last executing test programs: 3m7.320156623s ago: executing program 1 (id=2): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000005c0)={0x1, {{0xa, 0x4e23, 0x0, @mcast1, 0xfffffffe}}, {{0xa, 0x0, 0x94, @empty, 0x8001}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x24) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, 0x0, 0x10200300) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000001880)="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", 0x98e, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000380)={r2, 0x0, r3}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x20044014) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x101082, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r5, 0x40096100, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r6, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) write$uinput_user_dev(r1, &(0x7f0000000700)={'syz1\x00', {0x0, 0x6, 0x1, 0xfffc}, 0x30, [0x7, 0x4, 0x100, 0x6, 0x7ff, 0x10000, 0x3, 0x6, 0x1ff, 0x2, 0x6, 0x8, 0xfffff51c, 0x10001, 0xfff, 0x9, 0x200, 0xfffffc00, 0xfffff001, 0x7fff, 0x3ff, 0x10001, 0xb05, 0x6eb9, 0x9, 0x9, 0x7, 0x9, 0x4, 0x1, 0x6, 0x20, 0xb, 0x2, 0xfffffff7, 0xfff, 0x9, 0x10000, 0x10, 0x3, 0x101, 0x7, 0x1, 0x9, 0x0, 0x80, 0xffffff7f, 0x1000, 0x7, 0x68, 0x2, 0xffffff80, 0xfffffffb, 0xf, 0x8, 0x6, 0x4d, 0xffffd593, 0x3, 0x10000, 0xfffff59e, 0x28a, 0xb1aa, 0x3], [0x0, 0x3, 0x3, 0x3, 0xb, 0xfffffff9, 0xb, 0x22db, 0x6, 0x4, 0x3ff, 0x8, 0x9, 0x9, 0x9, 0x8, 0x5, 0x401, 0x6, 0xfffffffe, 0x6, 0x7, 0x0, 0x1, 0x5, 0xca9c, 0x80, 0xa, 0x1, 0x9, 0x0, 0x3, 0x5, 0x1, 0x6, 0x2, 0x6, 0x40, 0x3, 0xfffffff8, 0x5, 0x7, 0x5, 0x7, 0x8000, 0x80, 0x1, 0x7ff, 0x1, 0x1ff, 0x0, 0x40, 0xff, 0x6a16, 0xe0b, 0x8, 0x965220a, 0x4, 0x3, 0x8, 0x6, 0x1, 0x401, 0x18], [0x0, 0x80000001, 0x5, 0x3, 0x3, 0x1, 0x3, 0x9, 0x0, 0x2, 0xda, 0x3ff, 0xb55, 0x61db, 0x6, 0x6, 0xe4a7, 0x0, 0x7f, 0x5f1a3ba9, 0x1, 0x8f65, 0x0, 0x7ff, 0x4000000, 0x2, 0x4, 0x3, 0x43f4, 0x7, 0x3ff, 0x2b, 0xe7, 0x0, 0xfffffff9, 0x75c5, 0x4a, 0x401, 0x9, 0x0, 0x3, 0x4, 0x4, 0x0, 0x800, 0xdd, 0x7, 0x5, 0x1, 0x3, 0x4, 0x4, 0x0, 0xc0000000, 0x9, 0x9, 0x8, 0x1b69, 0x110b965, 0x5, 0x0, 0x5, 0x5, 0x9], [0x6, 0x5, 0x9, 0x38, 0x3, 0x0, 0x3, 0x1, 0x0, 0xfffffffa, 0xff, 0x6, 0x6, 0x8001, 0x81, 0x2, 0x2, 0x4, 0x0, 0x82, 0x7ff, 0xfffffffc, 0x964, 0x2, 0x0, 0x2, 0x7, 0x3, 0xffffff48, 0x80, 0xdef, 0x2, 0x0, 0x3, 0x80, 0x100, 0xd, 0x0, 0xffffffff, 0x4, 0x9b2, 0x9, 0x3, 0xffffff01, 0x8, 0x9, 0x800, 0x80000001, 0x52c3, 0x5, 0x4, 0x7, 0x7, 0x4, 0x8, 0x0, 0xfffff476, 0x0, 0x2, 0x8, 0x400, 0x6, 0x40f7186, 0x4]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a0d006, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00') 3m7.093795758s ago: executing program 1 (id=11): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nr\x00']) creat(&(0x7f0000000080)='./bus\x00', 0x154) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000440)='trans=rdma,') sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000160000012bbd7000fddbdf250a38a1fd", @ANYRES32=r2, @ANYBLOB="08000900ffff02000800090009000000"], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x810) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000300)={0x0, @motion_det}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28) 3m5.568800953s ago: executing program 1 (id=13): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x2, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0x6, 0x400, 0x6, 0x4c2336d3, 0x9, 0x0, 0xfffffff8, 0x80000401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xffffffff, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200046, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x6, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x4, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004040)={r5, 0xffffffffffffffff, 0x19, 0x0, @void}, 0x10) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000000000000ff1d00000100000000000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000001c0)="b7bc0000de00"/16, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000012c0)="94a52cb0df7bca47fbf105808f3a4e453483d560e5079d77412e2edf8d53bf226f87d2f1493a136cfaca1efff3b14c2d62ecf824e99704e5b8543e21f05435982bfccb1105018fc0db25469ae56f271636b4ef34481d00fe8dcec10130fa6810a6849869bfec1db6369c02312fb6b40ade2408049f24c26b9b6c29597d7817b498d3cbd21d0a11bd019bbe45df2f146b0ae0ea4a6a77a3c5bd4ff2e1d1919ca4440cca5912e2e24268a63d7a082a0320a3641e0d9662dd5881b7018b9d385ecc3e49bc19267e8efc2a51e326efd2cef1f2f14095eae9e7cab15434594c2e5604a5f2fd73f7cc2cfd1c89864ceb8610f3f4070467eff1a68c0dd8e7acb8ef9bd0e05aa31e3581cd6a12acca568f5ca31db1b25caa9c277548995c6b2e7a0dcaec399b971b95b7ce96915de62323f88f2b32673b5ec6dfda1dae336175c12ac184a79ce15c677b3e2736c26cc5214be75dc64ab898dc1140ec97cd10c44c0a750ce2e81f713f3e085a72758ccbe4b7a5f9c1fc192133d41080827a4d975faa4b88ee270212299ddabd3d788c6635206c848d1bf9b47e986392473616d5c555a1bae97e3a35db727dd44fb1a7844943f07b6a49db4d2f171e827bb37a2de6d30956642757dfe28f6142549a1a04c8a9540802d2290a0c129eb66c31308ef69c94fdbd997e2231c98415746b99b3fd75f75e6945f82218e313dde9613a30c42d8bf0abf86a74c2a4f93f5479079fe0eaf0cbbc59eaaefc2f64df07817e53bdea903c1851457d0b918622306ae7c48989d4f7c4d717812cc595d82ac5d7af211c15d31f8883fd445b84c8aeff31fc5465a28fe4ee5183500e5ce0e977130db9f0557b03f3fb9714a7583bdd9c4e9ffe9a50aa8fb8480479ddb54989a1551a1ea4da148094ed635c47400a4ba0794149abd7ad75e74cebaa2d8393127c997cba6ab89880582cffb60d583eb88dd1fb44ec6bd86fd8b28252dc710aa211b2d87eb253960002b29a3a4cce551e7ee4aae39adee87b6d2bf704a4fafcaf7df3987ddf5eecdbcea546151dd09f512a770fbd0b079edea7e4e99ad48f4164664d6a44991a3b6b349f0a04fa257c8426db425ac84d2e55c90601d69ffd7af65604a5d73eb62e147873102c8b2b8f31eba76e268bdb832d58e62f67f25c377665c334f2e08d7ae9c24a0f4d59c3b161b111c336321009da23ef73efeae892a196ace9ecf03583e9880c86041d786e8cb3cea26a5d0e072d609d98bf89eff19849cbc8adc986894626d4debc477447a76fc57813aecf0c7cbbf2b4433664ef3dac153b6b0a307f4a5643b366e854b9557e41bac8a1c87fe239f10810f6f9f00cc8521d06baf94ec08e4af2c05b36e4802fdc968f24ab15921a24e66f4acc50cf6c1543542e23cd0f7d7f5595df6238753be328b8ea64eb08d58223df78af18d668003c645ec6f01c18dcbf5b17a9def30ceb97ad341584844681ce21237da12fff54c216641fb256ada9e89138e25114115bcd4e2c46b9013d837f23cb4198c161799e0bba89991cac7a18f8eb08d1a21018c0aaea3ef7bfe2e563f26137ad129be1d6f1c122bb024598b117e82a3d0ba8368cd4dcbbf1ddd43609b669fd80f00b078c8dfa99265872dea82945ac205c800e545182c04b605ea800a451209f0d7f1fe6952881ee9500b9360fc8fe13ef6fa96aa00e99156e9bd993c1c3c83e31698cfbaa1e1ccb72ded005b06932d78d5b6851b7566588070893c3cf76a4c086d649fb3b69392ba9807d802daf5518f049ad5fef2cdc98b55c692a82187274b40eb89d937182e44434d4383137b768a6a8644429d03735c9cf9a2f9ccd224cf0a5e46a4901cb168736e1bb1bef789b1f14a9375df44c9a1f82a5ad8c8c3591ce07a9d8acad192287a684989df36b93c3387036a913586840009514ec872d6c38ef7a5c5ac425a92c5eece95d18debbd4eddd3c9e3ff0788408466e5014622193104d0ecb8b0bcf6a50e46394e2f92f6b98792d17697ec67f3ea2459b867c22851fb40134dffcaa0eab6ef65a680281501f435519a5325c118473a820f85a9fa99b58965ad591839d7a22deb13a3255f2ff0cf658b8254a2b10768f8f9f5bca215823161a3ee0abafdbe74f0b43be4c2f4b4f5caa0a76b5e79b35c1b6929f93c4058418691fab26eff90fd012d7d2c8f2f6c9803f5bf0651e363de52e2b28c430f8c56bfe221ff7c313c15b8ad3b1a27bcc3c748ef4175e30ab1d5006e74048083558fd6580c25c189fd73a8defc4aaccb13062c3109921f70aca63114d0b42fbc375d5956f0374801dc0f12c96662079238728917049a9f0ae2c0e0ddab90dba28b0f3a0bdf146252df0d8a733657732eedd9b3a11440c0dedd0072fd57aba90e53685e8a1029a72fa569a30a3571f329de05feb73d7bb8cf30e61579115151c32f534173b6134a1aa368a904b356647e0272d7215c76f58d484d848afbb2260fa8c99f1f1df7dbd09b89fd53cbfb74b2fad7598db8a410a58dc8ba02be2cbcb4e32e4852bf80bb6a0d24489b5a58e026e702527033419c2c88dd194db1503317ff1749e5c266243ee3ced4e6102b51f994a7dc263ab270056d791d12f933779c5c777dec720c0deae2c4a005bff3092b5944829411977b882c95952006379b8854fc3d346f5de56cb43fc9bc8b5b2eb5f079ea6cca4cd441b4c5cbe4ee256c65d8dd02a5c87d0e0d26a47fe8676d922645f0de8ed5810c8cbdb7d64dcc4337fdcc789495333ccb392866efb9b683df3011bdf984009439b080f43225e108f0fadf93b23101c031a79dd6c79364cea03fa6e937308b4e63de818879ff36cc87694eef2b87de531c03c3818ba42de26bbda28a3036fb85ebc5f4e5326515e44d70030e254958698ec784e37f4a3ad33ea0ea44b8ab8870a902949f33de3544f295b04cafab987d294e4a73e0cc63007033d75492dc3a65172ba7ecc8daa2b240e42af64bca20f5b03e7a5e3d58f7bc283c8227281547d075c136fe3dc9feec43616cefe68d5680870c852dc3024c8566f82058e1fc3ab131493b07227c38ce6aab1cb06c1c5c468e10577d62f6ff15e2202d21bc541bab87cfe23702f3ece7e0e7a61c58eab4970afa005686d298691e5af3e8b9ae2742bd67ef697bb07de640068d6b14f9cb58a605bf93bda887e89b396d68aab6cba0db14688ea4633430713b3ee0f51644fd9132ec0c0ba046a9eb753302804fd8af31f904467ee34fd6e0bf15f1045050a2b5813fa7ff77d7191e2b85f1c552b51128bfbd9a6c809b8ca65e042bc87ebed29b4c6b4da3e72499c2f508877e0c228dfa619bcf0edc7e991028fd7673b0c41645b2b5953084c627654bbb7484046e319b3e073460eb75b4611b5ada89d7a6033a82e58f998822df033a63bf5029def2ad1fd9ae6b74528f9d560f6a4eb4526ef015081ffd32a79ab7ff52e8d696dedc4beb8974805c2a66a23ea7ab0e3e5019866a84823cb2f6f6033a3c38b07a82202f279f95869d0a23f17357311d18fc0caf71a7a915f70b9c9c408067d7ef369f9a6acb8b789bcde45e7406600e7333d9bdf1b8e8771bd0d666c73c1d6fca97518a5efac259c7f38ea7a7fdd7a7c38c93d86a5fe40035672f07027d1f7504f49a53368561cdd070d803fdbf3832c722f6b8c686752dc15f4bcc4d374b6c53cd12a11cd4d53cdaa3bc0301e4341f4c6f4e81cde317732cceea46c2a33dad7f46bfdc3a97f7fa566913976859e0cdec6ded091011767e9bcea4654b50137602584f15df22195dcecd1574c387136af896f840f793ca6ade84d2c374baa2368929799a9801c0ea9ff4e87ee2f59ea2f79c8f0ac649b6cd880852933455cfc0560ed5eacd68b25c3b9f4a67702a12b616fb193cb4556297d312711c11dc492d57da2d45ea88ca155eb56647a8f0ec842425c4aff1d82e8267a1b0148b95c2c41a1ebba99028bbec6403b1be1ce384f81461a25b8aa58194e22111e99b90a775cf063a0bb7c3cba47e2bb735847d9209406d9a9012da331a55c91c01715669ff0e77fe0b21553ae86201d0870b2e2c51b1415e559d28d08583849f2146146483e7fb9137961461fac2f3bfa96cc3a79e0e11fc410bd2976fd16f873f1d6a1f3382fd96acc6ba7df71a2865026977289234e4f39b712cc5f08268801a8d5af51f9d769159dcc692a6d977a50bb0fb3e62fa9f6f2c403d3245b0b75a243a5789a3113927cd020aaaa2434c696dfe0eefa776694968c05d023a7f1aa274db3f7a3c8509a8291652c0e6fa52bfd72b7c1afd7fb6da425e0a75fcbcf97d659a91c783530071b03976688abcde53fecc26a4011433a5262e22657ed36a06fbfa45940f7a4490c9fb102c1e9f06228530dcadb071dbb5bba360e9b2a00ab7f7b5fc45814fd008055bae42dee84a179017e154ed22d825ffc419cc46b9386897b3189df6f902dbbd405f729879022c471f1dcc28007bc40b878a149761e20ab2267c48bc82987532c67da067e0a97384fe559ce66679b65d233be83f4665f4b239b4d37c5f479600605659a0a43e7b91feb16a418edc085f4ce439cf65c3ce67aefea8ada9ba7b99c4383798bed45ec27e1b2566010e4247de78894670f7a1b4ce1174e20fc57f288ae9bac107948f760bee9a72d37d4aafcce0cdaf6bdd163481cdb2a416f94162542ef515e1a568505b3944cf2fe20b47f9f033f0830f7188549bf6fa0ffa1e729ee07e911e2dc187161cfbaafa8381452f5db7ff311012345179f9f58aaf21a0346d763878065260e8a28079a7048009ed8a20ba70986e9325eaa57efbde71c", 0xd50}], 0x1, 0x0, 0x0, 0x20008014}], 0x1, 0x4814) recvmmsg(0xffffffffffffffff, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000062c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x400001c3, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3m5.300421589s ago: executing program 32 (id=13): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x2, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0x6, 0x400, 0x6, 0x4c2336d3, 0x9, 0x0, 0xfffffff8, 0x80000401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xffffffff, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200046, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x6, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x4, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004040)={r5, 0xffffffffffffffff, 0x19, 0x0, @void}, 0x10) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000000000000ff1d00000100000000000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000001c0)="b7bc0000de00"/16, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000012c0)="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", 0xd50}], 0x1, 0x0, 0x0, 0x20008014}], 0x1, 0x4814) recvmmsg(0xffffffffffffffff, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000062c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x400001c3, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m37.900763756s ago: executing program 0 (id=76): r0 = socket$l2tp6(0xa, 0x2, 0x73) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x517, 0x40000028, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000600)={'#! ', './file0', [{}, {0x20, '#! '}, {0x20, '!'}, {0x20, '/\xed/L\x04(\\.-}\'&\xe4\x13\x13\xb9\xecTNB\x96\xa8\xd1\xeb\xa9\xbfO\xe6\xc9f&\x13\x8a\xc5\xd82`\xe8\xd9\xf8@\xae\'$\xd3\x16\xafF\xffFtQ\x9c\x15\xc4\x84\xfc\xa9\xa2:;\xc6\xc5\x99\v\x12hD\xf2\x90(\x92\xc2\xf1F%\t'}, {0x20, ')^@^+{\\-\'#/'}, {0x20, '\xff\xff'}, {0x20, '\x00'}, {0x20, '\xff\xff'}, {0x20, '+(-+^(:]\\'}, {0x20, '\'\xd0\xa5SV~`\x92\xa3Y[\xf7*\xb4\x93\x99z*\x8a [6g&\xa2\xc2F\xd4\x03\\\xb8\xe4\xc4\xe8vN.q\xa9\xffZ\x837\x0e\xf3\x86zo\xc5\xe6\x8bl\xcam\x15\xd7R\x87\xbb\\\xd5\xec\xad\x83\xd9|\xe8u\xc4@\x8ec|\x16\xec\xe2\xfb`&#/\xb8\xd5\xce\xa0\x01\x19^\xed\x8f\x06o`Z?\x87(2\xaa\x0f\x9d\xe9\xe7\xea/\x1b\xea[4#\xef\xb8\xc6!\x82\t\xf2<\x82P\xcaP^DS\xc98\xc4\xed\x11\x9e\xc3\xee\xd66\xa8~\xe2\xec%t`\x84\xa5N\x94\xa9v\xef55\xad\xcadw\x86\x87+\xc9\xea\xb2o\t\xf2\xef\x7f\x10\xcc\xca^\x0eb\v\xc3\xf5Th\xdc\xf8x\xbb\xdb\xd9\xd2'}, {0x20, '(#.('}, {0x20, '1*)[-/'}, {0x20, '\xf9%\x0f'}, {0x20, '\x1b\x01\x03d\xfd\xa8\xf1*\xbd\xdc\x15\xd9:\xea\x97E\xe6\x90\x80\x00\x94@\xd1\xcb\x92\xae3\xf4\xed\xd7|\x87;u\x19\x95\xba\xa3\x1dt\xfcM\xea\xd7\xde\x9f\xb9\xb2.\x17\xdf2l\xe8\xdf^\x95\x83eo\x81\x17\xde#t\t\xe6\x1e\xc3w\xa1\xbb\xe0$\xca\xa3\xa9\x92\x15zY\xc3I\vA9\xfd\xd4\xa0\x02a\x8f\xc0\x85\xbd\xdf\xb7\xc3+\xaa\xcb:\xe6J\xfa\xa8\x1en\xa7\x12\xd24\'\x8c\x12\x1b\x8a\xebb\x06\x96r_\xec\xc8\xf6\b\xc5\xd3\xf6\xe1y\xc4\x8e\n\xdd7\xc2koL+Tg\xcd\x12\xdd\xbd\x96\xe0U\xae\xc5\x86\xf5W\xf6V\xb9|\xc3FU\xde\xc6)\x0e\xf6n\xa2\xbc\x13nA{\r\x1d\xbeQ\xa3\x12I\xaf8<\x12\x8box\x11\xdd\xe1\xe1({'}, {0x20, '!'}]}, 0x20d) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x55}, 0x20) 2m36.913215851s ago: executing program 0 (id=79): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f000000b900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="ef5fb53657e2c1a0fe3a2cc40a09393b55e8156de01e8fa8dd04ec08cfcbea5becc95d2163a269425b6f9740bd26c9b632d798800ed767c8ff", 0x39}, {&(0x7f0000000300)="5c3b3e5beeb20179acd776f25596841abadc49dcb02773", 0x17}], 0x2, 0x0, 0x0, 0x4800}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)="35bd", 0x2}, {&(0x7f00000005c0)="b3c0a5", 0x3}], 0x2, 0x0, 0x0, 0x4000080}}], 0x2, 0x1) 2m36.776341503s ago: executing program 0 (id=81): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x1c, r4, 0x31, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000003}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x1000002, @private2, 0xffffffff}}, 0x8, 0x2}, 0x90) 2m35.043318224s ago: executing program 0 (id=84): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0xfffc}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) (async) r0 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000000)=r3, 0x8) (async) r4 = syz_io_uring_setup(0x2e7a, &(0x7f0000000000)={0x0, 0x97ac, 0x0, 0x2, 0x2a8}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r4, 0x332d, 0x2008e3d, 0x60, &(0x7f0000000100)={[0x100000001]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) 2m31.447400253s ago: executing program 0 (id=94): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x890) r3 = accept4(r0, 0x0, 0x0, 0x180800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) mmap$snddsp_status(&(0x7f0000a1f000/0x4000)=nil, 0x1000, 0x4, 0x30, r6, 0x82000000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m27.086667026s ago: executing program 0 (id=100): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000080)=[r2], 0x0, 0x0, 0x0, 0x0, 0x739}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0x2, @loopback, 0x200121}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401000015cc1c0059d16539563d2b4921f7baf35414088c041d21765efc3bf2e674f683b2babb3e82eaab3296b7f53ec74064af1b2c6309a8549f2680c53c5412e6f2fe4595d145a65258114b7767498d0cfadad62c00e0438adbeb679a200de6d49876fefe6b4aae84bcd62162bba9e8d9b1a4f44d45f164c9eee28ebf7779bbaed1b747c92da78e17a792ef6cdea8c9b5ec1a2752d88762fd3f1872386609de5a40c5ee15d8b2d84d3c84330180552ed378866690426d68823d34ad3848"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000200)={0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000001c0)={0x1, 0xb2, 0x5, &(0x7f0000000180)={0x16, "247f23e017bb456c5c4b7165a6d6af0b920bf04121f03300"}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x48b, 0x0, 0xb9}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) 2m11.409399703s ago: executing program 33 (id=100): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000080)=[r2], 0x0, 0x0, 0x0, 0x0, 0x739}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0x2, @loopback, 0x200121}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401000015cc1c0059d16539563d2b4921f7baf35414088c041d21765efc3bf2e674f683b2babb3e82eaab3296b7f53ec74064af1b2c6309a8549f2680c53c5412e6f2fe4595d145a65258114b7767498d0cfadad62c00e0438adbeb679a200de6d49876fefe6b4aae84bcd62162bba9e8d9b1a4f44d45f164c9eee28ebf7779bbaed1b747c92da78e17a792ef6cdea8c9b5ec1a2752d88762fd3f1872386609de5a40c5ee15d8b2d84d3c84330180552ed378866690426d68823d34ad3848"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000200)={0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000001c0)={0x1, 0xb2, 0x5, &(0x7f0000000180)={0x16, "247f23e017bb456c5c4b7165a6d6af0b920bf04121f03300"}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x48b, 0x0, 0xb9}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) 13.647250895s ago: executing program 2 (id=422): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @broadcast}}}, 0x84) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000240)=[0x5, 0xdbb5, 0x40]) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000010000085000000500000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="52fb64364baa3f901787a470c8b8767a87fb253f9cb6730f011facb0c2b0800a9976b7fd8a3083ebc241", @ANYRES32, @ANYRES8], 0x34}, 0x1, 0x0, 0x0, 0x4b9702dee4ac411b}, 0x4004854) 12.299321224s ago: executing program 5 (id=426): socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, 0x0, 0x20005004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x6) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x0, 0x2}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000001700)={0x72, [[0xa0000000, 0x8001, 0x9, 0x0, 0x7, 0x1ff, 0x7, 0xd], [0x401, 0x6, 0x42ba, 0x0, 0x9, 0xfffffff3, 0x8001, 0x10], [0x841, 0x1000005, 0x5, 0x7, 0x4, 0x504, 0xfffffffb, 0x7]], '\x00', [{0x3, 0xa14d, 0x1, 0x1, 0x1, 0x1}, {0x10, 0x7, 0x1, 0x0, 0x1}, {0x9, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x0, 0x1}, {0x9, 0xfff, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x3, 0x1, 0x1}, {0x8002, 0x2}, {0x10000, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7, 0xffff0000, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x200, 0x1, 0x1, 0x1}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003f8004002280080003004700000008003e00"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) rt_tgsigqueueinfo(0x0, 0x0, 0x3d, &(0x7f00000002c0)={0x2a, 0xe, 0x1e}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x20000080) r7 = fcntl$dupfd(r6, 0x406, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f6ea088a", @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000040008801400020077673000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000240)={{0x2, 0x7b}, {0x8a, 0x7f}, 0x6ad0f64e, 0x7, 0xec}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 11.387228751s ago: executing program 5 (id=427): r0 = socket$packet(0x11, 0x2, 0x300) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r4) shmdt(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x100, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {0x8}, {0xc, 0xffff}, {0x10, 0x4}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xab84}]}, 0x34}, 0x1, 0x0, 0x0, 0x18014041}, 0x200008c0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) 8.289612231s ago: executing program 2 (id=439): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x1c, 0x0, 0x31, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000003}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x1000002, @private2, 0xffffffff}}, 0x8, 0x2}, 0x90) 8.196070339s ago: executing program 3 (id=441): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) r0 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x101040, 0x41) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000680)=""/44, 0x2c}], 0x1, 0xe0f, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) fsopen(&(0x7f00000000c0)='ocfs2\x00', 0x0) 8.119163448s ago: executing program 4 (id=442): syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000440)=[{0x5, 0x0, 0x0, 0x0}, {0x8, 0xd210, 0x0, &(0x7f0000000340)}], 0x2}) 8.004004442s ago: executing program 3 (id=443): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04070620"], 0x7) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c000200180015801400"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 7.751548795s ago: executing program 3 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd29, 0x25dedbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20008880) (fail_nth: 4) 7.293025273s ago: executing program 3 (id=445): socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000891}, 0x20004044) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200500, 0x0) connect$inet6(r1, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r1, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x12, 0x1, 0x0}, &(0x7f0000000300)=0x40) (fail_nth: 4) 6.26961377s ago: executing program 3 (id=447): pwritev(0xffffffffffffffff, &(0x7f0000002700)=[{0x0}], 0x1, 0x0, 0x4) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x1, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) 5.207095336s ago: executing program 3 (id=449): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @broadcast}}}, 0x84) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000240)=[0x5, 0xdbb5, 0x40]) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000010000085000000500000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="52fb64364baa3f901787a470c8b8767a87fb253f9cb6730f011facb0c2b0800a9976b7fd8a3083ebc241", @ANYRES32, @ANYRES8], 0x34}, 0x1, 0x0, 0x0, 0x4b9702dee4ac411b}, 0x4004854) 4.497547409s ago: executing program 6 (id=450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd29, 0x25dedbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x1000000, 0x0, 0x20000050}, 0x20008880) 4.40096242s ago: executing program 6 (id=451): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x13, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="000976000000763085262928f95d38909e1db88ee37c172c0486fef0616d6ca79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd4b2f1a4a63c8489cad1c191f9313389d889ee1ab15"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) (async) splice(r1, 0x0, r3, 0x0, 0x7fff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) (async) unshare(0xa000200) (async) r4 = semget$private(0x0, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000002340)=@ethtool_gfeatures}) (async) semtimedop(r4, &(0x7f0000000340)=[{0x1, 0x401}, {0x0, 0x2, 0x1800}, {0x2, 0x89, 0x800}], 0x3, 0x0) (async) unshare(0x20060400) 4.307042954s ago: executing program 2 (id=452): getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x7, &(0x7f0000006680)) r0 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 4.236505602s ago: executing program 5 (id=453): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) r0 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x101040, 0x41) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000680)=""/44, 0x2c}], 0x1, 0xe0f, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) fsopen(&(0x7f00000000c0)='ocfs2\x00', 0x0) 3.909113309s ago: executing program 6 (id=454): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x890) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04070620"], 0x7) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c000200180015801400"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 3.860608189s ago: executing program 5 (id=455): r0 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x3, 0x5}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44, 0x0, 0x2}, 0x28) 3.776579246s ago: executing program 6 (id=456): syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, 0x0) 3.691126093s ago: executing program 5 (id=457): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000300)={0x0, @motion_det}) 3.69079839s ago: executing program 2 (id=458): syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0cc7a14c644e86dd6008120000242b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa"], 0x0) 3.497881366s ago: executing program 2 (id=459): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) 3.31717213s ago: executing program 4 (id=460): r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0xfffffffffffffffc, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 3.085711179s ago: executing program 4 (id=461): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001040)=@req={0x3, 0x10, 0x3b, 0x7fff}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, 0x0, &(0x7f0000001180)=0x59) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_snmp6\x00') ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000003f80)={{0x1, 0x0, 0x9, 0x5, 0x3, 0x5bf}, 0x390, [0x2, 0x401, 0x10000, 0xfb2f, 0x100, 0x4, 0x0, 0xfffffffd, 0x8f00, 0x7ff, 0x42, 0x800, 0x1, 0xffffffff, 0xe, 0x6, 0x1, 0x4, 0x7ff, 0x7f, 0x7, 0x10d2dc0f, 0x5d8, 0x4, 0x3, 0x2, 0x8, 0x0, 0x3, 0x1ff, 0x3, 0x8, 0x4, 0x1, 0x2, 0x1, 0x6, 0x0, 0xfffffff9, 0x8, 0xe, 0xfffffffd, 0x5, 0x71a1, 0x5, 0x1, 0x1, 0x2, 0x7bb0, 0x2, 0xe6, 0x7, 0xffffff7b, 0xfffff41b, 0x3, 0x4, 0x3, 0xc15, 0x7fffffff, 0x8, 0x400, 0x40, 0x8059, 0x100, 0x5, 0x9, 0x7, 0x98, 0x7e, 0x7, 0x3, 0x4, 0x3, 0xfffffffd, 0x6, 0x61, 0x9, 0x4652, 0x7, 0x8, 0xa, 0xaf9, 0x9, 0x4, 0x6, 0x7, 0xffff, 0x0, 0x6, 0x0, 0x926, 0xd, 0x0, 0x6, 0x9, 0x401, 0x7, 0x8, 0x7fffffff, 0x3, 0x400, 0x1eb8, 0xe, 0x7, 0x8, 0xf, 0x8, 0x101, 0x7ff, 0x10, 0x3, 0x401, 0x1, 0x400, 0x5, 0x9, 0x7, 0x0, 0x3, 0x9, 0x8000, 0x0, 0x4, 0xffffffff, 0x3, 0x7, 0x9, 0x5, 0x8, 0x100, 0x34, 0x1, 0x1, 0x3, 0x200, 0x1ff, 0x10000, 0x5, 0x4, 0x8, 0x4, 0x5, 0x80000000, 0x67, 0x7, 0x8, 0x3, 0xfffffff9, 0x800, 0xbad, 0x7, 0x42, 0x3, 0x39a, 0x80000001, 0x0, 0x3, 0x2, 0x5, 0x7, 0x79, 0x9ef, 0x0, 0xc0000000, 0x1, 0x29, 0x8, 0xf, 0x7, 0x2, 0x4, 0xa3, 0x8, 0x0, 0x93, 0x6, 0xffffff00, 0x0, 0x7e97d6e4, 0x6, 0x5, 0x642, 0x0, 0x8000, 0x0, 0x2a0, 0x2, 0x5, 0x6e, 0x3, 0x101, 0xffffff0a, 0x4, 0x8, 0x3ff, 0x4, 0x4, 0xfb, 0x1d6340f6, 0xe57, 0x8, 0x7, 0x45, 0x3, 0xfffffff9, 0x10000, 0x8, 0x10, 0x28f, 0x7, 0x1, 0x8, 0x9, 0x0, 0xfffffff8, 0x7, 0x6, 0x9, 0xfffffffe, 0x5d, 0xc, 0xe, 0xf, 0x8, 0x5, 0x7, 0x4, 0x2, 0xffff7fff, 0xd55f, 0x9, 0xa, 0x1ff, 0x5, 0x6, 0x1, 0x8, 0xfffffffd, 0x5, 0x4, 0x2, 0x3, 0x10000, 0x1, 0x8001, 0x7, 0x7ff, 0xa60, 0xcb, 0x7ff, 0x3, 0x101, 0x6, 0xfffffff9, 0x5, 0x240, 0xbf, 0x9, 0x9, 0x7, 0xfffffffa, 0x9, 0x8, 0x7f, 0x74b8, 0x5, 0xffffffff, 0x2, 0x6, 0xe, 0x6, 0x3ff, 0xf7, 0x1, 0xa0, 0x7, 0x7, 0x953, 0x6, 0x400, 0x1, 0x1000, 0x6, 0x2d, 0xc965, 0xfffffffb, 0xfabc, 0x2, 0x8, 0x6, 0x7, 0x4, 0x818, 0x7ff, 0x5, 0x4, 0x5, 0x4, 0x0, 0x4, 0x0, 0x1c4, 0xd, 0x4, 0xa608, 0x80000001, 0xffffff68, 0x8, 0x4, 0x8, 0x31, 0xffff9af0, 0x0, 0x3, 0xfffffe01, 0x3, 0x4, 0x1, 0xc, 0x100, 0x8, 0x5f0, 0x7, 0x9, 0xfb47, 0xa3a1, 0xfffffffc, 0x1f00, 0x0, 0x1ff, 0x3, 0x5, 0x8891, 0x7, 0x1ff, 0x9, 0x401, 0x2, 0x400, 0x7, 0x9, 0x9, 0x6, 0xfffffff8, 0x3, 0x1000, 0x81, 0x4, 0x3, 0x2, 0x5, 0xb743, 0x4, 0x1106, 0xfffffff8, 0xb, 0x1ff, 0x0, 0x10, 0xbe8e, 0x0, 0x9, 0x7fffffff, 0x3, 0x4, 0x22a, 0x4800000, 0x80, 0x3, 0x4, 0x2, 0x7, 0x9, 0x9, 0x5, 0x5, 0x7, 0x10000, 0xe354, 0x2, 0x3, 0x9, 0x0, 0x4, 0x0, 0x5, 0x82e, 0x0, 0x5, 0x8, 0x0, 0x1, 0x1800, 0xffffff74, 0x8, 0x2, 0x80, 0xe1, 0x76e, 0x1, 0x80000000, 0x80000000, 0x2, 0x3, 0x10001, 0x5, 0xb, 0x7, 0x0, 0xf, 0x5, 0xff, 0xc, 0x6, 0x8, 0x7, 0x80000001, 0x4, 0x7, 0x1, 0x6, 0x3b, 0x4, 0xffff, 0x81, 0x9, 0xcf, 0x4, 0x5, 0x6, 0x4, 0x6, 0x1, 0x6, 0x2b, 0xa, 0x7f, 0x8, 0x3ff, 0x100, 0xfff, 0xffffd579, 0x4, 0x1, 0x7, 0x7, 0xfffffff9, 0x6, 0x8, 0x3, 0x1, 0x8, 0xc8, 0xffffffff, 0x5, 0x8, 0x585f, 0x9, 0x7fffffff, 0x7ff, 0xcfd, 0x4, 0x8, 0x8, 0x0, 0x0, 0x3ff, 0x1, 0x3, 0x7fffffff, 0x9, 0x3, 0x56149100, 0xdac, 0x2, 0x4, 0x7, 0xb, 0x8, 0x6, 0x2, 0x5, 0x800, 0x1, 0x5, 0x8, 0xb17, 0x4, 0x4b2edfbd, 0x8, 0x4, 0x4, 0x2e7, 0x3, 0x4b, 0x80000001, 0x2, 0x100, 0x5, 0x0, 0xf, 0x3, 0x5, 0x1, 0x6, 0x1, 0x1, 0xdc9, 0x9, 0x6, 0x5, 0x1, 0x6, 0x2, 0xd, 0x6, 0x9, 0xb, 0x400, 0x2, 0x0, 0x1, 0x8, 0x2, 0x3, 0x8, 0x7364, 0xf0ba, 0x4, 0xfffffff7, 0x8, 0x0, 0x200, 0x100, 0x7, 0x0, 0x401, 0xa, 0x2, 0x6, 0x3e0, 0x7, 0x101, 0x4, 0x6, 0x6, 0x10, 0x7fff, 0xb, 0xf, 0x2, 0x0, 0x9, 0xfffffc01, 0x5, 0xfc97, 0x802000, 0x615, 0x9, 0x100, 0x7ff, 0x1ff, 0x2db0, 0xffffff5b, 0x10001, 0x1ff, 0x9, 0x800, 0x5, 0x7ff, 0x1000, 0xae, 0x3, 0x80000000, 0x1, 0xfffffe00, 0xfffffff9, 0x6, 0x1, 0x0, 0x9, 0x6, 0x80000001, 0x400, 0x3, 0x1, 0x5, 0x0, 0x3467d2eb, 0x1, 0xfffffff9, 0x20, 0xe71d, 0x33619cd4, 0x79d, 0x8, 0x2e, 0x0, 0x5, 0x9, 0x1e, 0xbee, 0x10000, 0x6, 0x4, 0xf0d, 0xe4b4, 0xff, 0x3, 0x1, 0x6, 0x0, 0x800, 0xc, 0x0, 0xb7, 0x4, 0x5, 0x1, 0x7fff, 0x1, 0x2, 0xfffffffa, 0x0, 0x4, 0x4, 0xc6, 0x1ff, 0x2, 0x8, 0x2, 0x793b, 0x0, 0x9, 0x9, 0x3ff, 0xa, 0x5, 0x1e02, 0x504, 0x40000000, 0x5, 0xb, 0xe49, 0x1, 0x2, 0x0, 0x7f, 0x6, 0xffffff81, 0x5, 0x57ac, 0xffff89a6, 0x8000, 0x4, 0x3, 0x8b87, 0x1, 0x4, 0x7f, 0x1, 0x6, 0x2, 0x8, 0x9, 0x5, 0x4, 0x10000, 0xf9, 0x400, 0x2, 0x8, 0x1000, 0xfffffff8, 0xfffffffd, 0x4, 0x0, 0x7, 0x5, 0x6, 0x2, 0x6, 0x3, 0x2, 0x100, 0x61d7e0d4, 0xeb0, 0xfffffffc, 0x8, 0xff, 0x7, 0x2, 0x81, 0xfd7, 0x81, 0x80000000, 0x2, 0xc, 0x2280, 0x0, 0x0, 0x1, 0x7ac, 0xa23, 0xffff, 0x7c000000, 0x5, 0x4, 0x8001, 0x1, 0xffff, 0x0, 0x2, 0x6, 0xb2e7, 0xd, 0x94ed7941, 0x8, 0xfffffff9, 0x9, 0x4, 0x7, 0x349c46ed, 0xc, 0x7, 0x1, 0x3, 0x95da, 0x2, 0x2, 0x5, 0x3bced860, 0x6, 0x2, 0x2, 0x3, 0x3, 0x8000, 0x0, 0x80000001, 0x7fffffff, 0x9, 0x7, 0x78, 0x9, 0x1, 0x2, 0xddda, 0x8000, 0x8, 0x8, 0xe7, 0x4, 0xd7, 0x3, 0x8, 0x7, 0xa, 0x45, 0x3, 0x4, 0x0, 0x5, 0x40, 0xb9, 0x0, 0x9, 0x7, 0x7, 0x8, 0x0, 0x7, 0x40, 0xdbde, 0x0, 0x4, 0x3, 0x8, 0x0, 0x80, 0x200, 0x1, 0x6, 0x2, 0x3289, 0x8, 0x2, 0x7, 0x8, 0x5, 0x1, 0x7, 0x1, 0x40, 0x0, 0x0, 0x8, 0x0, 0x1ff, 0x3, 0xcc5b, 0x0, 0x7f, 0x10001, 0x100000, 0x2, 0x8, 0x9259, 0x7, 0x401, 0xd50f, 0x1, 0xc6, 0x3, 0x4, 0x3, 0x2, 0x8000, 0x6afc425c, 0x0, 0x4, 0x9, 0x6, 0x7f, 0x6, 0x1, 0x9, 0x2, 0xf6d0, 0x7, 0xfffeffff, 0x3ff, 0x8, 0x3, 0x7, 0x5, 0xfffffffe, 0x4, 0xffff, 0x4, 0x4, 0x2, 0x1, 0x1, 0x1, 0x3, 0xffff, 0x6, 0x1, 0x6, 0x6, 0x7, 0x6, 0xe12, 0x7, 0xfffff000, 0xbe60, 0x9, 0x3, 0x10, 0xa0, 0x1000, 0x0, 0x6, 0x0, 0x74c, 0x7b, 0x2, 0x2, 0xea4, 0x8, 0x1, 0x2, 0x2, 0x10001, 0x9, 0x4, 0x7fffffff, 0x0, 0xb2, 0x9, 0x7, 0x4, 0x9, 0x80000000, 0x4, 0x8, 0xffffffff, 0x80000000, 0x7f, 0x0, 0x81, 0x7fffffff, 0x8, 0x3, 0x1, 0x8, 0x0, 0x401, 0x5, 0x4, 0x0, 0x7, 0x1, 0x1, 0xffffffff, 0x8, 0x0, 0x7ff, 0x4, 0x0, 0x9d86, 0xc, 0x5, 0xfffff804, 0x8fb, 0xc, 0x0, 0x3ff, 0xfffffffc, 0x4, 0x10, 0x5, 0xbad7, 0x1, 0xfffffffd, 0xe0, 0x8d73, 0x10000, 0x3ff, 0xf, 0x200, 0x5, 0x4, 0xd7c00000, 0x39e, 0xd8, 0x0, 0xcf72, 0x4, 0x8b4, 0x3, 0xa578, 0xfffffff7, 0x0, 0x100, 0x2c6, 0x8001, 0x3e, 0x3, 0xffffffff, 0x7fff, 0xf6d, 0x2, 0x9, 0x0, 0x8, 0x20000, 0xffff0001, 0x9, 0xea, 0x22e8, 0x5, 0x5, 0x401, 0x0, 0xda5, 0x25e7, 0xa, 0x8, 0x3, 0x8, 0x71b, 0x3, 0x8000, 0xffff, 0x1, 0x1000, 0x81ac, 0x8, 0xd, 0x1, 0xf, 0x8, 0x400, 0x2, 0x4, 0x2, 0x7f, 0x83f9, 0xffff, 0x8, 0x1, 0x9, 0x4, 0x5, 0x10000, 0x7, 0xffffffff, 0x8001, 0x5, 0x5, 0x9, 0xfffffff1, 0xffffffff, 0x2, 0x2, 0x1, 0x8, 0x40, 0x0, 0x400, 0x6, 0x401, 0x0, 0x5, 0x5, 0x80000000, 0x4, 0xb, 0x3e, 0x6, 0x4, 0x5]}) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) r3 = io_uring_setup(0x10da, &(0x7f0000000080)={0x0, 0xec1d, 0x80, 0x0, 0x28e}) r4 = syz_io_uring_setup(0x5576, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0x0, 0x0, r3}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000010300)=[{0x0}, {&(0x7f0000010380)=""/47, 0x2f}], 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0xfffffffc, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000580)={""/32, 0x0, 0x0, 0xfffffffffffffcc3, 0x0, 0xffffffffffffffff}) 2.326266549s ago: executing program 6 (id=462): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0xa, 0x1, 0x4, 0x8, 0x4, {0x77359400}, {0x0, 0xc, 0xf8, 0x7, 0x6, 0x0, "03001c46"}, 0x10000, 0x2, {0x0}, 0x1}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000080000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="0a00f1470a004000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r3, 0x4}, 0x38) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) fchmod(r4, 0x16d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000100)=0x8, 0x4) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r7, 0x4b72, &(0x7f0000000040)={0x2, 0x80, 0x0, 0xffffffff, 0x17}) 2.237770445s ago: executing program 4 (id=463): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mlockall(0x7) exit(0x7fffffffffffffff) munlockall() madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 1.880263415s ago: executing program 2 (id=464): syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000440)=[{0x5, 0x0, 0x0, 0x0}, {0x8, 0xd210, 0x5d, &(0x7f0000000340)="88da8179d2ae022b06ee872a0f153dc4a5f648acc8ad974cc9d89c0c4b71c4d1c30e2201c103829aaf5ba6b39196333dd82a402e8e64ce4384a42ce83795f42f77d1c0f95b9cf0c473c3c0e8d9842b05a6bdd8feb1ae1eb8771fef85c8"}, {0x9, 0x1, 0x0, 0x0}], 0x3}) 1.543302117s ago: executing program 5 (id=465): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e2a, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@private=0xa010100, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0xfffffffc, 0x3, 0x3, 0xba, 0x0, 0x8000000}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0ff5000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfe) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/216, 0xd8}], 0x1) 323.038758ms ago: executing program 6 (id=466): mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) readahead(0xffffffffffffffff, 0xfffffffffffffff9, 0xcb5b) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @vbi={0x0, 0x0, 0x6, 0x47504a50, [0x80000000, 0xfffffff9], [0x2000005, 0x5], 0x2}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) sync_file_range(r3, 0x0, 0x5, 0x7) 209.137772ms ago: executing program 4 (id=467): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x890) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04070620"], 0x7) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c000200180015801400"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 0s ago: executing program 4 (id=468): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)='=L', 0x2}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e24, 0x1, @private1, 0x2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='s', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd611, 0x10000006, 0x9, 0x0, 0x8000, 0x0, 0xee00, 0xee00, 0x3ff, 0x1}}, {0x0, 0x4}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) kernel console output (not intermixed with test programs): b: bulk message failed: -22 (1/0) [ 103.856221][ T5883] dw2102: command 0x51 transfer failed. [ 103.863653][ T5971] FAULT_INJECTION: forcing a failure. [ 103.863653][ T5971] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.863700][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 103.863724][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 103.863742][ T5971] Call Trace: [ 103.863750][ T5971] [ 103.863762][ T5971] dump_stack_lvl+0xe8/0x150 [ 103.863799][ T5971] should_fail_ex+0x46b/0x600 [ 103.863834][ T5971] _copy_to_user+0x31/0xb0 [ 103.863863][ T5971] simple_read_from_buffer+0xe1/0x170 [ 103.863885][ T5971] proc_fail_nth_read+0x1be/0x230 [ 103.863913][ T5971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.863943][ T5971] ? rw_verify_area+0x2ac/0x4e0 [ 103.863966][ T5971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.863994][ T5971] vfs_read+0x212/0xa70 [ 103.864025][ T5971] ? __pfx_vfs_read+0x10/0x10 [ 103.864053][ T5971] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 103.864079][ T5971] ? lockdep_hardirqs_on+0x7a/0x110 [ 103.864103][ T5971] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 103.864127][ T5971] ? mutex_lock_nested+0x152/0x1d0 [ 103.864146][ T5971] ? fdget_pos+0x252/0x320 [ 103.864174][ T5971] ksys_read+0x156/0x270 [ 103.864201][ T5971] ? __pfx_ksys_read+0x10/0x10 [ 103.864236][ T5971] do_syscall_64+0xe2/0xf80 [ 103.864262][ T5971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.864280][ T5971] ? trace_irq_disable+0x37/0x100 [ 103.864300][ T5971] ? clear_bhb_loop+0x60/0xb0 [ 103.864323][ T5971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.864343][ T5971] RIP: 0033:0x7f8255f5b58e [ 103.864365][ T5971] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.864381][ T5971] RSP: 002b:00007f82541f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.864401][ T5971] RAX: ffffffffffffffda RBX: 00007f82541f66c0 RCX: 00007f8255f5b58e [ 103.864415][ T5971] RDX: 000000000000000f RSI: 00007f82541f60a0 RDI: 0000000000000005 [ 103.864427][ T5971] RBP: 00007f82541f6090 R08: 0000000000000000 R09: 0000000000000000 [ 103.864439][ T5971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.864451][ T5971] R13: 00007f8256216038 R14: 00007f8256215fa0 R15: 00007fffb84219f8 [ 103.864482][ T5971] [ 104.017264][ T5807] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.166105][ T5807] usb 3-1: Using ep0 maxpacket: 32 [ 104.168533][ T5807] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 104.168559][ T5807] usb 3-1: config 0 has no interface number 0 [ 104.183580][ T5807] usb 3-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=fe.bb [ 104.183610][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.183629][ T5807] usb 3-1: Product: syz [ 104.183643][ T5807] usb 3-1: Manufacturer: syz [ 104.183657][ T5807] usb 3-1: SerialNumber: syz [ 104.241868][ T3505] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.278434][ T5807] usb 3-1: config 0 descriptor?? [ 104.292098][ T5883] DVB: Unable to find symbol ds3000_attach() [ 104.292112][ T5883] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 104.298040][ T5807] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 104.507335][ T61] Bluetooth: hci2: command tx timeout [ 104.576134][ T5883] rc_core: IR keymap rc-su3000 not found [ 104.576155][ T5883] Registered IR keymap rc-empty [ 104.606003][ T5883] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 104.632941][ T5883] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6 [ 104.654457][ T5883] dvb-usb: schedule remote query interval to 150 msecs. [ 104.654481][ T5883] dw2102: su3000_power_ctrl: 0, initialized 1 [ 104.654494][ T5883] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 104.694804][ T5883] usb 4-1: USB disconnect, device number 2 [ 104.792906][ T5807] gspca_nw80x: reg_w err -71 [ 104.793017][ T5807] nw80x 3-1:0.136: probe with driver nw80x failed with error -71 [ 104.836923][ T5807] usb 3-1: USB disconnect, device number 3 [ 105.069267][ T5883] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 105.156378][ T809] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.242921][ T3505] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.308069][ T809] usb 5-1: Using ep0 maxpacket: 32 [ 105.312053][ T809] usb 5-1: config 0 has an invalid interface number: 76 but max is 0 [ 105.312080][ T809] usb 5-1: config 0 has no interface number 0 [ 105.337465][ T809] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 105.337497][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.337518][ T809] usb 5-1: Product: syz [ 105.337532][ T809] usb 5-1: Manufacturer: syz [ 105.337547][ T809] usb 5-1: SerialNumber: syz [ 105.344615][ T809] usb 5-1: config 0 descriptor?? [ 105.412712][ T809] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 105.412764][ T809] dw2102: su3000_power_ctrl: 1, initialized 0 [ 105.412784][ T809] dvb-usb: bulk message failed: -22 (2/0) [ 105.532174][ T809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.533120][ T809] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 105.533177][ T809] usb 5-1: media controller created [ 105.533203][ T809] dvb-usb: bulk message failed: -22 (6/0) [ 105.533218][ T809] dw2102: i2c transfer failed. [ 105.533236][ T809] dvb-usb: bulk message failed: -22 (6/0) [ 105.533249][ T809] dw2102: i2c transfer failed. [ 105.533265][ T809] dvb-usb: bulk message failed: -22 (6/0) [ 105.533279][ T809] dw2102: i2c transfer failed. [ 105.533295][ T809] dvb-usb: bulk message failed: -22 (6/0) [ 105.533308][ T809] dw2102: i2c transfer failed. [ 105.533324][ T809] dvb-usb: bulk message failed: -22 (6/0) [ 105.533337][ T809] dw2102: i2c transfer failed. [ 105.533353][ T809] dvb-usb: bulk message failed: -22 (6/0) [ 105.533366][ T809] dw2102: i2c transfer failed. [ 105.533376][ T809] dvb-usb: MAC address: 02:02:02:02:02:02 [ 105.636726][ T5983] dvb-usb: bulk message failed: -22 (3/0) [ 105.636746][ T5983] dw2102: i2c transfer failed. [ 105.636754][ T5983] dw2102: i2c wr: len=176 is too big! [ 105.636754][ T5983] [ 105.707205][ T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.328564][ T809] dvb-usb: bulk message failed: -22 (3/0) [ 106.328587][ T809] dw2102: command 0x0e transfer failed. [ 106.328604][ T809] dvb-usb: bulk message failed: -22 (3/0) [ 106.328619][ T809] dw2102: command 0x0e transfer failed. [ 106.504135][ T5995] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.590903][ T61] Bluetooth: hci2: command tx timeout [ 106.636208][ T809] dvb-usb: bulk message failed: -22 (3/0) [ 106.636230][ T809] dw2102: command 0x0e transfer failed. [ 106.636239][ T809] dvb-usb: bulk message failed: -22 (3/0) [ 106.636253][ T809] dw2102: command 0x0e transfer failed. [ 106.636262][ T809] dvb-usb: bulk message failed: -22 (1/0) [ 106.636276][ T809] dw2102: command 0x51 transfer failed. [ 106.656138][ T5882] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.769770][ T809] DVB: Unable to find symbol ds3000_attach() [ 106.769786][ T809] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 106.846064][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 106.871745][ T5882] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.871771][ T5882] usb 3-1: config 0 has no interface number 0 [ 106.871814][ T5882] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.871841][ T5882] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.871877][ T5882] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 106.871898][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.942321][ T5882] usb 3-1: config 0 descriptor?? [ 107.719104][ T809] rc_core: IR keymap rc-su3000 not found [ 107.719125][ T809] Registered IR keymap rc-empty [ 107.767459][ T6007] syz.4.32 uses obsolete (PF_INET,SOCK_PACKET) [ 107.801537][ T809] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 107.878193][ T809] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input7 [ 107.914169][ T809] dvb-usb: schedule remote query interval to 150 msecs. [ 107.914195][ T809] dw2102: su3000_power_ctrl: 0, initialized 1 [ 107.914208][ T809] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 107.970727][ T809] usb 5-1: USB disconnect, device number 2 [ 108.175172][ T5882] uclogic 0003:28BD:0071.0002: pen parameters not found [ 108.175208][ T5882] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring [ 108.233505][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 108.286523][ T809] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 108.404286][ T6011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.478091][ T3505] bridge_slave_1: left allmulticast mode [ 108.478211][ T3505] bridge_slave_1: left promiscuous mode [ 108.500594][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.666056][ T61] Bluetooth: hci2: command tx timeout [ 108.677589][ T3505] bridge_slave_0: left allmulticast mode [ 108.677619][ T3505] bridge_slave_0: left promiscuous mode [ 108.677846][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.897447][ T809] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.056034][ T809] usb 1-1: Using ep0 maxpacket: 8 [ 109.075629][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.075664][ T809] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.075705][ T809] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 109.075727][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.127991][ T809] usb 1-1: config 0 descriptor?? [ 109.569490][ T809] cougar 0003:060B:700A.0003: item fetching failed at offset 0/3 [ 109.570449][ T809] cougar 0003:060B:700A.0003: parse failed [ 109.570555][ T809] cougar 0003:060B:700A.0003: probe with driver cougar failed with error -22 [ 109.586778][ T9] usb 3-1: USB disconnect, device number 4 [ 109.782093][ T809] usb 1-1: USB disconnect, device number 3 [ 110.511273][ T6036] kAFS: No cell specified [ 111.712528][ T6043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.45'. [ 111.735276][ T6043] netlink: 112 bytes leftover after parsing attributes in process `syz.2.45'. [ 111.837116][ T3505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.918915][ T3505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.960068][ T3505] bond0 (unregistering): Released all slaves [ 112.012245][ T6031] ªªªªªª: renamed from vlan0 (while UP) [ 112.252134][ T1245] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.458009][ T1245] usb 1-1: Using ep0 maxpacket: 32 [ 112.658024][ T6058] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.778863][ T1245] usb 1-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 112.778893][ T1245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.778913][ T1245] usb 1-1: Product: syz [ 112.778928][ T1245] usb 1-1: Manufacturer: syz [ 112.778943][ T1245] usb 1-1: SerialNumber: syz [ 113.089007][ T1245] usb 1-1: config 0 descriptor?? [ 113.109913][ T1245] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 113.109962][ T1245] dw2102: su3000_power_ctrl: 1, initialized 0 [ 113.109981][ T1245] dvb-usb: bulk message failed: -22 (2/0) [ 113.148362][ T1245] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.150424][ T1245] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 113.150481][ T1245] usb 1-1: media controller created [ 113.150507][ T1245] dvb-usb: bulk message failed: -22 (6/0) [ 113.150521][ T1245] dw2102: i2c transfer failed. [ 113.150538][ T1245] dvb-usb: bulk message failed: -22 (6/0) [ 113.150551][ T1245] dw2102: i2c transfer failed. [ 113.150568][ T1245] dvb-usb: bulk message failed: -22 (6/0) [ 113.150581][ T1245] dw2102: i2c transfer failed. [ 113.150598][ T1245] dvb-usb: bulk message failed: -22 (6/0) [ 113.150611][ T1245] dw2102: i2c transfer failed. [ 113.150627][ T1245] dvb-usb: bulk message failed: -22 (6/0) [ 113.150641][ T1245] dw2102: i2c transfer failed. [ 113.150657][ T1245] dvb-usb: bulk message failed: -22 (6/0) [ 113.150670][ T1245] dw2102: i2c transfer failed. [ 113.150680][ T1245] dvb-usb: MAC address: 02:02:02:02:02:02 [ 113.181402][ T1245] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.207499][ T1245] dvb-usb: bulk message failed: -22 (3/0) [ 113.207521][ T1245] dw2102: command 0x0e transfer failed. [ 113.207530][ T1245] dvb-usb: bulk message failed: -22 (3/0) [ 113.207543][ T1245] dw2102: command 0x0e transfer failed. [ 113.315596][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.315668][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.315841][ T5947] bridge_slave_0: entered allmulticast mode [ 113.337536][ T5947] bridge_slave_0: entered promiscuous mode [ 113.357337][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.506230][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 113.527929][ T1245] dvb-usb: bulk message failed: -22 (3/0) [ 113.527954][ T1245] dw2102: command 0x0e transfer failed. [ 113.527965][ T1245] dvb-usb: bulk message failed: -22 (3/0) [ 113.527978][ T1245] dw2102: command 0x0e transfer failed. [ 113.527987][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 113.528001][ T1245] dw2102: command 0x51 transfer failed. [ 113.579390][ T6053] dw2102: i2c rd: len=1792 is too big! [ 113.579390][ T6053] [ 113.631838][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.633232][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 113.633270][ T9] usb 5-1: can't read configurations, error -71 [ 113.674650][ T1245] DVB: Unable to find symbol ds3000_attach() [ 113.674661][ T1245] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 113.745626][ T6065] FAULT_INJECTION: forcing a failure. [ 113.745626][ T6065] name failslab, interval 1, probability 0, space 0, times 0 [ 113.745660][ T6065] CPU: 1 UID: 0 PID: 6065 Comm: syz.2.50 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.745682][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 113.745693][ T6065] Call Trace: [ 113.745700][ T6065] [ 113.745709][ T6065] dump_stack_lvl+0xe8/0x150 [ 113.745739][ T6065] should_fail_ex+0x46b/0x600 [ 113.745783][ T6065] should_failslab+0xa8/0x100 [ 113.745805][ T6065] __kmalloc_cache_noprof+0x83/0x6b0 [ 113.745832][ T6065] ? fsnotify_add_mark_locked+0x5e3/0xde0 [ 113.745862][ T6065] fsnotify_add_mark_locked+0x5e3/0xde0 [ 113.745897][ T6065] fanotify_add_mark+0x7a5/0x14a0 [ 113.745938][ T6065] do_fanotify_mark+0xe62/0xff0 [ 113.745975][ T6065] ? __pfx_do_fanotify_mark+0x10/0x10 [ 113.745996][ T6065] ? ksys_write+0x248/0x270 [ 113.746023][ T6065] ? __pfx_ksys_write+0x10/0x10 [ 113.746054][ T6065] __x64_sys_fanotify_mark+0xb5/0xd0 [ 113.746076][ T6065] do_syscall_64+0xe2/0xf80 [ 113.746101][ T6065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.746119][ T6065] ? trace_irq_disable+0x37/0x100 [ 113.746139][ T6065] ? clear_bhb_loop+0x60/0xb0 [ 113.746162][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.746181][ T6065] RIP: 0033:0x7fbe2fd7acb9 [ 113.746198][ T6065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.746213][ T6065] RSP: 002b:00007fbe2dfd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 113.746234][ T6065] RAX: ffffffffffffffda RBX: 00007fbe2fff5fa0 RCX: 00007fbe2fd7acb9 [ 113.746248][ T6065] RDX: 0000000040009975 RSI: 0000000000000105 RDI: 0000000000000006 [ 113.746260][ T6065] RBP: 00007fbe2dfd6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.746272][ T6065] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 113.746283][ T6065] R13: 00007fbe2fff6038 R14: 00007fbe2fff5fa0 R15: 00007ffc2de84468 [ 113.746314][ T6065] [ 113.798491][ T1245] rc_core: IR keymap rc-su3000 not found [ 113.798512][ T1245] Registered IR keymap rc-empty [ 113.803974][ T1245] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 113.814772][ T1245] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input8 [ 113.830534][ T1245] dvb-usb: schedule remote query interval to 150 msecs. [ 113.830555][ T1245] dw2102: su3000_power_ctrl: 0, initialized 1 [ 113.830569][ T1245] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 113.986085][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 113.986106][ T1245] dw2102: i2c transfer failed. [ 114.005145][ T6056] netlink: 798 bytes leftover after parsing attributes in process `syz.3.47'. [ 114.017147][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.031802][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.032043][ T5947] bridge_slave_1: entered allmulticast mode [ 114.079877][ T5947] bridge_slave_1: entered promiscuous mode [ 114.147398][ T1245] dvb-usb: bulk message failed: -22 (1/0) [ 114.147413][ T1245] dw2102: i2c transfer failed. [ 114.206401][ T1245] usb 1-1: USB disconnect, device number 4 [ 114.364236][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 114.469214][ T1245] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 114.508186][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.713444][ T37] audit: type=1326 audit(1769359932.233:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 114.713494][ T37] audit: type=1326 audit(1769359932.233:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 114.718468][ T37] audit: type=1326 audit(1769359932.233:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 114.725414][ T37] audit: type=1326 audit(1769359932.243:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 114.725462][ T37] audit: type=1326 audit(1769359932.243:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 114.736139][ T37] audit: type=1326 audit(1769359932.253:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 114.746613][ T37] audit: type=1326 audit(1769359932.263:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 114.746671][ T37] audit: type=1326 audit(1769359932.263:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 114.746709][ T37] audit: type=1326 audit(1769359932.263:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 114.749336][ T37] audit: type=1326 audit(1769359932.273:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.4.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 117.264986][ T6093] ip6gre1: entered allmulticast mode [ 117.342851][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.982222][ T72] Bluetooth: hci5: Frame reassembly failed (-84) [ 117.999912][ T72] Bluetooth: hci5: Frame reassembly failed (-84) [ 118.000009][ T58] Bluetooth: hci5: Frame reassembly failed (-84) [ 118.082172][ T3505] hsr_slave_0: left promiscuous mode [ 118.116223][ T3505] hsr_slave_1: left promiscuous mode [ 118.117796][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.119217][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.184693][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.184713][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.509277][ T3505] veth1_macvtap: left promiscuous mode [ 118.509582][ T3505] veth0_macvtap: left promiscuous mode [ 118.510878][ T3505] veth1_vlan: left promiscuous mode [ 118.511244][ T3505] veth0_vlan: left promiscuous mode [ 120.026148][ T61] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 120.264132][ T6140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.68'. [ 124.557034][ T3505] team0 (unregistering): Port device team_slave_1 removed [ 124.757017][ T3505] team0 (unregistering): Port device team_slave_0 removed [ 126.550311][ T5947] team0: Port device team_slave_0 added [ 126.680060][ T6158] syzkaller0: entered promiscuous mode [ 126.680078][ T6158] syzkaller0: entered allmulticast mode [ 126.728462][ T5947] team0: Port device team_slave_1 added [ 128.275826][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.275842][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.275866][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.335893][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.335910][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.338586][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.602997][ T5903] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.526673][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.536172][ T5903] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 129.536198][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 129.536215][ T5903] usb 5-1: Product: syz [ 129.536228][ T5903] usb 5-1: SerialNumber: syz [ 129.542202][ T5903] usb 5-1: config 0 descriptor?? [ 129.574188][ T5903] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 129.601436][ T5903] usb 5-1: Detected SIO [ 129.656925][ T5903] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 129.747004][ T5947] hsr_slave_0: entered promiscuous mode [ 129.783807][ T5947] hsr_slave_1: entered promiscuous mode [ 129.796287][ T5947] debugfs: 'hsr0' already exists in 'hsr' [ 129.796314][ T5947] Cannot create hsr debugfs directory [ 129.813070][ T6186] netlink: 56 bytes leftover after parsing attributes in process `syz.4.78'. [ 129.832279][ T9] usb 5-1: USB disconnect, device number 5 [ 129.869048][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 129.869948][ T9] ftdi_sio 5-1:0.0: device disconnected [ 132.216353][ T5947] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 132.372030][ T5947] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 132.424749][ T6235] netlink: 80 bytes leftover after parsing attributes in process `syz.4.89'. [ 132.462028][ T5947] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.474413][ T6235] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 132.525592][ T5947] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.817988][ T6249] FAULT_INJECTION: forcing a failure. [ 132.817988][ T6249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.818037][ T6249] CPU: 0 UID: 0 PID: 6249 Comm: syz.4.90 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 132.818063][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 132.818073][ T6249] Call Trace: [ 132.818080][ T6249] [ 132.818089][ T6249] dump_stack_lvl+0xe8/0x150 [ 132.818128][ T6249] should_fail_ex+0x46b/0x600 [ 132.818156][ T6249] _copy_to_user+0x31/0xb0 [ 132.818183][ T6249] simple_read_from_buffer+0xe1/0x170 [ 132.818209][ T6249] proc_fail_nth_read+0x1be/0x230 [ 132.818238][ T6249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.818266][ T6249] ? rw_verify_area+0x2ac/0x4e0 [ 132.818290][ T6249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.818323][ T6249] vfs_read+0x212/0xa70 [ 132.818356][ T6249] ? __pfx_vfs_read+0x10/0x10 [ 132.818382][ T6249] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 132.818409][ T6249] ? lockdep_hardirqs_on+0x7a/0x110 [ 132.818432][ T6249] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 132.818454][ T6249] ? mutex_lock_nested+0x152/0x1d0 [ 132.818473][ T6249] ? fdget_pos+0x252/0x320 [ 132.818499][ T6249] ksys_read+0x156/0x270 [ 132.818525][ T6249] ? __pfx_ksys_read+0x10/0x10 [ 132.818559][ T6249] do_syscall_64+0xe2/0xf80 [ 132.818584][ T6249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.818603][ T6249] ? trace_irq_disable+0x37/0x100 [ 132.818622][ T6249] ? clear_bhb_loop+0x60/0xb0 [ 132.818645][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.818664][ T6249] RIP: 0033:0x7f715b04b58e [ 132.818688][ T6249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.818703][ T6249] RSP: 002b:00007f71592e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.818728][ T6249] RAX: ffffffffffffffda RBX: 00007f71592e66c0 RCX: 00007f715b04b58e [ 132.818742][ T6249] RDX: 000000000000000f RSI: 00007f71592e60a0 RDI: 0000000000000004 [ 132.818754][ T6249] RBP: 00007f71592e6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.818766][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.818778][ T6249] R13: 00007f715b306038 R14: 00007f715b305fa0 R15: 00007fff8c136098 [ 132.818808][ T6249] [ 132.912386][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.912474][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.581152][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.745916][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.915122][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.937377][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.046545][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.046683][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.348620][ T6276] [U] [ 137.878016][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.486076][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 138.646066][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 138.668842][ T44] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.668870][ T44] usb 1-1: config 0 has no interface number 0 [ 138.686702][ T44] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 138.686731][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.686749][ T44] usb 1-1: Product: syz [ 138.686763][ T44] usb 1-1: Manufacturer: syz [ 138.686776][ T44] usb 1-1: SerialNumber: syz [ 138.759192][ T44] usb 1-1: config 0 descriptor?? [ 138.789121][ T44] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 138.789163][ T44] usb 1-1: selecting invalid altsetting 1 [ 138.789179][ T44] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 138.827960][ T44] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 138.828723][ T44] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 138.828777][ T44] usb 1-1: media controller created [ 138.898684][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.940269][ T6318] ip6gre1: entered allmulticast mode [ 140.038417][ T44] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 140.038496][ T44] zl10353_read_register: readreg error (reg=127, ret==-110) [ 140.064571][ T6292] usb 1-1: dvb_usb_ce6230: I2C read not implemented [ 140.088312][ T5947] veth0_vlan: entered promiscuous mode [ 140.231958][ T5947] veth1_vlan: entered promiscuous mode [ 141.114867][ T5947] veth0_macvtap: entered promiscuous mode [ 141.152019][ T5947] veth1_macvtap: entered promiscuous mode [ 141.220903][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.265045][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.285773][ T3505] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.295116][ T160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.295296][ T160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.295434][ T160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.023228][ T6097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.023244][ T6097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.246214][ T6095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.246234][ T6095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.338606][ T5804] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.586071][ T5804] usb 3-1: Using ep0 maxpacket: 16 [ 143.588136][ T5804] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.588163][ T5804] usb 3-1: config 0 has no interface number 0 [ 143.588205][ T5804] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.588228][ T5804] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.588262][ T5804] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 143.588283][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.609248][ T5804] usb 3-1: config 0 descriptor?? [ 143.776774][ T6356] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 143.776807][ T6356] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 143.776844][ T6356] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 144.236227][ T5807] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 144.317020][ T5804] uclogic 0003:28BD:0071.0004: pen parameters not found [ 144.317046][ T5804] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring [ 144.446081][ T5807] usb 6-1: Using ep0 maxpacket: 16 [ 144.450542][ T5807] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.450569][ T5807] usb 6-1: config 0 has no interface number 0 [ 144.450617][ T5807] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.450642][ T5807] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.450680][ T5807] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 144.450703][ T5807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.455785][ T5807] usb 6-1: config 0 descriptor?? [ 145.136405][ T5807] uclogic 0003:28BD:0071.0005: pen parameters not found [ 145.136430][ T5807] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 145.369114][ T6367] Zero length message leads to an empty skb [ 145.976826][ T6382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.116'. [ 146.000916][ T6382] netlink: 112 bytes leftover after parsing attributes in process `syz.3.116'. [ 146.142609][ T993] usb 3-1: USB disconnect, device number 5 [ 147.381085][ T5857] usb 6-1: USB disconnect, device number 2 [ 147.383179][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 149.206176][ T993] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 149.366154][ T993] usb 6-1: Using ep0 maxpacket: 32 [ 149.373088][ T993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 149.373130][ T993] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 149.373154][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.387383][ T993] usb 6-1: config 0 descriptor?? [ 149.650845][ T993] kye 0003:0458:5015.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 150.682125][ T993] kye 0003:0458:5015.0006: hidraw0: USB HID v10.00 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0 [ 150.682163][ T993] kye 0003:0458:5015.0006: tablet-enabling feature report not found [ 150.682178][ T993] kye 0003:0458:5015.0006: tablet enabling failed [ 150.717978][ T993] usb 6-1: USB disconnect, device number 3 [ 150.806395][ T6411] overlayfs: missing 'lowerdir' [ 150.995697][ T6409] fido_id[6409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 153.237695][ T6423] batadv_slave_1: entered promiscuous mode [ 153.239720][ T6418] batadv_slave_1: left promiscuous mode [ 153.996203][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.016355][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.017547][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.018710][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.019454][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.048211][ T809] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 154.226137][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 154.230909][ T809] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.230936][ T809] usb 3-1: config 0 has no interface number 0 [ 154.230988][ T809] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.231013][ T809] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.231050][ T809] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 154.231073][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.296362][ T809] usb 3-1: config 0 descriptor?? [ 154.924958][ T809] uclogic 0003:28BD:0071.0007: pen parameters not found [ 154.924984][ T809] uclogic 0003:28BD:0071.0007: interface is invalid, ignoring [ 155.416111][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 155.558836][ T6429] chnl_net:caif_netlink_parms(): no params data found [ 155.582600][ T6446] mmap: syz.4.135 (6446) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 155.596608][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 155.596638][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 155.596662][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 155.596683][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 155.596717][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 155.596739][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.618277][ T9] usb 4-1: config 0 descriptor?? [ 156.013206][ T9] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 156.013234][ T9] hdpvr 4-1:0.0: device init failed [ 156.013285][ T9] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 156.186075][ T5114] Bluetooth: hci5: command tx timeout [ 157.227017][ T9] usb 4-1: USB disconnect, device number 3 [ 157.304806][ T5807] usb 3-1: USB disconnect, device number 6 [ 157.438847][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 157.438865][ T37] audit: type=1326 audit(1769359974.963:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 157.438908][ T37] audit: type=1326 audit(1769359974.963:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 157.438946][ T37] audit: type=1326 audit(1769359974.963:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 157.444026][ T37] audit: type=1326 audit(1769359974.963:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 157.444625][ T37] audit: type=1326 audit(1769359974.963:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 157.449435][ T37] audit: type=1326 audit(1769359974.973:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 157.449478][ T37] audit: type=1326 audit(1769359974.973:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 157.449515][ T37] audit: type=1326 audit(1769359974.973:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 157.506419][ T37] audit: type=1326 audit(1769359975.023:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 157.506472][ T37] audit: type=1326 audit(1769359975.023:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 157.924980][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.925188][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.925424][ T6429] bridge_slave_0: entered allmulticast mode [ 157.957660][ T6429] bridge_slave_0: entered promiscuous mode [ 157.960970][ T6429] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.961177][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.961376][ T6429] bridge_slave_1: entered allmulticast mode [ 157.963935][ T6429] bridge_slave_1: entered promiscuous mode [ 158.180819][ T6429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.205278][ T6429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.276314][ T5114] Bluetooth: hci5: command tx timeout [ 158.533269][ T6429] team0: Port device team_slave_0 added [ 158.567597][ T6429] team0: Port device team_slave_1 added [ 158.728349][ T6492] FAULT_INJECTION: forcing a failure. [ 158.728349][ T6492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.728382][ T6492] CPU: 1 UID: 0 PID: 6492 Comm: syz.3.146 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.728403][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 158.728414][ T6492] Call Trace: [ 158.728421][ T6492] [ 158.728429][ T6492] dump_stack_lvl+0xe8/0x150 [ 158.728459][ T6492] should_fail_ex+0x46b/0x600 [ 158.728487][ T6492] _copy_to_user+0x31/0xb0 [ 158.728515][ T6492] simple_read_from_buffer+0xe1/0x170 [ 158.728540][ T6492] proc_fail_nth_read+0x1be/0x230 [ 158.728569][ T6492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.728597][ T6492] ? rw_verify_area+0x2ac/0x4e0 [ 158.728621][ T6492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.728647][ T6492] vfs_read+0x212/0xa70 [ 158.728679][ T6492] ? __pfx_vfs_read+0x10/0x10 [ 158.728704][ T6492] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 158.728730][ T6492] ? lockdep_hardirqs_on+0x7a/0x110 [ 158.728755][ T6492] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 158.728779][ T6492] ? mutex_lock_nested+0x152/0x1d0 [ 158.728797][ T6492] ? fdget_pos+0x252/0x320 [ 158.728826][ T6492] ksys_read+0x156/0x270 [ 158.728852][ T6492] ? __pfx_ksys_read+0x10/0x10 [ 158.728875][ T6492] ? __pfx_blkdev_ioctl+0x10/0x10 [ 158.728907][ T6492] do_syscall_64+0xe2/0xf80 [ 158.728930][ T6492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.728948][ T6492] ? trace_irq_disable+0x37/0x100 [ 158.728969][ T6492] ? clear_bhb_loop+0x60/0xb0 [ 158.728992][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.729010][ T6492] RIP: 0033:0x7f3d3d2cb58e [ 158.729027][ T6492] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.729049][ T6492] RSP: 002b:00007f3d3b565fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.729069][ T6492] RAX: ffffffffffffffda RBX: 00007f3d3b5666c0 RCX: 00007f3d3d2cb58e [ 158.729083][ T6492] RDX: 000000000000000f RSI: 00007f3d3b5660a0 RDI: 0000000000000005 [ 158.729095][ T6492] RBP: 00007f3d3b566090 R08: 0000000000000000 R09: 0000000000000000 [ 158.729107][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.729118][ T6492] R13: 00007f3d3d586038 R14: 00007f3d3d585fa0 R15: 00007ffc4e4b8c58 [ 158.729149][ T6492] [ 158.857812][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.857828][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.857853][ T6429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.868359][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.868374][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.868398][ T6429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.278998][ T6429] hsr_slave_0: entered promiscuous mode [ 159.280302][ T6429] hsr_slave_1: entered promiscuous mode [ 159.281184][ T6429] debugfs: 'hsr0' already exists in 'hsr' [ 159.281217][ T6429] Cannot create hsr debugfs directory [ 160.456019][ T5114] Bluetooth: hci5: command tx timeout [ 160.666320][ T809] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 160.828004][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 160.828035][ T809] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 160.828060][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 160.828082][ T809] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 160.828122][ T809] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 160.828145][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.964709][ T809] usb 3-1: config 0 descriptor?? [ 161.342183][ T809] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 161.342208][ T809] hdpvr 3-1:0.0: device init failed [ 161.342285][ T809] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 161.401104][ T809] usb 3-1: USB disconnect, device number 7 [ 162.292851][ T6429] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.376152][ T1245] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.391550][ T6429] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.507491][ T5114] Bluetooth: hci5: command tx timeout [ 162.568626][ T6429] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.613637][ T6429] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.686143][ T1245] usb 3-1: Using ep0 maxpacket: 16 [ 162.688738][ T1245] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.688795][ T1245] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.688821][ T1245] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.688855][ T1245] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 162.688876][ T1245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.704315][ T1245] usb 3-1: config 0 descriptor?? [ 162.740831][ T6557] Bluetooth: MGMT ver 1.23 [ 162.776672][ T5807] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 162.794810][ T1245] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 162.949281][ T5807] usb 5-1: Using ep0 maxpacket: 8 [ 162.970757][ T5807] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 162.970789][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.970809][ T5807] usb 5-1: Product: syz [ 162.970824][ T5807] usb 5-1: Manufacturer: syz [ 162.970838][ T5807] usb 5-1: SerialNumber: syz [ 163.029829][ T5807] usb 5-1: config 0 descriptor?? [ 163.204368][ T6566] loop2: detected capacity change from 0 to 7 [ 163.233134][ T5807] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 163.233237][ T5807] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 163.317475][ T6566] loop2: [ 163.317512][ T6566] loop2: partition table partially beyond EOD, truncated [ 163.321600][ T5807] usb 5-1: USB disconnect, device number 6 [ 164.389508][ T6429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.708968][ T6429] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.734913][ T1552] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.735637][ T1552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.801131][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.802260][ T6095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.263042][ T809] usb 3-1: USB disconnect, device number 8 [ 165.976119][ T5882] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 166.102839][ T6429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.126156][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 166.132478][ T5882] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 166.132505][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.132524][ T5882] usb 4-1: Product: syz [ 166.132538][ T5882] usb 4-1: Manufacturer: syz [ 166.132553][ T5882] usb 4-1: SerialNumber: syz [ 166.196730][ T5882] usb 4-1: config 0 descriptor?? [ 166.227197][ T5882] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 166.227246][ T5882] dw2102: su3000_power_ctrl: 1, initialized 0 [ 166.227265][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 166.233755][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.271251][ T5882] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 166.271309][ T5882] usb 4-1: media controller created [ 166.271335][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 166.271348][ T5882] dw2102: i2c transfer failed. [ 166.271362][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 166.271375][ T5882] dw2102: i2c transfer failed. [ 166.271390][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 166.271402][ T5882] dw2102: i2c transfer failed. [ 166.271417][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 166.271430][ T5882] dw2102: i2c transfer failed. [ 166.271444][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 166.271457][ T5882] dw2102: i2c transfer failed. [ 166.271471][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 166.271484][ T5882] dw2102: i2c transfer failed. [ 166.271493][ T5882] dvb-usb: MAC address: 02:02:02:02:02:02 [ 166.307272][ T1245] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 166.390331][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.429381][ T6603] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.171'. [ 166.449505][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 166.449526][ T5882] dw2102: command 0x0e transfer failed. [ 166.449535][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 166.449548][ T5882] dw2102: command 0x0e transfer failed. [ 166.466203][ T1245] usb 3-1: Using ep0 maxpacket: 8 [ 166.468973][ T1245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.469005][ T1245] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.469044][ T1245] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 166.469066][ T1245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.491988][ T1245] usb 3-1: config 0 descriptor?? [ 166.772146][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 166.772180][ T5882] dw2102: command 0x0e transfer failed. [ 166.772190][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 166.772204][ T5882] dw2102: command 0x0e transfer failed. [ 166.772213][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 166.772226][ T5882] dw2102: command 0x51 transfer failed. [ 166.923983][ T1245] usbhid 3-1:0.0: can't add hid device: -71 [ 166.924103][ T1245] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 166.987151][ T1245] usb 3-1: USB disconnect, device number 9 [ 167.126145][ T5882] DVB: Unable to find symbol ds3000_attach() [ 167.126161][ T5882] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 167.306200][ T5882] rc_core: IR keymap rc-su3000 not found [ 167.306221][ T5882] Registered IR keymap rc-empty [ 167.307820][ T5882] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 167.312417][ T5882] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input9 [ 167.321464][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 167.321485][ T5882] dw2102: su3000_power_ctrl: 0, initialized 1 [ 167.321497][ T5882] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 167.341691][ T5882] usb 4-1: USB disconnect, device number 4 [ 167.468095][ T6223] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 168.596733][ T6223] usb 5-1: Using ep0 maxpacket: 32 [ 168.599086][ T6223] usb 5-1: config 0 has an invalid interface number: 76 but max is 0 [ 168.599111][ T6223] usb 5-1: config 0 has no interface number 0 [ 168.601400][ T6223] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 168.601427][ T6223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.601447][ T6223] usb 5-1: Product: syz [ 168.601459][ T6223] usb 5-1: Manufacturer: syz [ 168.601467][ T6223] usb 5-1: SerialNumber: syz [ 168.630179][ T6223] usb 5-1: config 0 descriptor?? [ 168.701007][ T6223] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 168.701058][ T6223] dw2102: su3000_power_ctrl: 1, initialized 0 [ 168.701077][ T6223] dvb-usb: bulk message failed: -22 (2/0) [ 168.745171][ T6223] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.754703][ T6223] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 168.754763][ T6223] usb 5-1: media controller created [ 168.754790][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 168.754808][ T6223] dw2102: i2c transfer failed. [ 168.754825][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 168.754838][ T6223] dw2102: i2c transfer failed. [ 168.754853][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 168.754865][ T6223] dw2102: i2c transfer failed. [ 168.754881][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 168.754894][ T6223] dw2102: i2c transfer failed. [ 168.754907][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 168.754920][ T6223] dw2102: i2c transfer failed. [ 168.754935][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 168.754948][ T6223] dw2102: i2c transfer failed. [ 168.754957][ T6223] dvb-usb: MAC address: 02:02:02:02:02:02 [ 168.783184][ T5882] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 168.803110][ T6223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.881831][ T6223] dvb-usb: bulk message failed: -22 (3/0) [ 168.881855][ T6223] dw2102: command 0x0e transfer failed. [ 168.881865][ T6223] dvb-usb: bulk message failed: -22 (3/0) [ 168.881878][ T6223] dw2102: command 0x0e transfer failed. [ 168.963236][ T6429] veth0_vlan: entered promiscuous mode [ 168.988532][ T6429] veth1_vlan: entered promiscuous mode [ 169.052454][ T6429] veth0_macvtap: entered promiscuous mode [ 169.066694][ T809] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 169.067994][ T6429] veth1_macvtap: entered promiscuous mode [ 169.143454][ T6643] bridge3: entered promiscuous mode [ 169.160480][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.193191][ T6223] dvb-usb: bulk message failed: -22 (3/0) [ 169.193214][ T6223] dw2102: command 0x0e transfer failed. [ 169.193223][ T6223] dvb-usb: bulk message failed: -22 (3/0) [ 169.193236][ T6223] dw2102: command 0x0e transfer failed. [ 169.193245][ T6223] dvb-usb: bulk message failed: -22 (1/0) [ 169.193258][ T6223] dw2102: command 0x51 transfer failed. [ 169.231244][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.250574][ T3536] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.250787][ T3536] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.250838][ T3536] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.250871][ T3536] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.263680][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 169.263710][ T809] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 169.263734][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 169.263754][ T809] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 169.263792][ T809] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 169.263815][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.282322][ T809] usb 6-1: config 0 descriptor?? [ 170.070271][ T6646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.990761][ T809] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 170.990784][ T809] hdpvr 6-1:0.0: device init failed [ 170.990868][ T809] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 171.034807][ T6223] DVB: Unable to find symbol ds3000_attach() [ 171.034821][ T6223] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 171.086058][ T809] usb 6-1: USB disconnect, device number 4 [ 171.286122][ T6223] rc_core: IR keymap rc-su3000 not found [ 171.286142][ T6223] Registered IR keymap rc-empty [ 171.287932][ T6223] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 171.351578][ T6223] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input10 [ 171.368490][ T6223] dvb-usb: schedule remote query interval to 150 msecs. [ 171.368512][ T6223] dw2102: su3000_power_ctrl: 0, initialized 1 [ 171.368525][ T6223] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 171.439809][ T6223] usb 5-1: USB disconnect, device number 7 [ 171.546917][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.546938][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.665286][ T6223] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 171.714567][ T5996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.714589][ T5996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.006146][ T6223] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 172.766129][ T6223] usb 5-1: Using ep0 maxpacket: 32 [ 172.790173][ T6223] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 172.790204][ T6223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.790224][ T6223] usb 5-1: Product: syz [ 172.790239][ T6223] usb 5-1: Manufacturer: syz [ 172.790253][ T6223] usb 5-1: SerialNumber: syz [ 172.795481][ T6223] usb 5-1: config 0 descriptor?? [ 172.844600][ T6223] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 172.844650][ T6223] dw2102: su3000_power_ctrl: 1, initialized 0 [ 172.844670][ T6223] dvb-usb: bulk message failed: -22 (2/0) [ 172.869824][ T6223] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.870816][ T6223] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 172.870878][ T6223] usb 5-1: media controller created [ 172.870903][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 172.870918][ T6223] dw2102: i2c transfer failed. [ 172.870935][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 172.870949][ T6223] dw2102: i2c transfer failed. [ 172.870965][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 172.870978][ T6223] dw2102: i2c transfer failed. [ 172.870994][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 172.871007][ T6223] dw2102: i2c transfer failed. [ 172.871023][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 172.871036][ T6223] dw2102: i2c transfer failed. [ 172.871052][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 172.871065][ T6223] dw2102: i2c transfer failed. [ 172.871074][ T6223] dvb-usb: MAC address: 02:02:02:02:02:02 [ 172.979897][ T6223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.009508][ T6223] dvb-usb: bulk message failed: -22 (3/0) [ 173.009531][ T6223] dw2102: command 0x0e transfer failed. [ 173.009540][ T6223] dvb-usb: bulk message failed: -22 (3/0) [ 173.009554][ T6223] dw2102: command 0x0e transfer failed. [ 173.057412][ T6653] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.185'. [ 173.355806][ T6223] dvb-usb: bulk message failed: -22 (3/0) [ 173.355830][ T6223] dw2102: command 0x0e transfer failed. [ 173.355838][ T6223] dvb-usb: bulk message failed: -22 (3/0) [ 173.355849][ T6223] dw2102: command 0x0e transfer failed. [ 173.355857][ T6223] dvb-usb: bulk message failed: -22 (1/0) [ 173.355867][ T6223] dw2102: command 0x51 transfer failed. [ 174.492745][ T6680] Device name cannot be null; rc = [-22] [ 174.526250][ T6223] DVB: Unable to find symbol ds3000_attach() [ 174.526267][ T6223] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 174.617876][ T6223] rc_core: IR keymap rc-su3000 not found [ 174.617897][ T6223] Registered IR keymap rc-empty [ 174.622820][ T6223] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 174.657598][ T6223] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input11 [ 174.662840][ T6223] dvb-usb: schedule remote query interval to 150 msecs. [ 174.662863][ T6223] dw2102: su3000_power_ctrl: 0, initialized 1 [ 174.662876][ T6223] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 174.703791][ T6223] usb 5-1: USB disconnect, device number 8 [ 175.206355][ T5882] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 175.593743][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 175.593763][ T5882] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 175.593776][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 175.593787][ T5882] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 175.593813][ T5882] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 175.593833][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.599338][ T5882] usb 4-1: config 0 descriptor?? [ 175.956012][ T5882] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 175.956033][ T5882] hdpvr 4-1:0.0: device init failed [ 175.956099][ T5882] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 175.988676][ T5882] usb 4-1: USB disconnect, device number 5 [ 176.000438][ T6223] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 176.277864][ T6709] overlayfs: missing 'lowerdir' [ 176.444088][ T6714] FAULT_INJECTION: forcing a failure. [ 176.444088][ T6714] name failslab, interval 1, probability 0, space 0, times 0 [ 176.444112][ T6714] CPU: 1 UID: 0 PID: 6714 Comm: syz.2.205 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.444125][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 176.444132][ T6714] Call Trace: [ 176.444136][ T6714] [ 176.444141][ T6714] dump_stack_lvl+0xe8/0x150 [ 176.444161][ T6714] should_fail_ex+0x46b/0x600 [ 176.444178][ T6714] should_failslab+0xa8/0x100 [ 176.444190][ T6714] __kmalloc_node_noprof+0xe6/0x800 [ 176.444210][ T6714] ? alloc_slab_obj_exts+0x3e/0x100 [ 176.444226][ T6714] alloc_slab_obj_exts+0x3e/0x100 [ 176.444239][ T6714] __memcg_slab_post_alloc_hook+0x394/0x7d0 [ 176.444262][ T6714] ? __se_sys_inotify_add_watch+0x6fb/0xf70 [ 176.444278][ T6714] kmem_cache_alloc_noprof+0x422/0x6a0 [ 176.444296][ T6714] __se_sys_inotify_add_watch+0x6fb/0xf70 [ 176.444321][ T6714] ? ksys_write+0x248/0x270 [ 176.444337][ T6714] ? __pfx___se_sys_inotify_add_watch+0x10/0x10 [ 176.444355][ T6714] ? syscall_user_dispatch+0x4e/0x90 [ 176.444374][ T6714] do_syscall_64+0xe2/0xf80 [ 176.444389][ T6714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.444399][ T6714] ? trace_irq_disable+0x37/0x100 [ 176.444411][ T6714] ? clear_bhb_loop+0x60/0xb0 [ 176.444424][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.444434][ T6714] RIP: 0033:0x7fbe2fd7acb9 [ 176.444445][ T6714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.444454][ T6714] RSP: 002b:00007fbe2dfd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 176.444467][ T6714] RAX: ffffffffffffffda RBX: 00007fbe2fff5fa0 RCX: 00007fbe2fd7acb9 [ 176.444474][ T6714] RDX: 000000000400017e RSI: 0000200000000000 RDI: 0000000000000003 [ 176.444482][ T6714] RBP: 00007fbe2dfd6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.444488][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.444495][ T6714] R13: 00007fbe2fff6038 R14: 00007fbe2fff5fa0 R15: 00007ffc2de84468 [ 176.444511][ T6714] [ 178.375194][ T6718] ======================================================= [ 178.375194][ T6718] WARNING: The mand mount option has been deprecated and [ 178.375194][ T6718] and is ignored by this kernel. Remove the mand [ 178.375194][ T6718] option from the mount to silence this warning. [ 178.375194][ T6718] ======================================================= [ 178.375363][ T6718] fuse: Unknown parameter 'dè’–a„–:ò00000000000000000000' [ 180.929955][ T6734] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.213'. [ 181.081878][ T6742] evm: overlay not supported [ 181.193605][ T6745] overlayfs: failed to resolve './bus': -2 [ 181.268607][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.215'. [ 181.676036][ T5882] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 181.830704][ T5882] usb 7-1: device descriptor read/64, error -71 [ 182.119496][ T5882] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 182.326066][ T5882] usb 7-1: device descriptor read/64, error -71 [ 182.436492][ T5882] usb usb7-port1: attempt power cycle [ 182.796036][ T5882] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 183.156057][ T1245] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 183.183105][ T5882] usb 7-1: device descriptor read/8, error -71 [ 183.322364][ T1245] usb 6-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 183.322395][ T1245] usb 6-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 183.322416][ T1245] usb 6-1: Product: syz [ 183.322430][ T1245] usb 6-1: Manufacturer: syz [ 183.322444][ T1245] usb 6-1: SerialNumber: syz [ 183.364784][ T1245] usb 6-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 183.381720][ T1245] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.382129][ T1245] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 183.382167][ T1245] usb 6-1: media controller created [ 183.418723][ T5882] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 183.423946][ T1245] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.436852][ T5882] usb 7-1: device descriptor read/8, error -71 [ 183.473434][ T1245] usb 6-1: selecting invalid altsetting 1 [ 183.473455][ T1245] set interface failed [ 183.473933][ T1245] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 183.473954][ T1245] error writing reg: 0xff, val: 0x00 [ 183.533267][ T1245] dvb_usb_mxl111sf 6-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 183.558263][ T5882] usb usb7-port1: unable to enumerate USB device [ 183.586045][ T5882] usb 6-1: USB disconnect, device number 5 [ 184.721002][ T6782] netlink: 'syz.6.225': attribute type 1 has an invalid length. [ 186.626096][ T5883] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 187.737425][ T5883] usb 6-1: config 0 has an invalid interface number: 17 but max is 0 [ 187.737455][ T5883] usb 6-1: config 0 has no interface number 0 [ 187.737498][ T5883] usb 6-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.737524][ T5883] usb 6-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.737560][ T5883] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 187.737583][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.744615][ T5883] usb 6-1: config 0 descriptor?? [ 188.423264][ T5883] usbhid 6-1:0.17: can't add hid device: -71 [ 188.423344][ T5883] usbhid 6-1:0.17: probe with driver usbhid failed with error -71 [ 188.497064][ T5883] usb 6-1: USB disconnect, device number 6 [ 191.361580][ T6856] ip6gre1: entered allmulticast mode [ 194.356068][ T5807] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 194.363334][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.364886][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.549349][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.549384][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.549410][ T5807] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.549453][ T5807] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.549478][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.555585][ T5807] usb 3-1: config 0 descriptor?? [ 195.566156][ T5857] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 195.646452][ T5807] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 195.800021][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 195.800053][ T5857] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 195.800077][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 195.800098][ T5857] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 195.800137][ T5857] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 195.800160][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.825041][ T5857] usb 6-1: config 0 descriptor?? [ 196.095579][ T5857] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 196.095602][ T5857] hdpvr 6-1:0.0: device init failed [ 196.095678][ T5857] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 196.132024][ T5857] usb 6-1: USB disconnect, device number 7 [ 197.364953][ T5807] usb 3-1: USB disconnect, device number 10 [ 198.338550][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 198.338569][ T37] audit: type=1326 audit(1769360015.863:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6902 comm="syz.5.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696f8acb9 code=0x7fc00000 [ 199.096171][ T6919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 201.419159][ T6933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.269'. [ 201.419183][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 202.555989][ T809] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 202.756000][ T809] usb 6-1: Using ep0 maxpacket: 32 [ 202.761398][ T809] usb 6-1: config 0 has an invalid interface number: 76 but max is 0 [ 202.761425][ T809] usb 6-1: config 0 has no interface number 0 [ 202.830248][ T809] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 202.830274][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.830284][ T809] usb 6-1: Product: syz [ 202.830293][ T809] usb 6-1: Manufacturer: syz [ 202.830302][ T809] usb 6-1: SerialNumber: syz [ 202.869167][ T809] usb 6-1: config 0 descriptor?? [ 202.903152][ T809] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 202.903205][ T809] dw2102: su3000_power_ctrl: 1, initialized 0 [ 202.903225][ T809] dvb-usb: bulk message failed: -22 (2/0) [ 203.026201][ T809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 203.027512][ T809] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 203.027570][ T809] usb 6-1: media controller created [ 203.027597][ T809] dvb-usb: bulk message failed: -22 (6/0) [ 203.027612][ T809] dw2102: i2c transfer failed. [ 203.027628][ T809] dvb-usb: bulk message failed: -22 (6/0) [ 203.027642][ T809] dw2102: i2c transfer failed. [ 203.027658][ T809] dvb-usb: bulk message failed: -22 (6/0) [ 203.027672][ T809] dw2102: i2c transfer failed. [ 203.027688][ T809] dvb-usb: bulk message failed: -22 (6/0) [ 203.027701][ T809] dw2102: i2c transfer failed. [ 203.027717][ T809] dvb-usb: bulk message failed: -22 (6/0) [ 203.027730][ T809] dw2102: i2c transfer failed. [ 203.027746][ T809] dvb-usb: bulk message failed: -22 (6/0) [ 203.027760][ T809] dw2102: i2c transfer failed. [ 203.027769][ T809] dvb-usb: MAC address: 02:02:02:02:02:02 [ 203.477624][ T6946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.194228][ T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.263576][ T809] dvb-usb: bulk message failed: -22 (3/0) [ 204.263599][ T809] dw2102: command 0x0e transfer failed. [ 204.263608][ T809] dvb-usb: bulk message failed: -22 (3/0) [ 204.263623][ T809] dw2102: command 0x0e transfer failed. [ 204.566148][ T809] dvb-usb: bulk message failed: -22 (3/0) [ 204.566174][ T809] dw2102: command 0x0e transfer failed. [ 204.566183][ T809] dvb-usb: bulk message failed: -22 (3/0) [ 204.566197][ T809] dw2102: command 0x0e transfer failed. [ 204.566206][ T809] dvb-usb: bulk message failed: -22 (1/0) [ 204.566219][ T809] dw2102: command 0x51 transfer failed. [ 204.815731][ T809] DVB: Unable to find symbol ds3000_attach() [ 204.815749][ T809] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 205.246665][ T809] rc_core: IR keymap rc-su3000 not found [ 205.246818][ T809] Registered IR keymap rc-empty [ 205.287405][ T809] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 205.290487][ T809] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input12 [ 206.368288][ T809] dvb-usb: schedule remote query interval to 150 msecs. [ 206.368312][ T809] dw2102: su3000_power_ctrl: 0, initialized 1 [ 206.368325][ T809] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 206.402187][ T809] usb 6-1: USB disconnect, device number 8 [ 206.972811][ T809] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 207.249821][ T6971] netlink: 16 bytes leftover after parsing attributes in process `syz.6.284'. [ 207.249845][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.284'. [ 207.975983][ T809] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 208.170400][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 208.170431][ T809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 208.170456][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 208.170477][ T809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 208.170514][ T809] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 208.170537][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.207977][ T6975] netlink: 'syz.2.277': attribute type 27 has an invalid length. [ 208.216036][ T6975] batman_adv: batadv0: Adding interface: dummy0 [ 208.216052][ T6975] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.216082][ T6975] batman_adv: batadv0: Interface activated: dummy0 [ 208.232432][ T6975] batadv0: mtu less than device minimum [ 208.285147][ T6975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.317945][ T809] usb 5-1: config 0 descriptor?? [ 208.318974][ T6975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.361933][ T6975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.430655][ T6975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.479724][ T6975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.522724][ T6975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.535849][ T6975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.546101][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 208.639272][ T6975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.685055][ T6975] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 208.884530][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 208.896144][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 208.917900][ T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 208.917931][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.917951][ T9] usb 3-1: Product: syz [ 208.917966][ T9] usb 3-1: Manufacturer: syz [ 208.917980][ T9] usb 3-1: SerialNumber: syz [ 208.943672][ T9] usb 3-1: config 0 descriptor?? [ 209.021010][ T809] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 209.021036][ T809] hdpvr 5-1:0.0: device init failed [ 209.021122][ T809] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 209.050366][ T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 209.092118][ T809] usb 5-1: USB disconnect, device number 9 [ 209.178270][ T72] usb 3-1: Failed to submit usb control message: -71 [ 209.178309][ T72] usb 3-1: unable to send the bmi data to the device: -71 [ 209.178326][ T72] usb 3-1: unable to get target info from device [ 209.178352][ T72] usb 3-1: could not get target info (-71) [ 209.178384][ T72] usb 3-1: could not probe fw (-71) [ 209.207884][ T9] usb 3-1: USB disconnect, device number 11 [ 209.658499][ T6993] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 209.721137][ T37] audit: type=1326 audit(1769360027.243:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.5.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696f8acb9 code=0x7ffc0000 [ 209.721650][ T37] audit: type=1326 audit(1769360027.243:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.5.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696f8acb9 code=0x7ffc0000 [ 209.721690][ T37] audit: type=1326 audit(1769360027.243:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.5.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696f8acb9 code=0x7ffc0000 [ 209.724378][ T37] audit: type=1326 audit(1769360027.243:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.5.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4696f8acb9 code=0x7ffc0000 [ 209.772214][ T37] audit: type=1326 audit(1769360027.293:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.5.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696f8acb9 code=0x7ffc0000 [ 209.772858][ T37] audit: type=1326 audit(1769360027.293:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.5.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696f8acb9 code=0x7ffc0000 [ 209.773126][ T37] audit: type=1326 audit(1769360027.293:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.5.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696f8acb9 code=0x7ffc0000 [ 209.773897][ T37] audit: type=1326 audit(1769360027.293:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.5.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696f8acb9 code=0x7ffc0000 [ 209.856381][ T37] audit: type=1326 audit(1769360027.373:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.5.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4696f8acb9 code=0x7ffc0000 [ 209.856440][ T37] audit: type=1326 audit(1769360027.373:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.5.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4696f4b58e code=0x7ffc0000 [ 209.858782][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888024427000: rx timeout, send abort [ 209.862192][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888024427000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 210.125402][ T7006] bridge1: entered promiscuous mode [ 210.454237][ T7010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.292'. [ 211.812962][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 211.813259][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 211.813460][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 211.813571][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 212.599272][ T7021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.651652][ T7033] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 215.705118][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 215.705137][ T37] audit: type=1326 audit(1769360033.223:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.2.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 215.706699][ T37] audit: type=1326 audit(1769360033.223:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.2.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 215.706743][ T37] audit: type=1326 audit(1769360033.223:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.2.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 215.706782][ T37] audit: type=1326 audit(1769360033.223:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.2.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 215.809137][ T37] audit: type=1326 audit(1769360033.323:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.2.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 215.809169][ T37] audit: type=1326 audit(1769360033.323:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.2.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbe2fd7aa22 code=0x7ffc0000 [ 215.809198][ T37] audit: type=1326 audit(1769360033.323:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.2.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbe2fd7aab7 code=0x7ffc0000 [ 215.809219][ T37] audit: type=1326 audit(1769360033.323:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.2.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbe2fd37a51 code=0x7ffc0000 [ 215.809240][ T37] audit: type=1326 audit(1769360033.323:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.2.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbe2fd7bac9 code=0x7ffc0000 [ 215.809434][ T37] audit: type=1326 audit(1769360033.333:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7032 comm="syz.2.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2fd7acb9 code=0x7ffc0000 [ 216.326126][ T1245] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 216.586512][ T1245] usb 3-1: config 1 has an invalid interface number: 64 but max is 0 [ 216.586547][ T1245] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.586568][ T1245] usb 3-1: config 1 has no interface number 0 [ 217.512142][ T1245] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 217.512163][ T1245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.512174][ T1245] usb 3-1: Product: syz [ 217.512182][ T1245] usb 3-1: Manufacturer: syz [ 217.512190][ T1245] usb 3-1: SerialNumber: syz [ 217.563175][ T1245] uvcvideo 3-1:1.64: probe with driver uvcvideo failed with error -22 [ 217.772608][ T7037] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.305'. [ 217.774932][ T809] usb 3-1: USB disconnect, device number 12 [ 222.347750][ T7082] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 222.408354][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 222.408372][ T37] audit: type=1326 audit(1769360039.933:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 222.408402][ T37] audit: type=1326 audit(1769360039.933:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 222.478157][ T37] audit: type=1326 audit(1769360039.973:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 222.478209][ T37] audit: type=1326 audit(1769360039.973:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 222.478246][ T37] audit: type=1326 audit(1769360039.973:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 222.478283][ T37] audit: type=1326 audit(1769360039.973:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 222.478318][ T37] audit: type=1326 audit(1769360040.003:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 222.478353][ T37] audit: type=1326 audit(1769360040.003:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 222.478390][ T37] audit: type=1326 audit(1769360040.003:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 222.478426][ T37] audit: type=1326 audit(1769360040.003:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f715b08acb9 code=0x7ffc0000 [ 222.786031][ T809] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 223.913437][ T809] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 223.913468][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.913492][ T809] usb 7-1: Product: syz [ 223.913504][ T809] usb 7-1: Manufacturer: syz [ 223.913516][ T809] usb 7-1: SerialNumber: syz [ 223.988029][ T809] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 224.223548][ T5857] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 224.555080][ T7084] random: crng reseeded on system resumption [ 225.855983][ T5857] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 225.856488][ T5857] ath9k_htc: Failed to initialize the device [ 227.836201][ T6223] usb 7-1: USB disconnect, device number 6 [ 227.893203][ T6223] usb 7-1: ath9k_htc: USB layer deinitialized [ 227.908109][ C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 230.070846][ T5114] Bluetooth: hci2: command 0x0406 tx timeout [ 230.764862][ T5114] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 230.766645][ T7121] net_ratelimit: 10 callbacks suppressed [ 230.766663][ T7121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.860835][ T7123] netlink: 40 bytes leftover after parsing attributes in process `syz.5.329'. [ 230.880429][ T7123] netlink: 112 bytes leftover after parsing attributes in process `syz.5.329'. [ 235.386565][ T5114] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 235.989755][ T5807] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 236.196279][ T5807] usb 3-1: Using ep0 maxpacket: 8 [ 236.199592][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.199627][ T5807] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.199670][ T5807] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 236.199692][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.262435][ T5807] usb 3-1: config 0 descriptor?? [ 237.656383][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 237.656807][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 237.658587][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 237.659020][ T5807] usbhid 3-1:0.0: can't add hid device: -32 [ 237.661369][ T5807] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 237.771704][ T5807] usb 3-1: USB disconnect, device number 13 [ 239.517189][ T7167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.340'. [ 239.594283][ T7167] netlink: 112 bytes leftover after parsing attributes in process `syz.3.340'. [ 241.416458][ T7182] netlink: 'syz.3.349': attribute type 27 has an invalid length. [ 241.423676][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.350'. [ 241.430748][ T7182] input: syz1 as /devices/virtual/input/input13 [ 244.016153][ T7098] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 244.176001][ T7098] usb 5-1: Using ep0 maxpacket: 32 [ 244.236175][ T7098] usb 5-1: config 0 has an invalid interface number: 76 but max is 0 [ 244.236203][ T7098] usb 5-1: config 0 has no interface number 0 [ 244.267088][ T7098] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 244.267118][ T7098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.267138][ T7098] usb 5-1: Product: syz [ 244.267153][ T7098] usb 5-1: Manufacturer: syz [ 244.267167][ T7098] usb 5-1: SerialNumber: syz [ 244.309170][ T7098] usb 5-1: config 0 descriptor?? [ 244.322172][ T7098] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 244.322224][ T7098] dw2102: su3000_power_ctrl: 1, initialized 0 [ 244.322244][ T7098] dvb-usb: bulk message failed: -22 (2/0) [ 244.376473][ T7098] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.382930][ T7098] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 244.382993][ T7098] usb 5-1: media controller created [ 244.383031][ T7098] dvb-usb: bulk message failed: -22 (6/0) [ 244.383047][ T7098] dw2102: i2c transfer failed. [ 244.383065][ T7098] dvb-usb: bulk message failed: -22 (6/0) [ 244.383078][ T7098] dw2102: i2c transfer failed. [ 244.383095][ T7098] dvb-usb: bulk message failed: -22 (6/0) [ 244.383108][ T7098] dw2102: i2c transfer failed. [ 244.383124][ T7098] dvb-usb: bulk message failed: -22 (6/0) [ 244.383138][ T7098] dw2102: i2c transfer failed. [ 244.383154][ T7098] dvb-usb: bulk message failed: -22 (6/0) [ 244.383168][ T7098] dw2102: i2c transfer failed. [ 244.383183][ T7098] dvb-usb: bulk message failed: -22 (6/0) [ 244.383196][ T7098] dw2102: i2c transfer failed. [ 244.383206][ T7098] dvb-usb: MAC address: 02:02:02:02:02:02 [ 244.547160][ T7098] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.646271][ T7098] dvb-usb: bulk message failed: -22 (3/0) [ 244.646294][ T7098] dw2102: command 0x0e transfer failed. [ 244.646303][ T7098] dvb-usb: bulk message failed: -22 (3/0) [ 244.646315][ T7098] dw2102: command 0x0e transfer failed. [ 244.976046][ T7098] dvb-usb: bulk message failed: -22 (3/0) [ 244.976153][ T7098] dw2102: command 0x0e transfer failed. [ 244.976165][ T7098] dvb-usb: bulk message failed: -22 (3/0) [ 244.976179][ T7098] dw2102: command 0x0e transfer failed. [ 244.976189][ T7098] dvb-usb: bulk message failed: -22 (1/0) [ 244.976202][ T7098] dw2102: command 0x51 transfer failed. [ 245.089379][ T7098] DVB: Unable to find symbol ds3000_attach() [ 245.089395][ T7098] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 245.096041][ T6223] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 245.256124][ T6223] usb 6-1: Using ep0 maxpacket: 32 [ 245.257951][ T6223] usb 6-1: config 0 has an invalid interface number: 76 but max is 0 [ 245.257968][ T6223] usb 6-1: config 0 has no interface number 0 [ 245.263131][ T6223] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 245.263150][ T6223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.263162][ T6223] usb 6-1: Product: syz [ 245.263170][ T6223] usb 6-1: Manufacturer: syz [ 245.263178][ T6223] usb 6-1: SerialNumber: syz [ 245.326321][ T6223] usb 6-1: config 0 descriptor?? [ 245.382128][ T6223] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 245.382182][ T6223] dw2102: su3000_power_ctrl: 1, initialized 0 [ 245.382203][ T6223] dvb-usb: bulk message failed: -22 (2/0) [ 245.417487][ T6223] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.418443][ T6223] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 245.418494][ T6223] usb 6-1: media controller created [ 245.418519][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 245.418534][ T6223] dw2102: i2c transfer failed. [ 245.418551][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 245.418564][ T6223] dw2102: i2c transfer failed. [ 245.418579][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 245.418593][ T6223] dw2102: i2c transfer failed. [ 245.418608][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 245.418621][ T6223] dw2102: i2c transfer failed. [ 245.418643][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 245.418656][ T6223] dw2102: i2c transfer failed. [ 245.418671][ T6223] dvb-usb: bulk message failed: -22 (6/0) [ 245.418684][ T6223] dw2102: i2c transfer failed. [ 245.418694][ T6223] dvb-usb: MAC address: 02:02:02:02:02:02 [ 245.532283][ T6223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.581918][ T6223] dvb-usb: bulk message failed: -22 (3/0) [ 245.581940][ T6223] dw2102: command 0x0e transfer failed. [ 245.581950][ T6223] dvb-usb: bulk message failed: -22 (3/0) [ 245.581964][ T6223] dw2102: command 0x0e transfer failed. [ 245.808808][ T7098] rc_core: IR keymap rc-su3000 not found [ 245.809264][ T7098] Registered IR keymap rc-empty [ 246.685981][ T6223] dvb-usb: bulk message failed: -22 (3/0) [ 246.686007][ T6223] dw2102: command 0x0e transfer failed. [ 246.686013][ T6223] dvb-usb: bulk message failed: -22 (3/0) [ 246.686020][ T6223] dw2102: command 0x0e transfer failed. [ 246.686025][ T6223] dvb-usb: bulk message failed: -22 (1/0) [ 246.686033][ T6223] dw2102: command 0x51 transfer failed. [ 246.755867][ T7098] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 246.816222][ T7098] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input14 [ 246.856432][ T7098] dvb-usb: schedule remote query interval to 150 msecs. [ 246.856456][ T7098] dw2102: su3000_power_ctrl: 0, initialized 1 [ 246.856467][ T7098] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 246.863810][ T7098] usb 5-1: USB disconnect, device number 10 [ 246.901514][ T7216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.357'. [ 246.954510][ T7216] netlink: 112 bytes leftover after parsing attributes in process `syz.2.357'. [ 246.991493][ T6223] DVB: Unable to find symbol ds3000_attach() [ 246.991508][ T6223] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 247.176741][ T6223] rc_core: IR keymap rc-su3000 not found [ 247.176762][ T6223] Registered IR keymap rc-empty [ 247.330642][ T6223] rc rc1: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc1 [ 247.350739][ T6223] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc1/input15 [ 247.381553][ T6223] dvb-usb: schedule remote query interval to 150 msecs. [ 247.381578][ T6223] dw2102: su3000_power_ctrl: 0, initialized 1 [ 247.381591][ T6223] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 247.444456][ T6223] usb 6-1: USB disconnect, device number 9 [ 247.472275][ T7098] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 247.796666][ T7098] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 247.863178][ T6223] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 247.937170][ T7098] usb 5-1: device descriptor read/64, error -71 [ 248.282541][ T7230] binder: 7228:7230 ioctl c018620c 2000000000c0 returned -1 [ 248.286659][ T7230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.362'. [ 248.336019][ T7098] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 249.666538][ T6223] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 249.666722][ T7098] usb usb5-port1: attempt power cycle [ 249.851120][ T6223] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.851156][ T6223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 249.851174][ T6223] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 249.851198][ T6223] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 249.851211][ T6223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.986197][ T6223] usb 6-1: config 0 descriptor?? [ 250.006081][ T7098] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 250.029407][ T7098] usb 5-1: Using ep0 maxpacket: 32 [ 250.031244][ T7098] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 250.031262][ T7098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.079564][ T7098] usb 5-1: config 0 descriptor?? [ 250.096622][ T7098] gspca_main: sunplus-2.14.0 probing 041e:400b [ 250.276190][ T9] usb 6-1: USB disconnect, device number 10 [ 251.193393][ T7233] capability: warning: `syz.4.363' uses deprecated v2 capabilities in a way that may be insecure [ 251.300018][ T7248] FAULT_INJECTION: forcing a failure. [ 251.300018][ T7248] name failslab, interval 1, probability 0, space 0, times 0 [ 251.300267][ T7248] CPU: 1 UID: 0 PID: 7248 Comm: syz.5.369 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 251.300292][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 251.300303][ T7248] Call Trace: [ 251.300308][ T7248] [ 251.300315][ T7248] dump_stack_lvl+0xe8/0x150 [ 251.300336][ T7248] should_fail_ex+0x46b/0x600 [ 251.300353][ T7248] should_failslab+0xa8/0x100 [ 251.300368][ T7248] __kvmalloc_node_noprof+0x16f/0x8f0 [ 251.300385][ T7248] ? vmemdup_user+0x2b/0xd0 [ 251.300401][ T7248] vmemdup_user+0x2b/0xd0 [ 251.300413][ T7248] path_setxattrat+0x2c8/0x430 [ 251.300433][ T7248] ? __pfx_path_setxattrat+0x10/0x10 [ 251.300458][ T7248] ? ksys_write+0x248/0x270 [ 251.300474][ T7248] ? __pfx_ksys_write+0x10/0x10 [ 251.300491][ T7248] __x64_sys_lsetxattr+0xbf/0xe0 [ 251.300504][ T7248] do_syscall_64+0xe2/0xf80 [ 251.300519][ T7248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.300530][ T7248] ? trace_irq_disable+0x37/0x100 [ 251.300542][ T7248] ? clear_bhb_loop+0x60/0xb0 [ 251.300554][ T7248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.300565][ T7248] RIP: 0033:0x7f4696f8acb9 [ 251.300576][ T7248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.300586][ T7248] RSP: 002b:00007f46951e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 251.300599][ T7248] RAX: ffffffffffffffda RBX: 00007f4697205fa0 RCX: 00007f4696f8acb9 [ 251.300607][ T7248] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000200000000000 [ 251.300614][ T7248] RBP: 00007f46951e6090 R08: 0000000000000001 R09: 0000000000000000 [ 251.300621][ T7248] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 251.300628][ T7248] R13: 00007f4697206038 R14: 00007f4697205fa0 R15: 00007ffc46ffad68 [ 251.300643][ T7248] [ 251.308833][ T7247] netlink: 40 bytes leftover after parsing attributes in process `syz.6.370'. [ 251.366686][ T7247] netlink: 112 bytes leftover after parsing attributes in process `syz.6.370'. [ 252.112901][ T7098] gspca_sunplus: reg_w_riv err -71 [ 252.113009][ T7098] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 252.132428][ T7098] usb 5-1: USB disconnect, device number 13 [ 252.405291][ T7258] netlink: 7 bytes leftover after parsing attributes in process `syz.6.373'. [ 255.053907][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 255.053925][ T37] audit: type=1326 audit(1769360072.583:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7271 comm="syz.2.377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe2fd7acb9 code=0x0 [ 255.236560][ T7280] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 255.806983][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.807027][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.861942][ T7292] netlink: 40 bytes leftover after parsing attributes in process `syz.2.381'. [ 255.900091][ T7292] netlink: 112 bytes leftover after parsing attributes in process `syz.2.381'. [ 257.225842][ T7301] overlayfs: failed to resolve './bus': -2 [ 259.100471][ T7319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.495307][ T7330] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 260.501354][ T37] audit: type=1326 audit(1769360078.023:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7329 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3d30acb9 code=0x7ffc0000 [ 260.501403][ T37] audit: type=1326 audit(1769360078.023:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7329 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3d30acb9 code=0x7ffc0000 [ 260.501439][ T37] audit: type=1326 audit(1769360078.023:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7329 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3d30acb9 code=0x7ffc0000 [ 260.501478][ T37] audit: type=1326 audit(1769360078.023:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7329 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3d3d30acb9 code=0x7ffc0000 [ 260.501517][ T37] audit: type=1326 audit(1769360078.023:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7329 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3d30acb9 code=0x7ffc0000 [ 260.501556][ T37] audit: type=1326 audit(1769360078.023:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7329 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3d30acb9 code=0x7ffc0000 [ 260.501594][ T37] audit: type=1326 audit(1769360078.023:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7329 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3d30acb9 code=0x7ffc0000 [ 260.501631][ T37] audit: type=1326 audit(1769360078.023:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7329 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3d3d30acb9 code=0x7ffc0000 [ 260.556332][ T37] audit: type=1326 audit(1769360078.073:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7329 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3d3d2cb58e code=0x7ffc0000 [ 260.556381][ T37] audit: type=1326 audit(1769360078.073:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7329 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3d3d2cb58e code=0x7ffc0000 [ 261.449354][ T7337] overlayfs: failed to resolve './bus': -2 [ 262.930408][ T7343] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 262.930437][ T7343] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 262.934575][ T7343] vhci_hcd vhci_hcd.0: Device attached [ 264.509231][ T7345] vhci_hcd: connection closed [ 264.521050][ T6095] vhci_hcd vhci_hcd.5: stop threads [ 264.522525][ T6095] vhci_hcd vhci_hcd.5: release socket [ 264.522842][ T6095] vhci_hcd vhci_hcd.5: disconnect device [ 264.651124][ T5164] udevd[5164]: worker [5965] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 265.798556][ T7362] FAULT_INJECTION: forcing a failure. [ 265.798556][ T7362] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 265.798592][ T7362] CPU: 0 UID: 0 PID: 7362 Comm: syz.6.403 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 265.798613][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 265.798625][ T7362] Call Trace: [ 265.798632][ T7362] [ 265.798641][ T7362] dump_stack_lvl+0xe8/0x150 [ 265.798672][ T7362] should_fail_ex+0x46b/0x600 [ 265.798701][ T7362] prepare_alloc_pages+0x22a/0x6b0 [ 265.798729][ T7362] __alloc_frozen_pages_noprof+0x12f/0x380 [ 265.798753][ T7362] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 265.798783][ T7362] ? rcu_is_watching+0x15/0xb0 [ 265.798807][ T7362] alloc_pages_mpol+0xd1/0x380 [ 265.798831][ T7362] alloc_pages_noprof+0xce/0x1e0 [ 265.798853][ T7362] af_alg_sendmsg+0x140a/0x24c0 [ 265.798902][ T7362] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 265.798930][ T7362] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 265.798962][ T7362] ? aead_sendmsg+0x26/0xf0 [ 265.798981][ T7362] ? __pfx_aead_sendmsg+0x10/0x10 [ 265.799003][ T7362] __sock_sendmsg+0x21c/0x270 [ 265.799031][ T7362] __sys_sendto+0x3d0/0x560 [ 265.799064][ T7362] ? __pfx___sys_sendto+0x10/0x10 [ 265.799117][ T7362] ? exc_page_fault+0x6a/0xc0 [ 265.799147][ T7362] ? do_user_addr_fault+0xc7c/0x1360 [ 265.799174][ T7362] __x64_sys_sendto+0xde/0x100 [ 265.799205][ T7362] do_syscall_64+0xe2/0xf80 [ 265.799229][ T7362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.799247][ T7362] ? trace_irq_disable+0x37/0x100 [ 265.799268][ T7362] ? clear_bhb_loop+0x60/0xb0 [ 265.799291][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.799310][ T7362] RIP: 0033:0x7f8fd85bb58e [ 265.799327][ T7362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 265.799344][ T7362] RSP: 002b:00007f8fd6854e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 265.799365][ T7362] RAX: ffffffffffffffda RBX: 00007f8fd68566c0 RCX: 00007f8fd85bb58e [ 265.799379][ T7362] RDX: 0000000000000020 RSI: 00007f8fd6855000 RDI: 0000000000000004 [ 265.799392][ T7362] RBP: 0000000000000000 R08: 00007f8fd6854f04 R09: 000000000000000c [ 265.799405][ T7362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 265.799417][ T7362] R13: 00007f8fd6854f58 R14: 00007f8fd6855000 R15: 0000000000000000 [ 265.799448][ T7362] [ 266.797853][ T7373] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 266.802056][ T37] kauditd_printk_skb: 45 callbacks suppressed [ 266.802073][ T37] audit: type=1326 audit(1769360084.323:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7372 comm="syz.6.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd85facb9 code=0x7ffc0000 [ 266.802120][ T37] audit: type=1326 audit(1769360084.323:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7372 comm="syz.6.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd85facb9 code=0x7ffc0000 [ 266.802160][ T37] audit: type=1326 audit(1769360084.323:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7372 comm="syz.6.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd85facb9 code=0x7ffc0000 [ 266.802200][ T37] audit: type=1326 audit(1769360084.323:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7372 comm="syz.6.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8fd85facb9 code=0x7ffc0000 [ 266.802239][ T37] audit: type=1326 audit(1769360084.323:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7372 comm="syz.6.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd85facb9 code=0x7ffc0000 [ 266.802279][ T37] audit: type=1326 audit(1769360084.323:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7372 comm="syz.6.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd85facb9 code=0x7ffc0000 [ 266.802319][ T37] audit: type=1326 audit(1769360084.323:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7372 comm="syz.6.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd85facb9 code=0x7ffc0000 [ 266.802358][ T37] audit: type=1326 audit(1769360084.323:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7372 comm="syz.6.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd85facb9 code=0x7ffc0000 [ 266.802397][ T37] audit: type=1326 audit(1769360084.323:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7372 comm="syz.6.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd85facb9 code=0x7ffc0000 [ 266.802436][ T37] audit: type=1326 audit(1769360084.323:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7372 comm="syz.6.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8fd85facb9 code=0x7ffc0000 [ 268.374509][ T7385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.412'. [ 268.374547][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 269.286092][ T7393] FAULT_INJECTION: forcing a failure. [ 269.286092][ T7393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.286129][ T7393] CPU: 1 UID: 0 PID: 7393 Comm: syz.2.400 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 269.286156][ T7393] Tainted: [L]=SOFTLOCKUP [ 269.286163][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 269.286175][ T7393] Call Trace: [ 269.286182][ T7393] [ 269.286190][ T7393] dump_stack_lvl+0xe8/0x150 [ 269.286221][ T7393] should_fail_ex+0x46b/0x600 [ 269.286249][ T7393] _copy_from_iter+0x1d3/0x1670 [ 269.286275][ T7393] ? kmalloc_reserve+0xbd/0x290 [ 269.286302][ T7393] ? rcu_is_watching+0x15/0xb0 [ 269.286330][ T7393] ? kmalloc_reserve+0xbd/0x290 [ 269.286360][ T7393] ? __pfx__copy_from_iter+0x10/0x10 [ 269.286385][ T7393] ? __build_skb_around+0x22d/0x3c0 [ 269.286413][ T7393] ? __alloc_skb+0x193/0x390 [ 269.286439][ T7393] ? netlink_sendmsg+0x650/0xb40 [ 269.286460][ T7393] ? skb_put+0x11b/0x210 [ 269.286480][ T7393] netlink_sendmsg+0x6c0/0xb40 [ 269.286511][ T7393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.286535][ T7393] ? is_bpf_text_address+0x292/0x2b0 [ 269.286562][ T7393] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.286584][ T7393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.286605][ T7393] __sock_sendmsg+0x21c/0x270 [ 269.286632][ T7393] ____sys_sendmsg+0x4e1/0x800 [ 269.286660][ T7393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.286689][ T7393] ? import_iovec+0x73/0xa0 [ 269.286718][ T7393] ___sys_sendmsg+0x2a5/0x360 [ 269.286737][ T7393] ? __lock_acquire+0x6b5/0x2cf0 [ 269.286765][ T7393] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.286818][ T7393] ? __fget_files+0x2a/0x420 [ 269.286838][ T7393] ? __fget_files+0x3a6/0x420 [ 269.286868][ T7393] __x64_sys_sendmsg+0x1c3/0x2a0 [ 269.286891][ T7393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.286920][ T7393] ? __pfx_ksys_write+0x10/0x10 [ 269.286956][ T7393] do_syscall_64+0xe2/0xf80 [ 269.286982][ T7393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.287001][ T7393] ? trace_irq_disable+0x37/0x100 [ 269.287020][ T7393] ? clear_bhb_loop+0x60/0xb0 [ 269.287043][ T7393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.287063][ T7393] RIP: 0033:0x7fbe2fd7acb9 [ 269.287081][ T7393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.287097][ T7393] RSP: 002b:00007fbe2dfd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.287142][ T7393] RAX: ffffffffffffffda RBX: 00007fbe2fff5fa0 RCX: 00007fbe2fd7acb9 [ 269.287157][ T7393] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000003 [ 269.287170][ T7393] RBP: 00007fbe2dfd6090 R08: 0000000000000000 R09: 0000000000000000 [ 269.287182][ T7393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.287194][ T7393] R13: 00007fbe2fff6038 R14: 00007fbe2fff5fa0 R15: 00007ffc2de84468 [ 269.287225][ T7393] [ 270.904131][ T5114] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 270.904728][ T7401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.046344][ T7403] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 272.526122][ T993] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 272.679873][ T993] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 272.679903][ T993] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.679923][ T993] usb 4-1: config 0 has no interface number 0 [ 272.679954][ T993] usb 4-1: config 0 interface 153 has no altsetting 0 [ 272.683561][ T993] usb 4-1: string descriptor 0 read error: -22 [ 272.683655][ T993] usb 4-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83 [ 272.683669][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.752182][ T993] usb 4-1: config 0 descriptor?? [ 272.769460][ T993] uvcvideo 4-1:0.153: probe with driver uvcvideo failed with error -22 [ 273.280870][ T7433] netlink: 'syz.5.426': attribute type 62 has an invalid length. [ 273.413942][ T5857] usb 4-1: USB disconnect, device number 6 [ 274.884956][ T5114] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 274.885582][ T7445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.944910][ T7449] bridge0: entered promiscuous mode [ 275.417086][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 275.417105][ T37] audit: type=1804 audit(1769360092.933:243): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.436" name="/newroot/58/file0" dev="tmpfs" ino=356 res=1 errno=0 [ 277.145055][ T5808] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 277.174726][ T7473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.335155][ T7475] FAULT_INJECTION: forcing a failure. [ 277.335155][ T7475] name failslab, interval 1, probability 0, space 0, times 0 [ 277.335184][ T7475] CPU: 1 UID: 0 PID: 7475 Comm: syz.3.444 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 277.335209][ T7475] Tainted: [L]=SOFTLOCKUP [ 277.335216][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 277.335228][ T7475] Call Trace: [ 277.335235][ T7475] [ 277.335244][ T7475] dump_stack_lvl+0xe8/0x150 [ 277.335274][ T7475] should_fail_ex+0x46b/0x600 [ 277.335298][ T7475] ? skb_clone+0x212/0x3a0 [ 277.335310][ T7475] should_failslab+0xa8/0x100 [ 277.335322][ T7475] ? skb_clone+0x212/0x3a0 [ 277.335332][ T7475] kmem_cache_alloc_noprof+0x83/0x6a0 [ 277.335347][ T7475] ? __netlink_lookup+0xc6/0x8b0 [ 277.335364][ T7475] skb_clone+0x212/0x3a0 [ 277.335378][ T7475] __netlink_deliver_tap+0x404/0x850 [ 277.335395][ T7475] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.335408][ T7475] netlink_deliver_tap+0x19c/0x1b0 [ 277.335420][ T7475] netlink_unicast+0x805/0x9f0 [ 277.335435][ T7475] ? __pfx_netlink_unicast+0x10/0x10 [ 277.335445][ T7475] ? __alloc_skb+0x193/0x390 [ 277.335460][ T7475] ? netlink_sendmsg+0x650/0xb40 [ 277.335471][ T7475] ? skb_put+0x11b/0x210 [ 277.335483][ T7475] netlink_sendmsg+0x813/0xb40 [ 277.335499][ T7475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.335512][ T7475] ? is_bpf_text_address+0x292/0x2b0 [ 277.335528][ T7475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.335542][ T7475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.335555][ T7475] __sock_sendmsg+0x21c/0x270 [ 277.335571][ T7475] ____sys_sendmsg+0x4e1/0x800 [ 277.335586][ T7475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.335602][ T7475] ? import_iovec+0x73/0xa0 [ 277.335619][ T7475] ___sys_sendmsg+0x2a5/0x360 [ 277.335637][ T7475] ? __lock_acquire+0x6b5/0x2cf0 [ 277.335655][ T7475] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.335683][ T7475] ? __fget_files+0x2a/0x420 [ 277.335694][ T7475] ? __fget_files+0x3a6/0x420 [ 277.335710][ T7475] __x64_sys_sendmsg+0x1c3/0x2a0 [ 277.335723][ T7475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.335739][ T7475] ? __pfx_ksys_write+0x10/0x10 [ 277.335759][ T7475] do_syscall_64+0xe2/0xf80 [ 277.335775][ T7475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.335785][ T7475] ? trace_irq_disable+0x37/0x100 [ 277.335796][ T7475] ? clear_bhb_loop+0x60/0xb0 [ 277.335809][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.335820][ T7475] RIP: 0033:0x7f3d3d30acb9 [ 277.335831][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.335841][ T7475] RSP: 002b:00007f3d3b566028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.335857][ T7475] RAX: ffffffffffffffda RBX: 00007f3d3d585fa0 RCX: 00007f3d3d30acb9 [ 277.335871][ T7475] RDX: 0000000020008880 RSI: 0000200000003140 RDI: 0000000000000003 [ 277.335883][ T7475] RBP: 00007f3d3b566090 R08: 0000000000000000 R09: 0000000000000000 [ 277.335894][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.335905][ T7475] R13: 00007f3d3d586038 R14: 00007f3d3d585fa0 R15: 00007ffc4e4b8c58 [ 277.335934][ T7475] [ 278.000523][ T7479] FAULT_INJECTION: forcing a failure. [ 278.000523][ T7479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.000603][ T7479] CPU: 1 UID: 0 PID: 7479 Comm: syz.3.445 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 278.000632][ T7479] Tainted: [L]=SOFTLOCKUP [ 278.000639][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 278.000652][ T7479] Call Trace: [ 278.000660][ T7479] [ 278.000670][ T7479] dump_stack_lvl+0xe8/0x150 [ 278.000702][ T7479] should_fail_ex+0x46b/0x600 [ 278.000731][ T7479] _copy_from_user+0x2d/0xb0 [ 278.000759][ T7479] copy_from_sockptr+0x5e/0x90 [ 278.000783][ T7479] do_tcp_getsockopt+0x1ceb/0x2930 [ 278.000816][ T7479] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 278.000838][ T7479] ? sock_recv_errqueue+0x520/0x590 [ 278.000866][ T7479] ? __schedule+0x1491/0x4f50 [ 278.000915][ T7479] ? __pfx___schedule+0x10/0x10 [ 278.000939][ T7479] ? __lock_acquire+0x6b5/0x2cf0 [ 278.000975][ T7479] ? irqentry_exit+0x59c/0x620 [ 278.001000][ T7479] ? lockdep_hardirqs_on+0x7a/0x110 [ 278.001025][ T7479] ? irqentry_exit+0x59c/0x620 [ 278.001049][ T7479] ? rcu_is_watching+0x15/0xb0 [ 278.001081][ T7479] ? __might_fault+0xaf/0x130 [ 278.001110][ T7479] ? should_fail_ex+0x164/0x600 [ 278.001133][ T7479] tcp_getsockopt+0x83/0x130 [ 278.001155][ T7479] ? sock_recv_errqueue+0x520/0x590 [ 278.001180][ T7479] ? sock_recv_errqueue+0x520/0x590 [ 278.001204][ T7479] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 278.001231][ T7479] do_sock_getsockopt+0x2d3/0x3f0 [ 278.001254][ T7479] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 278.001275][ T7479] ? __fget_files+0x3a6/0x420 [ 278.001294][ T7479] ? __fget_files+0x2a/0x420 [ 278.001321][ T7479] __x64_sys_getsockopt+0x1aa/0x250 [ 278.001350][ T7479] do_syscall_64+0xe2/0xf80 [ 278.001374][ T7479] ? rcu_is_watching+0x15/0xb0 [ 278.001392][ T7479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.001411][ T7479] ? clear_bhb_loop+0x60/0xb0 [ 278.001435][ T7479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.001454][ T7479] RIP: 0033:0x7f3d3d30acb9 [ 278.001471][ T7479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.001489][ T7479] RSP: 002b:00007f3d3b524028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 278.001510][ T7479] RAX: ffffffffffffffda RBX: 00007f3d3d586180 RCX: 00007f3d3d30acb9 [ 278.001526][ T7479] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000006 [ 278.001539][ T7479] RBP: 00007f3d3b524090 R08: 0000200000000300 R09: 0000000000000000 [ 278.001552][ T7479] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 278.001565][ T7479] R13: 00007f3d3d586218 R14: 00007f3d3d586180 R15: 00007ffc4e4b8c58 [ 278.001603][ T7479] [ 278.746813][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 281.107447][ T5114] Bluetooth: hci5: unexpected event for opcode 0x2006 [ 281.108369][ T7507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.596037][ T5882] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 281.756120][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 281.762205][ T5882] usb 7-1: config 0 has an invalid interface number: 76 but max is 0 [ 281.762235][ T5882] usb 7-1: config 0 has no interface number 0 [ 281.779625][ T5882] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 281.779658][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.779679][ T5882] usb 7-1: Product: syz [ 281.779693][ T5882] usb 7-1: Manufacturer: syz [ 281.779708][ T5882] usb 7-1: SerialNumber: syz [ 281.802253][ T5882] usb 7-1: config 0 descriptor?? [ 281.856483][ T5882] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 281.856545][ T5882] dw2102: su3000_power_ctrl: 1, initialized 0 [ 281.856566][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 281.889298][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 281.892746][ T5882] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 281.892808][ T5882] usb 7-1: media controller created [ 281.892835][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 281.892850][ T5882] dw2102: i2c transfer failed. [ 281.892868][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 281.892882][ T5882] dw2102: i2c transfer failed. [ 281.892898][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 281.892913][ T5882] dw2102: i2c transfer failed. [ 281.892928][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 281.892942][ T5882] dw2102: i2c transfer failed. [ 281.892958][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 281.892972][ T5882] dw2102: i2c transfer failed. [ 281.892988][ T5882] dvb-usb: bulk message failed: -22 (6/0) [ 281.893002][ T5882] dw2102: i2c transfer failed. [ 281.893012][ T5882] dvb-usb: MAC address: 02:02:02:02:02:02 [ 282.049299][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.112674][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 282.112697][ T5882] dw2102: command 0x0e transfer failed. [ 282.112707][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 282.112721][ T5882] dw2102: command 0x0e transfer failed. [ 282.415993][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 282.416017][ T5882] dw2102: command 0x0e transfer failed. [ 282.416027][ T5882] dvb-usb: bulk message failed: -22 (3/0) [ 282.416042][ T5882] dw2102: command 0x0e transfer failed. [ 282.416051][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 282.416065][ T5882] dw2102: command 0x51 transfer failed. [ 282.751343][ T5882] DVB: Unable to find symbol ds3000_attach() [ 282.751361][ T5882] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 283.178157][ T5882] rc_core: IR keymap rc-su3000 not found [ 283.178172][ T5882] Registered IR keymap rc-empty [ 283.179123][ T5882] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 283.180818][ T5882] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input16 [ 283.185252][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 283.185267][ T5882] dw2102: su3000_power_ctrl: 0, initialized 1 [ 283.185274][ T5882] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 283.191013][ T5882] usb 7-1: USB disconnect, device number 7 [ 283.476678][ T5882] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 284.527921][ T6223] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 284.865973][ T6223] usb 3-1: Using ep0 maxpacket: 32 [ 284.870223][ T6223] usb 3-1: config 0 has an invalid interface number: 76 but max is 0 [ 284.870253][ T6223] usb 3-1: config 0 has no interface number 0 [ 284.958636][ T7542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.037096][ T5114] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 285.226091][ T38] INFO: task kworker/1:1:44 blocked for more than 144 seconds. [ 285.226119][ T38] Tainted: G L syzkaller #0 [ 285.226132][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.226142][ T38] task:kworker/1:1 state:D stack:21272 pid:44 tgid:44 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 285.226194][ T38] Workqueue: usb_hub_wq hub_event [ 285.226222][ T38] Call Trace: [ 285.226229][ T38] [ 285.226243][ T38] __schedule+0x147b/0x4f50 [ 285.226286][ T38] ? __driver_probe_device+0x18c/0x320 [ 285.226309][ T38] ? bus_for_each_drv+0x25b/0x2f0 [ 285.226309][ T38] ? bus_for_each_drv+0x25b/0x2f0 [ 285.226338][ T38] ? look_up_lock_class+0x57/0x110 [ 285.226367][ T38] ? __pfx___schedule+0x10/0x10 [ 285.226401][ T38] ? schedule+0x90/0x360 [ 285.226428][ T38] schedule+0x164/0x360 [ 285.226454][ T38] schedule_timeout+0xc3/0x2c0 [ 285.226541][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 285.226566][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 285.226600][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 285.226624][ T38] ? wait_for_completion+0x274/0x5e0 [ 285.226651][ T38] wait_for_completion+0x2cc/0x5e0 [ 285.226690][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 285.226729][ T38] i2c_del_adapter+0x5c0/0x790 [ 285.226750][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 285.226780][ T38] ? kfree+0x1bb/0x8f0 [ 285.226804][ T38] ? __pfx_i2c_del_adapter+0x10/0x10 [ 285.226828][ T38] ? dvb_usbv2_exit+0x935/0xb60 [ 285.226857][ T38] dvb_usbv2_probe+0x4c0/0x3c20 [ 285.226932][ T38] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 285.226965][ T38] ? __pm_runtime_set_status+0x743/0xa20 [ 285.226995][ T38] usb_probe_interface+0x668/0xc90 [ 285.227032][ T38] ? __pfx_usb_probe_interface+0x10/0x10 [ 285.227056][ T38] really_probe+0x267/0xaf0 [ 285.227086][ T38] __driver_probe_device+0x18c/0x320 [ 285.227112][ T38] driver_probe_device+0x4f/0x240 [ 285.227138][ T38] __device_attach_driver+0x279/0x430 [ 285.227166][ T38] bus_for_each_drv+0x25b/0x2f0 [ 285.227193][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 285.227216][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 285.227243][ T38] ? rt_spin_unlock+0x160/0x200 [ 285.227272][ T38] __device_attach+0x2c8/0x450 [ 285.227297][ T38] ? __pfx___device_attach+0x10/0x10 [ 285.227319][ T38] ? rt_spin_unlock+0x160/0x200 [ 285.227349][ T38] device_initial_probe+0xa1/0xd0 [ 285.227373][ T38] bus_probe_device+0x12d/0x220 [ 285.227398][ T38] ? device_add+0x726/0xb80 [ 285.227419][ T38] device_add+0x7b6/0xb80 [ 285.227444][ T38] usb_set_configuration+0x1a87/0x2110 [ 285.227497][ T38] usb_generic_driver_probe+0x8d/0x150 [ 285.227574][ T38] usb_probe_device+0x1c4/0x3b0 [ 285.227604][ T38] ? __pfx_usb_probe_device+0x10/0x10 [ 285.227627][ T38] really_probe+0x267/0xaf0 [ 285.227656][ T38] __driver_probe_device+0x18c/0x320 [ 285.227681][ T38] driver_probe_device+0x4f/0x240 [ 285.227707][ T38] __device_attach_driver+0x279/0x430 [ 285.227733][ T38] bus_for_each_drv+0x25b/0x2f0 [ 285.227760][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 285.227783][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 285.227810][ T38] ? rt_spin_unlock+0x160/0x200 [ 285.227839][ T38] __device_attach+0x2c8/0x450 [ 285.227862][ T38] ? __pfx___device_attach+0x10/0x10 [ 285.227884][ T38] ? rt_spin_unlock+0x160/0x200 [ 285.227914][ T38] device_initial_probe+0xa1/0xd0 [ 285.227938][ T38] bus_probe_device+0x12d/0x220 [ 285.227968][ T38] ? device_add+0x726/0xb80 [ 285.227989][ T38] device_add+0x7b6/0xb80 [ 285.228013][ T38] usb_new_device+0x9f8/0x16e0 [ 285.228047][ T38] ? __pfx_usb_new_device+0x10/0x10 [ 285.228077][ T38] hub_event+0x2a49/0x4f60 [ 285.228151][ T38] ? __pfx_hub_event+0x10/0x10 [ 285.228174][ T38] ? process_scheduled_works+0xa0f/0x17a0 [ 285.228204][ T38] ? process_scheduled_works+0xa0f/0x17a0 [ 285.228226][ T38] ? process_scheduled_works+0xa0f/0x17a0 [ 285.228251][ T38] process_scheduled_works+0xaec/0x17a0 [ 285.228302][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 285.228323][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 285.228352][ T38] ? assign_work+0x3d3/0x440 [ 285.228380][ T38] worker_thread+0x89f/0xd90 [ 285.228430][ T38] kthread+0x726/0x8b0 [ 285.228459][ T38] ? __pfx_worker_thread+0x10/0x10 [ 285.228482][ T38] ? __pfx_kthread+0x10/0x10 [ 285.228506][ T38] ? rt_spin_unlock+0x14f/0x200 [ 285.228531][ T38] ? rt_spin_unlock+0x160/0x200 [ 285.228551][ T38] ? __pfx_kthread+0x10/0x10 [ 285.426280][ T6223] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 285.426301][ T6223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.426312][ T6223] usb 3-1: Product: syz [ 285.426320][ T6223] usb 3-1: Manufacturer: syz [ 285.426329][ T6223] usb 3-1: SerialNumber: syz [ 285.435796][ T38] ret_from_fork+0x51b/0xa40 [ 285.435833][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 285.435989][ T38] ? __switch_to+0xc82/0x1410 [ 285.436015][ T38] ? __pfx_kthread+0x10/0x10 [ 285.436044][ T38] ret_from_fork_asm+0x1a/0x30 [ 285.436177][ T38] [ 285.436354][ T38] INFO: task syz.0.100:6305 blocked for more than 144 seconds. [ 285.436373][ T38] Tainted: G L syzkaller #0 [ 285.436384][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.436393][ T38] task:syz.0.100 state:D stack:27392 pid:6305 tgid:6291 ppid:5803 task_flags:0x400040 flags:0x00080002 [ 285.436447][ T38] Call Trace: [ 285.436455][ T38] [ 285.436467][ T38] __schedule+0x147b/0x4f50 [ 285.436519][ T38] ? __pfx___schedule+0x10/0x10 [ 285.436540][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 285.436577][ T38] rt_mutex_schedule+0x76/0xf0 [ 285.436596][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 285.436630][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 285.436653][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 285.436676][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 285.436697][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 285.436729][ T38] ? usbdev_open+0x182/0x790 [ 285.436760][ T38] ? usbdev_open+0x182/0x790 [ 285.436791][ T38] ? usbdev_open+0x182/0x790 [ 285.436814][ T38] mutex_lock_nested+0x168/0x1d0 [ 285.436833][ T38] ? usbdev_open+0xa7/0x790 [ 285.436862][ T38] usbdev_open+0x182/0x790 [ 285.436891][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 285.436913][ T38] ? __pfx_usbdev_open+0x10/0x10 [ 285.436946][ T38] ? rt_spin_unlock+0x14f/0x200 [ 285.436971][ T38] ? rt_spin_unlock+0x160/0x200 [ 285.436993][ T38] chrdev_open+0x4d0/0x5f0 [ 285.437016][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 285.437037][ T38] ? fsnotify_open_perm_and_set_mode+0x116/0x620 [ 285.437064][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 285.437082][ T38] do_dentry_open+0x7d0/0x1270 [ 285.437114][ T38] vfs_open+0x3b/0x350 [ 285.437133][ T38] ? path_openat+0x34b1/0x3e70 [ 285.437159][ T38] path_openat+0x34c9/0x3e70 [ 285.437215][ T38] ? __pfx_path_openat+0x10/0x10 [ 285.437239][ T38] ? kasan_save_track+0x4f/0x80 [ 285.437262][ T38] ? kasan_save_track+0x3e/0x80 [ 285.437285][ T38] ? __kasan_slab_alloc+0x6c/0x80 [ 285.437308][ T38] ? kmem_cache_alloc_noprof+0x188/0x6a0 [ 285.437332][ T38] ? getname_flags+0xb7/0x540 [ 285.437349][ T38] ? do_sys_openat2+0xca/0x220 [ 285.437377][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 285.437411][ T38] do_filp_open+0x22d/0x490 [ 285.437438][ T38] ? __pfx_do_filp_open+0x10/0x10 [ 285.437460][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 285.437503][ T38] ? alloc_fd+0x64e/0x6c0 [ 285.437534][ T38] do_sys_openat2+0x12f/0x220 [ 285.437555][ T38] ? __se_sys_futex+0x3a8/0x450 [ 285.437581][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 285.437609][ T38] ? rcu_is_watching+0x15/0xb0 [ 285.437632][ T38] __x64_sys_openat+0x138/0x170 [ 285.437659][ T38] do_syscall_64+0xe2/0xf80 [ 285.437683][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.437703][ T38] ? trace_irq_disable+0x37/0x100 [ 285.437723][ T38] ? clear_bhb_loop+0x60/0xb0 [ 285.437746][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.437766][ T38] RIP: 0033:0x7f8255f5b58e [ 285.437783][ T38] RSP: 002b:00007f82541d4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 285.437803][ T38] RAX: ffffffffffffffda RBX: 00007f82541d56c0 RCX: 00007f8255f5b58e [ 285.437817][ T38] RDX: 000000000000a401 RSI: 00007f82541d4c00 RDI: ffffffffffffff9c [ 285.437831][ T38] RBP: 00007f82541d4c00 R08: 0000000000000000 R09: 0000000000000000 [ 285.437844][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 285.437858][ T38] R13: 00007f8256216128 R14: 00007f8256216090 R15: 00007fffb84219f8 [ 285.437888][ T38] [ 285.437925][ T38] [ 285.437925][ T38] Showing all locks held in the system: [ 285.437941][ T38] 4 locks held by pr/legacy/17: [ 285.437956][ T38] 1 lock held by khungtaskd/38: [ 285.437967][ T38] #0: ffffffff8d9c7780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 285.438023][ T38] 8 locks held by kworker/u8:2/43: [ 285.438035][ T38] 5 locks held by kworker/1:1/44: [ 285.438045][ T38] #0: ffff88801f2fe538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 285.438094][ T38] #1: ffffc90000b67bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 285.438142][ T38] #2: ffff888028016188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 285.438189][ T38] #3: ffff888034d50188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 285.438234][ T38] #4: ffff888021770150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 285.438303][ T38] 1 lock held by udevd/5164: [ 285.438315][ T38] 2 locks held by getty/5557: [ 285.438326][ T38] #0: ffff88814e35d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 285.438373][ T38] #1: ffffc9000421b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 285.438425][ T38] 3 locks held by syz-executor/5801: [ 285.438442][ T38] 4 locks held by udevd/5965: [ 285.438452][ T38] #0: ffff888034102720 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 285.438502][ T38] #1: ffff888029938878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 285.438555][ T38] #2: ffff888029f7d698 (kn->active#24){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 285.438607][ T38] #3: ffff888034d50188 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 285.438653][ T38] 5 locks held by kworker/u8:12/6095: [ 285.438664][ T38] 2 locks held by kworker/u8:13/6097: [ 285.438676][ T38] 3 locks held by kworker/1:6/6223: [ 285.438687][ T38] #0: ffff88801f2fe538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 285.438734][ T38] #1: ffffc9000526fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 285.438781][ T38] #2: ffff88802832c188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 285.438827][ T38] 1 lock held by syz.0.100/6305: [ 285.438838][ T38] #0: ffff888028016188 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x790 [ 285.438890][ T38] 1 lock held by syz.3.449/7491: [ 285.438901][ T38] 1 lock held by syz.5.465/7535: [ 285.438912][ T38] #0: ffffffff8d9cdfb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 285.438966][ T38] [ 285.438971][ T38] ============================================= [ 285.438971][ T38] [ 285.438987][ T38] NMI backtrace for cpu 0 [ 285.439003][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 285.439029][ T38] Tainted: [L]=SOFTLOCKUP [ 285.439036][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 285.439046][ T38] Call Trace: [ 285.439054][ T38] [ 285.439061][ T38] dump_stack_lvl+0xe8/0x150 [ 285.439087][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 285.439107][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 285.439131][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 285.439153][ T38] sys_info+0x135/0x170 [ 285.439170][ T38] watchdog+0xf90/0xfe0 [ 285.439195][ T38] ? watchdog+0x209/0xfe0 [ 285.439222][ T38] kthread+0x726/0x8b0 [ 285.439250][ T38] ? __pfx_watchdog+0x10/0x10 [ 285.439269][ T38] ? __pfx_kthread+0x10/0x10 [ 285.439292][ T38] ? rt_spin_unlock+0x14f/0x200 [ 285.439315][ T38] ? rt_spin_unlock+0x160/0x200 [ 285.439333][ T38] ? __pfx_kthread+0x10/0x10 [ 285.439359][ T38] ret_from_fork+0x51b/0xa40 [ 285.439382][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 285.439402][ T38] ? __switch_to+0xc82/0x1410 [ 285.439423][ T38] ? __pfx_kthread+0x10/0x10 [ 285.439449][ T38] ret_from_fork_asm+0x1a/0x30 [ 285.439489][ T38] [ 285.439496][ T38] Sending NMI from CPU 0 to CPUs 1: [ 285.439529][ C1] NMI backtrace for cpu 1 [ 285.439543][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 285.439565][ C1] Tainted: [L]=SOFTLOCKUP [ 285.439571][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 285.439585][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 285.439607][ C1] Code: e8 2e 3b ac fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4f 53 0f fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 285.439621][ C1] RSP: 0018:ffffc90000167950 EFLAGS: 00000202 [ 285.439635][ C1] RAX: 1ffffffff3291f00 RBX: 00000000000003fd RCX: 0000000000000000 [ 285.439646][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 285.439656][ C1] RBP: ffffffff9948fff0 R08: 0000000000000000 R09: 0000000000000000 [ 285.439667][ C1] R10: dffffc0000000000 R11: ffffffff851523e0 R12: dffffc0000000000 [ 285.439679][ C1] R13: 0000000000000000 R14: ffffffff9948fd60 R15: 0000000000000000 [ 285.439689][ C1] FS: 0000000000000000(0000) GS:ffff8881268fa000(0000) knlGS:0000000000000000 [ 285.439703][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.439714][ C1] CR2: 00007f715be356b8 CR3: 0000000028350000 CR4: 00000000003526f0 [ 285.439729][ C1] Call Trace: [ 285.439736][ C1] [ 285.439743][ C1] wait_for_lsr+0x1aa/0x2f0 [ 285.439769][ C1] serial8250_console_write+0x120d/0x1b90 [ 285.439796][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 285.439815][ C1] ? console_flush_one_record+0xfa/0xb90 [ 285.439838][ C1] ? console_flush_one_record+0x48f/0xb90 [ 285.439859][ C1] console_flush_one_record+0x68b/0xb90 [ 285.439882][ C1] ? console_flush_one_record+0xfa/0xb90 [ 285.439905][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 285.439926][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 285.439949][ C1] legacy_kthread_func+0x1b6/0x250 [ 285.439970][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 285.439989][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 285.440009][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 285.440027][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 285.440049][ C1] kthread+0x726/0x8b0 [ 285.440070][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 285.440089][ C1] ? __pfx_kthread+0x10/0x10 [ 285.440108][ C1] ? rt_spin_unlock+0x14f/0x200 [ 285.440126][ C1] ? rt_spin_unlock+0x160/0x200 [ 285.440141][ C1] ? __pfx_kthread+0x10/0x10 [ 285.440162][ C1] ret_from_fork+0x51b/0xa40 [ 285.440187][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 285.440203][ C1] ? __switch_to+0xc82/0x1410 [ 285.440219][ C1] ? __pfx_kthread+0x10/0x10 [ 285.440240][ C1] ret_from_fork_asm+0x1a/0x30 [ 285.440268][ C1] [ 285.440525][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 285.440547][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 285.440572][ T38] Tainted: [L]=SOFTLOCKUP [ 285.440579][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 285.440589][ T38] Call Trace: [ 285.440597][ T38] [ 285.440605][ T38] vpanic+0x1e0/0x670 [ 285.440633][ T38] panic+0xc5/0xd0 [ 285.440656][ T38] ? __pfx_panic+0x10/0x10 [ 285.440688][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 285.440713][ T38] watchdog+0xfda/0xfe0 [ 285.440738][ T38] ? watchdog+0x209/0xfe0 [ 285.440765][ T38] kthread+0x726/0x8b0 [ 285.440792][ T38] ? __pfx_watchdog+0x10/0x10 [ 285.440812][ T38] ? __pfx_kthread+0x10/0x10 [ 285.440835][ T38] ? rt_spin_unlock+0x14f/0x200 [ 285.440859][ T38] ? rt_spin_unlock+0x160/0x200 [ 285.440877][ T38] ? __pfx_kthread+0x10/0x10 [ 285.440904][ T38] ret_from_fork+0x51b/0xa40 [ 285.440933][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 285.440953][ T38] ? __switch_to+0xc82/0x1410 [ 285.440975][ T38] ? __pfx_kthread+0x10/0x10 [ 285.441001][ T38] ret_from_fork_asm+0x1a/0x30 [ 285.441041][ T38] [ 285.441394][ T38] Kernel Offset: disabled