956] Registered IR keymap rc-empty [ 356.710722][ T5956] dvb-usb: could not initialize remote control. [ 356.786170][ T5956] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 356.824806][ T5956] usb 3-1: USB disconnect, device number 37 [ 356.916257][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 357.060602][ T5956] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 357.371449][ T24] usb 2-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 110 [ 357.453151][ T24] usb 2-1: config 16 has an invalid descriptor of length 101, skipping remainder of the config [ 357.499436][ T24] usb 2-1: config 16 has no interfaces? [ 357.515774][ T24] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 357.549382][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.642205][ T5956] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 357.959596][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 358.166140][ T5956] usb 3-1: device descriptor read/64, error -71 [ 358.466241][ T5956] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 358.666901][ T5956] usb 3-1: device descriptor read/64, error -71 [ 358.812679][ T5956] usb usb3-port1: attempt power cycle [ 359.197991][ T5956] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 359.339925][ T5956] usb 3-1: device descriptor read/8, error -71 [ 359.656433][ T5956] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 359.732827][ T5956] usb 3-1: device descriptor read/8, error -71 [ 359.846759][ T5956] usb usb3-port1: unable to enumerate USB device [ 359.859464][ T30] audit: type=1326 audit(1766114760.231:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9438 comm="syz.0.989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4b4d8f749 code=0x0 [ 360.919169][ T5829] usb 2-1: USB disconnect, device number 44 [ 361.136202][ T106] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 361.386213][ T106] usb 3-1: Using ep0 maxpacket: 16 [ 361.428888][ T106] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 361.452963][ T106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.472974][ T106] usb 3-1: Product: syz [ 361.477449][ T106] usb 3-1: Manufacturer: syz [ 361.482309][ T106] usb 3-1: SerialNumber: syz [ 361.507411][ T106] usb 3-1: config 0 descriptor?? [ 362.077448][ T106] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 362.098287][ T106] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 362.137179][ T106] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 362.165500][ T9472] netdevsim netdevsim0: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 362.177425][ T106] usb 3-1: media controller created [ 362.214804][ T106] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.277773][ T9472] bond0: left allmulticast mode [ 362.283061][ T106] zl10353_read_register: readreg error (reg=127, ret==0) [ 362.286262][ T9472] bond_slave_0: left allmulticast mode [ 362.296232][ T9472] bond_slave_1: left allmulticast mode [ 362.310804][ T9472] bond0: left promiscuous mode [ 362.317427][ T106] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 362.335760][ T106] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 362.355499][ T9472] bond_slave_0: left promiscuous mode [ 362.369332][ T9476] netlink: 'syz.0.1001': attribute type 10 has an invalid length. [ 362.377164][ T9472] bond_slave_1: left promiscuous mode [ 362.383082][ T106] usb 3-1: USB disconnect, device number 42 [ 362.421466][ T9472] bridge0: port 3(bond0) entered disabled state [ 362.489310][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 362.582527][ T9472] bridge_slave_0: left allmulticast mode [ 362.598912][ T106] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 362.637710][ T9472] bridge_slave_0: left promiscuous mode [ 362.643677][ T9472] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.904772][ T9472] bridge_slave_1: left allmulticast mode [ 362.911001][ T9472] bridge_slave_1: left promiscuous mode [ 362.989161][ T9472] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.004984][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 363.391919][ T9472] bond0: (slave bond_slave_0): Releasing backup interface [ 363.513869][ T9472] bond0: (slave bond_slave_1): Releasing backup interface [ 363.562429][ T9493] random: crng reseeded on system resumption [ 363.594184][ T9472] team0: Port device team_slave_0 removed [ 363.849625][ T9472] team0: Port device team_slave_1 removed [ 363.867106][ T9472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.882424][ T9472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.935261][ T9472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.946976][ T9472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.069021][ T9472] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 364.097755][ T9476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.108080][ T9476] team0: Port device bond0 added [ 364.643820][ T9502] vim2m vim2m.0: vidioc_s_fmt queue busy [ 365.062615][ T9480] team0 (unregistering): Port device bond0 removed [ 365.232551][ T9507] fuse: Unknown parameter 'grou00000000000000000000' [ 365.519631][ T8474] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 365.685289][ T8474] usb 4-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 110 [ 365.706194][ T8474] usb 4-1: config 16 has an invalid descriptor of length 101, skipping remainder of the config [ 365.726981][ T8474] usb 4-1: config 16 has no interfaces? [ 365.745813][ T8474] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 365.783874][ T8474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.787291][ T46] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 366.940906][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.955827][ T46] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 366.967300][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.992161][ T46] usb 2-1: config 0 descriptor?? [ 367.222071][ T9521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.276920][ T9521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.514770][ T46] acrux 0003:1A34:F705.0016: unexpected long global item [ 367.546821][ T46] acrux 0003:1A34:F705.0016: parse failed [ 367.552877][ T46] acrux 0003:1A34:F705.0016: probe with driver acrux failed with error -22 [ 367.936202][ T46] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 367.971774][ T8474] usb 4-1: USB disconnect, device number 35 [ 368.109056][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.129142][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 368.138739][ T46] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 368.248480][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.289234][ T46] usb 3-1: config 0 descriptor?? [ 368.321091][ T9542] program syz.3.1014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.389762][ T46] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 368.410760][ T46] dvb-usb: bulk message failed: -22 (3/0) [ 368.454020][ T46] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 368.507363][ T46] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 368.549997][ T46] usb 3-1: media controller created [ 368.584040][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.603699][ T47] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 368.650589][ T9547] xt_l2tp: invalid flags combination: 4 [ 368.683800][ T46] dvb-usb: bulk message failed: -22 (6/0) [ 368.712205][ T46] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 368.721268][ T46] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 368.727377][ T46] dvb-usb: schedule remote query interval to 150 msecs. [ 368.727405][ T46] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 368.889568][ T46] dvb-usb: bulk message failed: -22 (1/0) [ 368.889628][ T46] dvb-usb: error while querying for an remote control event. [ 369.046556][ T46] dvb-usb: bulk message failed: -22 (1/0) [ 369.046596][ T46] dvb-usb: error while querying for an remote control event. [ 369.207211][ T46] dvb-usb: bulk message failed: -22 (1/0) [ 369.213505][ T46] dvb-usb: error while querying for an remote control event. [ 369.359898][ T9549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.385511][ T9549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.406225][ T46] dvb-usb: bulk message failed: -22 (1/0) [ 369.412031][ T46] dvb-usb: error while querying for an remote control event. [ 369.596435][ T46] dvb-usb: bulk message failed: -22 (1/0) [ 369.613229][ T46] dvb-usb: error while querying for an remote control event. [ 369.666382][ T8474] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 369.786251][ T46] dvb-usb: bulk message failed: -22 (1/0) [ 369.793369][ T46] dvb-usb: error while querying for an remote control event. [ 369.826135][ T8474] usb 5-1: Using ep0 maxpacket: 32 [ 369.835970][ T8474] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.846972][ T8474] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 369.857091][ T8474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.865970][ T8474] usb 5-1: Product: syz [ 369.871117][ T8474] usb 5-1: Manufacturer: syz [ 369.875904][ T8474] usb 5-1: SerialNumber: syz [ 369.887344][ T8474] usb 5-1: config 0 descriptor?? [ 369.926182][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 369.956275][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 369.967693][ T5917] dvb-usb: error while querying for an remote control event. [ 369.996196][ T46] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 370.076562][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 370.101769][ T24] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 370.175215][ T9563] input: syz1 as /devices/virtual/input/input25 [ 370.309187][ T46] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 370.320505][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.340376][ T46] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 370.355683][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 370.363197][ T24] usb 4-1: Product: syz [ 370.373036][ T24] usb 4-1: Manufacturer: syz [ 370.380224][ T5917] dvb-usb: error while querying for an remote control event. [ 370.393495][ T46] usb 1-1: config 0 has no interface number 0 [ 370.400021][ T24] usb 4-1: SerialNumber: syz [ 370.425883][ T46] usb 1-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 370.436560][ T24] usb 4-1: config 0 descriptor?? [ 370.460532][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.485452][ T46] usb 1-1: Product: syz [ 370.493594][ T46] usb 1-1: Manufacturer: syz [ 370.516673][ T46] usb 1-1: SerialNumber: syz [ 370.540891][ T46] usb 1-1: config 0 descriptor?? [ 370.564620][ T9563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.576316][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 370.582135][ T5917] dvb-usb: error while querying for an remote control event. [ 370.639519][ T5917] usb 3-1: USB disconnect, device number 43 [ 370.644413][ T9563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.663803][ T9556] binder: 9555:9556 ioctl c0306201 200000000080 returned -14 [ 370.707722][ T9556] binder: BINDER_SET_CONTEXT_MGR already set [ 370.713783][ T9556] binder: 9555:9556 ioctl 4018620d 200000000040 returned -16 [ 370.779569][ T5917] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 370.826183][ T8474] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 370.918965][ T9558] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1019'. [ 370.929218][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 370.953834][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 370.977704][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 370.987858][ T24] usb 4-1: media controller created [ 371.196475][ T8474] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 371.201471][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.256007][ T9575] fuse: Unknown parameter 'grou00000000000000000000' [ 371.266219][ T9575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.275498][ T9575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.294321][ T8474] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 371.386798][ T8474] usb 5-1: USB disconnect, device number 47 [ 371.696576][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 371.709457][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 371.784881][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 371.891250][ T9581] vim2m vim2m.0: vidioc_s_fmt queue busy [ 371.908123][ T24] usb 4-1: USB disconnect, device number 36 [ 372.233785][ T9587] random: crng reseeded on system resumption [ 372.647065][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 373.231039][ T46] rndis_host 1-1:0.109: More than one union descriptor, skipping ... [ 373.246229][ T46] usb 1-1: bad CDC descriptors [ 373.255293][ T46] cdc_acm 1-1:0.109: More than one union descriptor, skipping ... [ 373.324831][ T46] usb 1-1: USB disconnect, device number 46 [ 373.380353][ T794] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x4 [ 373.428109][ T794] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 373.468580][ T794] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x2 [ 373.736123][ T794] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 373.749682][ T794] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 373.769850][ T794] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 373.926227][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 373.967193][ T794] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 373.995327][ T794] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 374.023585][ T794] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 374.053100][ T794] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 374.116890][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 374.140355][ T24] usb 5-1: config 0 has no interfaces? [ 374.147835][ T794] hid-generic 00A0:0006:0003.0017: hidraw0: HID v0.05 Device [syz1] on syz0 [ 374.172555][ T24] usb 5-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 374.196228][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.222904][ T24] usb 5-1: Product: syz [ 374.233113][ T24] usb 5-1: Manufacturer: syz [ 374.243612][ T24] usb 5-1: SerialNumber: syz [ 374.298457][ T24] usb 5-1: config 0 descriptor?? [ 374.336929][ T9601] wg1: entered promiscuous mode [ 374.344251][ T9601] wg1: entered allmulticast mode [ 374.513873][ T24] usb 5-1: USB disconnect, device number 48 [ 375.147591][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 375.388557][ T30] audit: type=1326 audit(1766114775.781:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.4.1036" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff52918f749 code=0x0 [ 375.416399][ T8474] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 375.595013][ T8474] usb 3-1: unable to get BOS descriptor or descriptor too short [ 375.604794][ T8474] usb 3-1: config 13 has an invalid interface number: 50 but max is 3 [ 375.640437][ T8474] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 375.733366][ T8474] usb 3-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 375.736201][ T8474] usb 3-1: config 13 has no interface number 0 [ 375.736259][ T8474] usb 3-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 375.736287][ T8474] usb 3-1: config 13 interface 50 has no altsetting 0 [ 375.757937][ T8474] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 375.757961][ T8474] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.757974][ T8474] usb 3-1: Product: syz [ 375.757983][ T8474] usb 3-1: Manufacturer: syz [ 375.757993][ T8474] usb 3-1: SerialNumber: syz [ 376.078732][ T13] usb 3-1: Failed to submit usb control message: -71 [ 376.086348][ T8474] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 376.099800][ T13] usb 3-1: unable to send the bmi data to the device: -71 [ 376.171652][ T13] usb 3-1: unable to get target info from device [ 376.171742][ T8474] usb 3-1: USB disconnect, device number 44 [ 376.199076][ T13] usb 3-1: could not get target info (-71) [ 376.254762][ T13] usb 3-1: could not probe fw (-71) [ 376.626599][ C0] hrtimer: interrupt took 15223 ns [ 376.721132][ T24] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 377.156812][ T24] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 377.178221][ T24] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 377.188789][ T24] usb 4-1: config 0 has no interface number 0 [ 377.209767][ T24] usb 4-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 377.218957][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.227740][ T24] usb 4-1: Product: syz [ 377.231896][ T24] usb 4-1: Manufacturer: syz [ 377.247849][ T24] usb 4-1: SerialNumber: syz [ 377.292193][ T24] usb 4-1: config 0 descriptor?? [ 377.521097][ T9640] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1040'. [ 378.410250][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'. [ 378.464660][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'. [ 378.844835][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.857950][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.227644][ T9684] IPVS: sh: FWM 3 0x00000003 - no destination available [ 380.321406][ T24] rndis_host 4-1:0.109: More than one union descriptor, skipping ... [ 380.337764][ T9686] IPVS: sh: FWM 3 0x00000003 - no destination available [ 380.366615][ T24] usb 4-1: bad CDC descriptors [ 380.378019][ T24] cdc_acm 4-1:0.109: More than one union descriptor, skipping ... [ 380.398732][ T24] usb 4-1: USB disconnect, device number 37 [ 380.486577][ T9690] random: crng reseeded on system resumption [ 380.806260][ T794] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 380.956639][ T794] usb 3-1: Using ep0 maxpacket: 16 [ 380.965746][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.999734][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.031722][ T794] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 381.148631][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.226434][ T794] usb 3-1: config 0 descriptor?? [ 381.237043][ T8474] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 381.426216][ T8474] usb 4-1: device descriptor read/64, error -71 [ 381.497366][ T794] usbhid 3-1:0.0: can't add hid device: -71 [ 381.554853][ T794] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 381.669634][ T794] usb 3-1: USB disconnect, device number 45 [ 381.677088][ T8474] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 381.758172][ T30] audit: type=1326 audit(1766114782.151:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.2.1052" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa52878f749 code=0x0 [ 381.906226][ T8474] usb 4-1: device descriptor read/64, error -71 [ 382.026714][ T8474] usb usb4-port1: attempt power cycle [ 382.231103][ T9715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.246991][ T9715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.041762][ T9737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.083741][ T9737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.646241][ T10] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 383.849562][ T10] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 383.876744][ T10] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 383.895521][ T10] usb 1-1: config 0 has no interface number 0 [ 383.998682][ T10] usb 1-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 384.060201][ T9753] vim2m vim2m.0: vidioc_s_fmt queue busy [ 384.084533][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.526240][ T10] usb 1-1: Product: syz [ 384.530464][ T10] usb 1-1: Manufacturer: syz [ 384.556657][ T10] usb 1-1: SerialNumber: syz [ 384.563373][ T10] usb 1-1: config 0 descriptor?? [ 384.743216][ T30] audit: type=1326 audit(1766114785.121:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9754 comm="syz.1.1064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f621ad8f749 code=0x0 [ 384.816868][ T9742] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1060'. [ 385.334175][ T9770] random: crng reseeded on system resumption [ 386.921190][ T30] audit: type=1326 audit(1766114787.301:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9784 comm="syz.2.1068" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa52878f749 code=0x0 [ 386.988145][ T10] rndis_host 1-1:0.109: More than one union descriptor, skipping ... [ 387.026774][ T10] usb 1-1: bad CDC descriptors [ 387.124262][ T10] cdc_acm 1-1:0.109: More than one union descriptor, skipping ... [ 387.217116][ T10] usb 1-1: USB disconnect, device number 47 [ 387.344462][ T9794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1071'. [ 387.458268][ T9798] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 387.644802][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 388.009342][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.024059][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 388.066180][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 388.135704][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.288393][ T9797] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 388.344555][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 388.888065][ T10] usb 4-1: USB disconnect, device number 41 [ 389.838995][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1077'. [ 390.358218][ T9827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1076'. [ 390.600695][ T9833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1080'. [ 390.688929][ T106] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 390.751815][ T9837] fuse: Unknown parameter 'grou00000000000000000000' [ 390.956145][ T106] usb 1-1: Using ep0 maxpacket: 8 [ 390.973036][ T106] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 390.990721][ T106] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 391.034888][ T106] usb 1-1: config 127 has no interface number 1 [ 391.046256][ T5829] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 391.072156][ T106] usb 1-1: config 127 interface 171 has no altsetting 0 [ 391.131506][ T106] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 391.147843][ T106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.178332][ T106] usb 1-1: Product: syz [ 391.186267][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 391.196197][ T106] usb 1-1: Manufacturer: syz [ 391.224431][ T106] usb 1-1: SerialNumber: syz [ 391.366272][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 391.373279][ T5829] usb 3-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 110 [ 391.406811][ T5829] usb 3-1: config 16 has an invalid descriptor of length 101, skipping remainder of the config [ 391.428088][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 391.446305][ T5829] usb 3-1: config 16 has no interfaces? [ 391.462153][ T5829] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 391.478877][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 391.514095][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.544577][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 391.679757][ T10] usb 5-1: Product: syz [ 391.684358][ T10] usb 5-1: Manufacturer: syz [ 391.742041][ T10] usb 5-1: SerialNumber: syz [ 391.787183][ T10] usb 5-1: config 0 descriptor?? [ 392.557294][ T9839] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 393.194245][ T9855] random: crng reseeded on system resumption [ 393.456997][ T9839] fuse: Invalid gid '0x0000000000000005' [ 393.950670][ T10] usb 3-1: USB disconnect, device number 47 [ 394.541748][ T794] usb 5-1: USB disconnect, device number 49 [ 394.655974][ T106] xr_serial 1-1:127.171: xr_serial converter detected [ 394.679425][ T106] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 394.719165][ T106] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 394.831541][ T106] usb 1-1: USB disconnect, device number 48 [ 394.864635][ T106] xr_serial 1-1:127.171: device disconnected [ 395.187254][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1093'. [ 395.197779][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 395.262589][ T30] audit: type=1326 audit(1766114795.651:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.0.1089" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4b4d8f749 code=0x0 [ 395.794980][ T794] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 396.024241][ T794] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 396.033978][ T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.052511][ T794] usb 5-1: Product: syz [ 396.086343][ T8474] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 396.106191][ T794] usb 5-1: Manufacturer: syz [ 396.124503][ T794] usb 5-1: SerialNumber: syz [ 396.223362][ T794] hub 5-1:24.0: bad descriptor, ignoring hub [ 396.261980][ T794] hub 5-1:24.0: probe with driver hub failed with error -5 [ 396.316274][ T8474] usb 4-1: Using ep0 maxpacket: 32 [ 396.324689][ T8474] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 396.368352][ T8474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.425900][ T794] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 396.427767][ T8474] usb 4-1: config 0 descriptor?? [ 396.533128][ T9904] tc_dump_action: action bad kind [ 396.562485][ T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 396.575958][ T794] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 396.754414][ T794] usb 5-1: media controller created [ 396.772136][ T9909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.783503][ T9909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.815235][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1094'. [ 396.826446][ T8474] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 396.881064][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 396.989883][ T8474] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 397.023359][ T8474] dib0700: firmware download failed at 7 with -22 [ 397.205452][ T794] DVB: Unable to find symbol dib7000p_attach() [ 397.234578][ T794] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 397.536171][ T794] rc_core: IR keymap rc-dib0700-rc5 not found [ 397.566094][ T794] Registered IR keymap rc-empty [ 397.571218][ T794] dvb-usb: could not initialize remote control. [ 397.625335][ T794] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 397.658689][ T794] usb 5-1: USB disconnect, device number 50 [ 397.726449][ T8474] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 397.779151][ T794] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 397.898264][ T8474] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 397.906903][ T8474] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.961711][ T8474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 398.111421][ T8474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 398.125610][ T30] audit: type=1326 audit(1766114798.511:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9928 comm="syz.4.1106" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff52918f749 code=0x0 [ 398.150491][ T8474] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.209557][ T9934] random: crng reseeded on system resumption [ 398.302307][ T8474] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.325507][ T8474] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.378665][ T8474] usb 3-1: config 0 descriptor?? [ 398.446341][ T9922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 398.867860][ T8474] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 398.972422][ T8474] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 398.981562][ T794] hid_parser_main: 1 callbacks suppressed [ 398.981584][ T794] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x4 [ 399.009160][ T794] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0 [ 399.036625][ T794] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x2 [ 399.055325][ T794] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0 [ 399.093165][ T8474] usb 4-1: USB disconnect, device number 42 [ 399.145006][ T794] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0 [ 399.147182][ T9922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.177302][ T9922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.205960][ T794] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0 [ 399.235626][ T794] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0 [ 399.256368][ T5926] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 399.273837][ T794] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0 [ 399.322394][ T794] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0 [ 399.378199][ T794] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0 [ 399.426193][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 399.439962][ T5926] usb 1-1: config 0 has no interfaces? [ 399.451656][ T5926] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 399.470618][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.492088][ T5926] usb 1-1: Product: syz [ 399.493871][ T8474] usb 3-1: USB disconnect, device number 48 [ 399.506508][ T794] hid-generic 00A0:0006:0003.0019: hidraw1: HID v0.05 Device [syz1] on syz0 [ 399.537655][ T5926] usb 1-1: Manufacturer: syz [ 399.542399][ T5926] usb 1-1: SerialNumber: syz [ 399.584359][ T5926] usb 1-1: config 0 descriptor?? [ 399.822986][ T8474] usb 1-1: USB disconnect, device number 49 [ 400.150506][ T9963] tipc: Enabling of bearer rejected, failed to enable media [ 400.295618][ T9969] FAULT_INJECTION: forcing a failure. [ 400.295618][ T9969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.328638][ T9969] CPU: 0 UID: 0 PID: 9969 Comm: syz.3.1116 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.328670][ T9969] Tainted: [L]=SOFTLOCKUP [ 400.328677][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.328684][ T9969] Call Trace: [ 400.328689][ T9969] [ 400.328695][ T9969] dump_stack_lvl+0x189/0x250 [ 400.328716][ T9969] ? __pfx____ratelimit+0x10/0x10 [ 400.328729][ T9969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.328743][ T9969] ? __pfx__printk+0x10/0x10 [ 400.328760][ T9969] ? __might_fault+0xb0/0x130 [ 400.328784][ T9969] should_fail_ex+0x414/0x560 [ 400.328804][ T9969] _copy_from_iter+0x3b0/0x1630 [ 400.328824][ T9969] ? __pfx__copy_from_iter+0x10/0x10 [ 400.328845][ T9969] bcm_tx_setup+0x11c2/0x1bd0 [ 400.328869][ T9969] bcm_sendmsg+0x45c/0x6a0 [ 400.328884][ T9969] ? __pfx_bcm_sendmsg+0x10/0x10 [ 400.328898][ T9969] ? aa_sock_msg_perm+0xf1/0x1b0 [ 400.328914][ T9969] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.328925][ T9969] ? __pfx_bcm_sendmsg+0x10/0x10 [ 400.328936][ T9969] __sock_sendmsg+0x21c/0x270 [ 400.328955][ T9969] ____sys_sendmsg+0x505/0x820 [ 400.328972][ T9969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.328991][ T9969] ? import_iovec+0x74/0xa0 [ 400.329006][ T9969] ___sys_sendmsg+0x21f/0x2a0 [ 400.329022][ T9969] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.329040][ T9969] ? rcu_read_lock_any_held+0xb3/0x120 [ 400.329070][ T9969] ? __fget_files+0x2a/0x420 [ 400.329084][ T9969] ? __fget_files+0x3a0/0x420 [ 400.329104][ T9969] __x64_sys_sendmsg+0x19b/0x260 [ 400.329119][ T9969] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.329139][ T9969] ? __pfx_ksys_write+0x10/0x10 [ 400.329153][ T9969] ? do_syscall_64+0xbe/0xf80 [ 400.329168][ T9969] do_syscall_64+0xfa/0xf80 [ 400.329180][ T9969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.329191][ T9969] ? clear_bhb_loop+0x60/0xb0 [ 400.329205][ T9969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.329216][ T9969] RIP: 0033:0x7f112678f749 [ 400.329228][ T9969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.329238][ T9969] RSP: 002b:00007f1127562038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.329252][ T9969] RAX: ffffffffffffffda RBX: 00007f11269e5fa0 RCX: 00007f112678f749 [ 400.329260][ T9969] RDX: 0000000000000000 RSI: 0000200000001940 RDI: 0000000000000004 [ 400.329268][ T9969] RBP: 00007f1127562090 R08: 0000000000000000 R09: 0000000000000000 [ 400.329275][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.329282][ T9969] R13: 00007f11269e6038 R14: 00007f11269e5fa0 R15: 00007f1126b0fa28 [ 400.329301][ T9969] [ 400.615279][ T6210] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 400.940101][ T9981] tc_dump_action: action bad kind [ 401.268292][T10002] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1126'. [ 401.624516][T10008] netdevsim netdevsim2: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 401.661941][T10008] bond0: left allmulticast mode [ 401.674565][T10008] bond_slave_0: left allmulticast mode [ 401.692454][T10008] bond_slave_1: left allmulticast mode [ 401.706535][T10008] bond0: left promiscuous mode [ 401.726488][T10009] netlink: 'syz.2.1127': attribute type 10 has an invalid length. [ 401.743778][T10008] bond_slave_0: left promiscuous mode [ 401.759399][T10008] bond_slave_1: left promiscuous mode [ 401.778547][T10008] bridge0: port 4(bond0) entered disabled state [ 401.778717][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 401.851248][T10008] bridge_slave_0: left allmulticast mode [ 401.874855][T10008] bridge_slave_0: left promiscuous mode [ 401.903931][T10008] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.215915][T10014] program syz.3.1128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.337683][T10008] bridge_slave_1: left allmulticast mode [ 402.343875][T10008] bridge_slave_1: left promiscuous mode [ 402.372288][T10008] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.555929][T10008] bond0: (slave bond_slave_0): Releasing backup interface [ 402.610141][T10008] bond0: (slave bond_slave_1): Releasing backup interface [ 402.642926][T10008] team_slave_0: left promiscuous mode [ 402.746806][T10008] team0: Port device team_slave_0 removed [ 402.769256][T10008] team_slave_1: left promiscuous mode [ 402.794847][T10024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1130'. [ 402.848720][T10008] team0: Port device team_slave_1 removed [ 402.869240][T10008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.877524][T10008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.909878][T10008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.922926][T10008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.981780][T10008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 403.079231][T10009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.133969][T10009] bond0: entered promiscuous mode [ 403.166337][ T5926] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 403.184880][T10009] team0: Port device bond0 added [ 403.326298][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 403.419191][ T5926] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 403.437464][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.458951][ T5926] usb 5-1: Product: syz [ 403.470315][ T5926] usb 5-1: Manufacturer: syz [ 403.484384][ T5926] usb 5-1: SerialNumber: syz [ 403.506799][ T5926] usb 5-1: config 0 descriptor?? [ 403.533372][ T5926] gspca_main: sq930x-2.14.0 probing 2770:930c [ 404.023900][T10010] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 404.058450][T10010] team0 (unregistering): Port device netdevsim0 removed [ 404.066956][T10010] bond0: left promiscuous mode [ 404.105321][T10010] team0 (unregistering): Port device bond0 removed [ 404.566257][ T5926] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 405.152516][T10079] random: crng reseeded on system resumption [ 405.896154][ T5926] gspca_sq930x: Unknown sensor [ 405.904032][ T5926] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 405.958841][ T5926] usb 5-1: USB disconnect, device number 51 [ 406.249251][T10101] tc_dump_action: action bad kind [ 408.234937][T10117] hub 9-0:1.0: USB hub found [ 408.246519][T10117] hub 9-0:1.0: 1 port detected [ 408.248261][T10118] FAULT_INJECTION: forcing a failure. [ 408.248261][T10118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.302998][T10118] CPU: 1 UID: 0 PID: 10118 Comm: syz.0.1146 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.303043][T10118] Tainted: [L]=SOFTLOCKUP [ 408.303057][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.303069][T10118] Call Trace: [ 408.303077][T10118] [ 408.303085][T10118] dump_stack_lvl+0x189/0x250 [ 408.303115][T10118] ? __pfx____ratelimit+0x10/0x10 [ 408.303134][T10118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.303157][T10118] ? __pfx__printk+0x10/0x10 [ 408.303187][T10118] ? __might_fault+0xb0/0x130 [ 408.303228][T10118] should_fail_ex+0x414/0x560 [ 408.303264][T10118] _copy_to_iter+0x1de/0x1790 [ 408.303288][T10118] ? _copy_to_iter+0x191/0x1790 [ 408.303309][T10118] ? rep_movs_alternative+0x4a/0x90 [ 408.303337][T10118] ? _copy_to_iter+0x24f/0x1790 [ 408.303356][T10118] ? __pfx__copy_to_iter+0x10/0x10 [ 408.303394][T10118] __skb_datagram_iter+0xf8/0x990 [ 408.303423][T10118] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 408.303459][T10118] __skb_datagram_iter+0x6f3/0x990 [ 408.303487][T10118] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 408.303522][T10118] skb_copy_datagram_iter+0xb5/0x210 [ 408.303553][T10118] tipc_recvmsg+0x7a1/0x13c0 [ 408.303601][T10118] ? __pfx_tipc_recvmsg+0x10/0x10 [ 408.303637][T10118] ? __lock_acquire+0x6b6/0x2cf0 [ 408.303656][T10118] ? aa_sock_msg_perm+0xf1/0x1b0 [ 408.303682][T10118] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 408.303700][T10118] ? security_socket_recvmsg+0x7e/0x2e0 [ 408.303727][T10118] ? __pfx_tipc_recvmsg+0x10/0x10 [ 408.303754][T10118] sock_recvmsg+0x22c/0x270 [ 408.303788][T10118] ____sys_recvmsg+0x1c9/0x460 [ 408.303822][T10118] ? __pfx_____sys_recvmsg+0x10/0x10 [ 408.303866][T10118] ? import_iovec+0x74/0xa0 [ 408.303893][T10118] ___sys_recvmsg+0x1b5/0x510 [ 408.303923][T10118] ? __pfx____sys_recvmsg+0x10/0x10 [ 408.303976][T10118] ? __fget_files+0x3a0/0x420 [ 408.304013][T10118] __x64_sys_recvmsg+0x198/0x260 [ 408.304049][T10118] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 408.304084][T10118] ? __pfx_ksys_write+0x10/0x10 [ 408.304108][T10118] ? do_syscall_64+0xbe/0xf80 [ 408.304133][T10118] do_syscall_64+0xfa/0xf80 [ 408.304155][T10118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.304174][T10118] ? clear_bhb_loop+0x60/0xb0 [ 408.304198][T10118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.304216][T10118] RIP: 0033:0x7fe4b4d8f749 [ 408.304234][T10118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.304250][T10118] RSP: 002b:00007fe4b2ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 408.304271][T10118] RAX: ffffffffffffffda RBX: 00007fe4b4fe5fa0 RCX: 00007fe4b4d8f749 [ 408.304286][T10118] RDX: 0000000000010021 RSI: 0000200000000300 RDI: 0000000000000004 [ 408.304298][T10118] RBP: 00007fe4b2ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 408.304310][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.304322][T10118] R13: 00007fe4b4fe6038 R14: 00007fe4b4fe5fa0 R15: 00007fe4b510fa28 [ 408.304358][T10118] [ 409.039749][T10127] random: crng reseeded on system resumption [ 411.326205][ T5917] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 411.373513][T10158] netlink: 'syz.2.1154': attribute type 10 has an invalid length. [ 411.403414][T10158] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1154'. [ 411.873516][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'. [ 411.886374][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 411.926889][T10163] netlink: 'syz.1.1155': attribute type 16 has an invalid length. [ 411.934891][T10163] netlink: 'syz.1.1155': attribute type 17 has an invalid length. [ 411.942804][T10163] netlink: 'syz.1.1155': attribute type 27 has an invalid length. [ 412.024971][ T5917] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 412.142535][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.170667][ T5917] usb 1-1: Product: syz [ 412.184102][ T5917] usb 1-1: Manufacturer: syz [ 412.247562][ T5917] usb 1-1: SerialNumber: syz [ 412.264358][ T5917] usb 1-1: config 0 descriptor?? [ 412.286523][ T5917] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 412.298787][ T5917] usb 1-1: Detected FT-X [ 412.523992][ T5917] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 413.018306][ T5917] ftdi_sio 1-1:0.0: GPIO initialisation failed: -5 [ 413.124849][ T5917] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 413.215426][T10183] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 413.229828][T10183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.426151][ T5917] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 413.637598][ T5917] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 413.646202][ T5917] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 413.693028][ T5917] usb 4-1: config 220 has no interface number 2 [ 413.719787][ T5917] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 413.734871][ T5917] usb 4-1: config 220 interface 0 has no altsetting 0 [ 413.742224][ T5917] usb 4-1: config 220 interface 76 has no altsetting 0 [ 413.753310][ T5917] usb 4-1: config 220 interface 1 has no altsetting 0 [ 413.772020][ T5917] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 413.784898][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.807323][ T5917] usb 4-1: Product: syz [ 413.848373][ T5917] usb 4-1: Manufacturer: syz [ 413.854737][ T5917] usb 4-1: SerialNumber: syz [ 413.962643][T10192] FAULT_INJECTION: forcing a failure. [ 413.962643][T10192] name failslab, interval 1, probability 0, space 0, times 0 [ 413.979134][T10192] CPU: 0 UID: 0 PID: 10192 Comm: syz.2.1164 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.979168][T10192] Tainted: [L]=SOFTLOCKUP [ 413.979175][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.979185][T10192] Call Trace: [ 413.979194][T10192] [ 413.979202][T10192] dump_stack_lvl+0x189/0x250 [ 413.979227][T10192] ? __pfx____ratelimit+0x10/0x10 [ 413.979239][T10192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.979253][T10192] ? __pfx__printk+0x10/0x10 [ 413.979276][T10192] ? __pfx___might_resched+0x10/0x10 [ 413.979296][T10192] ? fs_reclaim_acquire+0x7d/0x100 [ 413.979323][T10192] should_fail_ex+0x414/0x560 [ 413.979356][T10192] should_failslab+0xa8/0x100 [ 413.979377][T10192] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 413.979395][T10192] ? __alloc_skb+0x255/0x430 [ 413.979409][T10192] ? napi_skb_cache_get+0x4a5/0x780 [ 413.979420][T10192] ? napi_skb_cache_get+0x151/0x780 [ 413.979440][T10192] __alloc_skb+0x255/0x430 [ 413.979463][T10192] ? __pfx___alloc_skb+0x10/0x10 [ 413.979494][T10192] _sctp_make_chunk+0x59/0x290 [ 413.979532][T10192] sctp_make_datafrag_empty+0x122/0x230 [ 413.979550][T10192] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 413.979568][T10192] ? sctp_user_addto_chunk+0xa8/0x240 [ 413.979592][T10192] sctp_datamsg_from_user+0x729/0xef0 [ 413.979638][T10192] sctp_sendmsg_to_asoc+0x1059/0x18d0 [ 413.979667][T10192] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 413.979694][T10192] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 413.979706][T10192] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 413.979724][T10192] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 413.979736][T10192] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 413.979752][T10192] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 413.979772][T10192] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 413.979791][T10192] ? security_sctp_bind_connect+0x7e/0x2e0 [ 413.979813][T10192] sctp_sendmsg+0x1941/0x2840 [ 413.979843][T10192] ? __pfx_sctp_sendmsg+0x10/0x10 [ 413.979853][T10192] ? aa_sk_perm+0x15f/0x920 [ 413.979868][T10192] ? aa_sk_perm+0x7ee/0x920 [ 413.979884][T10192] ? __pfx_aa_sk_perm+0x10/0x10 [ 413.979904][T10192] ? sock_rps_record_flow+0x19/0x410 [ 413.979932][T10192] ? inet_sendmsg+0x2f4/0x370 [ 413.979953][T10192] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.979974][T10192] __sock_sendmsg+0x19c/0x270 [ 413.980001][T10192] __sys_sendto+0x3bd/0x520 [ 413.980022][T10192] ? __pfx___sys_sendto+0x10/0x10 [ 413.980033][T10192] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 413.980057][T10192] ? __fget_files+0x3a0/0x420 [ 413.980092][T10192] ? ksys_write+0x22a/0x250 [ 413.980113][T10192] ? __pfx_ksys_write+0x10/0x10 [ 413.980136][T10192] __x64_sys_sendto+0xde/0x100 [ 413.980157][T10192] do_syscall_64+0xfa/0xf80 [ 413.980171][T10192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.980183][T10192] ? clear_bhb_loop+0x60/0xb0 [ 413.980199][T10192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.980212][T10192] RIP: 0033:0x7fa52878f749 [ 413.980231][T10192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.980246][T10192] RSP: 002b:00007fa5296bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 413.980267][T10192] RAX: ffffffffffffffda RBX: 00007fa5289e5fa0 RCX: 00007fa52878f749 [ 413.980281][T10192] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 413.980293][T10192] RBP: 00007fa5296bd090 R08: 0000200000000140 R09: 000000000000001c [ 413.980305][T10192] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 413.980316][T10192] R13: 00007fa5289e6038 R14: 00007fa5289e5fa0 R15: 00007fa528b0fa28 [ 413.980343][T10192] [ 414.622080][ T5917] usb 4-1: selecting invalid altsetting 0 [ 414.649249][ T5917] usb 4-1: selecting invalid altsetting 0 [ 414.752383][ T794] usb 1-1: USB disconnect, device number 50 [ 414.910389][ T5917] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 414.918861][ T794] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 414.955080][ T5917] uvcvideo 4-1:220.0: No valid video chain found. [ 414.974231][ T794] ftdi_sio 1-1:0.0: device disconnected [ 415.093673][ T5917] usb 4-1: selecting invalid altsetting 0 [ 415.133461][ T5917] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 415.201677][ T5917] usb 4-1: USB disconnect, device number 43 [ 415.434118][T10208] ------------[ cut here ]------------ [ 415.440182][T10208] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#0: syz.3.1169/10208 [ 415.449287][T10208] Modules linked in: [ 415.453708][T10208] CPU: 0 UID: 0 PID: 10208 Comm: syz.3.1169 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.465861][T10208] Tainted: [L]=SOFTLOCKUP [ 415.470398][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 415.481061][T10208] RIP: 0010:path_noexec+0x1af/0x200 [ 415.486349][T10208] Code: 02 31 ff 48 89 de e8 80 6a 86 ff d1 eb eb 07 e8 97 65 86 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 d8 5e 23 09 cc e8 82 65 86 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 415.506631][T10208] RSP: 0018:ffffc9000e5c7bd8 EFLAGS: 00010287 [ 415.512816][T10208] RAX: ffffffff823b4cce RBX: ffff888032318940 RCX: 0000000000080000 [ 415.521270][T10208] RDX: ffffc9000dbbf000 RSI: 0000000000000064 RDI: 0000000000000065 [ 415.529312][T10208] RBP: 0000000000080000 R08: ffff888025159e80 R09: 0000000000000003 [ 415.537592][T10208] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002 [ 415.545654][T10208] R13: 1ffff92001cb8f90 R14: 0000000000000000 R15: dffffc0000000000 [ 415.553832][T10208] FS: 00007f11275626c0(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 415.562834][T10208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.569931][T10208] CR2: 000000110c37e7d8 CR3: 0000000075426000 CR4: 00000000003526f0 [ 415.578380][T10208] Call Trace: [ 415.581692][T10208] [ 415.584722][T10208] do_mmap+0xa43/0x10d0 [ 415.588960][T10208] ? __pfx_do_mmap+0x10/0x10 [ 415.593760][T10208] ? down_write_killable+0x178/0x230 [ 415.599331][T10208] ? __pfx_down_write_killable+0x10/0x10 [ 415.605453][T10208] ? common_file_perm+0x1b5/0x220 [ 415.610818][T10208] vm_mmap_pgoff+0x2a6/0x4d0 [ 415.615421][T10208] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 415.620568][T10208] ? __fget_files+0x2a/0x420 [ 415.625189][T10208] ? __fget_files+0x2a/0x420 [ 415.629835][T10208] ? __fget_files+0x2a/0x420 [ 415.634524][T10208] ksys_mmap_pgoff+0x51f/0x760 [ 415.639496][T10208] do_syscall_64+0xfa/0xf80 [ 415.644002][T10208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.650128][T10208] ? clear_bhb_loop+0x60/0xb0 [ 415.655344][T10208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.661751][T10208] RIP: 0033:0x7f112678f749 [ 415.666203][T10208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.686294][T10208] RSP: 002b:00007f1127562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 415.694892][T10208] RAX: ffffffffffffffda RBX: 00007f11269e5fa0 RCX: 00007f112678f749 [ 415.703438][T10208] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000000000 [ 415.711988][T10208] RBP: 00007f1126813f91 R08: 0000000000000003 R09: 0000000000000000 [ 415.720684][T10208] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 415.728936][T10208] R13: 00007f11269e6038 R14: 00007f11269e5fa0 R15: 00007f1126b0fa28 [ 415.737267][T10208] [ 415.740301][T10208] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 415.747848][T10208] CPU: 0 UID: 0 PID: 10208 Comm: syz.3.1169 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.759111][T10208] Tainted: [L]=SOFTLOCKUP [ 415.763435][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 415.773849][T10208] Call Trace: [ 415.777134][T10208] [ 415.780259][T10208] dump_stack_lvl+0x99/0x250 [ 415.785110][T10208] ? __asan_memcpy+0x40/0x70 [ 415.789880][T10208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.795455][T10208] ? __pfx__printk+0x10/0x10 [ 415.800184][T10208] vpanic+0x237/0x6d0 [ 415.804194][T10208] ? __pfx_vpanic+0x10/0x10 [ 415.808790][T10208] ? is_bpf_text_address+0x292/0x2b0 [ 415.814345][T10208] ? is_bpf_text_address+0x26/0x2b0 [ 415.819725][T10208] panic+0xb9/0xc0 [ 415.823548][T10208] ? __pfx_panic+0x10/0x10 [ 415.828070][T10208] __warn+0x317/0x4b0 [ 415.832585][T10208] ? path_noexec+0x1af/0x200 [ 415.837628][T10208] ? path_noexec+0x1af/0x200 [ 415.842528][T10208] __report_bug+0x288/0x500 [ 415.847056][T10208] ? path_noexec+0x1af/0x200 [ 415.851691][T10208] ? __pfx___report_bug+0x10/0x10 [ 415.856757][T10208] ? futex_unqueue+0x211/0x240 [ 415.861657][T10208] ? arch_get_unmapped_area_topdown+0x251/0xbc0 [ 415.868032][T10208] ? path_noexec+0x1af/0x200 [ 415.872680][T10208] report_bug+0x16a/0x220 [ 415.877485][T10208] ? path_noexec+0x1af/0x200 [ 415.882124][T10208] ? path_noexec+0x1b1/0x200 [ 415.886725][T10208] handle_bug+0x98/0x200 [ 415.890985][T10208] exc_invalid_op+0x1a/0x50 [ 415.895672][T10208] asm_exc_invalid_op+0x1a/0x20 [ 415.900559][T10208] RIP: 0010:path_noexec+0x1af/0x200 [ 415.905781][T10208] Code: 02 31 ff 48 89 de e8 80 6a 86 ff d1 eb eb 07 e8 97 65 86 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 d8 5e 23 09 cc e8 82 65 86 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 415.925592][T10208] RSP: 0018:ffffc9000e5c7bd8 EFLAGS: 00010287 [ 415.931681][T10208] RAX: ffffffff823b4cce RBX: ffff888032318940 RCX: 0000000000080000 [ 415.939677][T10208] RDX: ffffc9000dbbf000 RSI: 0000000000000064 RDI: 0000000000000065 [ 415.947755][T10208] RBP: 0000000000080000 R08: ffff888025159e80 R09: 0000000000000003 [ 415.955823][T10208] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002 [ 415.964058][T10208] R13: 1ffff92001cb8f90 R14: 0000000000000000 R15: dffffc0000000000 [ 415.972211][T10208] ? path_noexec+0x1ae/0x200 [ 415.976833][T10208] ? path_noexec+0x1ae/0x200 [ 415.981530][T10208] do_mmap+0xa43/0x10d0 [ 415.985697][T10208] ? __pfx_do_mmap+0x10/0x10 [ 415.990504][T10208] ? down_write_killable+0x178/0x230 [ 415.996199][T10208] ? __pfx_down_write_killable+0x10/0x10 [ 416.001865][T10208] ? common_file_perm+0x1b5/0x220 [ 416.007011][T10208] vm_mmap_pgoff+0x2a6/0x4d0 [ 416.011642][T10208] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 416.016790][T10208] ? __fget_files+0x2a/0x420 [ 416.021435][T10208] ? __fget_files+0x2a/0x420 [ 416.026049][T10208] ? __fget_files+0x2a/0x420 [ 416.030665][T10208] ksys_mmap_pgoff+0x51f/0x760 [ 416.035438][T10208] do_syscall_64+0xfa/0xf80 [ 416.039965][T10208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.046066][T10208] ? clear_bhb_loop+0x60/0xb0 [ 416.051053][T10208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.057315][T10208] RIP: 0033:0x7f112678f749 [ 416.061838][T10208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.081878][T10208] RSP: 002b:00007f1127562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 416.090630][T10208] RAX: ffffffffffffffda RBX: 00007f11269e5fa0 RCX: 00007f112678f749 [ 416.099079][T10208] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000000000 [ 416.107257][T10208] RBP: 00007f1126813f91 R08: 0000000000000003 R09: 0000000000000000 [ 416.115241][T10208] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 416.123226][T10208] R13: 00007f11269e6038 R14: 00007f11269e5fa0 R15: 00007f1126b0fa28 [ 416.131311][T10208] [ 416.134720][T10208] Kernel Offset: disabled [ 416.139157][T10208] Rebooting in 86400 seconds..