last executing test programs: 9m47.930442353s ago: executing program 0 (id=623): syz_emit_ethernet(0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9m46.933170304s ago: executing program 0 (id=631): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) syz_clone3(&(0x7f0000000440)={0x0, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200), {0x13}, &(0x7f0000000300)=""/44, 0x2c, &(0x7f0000000340)=""/146, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) syz_open_procfs(r2, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='update defauut u\x00er:({]{t%@\x00'], 0x1c, 0xfffffffffffffff9) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r4 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upd'], 0x1a, 0xffffffffffffffff) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_vhci(0x0, 0x15) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000007c0)=ANY=[], 0xffe0) 9m44.658653217s ago: executing program 0 (id=638): syz_emit_ethernet(0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000500)=""/107, 0x6b}], &(0x7f0000000580)=[0xf2, 0x2a133a8f, 0x12db, 0x7, 0x9, 0x3, 0x4, 0x1, 0x8], 0x4}, 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9m41.757284434s ago: executing program 0 (id=646): syz_emit_ethernet(0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9m40.355681953s ago: executing program 0 (id=653): socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x28, 0x1, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r0 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xef0, 0xf62e, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) openat$dsp(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 9m37.163732034s ago: executing program 0 (id=662): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2cf9977a71da3cb, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0xf0cfbc5d1cbe1900, @fd_index=0x4, 0x5, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xf1, 0x10, 0x39}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={r7, 0x2d, "3681532e0e85c77eb94b8766be1a01f58efb636f4cbcbe0b9d954eb105ea2d36c3acb61819f59cbd32d3ffd3f9"}, &(0x7f0000000240)=0x35) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @nfc, @l2tp={0x2, 0x0, @empty}, 0xa00, 0x0, 0x0, 0x0, 0x51, 0x0, 0x2}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r8) r11 = socket(0x11, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r11, &(0x7f0000000180)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r11, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @dev}, 0x14) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="000429bd7000fddbdf25900000000800040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x44) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) 9m21.686760272s ago: executing program 32 (id=662): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2cf9977a71da3cb, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0xf0cfbc5d1cbe1900, @fd_index=0x4, 0x5, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xf1, 0x10, 0x39}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={r7, 0x2d, "3681532e0e85c77eb94b8766be1a01f58efb636f4cbcbe0b9d954eb105ea2d36c3acb61819f59cbd32d3ffd3f9"}, &(0x7f0000000240)=0x35) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @nfc, @l2tp={0x2, 0x0, @empty}, 0xa00, 0x0, 0x0, 0x0, 0x51, 0x0, 0x2}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r8) r11 = socket(0x11, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r11, &(0x7f0000000180)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r11, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @dev}, 0x14) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="000429bd7000fddbdf25900000000800040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x44) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) 10.335410705s ago: executing program 1 (id=2599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000820000c0"]) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r6], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x140cc014) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000001880)={0x498, r8, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x104, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xda, 0x4, "c8ebea087d2b41717d6996c83e13b98776783350bf77586e448134a2de1e4413cf61f3cf34ea3235d302c1b65254671ffc2818df4047f02f289d78893b534dca772084d9f9a2ba57100634379a01d70d32b8fc16cbcb90d667ac800dae37b96742c9c0ecfdc1cf8f978f8d1d55e1da5d623a48e3b4d50f3e03cd9ea2f0b4847e9f601f2d3b0f61e50ad745f9993176b13d7ad5d4fc4c0d6ba00c50133faf2afd644889dc87da0773b4523e0b6334554c500ba84d5d9ef0863b32eaafdcd6be1dbec4c32ec8c99707a34b924ddf66197d3dbe1a8cf13b"}, @ETHTOOL_A_BITSET_MASK={0xb, 0x5, "eec34dd1d1f22e"}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_MODES={0x38, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x26, 0x5, "0c59c3e042d5c14f4e7237078bbb8f5af6ddce20ccaddf3d42e6802521a0106e8208"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb1}]}, @ETHTOOL_A_WOL_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0x234, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':#\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x101, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']^\\(^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '$,\\*%@&}\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '::\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':\\\x88#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-}*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'matchall\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xbd-\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffa}]}, @ETHTOOL_A_WOL_MODES={0x64, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x4}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'multiq\x00'}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x498}, 0x1, 0x0, 0x0, 0x4081}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="042129bd7000fcdbdf25120000000800090004004000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) (async) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0xfffffffd) 9.909747709s ago: executing program 1 (id=2601): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f4, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 9.726663074s ago: executing program 1 (id=2602): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x40, 0x0) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = dup2(r2, r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='free_extent_state\x00', r3, 0x0, 0x4}, 0x18) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x9, 0x0, '\x00', [{0xed6, 0x8, 0x0, 0x7ff, 0x9, 0x8c}, {0x5, 0x8, 0x3, 0x7, 0x34, 0xf655}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) r6 = socket$inet6(0xa, 0xa, 0x0) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @local, 0x9}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB='(rootmode=0000000000000000004000J,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r9 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r9, &(0x7f0000000200)={0x2020}, 0x2020) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000002240)=ANY=[@ANYRES8=r9], 0x0, 0x0, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x50, 0x9d, 0x10, 0x40, 0x61d, 0xc170, 0xb188, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0x4b, 0x72, 0x86}}]}}]}}, 0x0) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4040040) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0) 8.257923765s ago: executing program 5 (id=2606): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {&(0x7f0000000500)=""/107, 0x6b}], &(0x7f0000000580), 0x3}, 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.831907591s ago: executing program 1 (id=2609): unshare(0x2c020400) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x0, 0x4, 0x4, 0x10}) 7.60724503s ago: executing program 1 (id=2610): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001020000400000004000000000000000", @ANYRES32, @ANYBLOB="0900000000000000000100a00000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) 7.284791321s ago: executing program 2 (id=2612): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f4, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 7.249315305s ago: executing program 5 (id=2613): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.987183336s ago: executing program 4 (id=2615): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x400) userfaultfd(0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r3, 0x1) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6}) r4 = socket$inet6(0x10, 0x3, 0x8) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000540)={0x17}) 6.913858345s ago: executing program 2 (id=2616): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) sendmsg$kcm(r3, 0x0, 0x40801) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000f14010025bd7000fedbdf255f636d0007004500"], 0x24}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$cgroup_pid(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) r5 = io_uring_setup(0x4a48, &(0x7f00000001c0)={0x0, 0xd44e, 0x40, 0x1, 0x351}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000037c613bd342147c4572c5526b54138a920bd8aefcda77ada8dd2108aa6da0dc855f84eb44b037441a1958ec02d89e6b324631717bba7f992b4243d", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r7, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r6, @ANYBLOB], 0x60}}, 0x40000) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x2000c000) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000000240)="a9e507910ab1406b896fb85e840d1e249230d8e725464fa647cef7fa6500abe679f60c5146a6d6847b93a5df42f777676a8e1fc34d7e5cd7f36f4b25eddd109ecd185df1048cb2617bbc4cf9ea124e9e96892c14c08673cb428134686ef78ea6568bb944cd6e5ce46c50078533300e6777e2daa7249e188864eb53121fdb7ee58210293f11bbd1f5841ccefa02af3fb6f27d0c28da0b5900c228ed5eea3658d6850936bc5dc7", 0xa6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$kcm(0xa, 0x922000000003, 0x11) socket$nl_route(0x10, 0x3, 0x0) 6.687946385s ago: executing program 5 (id=2617): unshare(0x2c020400) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x0, 0x4, 0x4, 0x10}) (fail_nth: 3) 6.08517815s ago: executing program 5 (id=2618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x300) sendmsg$inet(r2, 0x0, 0x0) unshare(0x42000000) r3 = gettid() unshare(0x0) timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3e, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000002c0)={0x6, 0x1, 0x0, "ee9b6baf21878e5ed730f4706a14d4000091e2e776ab4988d65ca500008000", 0xf6c1a1f}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @initdev={0xac, 0x1e, 0x3, 0x0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044094) 5.677603831s ago: executing program 2 (id=2619): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4000, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007000800"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 5.337569849s ago: executing program 2 (id=2620): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x29a, 0x0, 0x7fffffffffffffff}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xe2f5b6da09b13d83, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_emit_ethernet(0x76, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fa0a6b", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [@fragment={0x2c}, @srh]}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r5) fsopen(&(0x7f0000000180)='efs\x00', 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r7, 0x7}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 5.099890202s ago: executing program 4 (id=2621): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) recvmmsg(r2, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000003e80)=""/235, 0xeb}], 0x1}, 0x1}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000300)=0x4, 0x4) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40002000) sendmsg$inet(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB='X'], 0x58}, 0x8080) 4.720295468s ago: executing program 3 (id=2622): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$inet_sctp(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000540)="220732023eb7d98d43a31423e1e4b385026631a8f6c77be730e3ad0c05057e4172cfdd0351cd140e340dbfde4276", 0x2e}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="785f1b853963871a31a2b2aee42488e0005b30db4ae9880ff12c79e20bc9fd6f4d043a0ee73d0268c493f073e676e06cb63cc34ebf89b90e72d323f9290659e5c8ca3df7f27a431ffd89371337072dbb908fd90165e81612611c16d1d2f2558a0c77698abc941f08e8f84f0e6f9b9a44f30013df81b6149e1c534c99b1e772d24ea0a9178f242b1cf573a559c7d2edc411b20ed9e7fa0e731d887f631ddd152d9cfba47c548b6c6c06f6f966be6b1ccad25ae1990513eed24d607d60bd4d3ba41f2ca821fab09208a8947bc36ef2d728a477dfd08ca0bcc340a417407e32", 0xde}, {&(0x7f0000001b00)="b889dc2fd2e96786c295bc60bb3ec100c966d7da0da2139884b34cf87455da19891af9032b8a01609768d957677132c9457b589575a3467c1e0a6d40be21c66d3e0aa27a1c769069a73d507a861de5711ed37d0e18333c", 0x57}, {&(0x7f0000001b80)="26931e27aa3e35db4f07c421fe6c06cc912bb4790993108d4c5af16e3b7ef88767f639ee637d11d5ba42064046cdf2bce0c513fde10d8289adf5317c644468bca31d1facf4d623b7a7da504aea36afba36cc1831c5c92b2d004481e1b985fc", 0x5f}, {&(0x7f0000000580)="8729b8fc66aee2", 0x7}, {&(0x7f0000001c00)="5a634d84399e1a0b5a7cce798f22a9914d28f345775b630acdd530b77277f7481993f0cd0941e58c18dc16aad916a01577c7a5c0025c56580756b674563e8995a36a6904177a7d", 0x47}], 0x7, 0x0, 0x0, 0x10}, 0x8000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12828000000000010000008681b3093be8217391b9fa6935849e6098ed884e7cb51726b360735f5276e064438f8587304800"/76, 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.595828154s ago: executing program 4 (id=2623): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {&(0x7f0000000500)=""/107, 0x6b}], &(0x7f0000000580), 0x3}, 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.515579929s ago: executing program 3 (id=2624): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001020000400000004000000000000000", @ANYRES32, @ANYBLOB="0900000000000000000100a00000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r8, 0x40, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) 3.520977963s ago: executing program 4 (id=2625): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2000000) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x14, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xf9, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', r7, 0x4, 0x9, 0x0, 0xf7, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x700, 0x8000, 0x3, 0x3}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r9, 0x6, 0x1e, 0x0, &(0x7f0000002000)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$vimc1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r11, 0x4014563c, &(0x7f0000000140)={0x2, {0x3, 0x10001, 0x3, 0xfff}}) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 3.001981655s ago: executing program 3 (id=2626): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f4, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2.852148365s ago: executing program 2 (id=2627): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.430171673s ago: executing program 3 (id=2628): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001020000400000004000000000000000", @ANYRES32, @ANYBLOB="0900000000000000000100a00000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r8, 0x40, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) 2.420483018s ago: executing program 1 (id=2638): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001020000400000004000000000000000", @ANYRES32, @ANYBLOB="0900000000000000000100a00000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) 1.77230457s ago: executing program 4 (id=2629): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) sendmsg$kcm(r3, 0x0, 0x40801) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000f14010025bd7000fedbdf255f636d000700450063"], 0x24}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$cgroup_pid(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) r5 = io_uring_setup(0x4a48, &(0x7f00000001c0)={0x0, 0xd44e, 0x40, 0x1, 0x351}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000037c613bd342147c4572c5526b54138a920bd8aefcda77ada8dd2108aa6da0dc855f84eb44b037441a1958ec02d89e6b324631717bba7f992b4243d", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r7, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r6, @ANYBLOB], 0x60}}, 0x40000) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x2000c000) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000000240)="a9e507910ab1406b896fb85e840d1e249230d8e725464fa647cef7fa6500abe679f60c5146a6d6847b93a5df42f777676a8e1fc34d7e5cd7f36f4b25eddd109ecd185df1048cb2617bbc4cf9ea124e9e96892c14c08673cb428134686ef78ea6568bb944cd6e5ce46c50078533300e6777e2daa7249e188864eb53121fdb7ee58210293f11bbd1f5841ccefa02af3fb6f27d0c28da0b5900c228ed5eea3658d6850936bc5dc7", 0xa6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$kcm(0xa, 0x922000000003, 0x11) socket$nl_route(0x10, 0x3, 0x0) 1.618252884s ago: executing program 5 (id=2630): socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 2) 523.819512ms ago: executing program 5 (id=2631): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121081, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) socket(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') r5 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00'}) socket$kcm(0x10, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000080)={0x800103, 0xfffff7fd, 0x22, 0xce9, 0x1101, 0x5}) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x110) 324.479542ms ago: executing program 2 (id=2632): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000031000000000000000000020"], 0x0) 231.220669ms ago: executing program 4 (id=2633): socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x28, 0x1, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c2010203010902"], 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r0 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r0, 0xef0, 0xf62e, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) openat$dsp(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 179.013325ms ago: executing program 3 (id=2634): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$inet_sctp(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000540)="220732023eb7d98d43a31423e1e4b385026631a8f6c77be730e3ad0c05057e4172cfdd0351cd140e340dbfde4276", 0x2e}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="785f1b853963871a31a2b2aee42488e0005b30db4ae9880ff12c79e20bc9fd6f4d043a0ee73d0268c493f073e676e06cb63cc34ebf89b90e72d323f9290659e5c8ca3df7f27a431ffd89371337072dbb908fd90165e81612611c16d1d2f2558a0c77698abc941f08e8f84f0e6f9b9a44f30013df81b6149e1c534c99b1e772d24ea0a9178f242b1cf573a559c7d2edc411b20ed9e7fa0e731d887f631ddd152d9cfba47c548b6c6c06f6f966be6b1ccad25ae1990513eed24d607d60bd4d3ba41f2ca821fab09208a8947bc36ef2d728a477dfd08ca0bcc340a417407e32", 0xde}, {&(0x7f0000001b00)="b889dc2fd2e96786c295bc60bb3ec100c966d7da0da2139884b34cf87455da19891af9032b8a01609768d957677132c9457b589575a3467c1e0a6d40be21c66d3e0aa27a1c769069a73d507a861de5711ed37d0e18333c", 0x57}, {&(0x7f0000001b80)="26931e27aa3e35db4f07c421fe6c06cc912bb4790993108d4c5af16e3b7ef88767f639ee637d11d5ba42064046cdf2bce0c513fde10d8289adf5317c644468bca31d1facf4d623b7a7da504aea36afba36cc1831c5c92b2d004481e1b985fc", 0x5f}, {&(0x7f0000000580)="8729b8fc66aee2", 0x7}, {&(0x7f0000001c00)="5a634d84399e1a0b5a7cce798f22a9914d28f345775b630acdd530b77277f7481993f0cd0941e58c18dc16aad916a01577c7a5c0025c56580756b674563e8995a36a6904177a7d", 0x47}], 0x7, 0x0, 0x0, 0x10}, 0x8000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12828000000000010000008681b3093be8217391b9fa6935849e6098ed884e7cb51726b360735f5276e064438f8587304800"/76, 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 0s ago: executing program 3 (id=2635): syz_emit_ethernet(0x76, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): c67 R09: 1ffff92000960f8c [ 791.035500][T15319] R10: dffffc0000000000 R11: fffff52000960f8d R12: 0000000080000028 [ 791.035513][T15319] R13: 00007ffffffff000 R14: ffffc90004b07c40 R15: 0000000080000000 [ 791.035544][T15319] _copy_to_user+0x8a/0xb0 [ 791.035570][T15319] semctl_info+0x2d3/0x460 [ 791.035598][T15319] ? __pfx_semctl_info+0x10/0x10 [ 791.035639][T15319] compat_ksys_semctl+0x333/0x520 [ 791.035665][T15319] ? __pfx_compat_ksys_semctl+0x10/0x10 [ 791.035688][T15319] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 791.035713][T15319] ? __fget_files+0x3a0/0x420 [ 791.035755][T15319] ? lockdep_hardirqs_on+0x9c/0x150 [ 791.035778][T15319] __do_fast_syscall_32+0xb6/0x2b0 [ 791.035799][T15319] ? lockdep_hardirqs_on+0x9c/0x150 [ 791.035823][T15319] do_fast_syscall_32+0x34/0x80 [ 791.035844][T15319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 791.035864][T15319] RIP: 0023:0xf701e539 [ 791.035879][T15319] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 791.035894][T15319] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 000000000000018a [ 791.035912][T15319] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000002 [ 791.035924][T15319] RDX: 0000000000000013 RSI: 0000000080000000 RDI: 0000000000000000 [ 791.035935][T15319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 791.035946][T15319] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 791.035957][T15319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 791.035984][T15319] [ 791.388940][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 791.436977][ T5895] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 791.449354][ T5895] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 791.543987][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 791.613345][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 791.645170][ T5895] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 791.679208][ T1209] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 791.712704][ T5895] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 791.722122][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 791.751966][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.761871][ T978] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 791.779116][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.794072][ T978] usb 6-1: Product: syz [ 791.839243][ T1209] usb 2-1: Using ep0 maxpacket: 32 [ 791.860745][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.901711][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.922992][ T1209] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 791.961964][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.031072][ T1209] usb 2-1: config 0 descriptor?? [ 792.054229][ T978] usb 6-1: Manufacturer: syz [ 792.059682][ T1209] hub 2-1:0.0: USB hub found [ 792.122656][ T978] usb 6-1: SerialNumber: syz [ 792.204016][ T978] usb 6-1: config 0 descriptor?? [ 792.307949][ T978] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 792.570717][T15342] FAULT_INJECTION: forcing a failure. [ 792.570717][T15342] name failslab, interval 1, probability 0, space 0, times 0 [ 792.615591][T15342] CPU: 1 UID: 0 PID: 15342 Comm: syz.4.2389 Not tainted syzkaller #0 PREEMPT(full) [ 792.615617][T15342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 792.615629][T15342] Call Trace: [ 792.615638][T15342] [ 792.615649][T15342] dump_stack_lvl+0x189/0x250 [ 792.615676][T15342] ? __pfx____ratelimit+0x10/0x10 [ 792.615697][T15342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 792.615719][T15342] ? __pfx__printk+0x10/0x10 [ 792.615739][T15342] ? __pfx___might_resched+0x10/0x10 [ 792.615758][T15342] ? fs_reclaim_acquire+0x7d/0x100 [ 792.615782][T15342] should_fail_ex+0x414/0x560 [ 792.615814][T15342] should_failslab+0xa8/0x100 [ 792.615841][T15342] __kmalloc_cache_noprof+0x70/0x3d0 [ 792.615865][T15342] ? usb_control_msg+0x73/0x3e0 [ 792.615893][T15342] usb_control_msg+0x73/0x3e0 [ 792.615926][T15342] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 792.615954][T15342] usbtmc488_ioctl_simple+0x279/0x450 [ 792.615975][T15342] ? __pfx_usbtmc488_ioctl_simple+0x10/0x10 [ 792.615992][T15342] ? __fget_files+0x2a/0x420 [ 792.616012][T15342] ? __fget_files+0x3a0/0x420 [ 792.616031][T15342] usbtmc_ioctl+0x44a/0x720 [ 792.616058][T15342] __ia32_compat_sys_ioctl+0x543/0x840 [ 792.616084][T15342] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 792.616118][T15342] ? __fget_files+0x3a0/0x420 [ 792.616142][T15342] ? fput+0xa0/0xd0 [ 792.616162][T15342] ? ksys_write+0x22a/0x250 [ 792.616194][T15342] ? lockdep_hardirqs_on+0x9c/0x150 [ 792.616218][T15342] __do_fast_syscall_32+0xb6/0x2b0 [ 792.616240][T15342] ? lockdep_hardirqs_on+0x9c/0x150 [ 792.616263][T15342] do_fast_syscall_32+0x34/0x80 [ 792.616284][T15342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.616305][T15342] RIP: 0023:0xf7ff5539 [ 792.616320][T15342] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 792.616335][T15342] RSP: 002b:00000000f54c555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 792.616355][T15342] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005b14 [ 792.616368][T15342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 792.616379][T15342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 792.616390][T15342] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 792.616401][T15342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 792.616428][T15342] [ 792.616497][T15342] usbtmc 5-1:16.0: simple usb_control_msg failed -12 [ 793.282752][ T978] gspca_stk1135: reg_w 0x5 err -71 [ 793.298502][ T978] gspca_stk1135: serial bus timeout: status=0x00 [ 793.305572][ T978] gspca_stk1135: Sensor write failed [ 793.315319][ T978] gspca_stk1135: serial bus timeout: status=0x00 [ 793.327687][ T978] gspca_stk1135: Sensor write failed [ 793.336638][ T978] gspca_stk1135: serial bus timeout: status=0x00 [ 793.343706][ T978] gspca_stk1135: Sensor read failed [ 793.353717][ T978] gspca_stk1135: serial bus timeout: status=0x00 [ 793.361494][ T978] gspca_stk1135: Sensor read failed [ 793.371658][ T978] gspca_stk1135: Detected sensor type unknown (0x0) [ 793.380186][ T978] gspca_stk1135: serial bus timeout: status=0x00 [ 793.386851][ T978] gspca_stk1135: Sensor read failed [ 793.393381][ T978] gspca_stk1135: serial bus timeout: status=0x00 [ 793.403293][ T978] gspca_stk1135: Sensor read failed [ 793.410405][ T978] gspca_stk1135: serial bus timeout: status=0x00 [ 793.417036][ T978] gspca_stk1135: Sensor write failed [ 793.423740][ T978] gspca_stk1135: serial bus timeout: status=0x00 [ 793.434772][ T978] gspca_stk1135: Sensor write failed [ 793.441023][ T978] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 793.469465][ T978] usb 6-1: USB disconnect, device number 56 [ 793.938101][ T1209] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 793.995402][ T1209] usbhid 2-1:0.0: can't add hid device: -71 [ 794.034495][ T1209] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 794.080059][ T1209] usb 2-1: USB disconnect, device number 114 [ 794.124071][ T978] usb 5-1: USB disconnect, device number 89 [ 794.242836][T15361] overlayfs: missing 'lowerdir' [ 794.318760][T15361] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 794.325683][T15361] syzkaller1: Linktype set failed because interface is up [ 794.339059][T15365] netlink: 'syz.3.2401': attribute type 28 has an invalid length. [ 794.339950][ T9] syzkaller1: tun_net_xmit 90 [ 794.364626][T15365] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2401'. [ 794.469535][T12434] syzkaller1: tun_net_xmit 86 [ 794.578920][ T978] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 794.649116][ T9] syzkaller1: tun_net_xmit 90 [ 794.751390][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 794.836527][ T978] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 794.879088][ T978] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 794.926975][ T978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 794.968078][ T978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 795.021575][ T978] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 795.056433][ T978] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 795.082773][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.209711][T15370] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2403'. [ 795.338572][ T978] usb 5-1: GET_CAPABILITIES returned 16 [ 795.374861][ T978] usbtmc 5-1:16.0: can't read capabilities [ 795.488977][ T9] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 795.512382][ T1209] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 795.639122][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 795.660844][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 795.699204][ T1209] usb 6-1: Using ep0 maxpacket: 8 [ 795.707708][ T1209] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 795.717111][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.802291][ T1209] pvrusb2: Hardware description: Terratec Grabster AV400 [ 795.826176][ T1209] pvrusb2: ********** [ 795.841060][ T1209] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 795.886018][ T9] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 795.895844][ T1209] pvrusb2: Important functionality might not be entirely working. [ 795.920942][ T9] usb 4-1: config 4 has no interface number 0 [ 795.933135][ T1209] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 795.933135][ T9] usb 4-1: config 4 interface 30 has no altsetting 0 [ 795.981023][ T1209] pvrusb2: ********** [ 796.068379][ T2343] pvrusb2: Invalid write control endpoint [ 796.086215][ T9] usb 4-1: string descriptor 0 read error: -22 [ 796.105605][ T9] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 796.116852][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.161450][ T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 796.171315][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 796.177493][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 796.194891][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 796.208396][ T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 796.219364][ T9] usb 4-1: media controller created [ 796.224877][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 796.233764][ T9] dw2102: i2c transfer failed. [ 796.238615][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 796.245468][ T9] dw2102: i2c transfer failed. [ 796.250627][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 796.257303][T15373] FAULT_INJECTION: forcing a failure. [ 796.257303][T15373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.271903][ T9] dw2102: i2c transfer failed. [ 796.276856][T15373] CPU: 0 UID: 0 PID: 15373 Comm: syz.5.2404 Not tainted syzkaller #0 PREEMPT(full) [ 796.276872][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 796.276880][T15373] Call Trace: [ 796.276889][T15373] [ 796.276895][T15373] dump_stack_lvl+0x189/0x250 [ 796.276913][T15373] ? __pfx____ratelimit+0x10/0x10 [ 796.276924][T15373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 796.276936][T15373] ? __pfx__printk+0x10/0x10 [ 796.276945][T15373] ? __might_fault+0xb0/0x130 [ 796.276965][T15373] should_fail_ex+0x414/0x560 [ 796.276982][T15373] _copy_from_user+0x2d/0xb0 [ 796.276997][T15373] compat_i2cdev_ioctl+0x38b/0x5c0 [ 796.277013][T15373] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 796.277026][T15373] ? __fget_files+0x3a0/0x420 [ 796.277035][T15373] ? __fget_files+0x2a/0x420 [ 796.277046][T15373] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 796.277061][T15373] __ia32_compat_sys_ioctl+0x543/0x840 [ 796.277076][T15373] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 796.277089][T15373] ? __fget_files+0x3a0/0x420 [ 796.277101][T15373] ? fput+0xa0/0xd0 [ 796.277112][T15373] ? ksys_write+0x22a/0x250 [ 796.277131][T15373] ? lockdep_hardirqs_on+0x9c/0x150 [ 796.277143][T15373] __do_fast_syscall_32+0xb6/0x2b0 [ 796.277156][T15373] ? lockdep_hardirqs_on+0x9c/0x150 [ 796.277168][T15373] do_fast_syscall_32+0x34/0x80 [ 796.277179][T15373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 796.277192][T15373] RIP: 0023:0xf702e539 [ 796.277202][T15373] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 796.277210][T15373] RSP: 002b:00000000f541e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 796.277221][T15373] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 796.277228][T15373] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 796.277235][T15373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 796.277240][T15373] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 796.277246][T15373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 796.277267][T15373] [ 796.495590][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 796.501957][ T9] dw2102: i2c transfer failed. [ 796.506833][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 796.512699][ T9] dw2102: i2c transfer failed. [ 796.517565][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 796.523344][ T9] dw2102: i2c transfer failed. [ 796.528106][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 796.544367][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 796.562926][ T5944] usb 6-1: USB disconnect, device number 57 [ 796.572977][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 796.578769][ T9] dw2102: command 0x0e transfer failed. [ 796.584495][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 796.590274][ T9] dw2102: command 0x0e transfer failed. [ 796.800700][T15384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.832974][ T2343] pvrusb2: Invalid write control endpoint [ 796.841314][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 796.856547][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 796.894557][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 796.905070][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 796.911737][ T9] dw2102: command 0x0e transfer failed. [ 796.917293][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 796.925973][ T9] dw2102: command 0x0e transfer failed. [ 796.938062][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 796.952728][ T2343] pvrusb2: Device being rendered inoperable [ 796.963822][ T9] dw2102: command 0x51 transfer failed. [ 796.977679][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 796.992799][ T2343] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 797.056924][ T9] dw2102: i2c probe for address 0x68 failed. [ 797.075212][ T2343] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 797.103327][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 797.137735][ T2343] pvrusb2: Attached sub-driver cx25840 [ 797.143679][ T9] dw2102: i2c probe for address 0x69 failed. [ 797.150796][T15384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.178937][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 797.189801][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 797.195521][ T9] dw2102: i2c probe for address 0x6a failed. [ 797.224010][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 797.234201][ T9] dw2102: probing for demodulator failed. Is the external power switched on? [ 797.326556][ T9] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 797.378749][ T978] usb 5-1: USB disconnect, device number 90 [ 797.560132][ T9] rc_core: IR keymap rc-tt-1500 not found [ 797.565900][ T9] Registered IR keymap rc-empty [ 797.585277][ T9] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 797.616154][ T9] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input93 [ 797.661705][ T9] dvb-usb: schedule remote query interval to 250 msecs. [ 797.673068][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 797.679772][ T9] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 797.792477][T15400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2408'. [ 797.824437][ T9] usb 4-1: USB disconnect, device number 106 [ 797.885632][ T9] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 798.123185][T15400] bond3: entered promiscuous mode [ 798.134797][T15400] 8021q: adding VLAN 0 to HW filter on device bond3 [ 798.593890][T15413] macsec0: left promiscuous mode [ 798.682804][T15413] vlan4: entered allmulticast mode [ 799.126906][ T5895] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 799.188333][T15421] macsec0: left promiscuous mode [ 799.214717][T15421] vlan3: entered allmulticast mode [ 799.329102][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 799.358587][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.395163][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.430361][ T5895] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 799.460932][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.529962][ T5895] usb 6-1: config 0 descriptor?? [ 799.557350][ T5895] hub 6-1:0.0: USB hub found [ 800.208923][ T978] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 800.284342][T15428] overlayfs: missing 'lowerdir' [ 800.386312][T15429] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 800.399232][ T9] syzkaller1: tun_net_xmit 90 [ 800.404622][T15429] syzkaller1: Linktype set failed because interface is up [ 800.410874][ T978] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 800.428933][ T978] usb 5-1: config 0 has no interface number 0 [ 800.441574][ T978] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 800.453497][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.469297][ T978] usb 5-1: config 0 descriptor?? [ 800.481391][ T9] syzkaller1: tun_net_xmit 90 [ 800.509739][ T978] usb 5-1: selecting invalid altsetting 1 [ 800.536165][ T978] dvb_ttusb_budget: ttusb_init_controller: error [ 800.553853][ T978] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 800.755520][ T978] DVB: Unable to find symbol cx22700_attach() [ 800.963137][ T978] DVB: Unable to find symbol tda10046_attach() [ 800.981063][ T978] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 801.541496][ T5895] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 801.587526][ T978] usb 5-1: USB disconnect, device number 91 [ 801.608955][ T5895] usbhid 6-1:0.0: can't add hid device: -71 [ 801.635721][ T5895] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 801.820298][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2418'. [ 801.929047][ T5895] usb 6-1: reset high-speed USB device number 58 using dummy_hcd [ 802.200287][ T5895] usb 6-1: device firmware changed [ 802.211728][ T5895] usb 6-1: USB disconnect, device number 58 [ 802.298958][ T978] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 802.410447][T15451] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 802.539107][ T5895] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 802.614285][ T978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.647856][ T978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 802.682957][ T978] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 802.699285][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 802.706502][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.718603][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 802.728917][ T9] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 802.748240][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42399, setting to 1024 [ 802.762929][ T5895] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 802.763256][ T978] usb 4-1: SerialNumber: syz [ 802.773840][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.812648][ T5895] usb 6-1: config 0 descriptor?? [ 802.846555][T15441] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 802.855795][ T5895] hub 6-1:0.0: USB hub found [ 802.895636][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 802.957150][ T9] usb 5-1: config 0 interface 0 has no altsetting 1 [ 802.967182][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 802.977216][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 802.985419][ T9] usb 5-1: Product: syz [ 802.991896][ T9] usb 5-1: Manufacturer: syz [ 802.996626][ T9] usb 5-1: SerialNumber: syz [ 803.005516][ T9] usb 5-1: config 0 descriptor?? [ 803.080193][T15461] FAULT_INJECTION: forcing a failure. [ 803.080193][T15461] name failslab, interval 1, probability 0, space 0, times 0 [ 803.105187][ T5895] hub 6-1:0.0: 1 port detected [ 803.107279][T15461] CPU: 0 UID: 0 PID: 15461 Comm: syz.1.2423 Not tainted syzkaller #0 PREEMPT(full) [ 803.107304][T15461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 803.107315][T15461] Call Trace: [ 803.107323][T15461] [ 803.107332][T15461] dump_stack_lvl+0x189/0x250 [ 803.107358][T15461] ? __pfx____ratelimit+0x10/0x10 [ 803.107378][T15461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.107398][T15461] ? __pfx__printk+0x10/0x10 [ 803.107416][T15461] ? __lock_acquire+0xab9/0xd20 [ 803.107441][T15461] should_fail_ex+0x414/0x560 [ 803.107471][T15461] should_failslab+0xa8/0x100 [ 803.107497][T15461] kmem_cache_alloc_noprof+0x73/0x3c0 [ 803.107520][T15461] ? skb_clone+0x212/0x3a0 [ 803.107547][T15461] skb_clone+0x212/0x3a0 [ 803.107573][T15461] __netlink_deliver_tap+0x404/0x850 [ 803.107605][T15461] ? netlink_deliver_tap+0x2e/0x1b0 [ 803.107625][T15461] netlink_deliver_tap+0x19c/0x1b0 [ 803.107645][T15461] netlink_unicast+0x7fa/0x9e0 [ 803.107671][T15461] ? __pfx_netlink_unicast+0x10/0x10 [ 803.107690][T15461] ? netlink_sendmsg+0x642/0xb30 [ 803.107708][T15461] ? skb_put+0x11b/0x210 [ 803.107731][T15461] netlink_sendmsg+0x805/0xb30 [ 803.107759][T15461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.107780][T15461] ? __import_iovec+0x5d4/0x7f0 [ 803.107800][T15461] ? aa_sock_msg_perm+0xf1/0x1d0 [ 803.107819][T15461] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 803.107838][T15461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.107858][T15461] __sock_sendmsg+0x21c/0x270 [ 803.107880][T15461] ____sys_sendmsg+0x505/0x830 [ 803.107907][T15461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 803.107944][T15461] ___sys_sendmsg+0x21f/0x2a0 [ 803.107968][T15461] ? __pfx____sys_sendmsg+0x10/0x10 [ 803.108028][T15461] ? __fget_files+0x2a/0x420 [ 803.108044][T15461] ? __fget_files+0x3a0/0x420 [ 803.108070][T15461] __sys_sendmsg+0x164/0x220 [ 803.108094][T15461] ? __pfx___sys_sendmsg+0x10/0x10 [ 803.108131][T15461] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.108152][T15461] __do_fast_syscall_32+0xb6/0x2b0 [ 803.108174][T15461] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.108195][T15461] do_fast_syscall_32+0x34/0x80 [ 803.108216][T15461] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 803.108236][T15461] RIP: 0023:0xf70be539 [ 803.108252][T15461] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 803.108266][T15461] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 803.108284][T15461] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 803.108296][T15461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 803.108307][T15461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 803.108317][T15461] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 803.108328][T15461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 803.108354][T15461] [ 804.324506][ T5895] usb 6-1: reset high-speed USB device number 59 using dummy_hcd [ 804.435516][ T9] usb 5-1: USB disconnect, device number 92 [ 804.507564][ T7590] udevd[7590]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.803729][T15476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 805.103810][T15480] overlayfs: missing 'lowerdir' [ 805.175289][T15480] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 805.189368][ T43] syzkaller1: tun_net_xmit 90 [ 805.194398][T15480] syzkaller1: Linktype set failed because interface is up [ 805.363078][ T978] usb 4-1: 0:2 : does not exist [ 805.443165][ T978] usb 4-1: USB disconnect, device number 107 [ 805.593167][T15486] FAULT_INJECTION: forcing a failure. [ 805.593167][T15486] name failslab, interval 1, probability 0, space 0, times 0 [ 805.692905][T15486] CPU: 0 UID: 0 PID: 15486 Comm: syz.3.2431 Not tainted syzkaller #0 PREEMPT(full) [ 805.692930][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 805.692938][T15486] Call Trace: [ 805.692943][T15486] [ 805.692948][T15486] dump_stack_lvl+0x189/0x250 [ 805.692966][T15486] ? __pfx____ratelimit+0x10/0x10 [ 805.692978][T15486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.692989][T15486] ? __pfx__printk+0x10/0x10 [ 805.693001][T15486] ? __pfx___might_resched+0x10/0x10 [ 805.693011][T15486] ? fs_reclaim_acquire+0x7d/0x100 [ 805.693025][T15486] should_fail_ex+0x414/0x560 [ 805.693043][T15486] should_failslab+0xa8/0x100 [ 805.693059][T15486] __kmalloc_noprof+0xcb/0x4f0 [ 805.693073][T15486] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 805.693090][T15486] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 805.693108][T15486] genl_family_rcv_msg_doit+0xb8/0x300 [ 805.693125][T15486] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 805.693143][T15486] ? apparmor_capable+0x137/0x1b0 [ 805.693157][T15486] ? bpf_lsm_capable+0x9/0x20 [ 805.693171][T15486] ? security_capable+0x7e/0x2e0 [ 805.693189][T15486] genl_rcv_msg+0x60e/0x790 [ 805.693206][T15486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 805.693218][T15486] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 805.693231][T15486] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 805.693241][T15486] ? __pfx_nl80211_post_doit+0x10/0x10 [ 805.693262][T15486] netlink_rcv_skb+0x205/0x470 [ 805.693272][T15486] ? __lock_acquire+0xab9/0xd20 [ 805.693281][T15486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 805.693295][T15486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 805.693316][T15486] ? down_read+0x1ad/0x2e0 [ 805.693329][T15486] genl_rcv+0x28/0x40 [ 805.693341][T15486] netlink_unicast+0x82c/0x9e0 [ 805.693356][T15486] ? __pfx_netlink_unicast+0x10/0x10 [ 805.693367][T15486] ? netlink_sendmsg+0x642/0xb30 [ 805.693377][T15486] ? skb_put+0x11b/0x210 [ 805.693391][T15486] netlink_sendmsg+0x805/0xb30 [ 805.693408][T15486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.693420][T15486] ? __import_iovec+0x5d4/0x7f0 [ 805.693432][T15486] ? aa_sock_msg_perm+0xf1/0x1d0 [ 805.693443][T15486] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 805.693454][T15486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.693465][T15486] __sock_sendmsg+0x21c/0x270 [ 805.693484][T15486] ____sys_sendmsg+0x505/0x830 [ 805.693501][T15486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 805.693522][T15486] ___sys_sendmsg+0x21f/0x2a0 [ 805.693536][T15486] ? __pfx____sys_sendmsg+0x10/0x10 [ 805.693568][T15486] ? __fget_files+0x2a/0x420 [ 805.693578][T15486] ? __fget_files+0x3a0/0x420 [ 805.693593][T15486] __sys_sendmsg+0x164/0x220 [ 805.693606][T15486] ? __pfx___sys_sendmsg+0x10/0x10 [ 805.693627][T15486] ? lockdep_hardirqs_on+0x9c/0x150 [ 805.693640][T15486] __do_fast_syscall_32+0xb6/0x2b0 [ 805.693652][T15486] ? lockdep_hardirqs_on+0x9c/0x150 [ 805.693665][T15486] do_fast_syscall_32+0x34/0x80 [ 805.693676][T15486] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 805.693688][T15486] RIP: 0023:0xf70ee539 [ 805.693698][T15486] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 805.693706][T15486] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 805.693718][T15486] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006000 [ 805.693725][T15486] RDX: 0000000000028000 RSI: 0000000000000000 RDI: 0000000000000000 [ 805.693733][T15486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 805.693739][T15486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 805.693745][T15486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 805.693759][T15486] [ 806.061591][ T24] usb 6-1: USB disconnect, device number 59 [ 806.119366][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 806.380633][ T30] audit: type=1326 audit(1759271754.592:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.1.2430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 806.403951][ T30] audit: type=1326 audit(1759271754.612:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.1.2430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 806.426850][ T30] audit: type=1326 audit(1759271754.642:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.1.2430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 806.458554][ T30] audit: type=1326 audit(1759271754.662:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.1.2430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 806.707617][T15492] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2434'. [ 806.749152][ T30] audit: type=1326 audit(1759271754.662:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.1.2430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 806.794204][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2433'. [ 806.849493][ T30] audit: type=1326 audit(1759271754.662:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.1.2430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 806.932725][T15489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2433'. [ 806.969457][ T30] audit: type=1326 audit(1759271754.662:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.1.2430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 807.058934][ T9] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 807.067343][ T30] audit: type=1326 audit(1759271754.662:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.1.2430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 807.129334][ T30] audit: type=1326 audit(1759271754.662:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.1.2430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 807.180415][ T30] audit: type=1326 audit(1759271754.662:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15483 comm="syz.1.2430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 807.256973][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 807.307637][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 807.326579][ T9] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 807.400470][ T9] usb 5-1: config 4 has no interface number 0 [ 807.424793][ T9] usb 5-1: config 4 interface 30 has no altsetting 0 [ 807.535438][T15501] veth1_macvtap: left promiscuous mode [ 807.572751][T15501] macsec0: entered promiscuous mode [ 807.645077][T15503] veth1_macvtap: entered promiscuous mode [ 807.658969][ T9] usb 5-1: string descriptor 0 read error: -22 [ 807.666018][ T9] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 807.676009][T15503] macsec0: left promiscuous mode [ 807.708920][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.735304][ T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 807.772803][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 807.792197][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 807.825600][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 807.874413][ T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 807.917564][ T9] usb 5-1: media controller created [ 807.993676][T15493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.008559][T15493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.133116][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 808.138981][ T9] dw2102: i2c transfer failed. [ 808.227781][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 808.282685][ T9] dw2102: i2c transfer failed. [ 808.288214][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 808.294049][ T9] dw2102: i2c transfer failed. [ 808.299141][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 808.304876][ T9] dw2102: i2c transfer failed. [ 808.310068][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 808.315897][ T9] dw2102: i2c transfer failed. [ 808.320797][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 808.327254][ T9] dw2102: i2c transfer failed. [ 808.332689][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 808.353645][T15501] vlan3: entered allmulticast mode [ 808.394609][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.451192][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 808.494508][ T9] dw2102: command 0x0e transfer failed. [ 808.507484][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 808.713908][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.720693][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.211489][T15529] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2442'. [ 809.244348][ T9] dw2102: command 0x0e transfer failed. [ 809.579293][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 809.612701][ T9] dw2102: command 0x0e transfer failed. [ 809.625406][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 809.637459][ T9] dw2102: command 0x0e transfer failed. [ 809.653837][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 809.667228][ T9] dw2102: command 0x51 transfer failed. [ 809.674950][T15536] overlayfs: missing 'lowerdir' [ 809.687990][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 809.747912][ T9] dw2102: i2c probe for address 0x68 failed. [ 809.761595][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 809.774163][ T9] dw2102: i2c probe for address 0x69 failed. [ 809.788398][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 809.798206][ T9] dw2102: i2c probe for address 0x6a failed. [ 809.798929][ T43] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 809.812685][T15537] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 809.818567][ T9] dw2102: probing for demodulator failed. Is the external power switched on? [ 809.882325][T15537] syzkaller1: Linktype set failed because interface is up [ 809.892447][ T9] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 809.979196][ T9] rc_core: IR keymap rc-tt-1500 not found [ 810.005137][ T9] Registered IR keymap rc-empty [ 810.029253][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 810.039234][ T9] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 810.083781][ T43] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 810.091117][ T9] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input94 [ 810.103259][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.146473][ T9] dvb-usb: schedule remote query interval to 250 msecs. [ 810.157312][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 810.174614][ T9] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 810.189657][ T43] usb 6-1: config 0 descriptor?? [ 810.212124][ T43] as10x_usb: device has been detected [ 810.236040][ T43] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 810.351736][ T9] usb 5-1: USB disconnect, device number 93 [ 810.373258][ T43] usb 6-1: DVB: registering adapter 3 frontend 0 (nBox DVB-T Dongle)... [ 810.434304][ T43] as10x_usb: error during firmware upload part1 [ 810.500885][ T43] Registered device nBox DVB-T Dongle [ 810.528317][ T43] usb 6-1: USB disconnect, device number 60 [ 810.580629][ T9] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 810.609247][T15543] macsec0: entered promiscuous mode [ 810.682463][T15544] macsec0: left promiscuous mode [ 810.709246][ T43] Unregistered device nBox DVB-T Dongle [ 810.717816][ T43] as10x_usb: device has been disconnected [ 810.830548][T15546] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 810.849658][T15543] vlan3: entered allmulticast mode [ 810.928045][T15546] FAULT_INJECTION: forcing a failure. [ 810.928045][T15546] name failslab, interval 1, probability 0, space 0, times 0 [ 810.944092][T15546] CPU: 0 UID: 0 PID: 15546 Comm: syz.4.2446 Not tainted syzkaller #0 PREEMPT(full) [ 810.944116][T15546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 810.944127][T15546] Call Trace: [ 810.944134][T15546] [ 810.944142][T15546] dump_stack_lvl+0x189/0x250 [ 810.944164][T15546] ? __pfx____ratelimit+0x10/0x10 [ 810.944176][T15546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 810.944187][T15546] ? __pfx__printk+0x10/0x10 [ 810.944200][T15546] ? __pfx___might_resched+0x10/0x10 [ 810.944210][T15546] ? fs_reclaim_acquire+0x7d/0x100 [ 810.944223][T15546] should_fail_ex+0x414/0x560 [ 810.944241][T15546] should_failslab+0xa8/0x100 [ 810.944257][T15546] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 810.944271][T15546] ? __alloc_skb+0x112/0x2d0 [ 810.944291][T15546] __alloc_skb+0x112/0x2d0 [ 810.944304][T15546] netlink_ack+0x146/0xa50 [ 810.944314][T15546] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 810.944334][T15546] netlink_rcv_skb+0x28c/0x470 [ 810.944344][T15546] ? __lock_acquire+0xab9/0xd20 [ 810.944353][T15546] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 810.944365][T15546] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 810.944381][T15546] ? netlink_deliver_tap+0x2e/0x1b0 [ 810.944396][T15546] netlink_unicast+0x82c/0x9e0 [ 810.944410][T15546] ? __pfx_netlink_unicast+0x10/0x10 [ 810.944421][T15546] ? netlink_sendmsg+0x642/0xb30 [ 810.944431][T15546] ? skb_put+0x11b/0x210 [ 810.944444][T15546] netlink_sendmsg+0x805/0xb30 [ 810.944459][T15546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.944471][T15546] ? __import_iovec+0x5d4/0x7f0 [ 810.944483][T15546] ? aa_sock_msg_perm+0xf1/0x1d0 [ 810.944494][T15546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 810.944505][T15546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.944516][T15546] __sock_sendmsg+0x21c/0x270 [ 810.944528][T15546] ____sys_sendmsg+0x505/0x830 [ 810.944543][T15546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.944563][T15546] ___sys_sendmsg+0x21f/0x2a0 [ 810.944577][T15546] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.944608][T15546] ? __fget_files+0x2a/0x420 [ 810.944617][T15546] ? __fget_files+0x3a0/0x420 [ 810.944631][T15546] __sys_sendmsg+0x164/0x220 [ 810.944645][T15546] ? __pfx___sys_sendmsg+0x10/0x10 [ 810.944665][T15546] ? lockdep_hardirqs_on+0x9c/0x150 [ 810.944677][T15546] __do_fast_syscall_32+0xb6/0x2b0 [ 810.944689][T15546] ? lockdep_hardirqs_on+0x9c/0x150 [ 810.944702][T15546] do_fast_syscall_32+0x34/0x80 [ 810.944714][T15546] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 810.944726][T15546] RIP: 0023:0xf7ff5539 [ 810.944736][T15546] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 810.944744][T15546] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 810.944756][T15546] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 810.944763][T15546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 810.944768][T15546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 810.944774][T15546] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 810.944780][T15546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 810.944793][T15546] [ 811.650827][ T43] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 811.813672][ T43] usb 3-1: config 0 has no interfaces? [ 811.825535][ T43] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 811.839006][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.866442][ T43] usb 3-1: Product: syz [ 811.873499][ T43] usb 3-1: Manufacturer: syz [ 811.878195][ T43] usb 3-1: SerialNumber: syz [ 811.962397][T15564] FAULT_INJECTION: forcing a failure. [ 811.962397][T15564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.036045][ T43] usb 3-1: config 0 descriptor?? [ 812.043144][T15564] CPU: 1 UID: 0 PID: 15564 Comm: syz.5.2452 Not tainted syzkaller #0 PREEMPT(full) [ 812.043167][T15564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 812.043177][T15564] Call Trace: [ 812.043186][T15564] [ 812.043194][T15564] dump_stack_lvl+0x189/0x250 [ 812.043220][T15564] ? __pfx____ratelimit+0x10/0x10 [ 812.043238][T15564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.043255][T15564] ? __pfx__printk+0x10/0x10 [ 812.043281][T15564] should_fail_ex+0x414/0x560 [ 812.043309][T15564] _copy_to_user+0x31/0xb0 [ 812.043331][T15564] simple_read_from_buffer+0xe1/0x170 [ 812.043363][T15564] proc_fail_nth_read+0x1b3/0x220 [ 812.043387][T15564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.043409][T15564] ? rw_verify_area+0x2a6/0x4d0 [ 812.043428][T15564] ? __lock_acquire+0xab9/0xd20 [ 812.043440][T15564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.043460][T15564] vfs_read+0x200/0xa30 [ 812.043481][T15564] ? fdget_pos+0x247/0x320 [ 812.043501][T15564] ? __pfx___mutex_lock+0x10/0x10 [ 812.043521][T15564] ? __pfx_vfs_read+0x10/0x10 [ 812.043546][T15564] ? __fget_files+0x2a/0x420 [ 812.043567][T15564] ? __fget_files+0x3a0/0x420 [ 812.043582][T15564] ? __fget_files+0x2a/0x420 [ 812.043608][T15564] ksys_read+0x145/0x250 [ 812.043634][T15564] ? __pfx_ksys_read+0x10/0x10 [ 812.043660][T15564] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.043683][T15564] __do_fast_syscall_32+0xb6/0x2b0 [ 812.043704][T15564] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.043726][T15564] do_fast_syscall_32+0x34/0x80 [ 812.043747][T15564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 812.043766][T15564] RIP: 0023:0xf702e539 [ 812.043781][T15564] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 812.043796][T15564] RSP: 002b:00000000f53fd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 812.043815][T15564] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f53fd620 [ 812.043828][T15564] RDX: 000000000000000f RSI: 00000000f73c5ff4 RDI: 0000000000000000 [ 812.043839][T15564] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 812.043849][T15564] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 812.043869][T15564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 812.043893][T15564] [ 812.749490][T15577] program syz.5.2453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 812.956402][T15549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2447'. [ 813.117832][ T5944] usb 3-1: USB disconnect, device number 112 [ 813.819784][T15582] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2455'. [ 814.009115][T15589] overlayfs: missing 'lowerdir' [ 814.087486][T15590] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 814.104437][T15590] syzkaller1: Linktype set failed because interface is up [ 814.196022][ T5944] syzkaller1: tun_net_xmit 90 [ 814.513372][ T49] syzkaller1: tun_net_xmit 86 [ 814.550935][ T5895] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 814.750787][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 814.778034][ T5895] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 814.788744][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.809324][ T5895] usb 3-1: Product: syz [ 814.816695][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2459'. [ 814.829313][ T5895] usb 3-1: Manufacturer: syz [ 814.834521][ T5895] usb 3-1: SerialNumber: syz [ 814.873093][ T5895] usb 3-1: config 0 descriptor?? [ 814.913200][ T5895] as10x_usb: device has been detected [ 814.930049][ T5895] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 815.003320][ T5895] usb 3-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 815.292996][ T5895] as10x_usb: error during firmware upload part1 [ 815.302701][ T5895] Registered device Sky IT Digital Key (green led) [ 815.331189][ T5895] usb 3-1: USB disconnect, device number 113 [ 815.484874][ T5895] Unregistered device Sky IT Digital Key (green led) [ 815.507829][ T5895] as10x_usb: device has been disconnected [ 815.950989][T15621] kvm: user requested TSC rate below hardware speed [ 816.020514][T15621] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 816.053370][T15621] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 816.850161][ T5944] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 817.020588][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2465'. [ 817.039153][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 817.063437][ T5944] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 817.133091][ T5944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.151277][ T5944] usb 2-1: config 0 has no interface number 0 [ 817.192755][ T5944] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 817.208474][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.238968][ T5895] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 817.249751][ T5944] usb 2-1: config 0 descriptor?? [ 817.294375][ T5944] usb 2-1: Found UVC 0.00 device (0bd3:05f4) [ 817.316034][ T5944] usb 2-1: No valid video chain found. [ 817.400550][ T5895] usb 5-1: config 0 has no interfaces? [ 817.408342][ T5895] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 817.419420][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.499939][ T5895] usb 5-1: Product: syz [ 817.525110][ T5895] usb 5-1: Manufacturer: syz [ 817.561523][ T5895] usb 5-1: SerialNumber: syz [ 817.599875][ T5895] usb 5-1: config 0 descriptor?? [ 817.900057][T15638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2468'. [ 818.029028][ T5944] usb 5-1: USB disconnect, device number 94 [ 818.801638][T15663] FAULT_INJECTION: forcing a failure. [ 818.801638][T15663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.861953][T15663] CPU: 1 UID: 0 PID: 15663 Comm: syz.3.2473 Not tainted syzkaller #0 PREEMPT(full) [ 818.861969][T15663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 818.861976][T15663] Call Trace: [ 818.861981][T15663] [ 818.861987][T15663] dump_stack_lvl+0x189/0x250 [ 818.862005][T15663] ? __pfx____ratelimit+0x10/0x10 [ 818.862016][T15663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 818.862034][T15663] ? __pfx__printk+0x10/0x10 [ 818.862050][T15663] should_fail_ex+0x414/0x560 [ 818.862069][T15663] _copy_to_user+0x31/0xb0 [ 818.862084][T15663] simple_read_from_buffer+0xe1/0x170 [ 818.862101][T15663] proc_fail_nth_read+0x1b3/0x220 [ 818.862116][T15663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 818.862129][T15663] ? rw_verify_area+0x2a6/0x4d0 [ 818.862142][T15663] ? __lock_acquire+0xab9/0xd20 [ 818.862150][T15663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 818.862162][T15663] vfs_read+0x200/0xa30 [ 818.862175][T15663] ? fdget_pos+0x247/0x320 [ 818.862187][T15663] ? __pfx___mutex_lock+0x10/0x10 [ 818.862199][T15663] ? __pfx_vfs_read+0x10/0x10 [ 818.862212][T15663] ? __fget_files+0x2a/0x420 [ 818.862226][T15663] ? __fget_files+0x3a0/0x420 [ 818.862234][T15663] ? __fget_files+0x2a/0x420 [ 818.862247][T15663] ksys_read+0x145/0x250 [ 818.862262][T15663] ? __pfx_ksys_read+0x10/0x10 [ 818.862284][T15663] ? lockdep_hardirqs_on+0x9c/0x150 [ 818.862305][T15663] __do_fast_syscall_32+0xb6/0x2b0 [ 818.862325][T15663] ? lockdep_hardirqs_on+0x9c/0x150 [ 818.862348][T15663] do_fast_syscall_32+0x34/0x80 [ 818.862364][T15663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.862377][T15663] RIP: 0023:0xf70ee539 [ 818.862387][T15663] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 818.862395][T15663] RSP: 002b:00000000f54bd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 818.862407][T15663] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54bd620 [ 818.862414][T15663] RDX: 000000000000000f RSI: 00000000f7485ff4 RDI: 0000000000000000 [ 818.862420][T15663] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 818.862426][T15663] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 818.862432][T15663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 818.862446][T15663] [ 819.669718][ T5944] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 819.768922][ T978] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 819.818160][ T9] usb 2-1: USB disconnect, device number 115 [ 819.851718][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 819.878012][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.907076][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.921309][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 819.944379][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.985527][ T5944] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 820.013727][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.034673][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.045520][ T978] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 820.105977][ T5944] usb 5-1: config 0 descriptor?? [ 820.112307][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.127251][ T5944] hub 5-1:0.0: USB hub found [ 820.145497][ T978] usb 3-1: config 0 descriptor?? [ 820.167369][ T978] hub 3-1:0.0: USB hub found [ 820.579188][ T43] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 820.793761][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 820.830841][ T43] usb 2-1: config 0 has no interface number 0 [ 820.868761][ T43] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 820.917630][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.954761][ T43] usb 2-1: config 0 descriptor?? [ 820.978500][ T43] usb 2-1: selecting invalid altsetting 1 [ 820.988503][ T43] dvb_ttusb_budget: ttusb_init_controller: error [ 821.002247][ T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 821.268226][ T43] DVB: Unable to find symbol cx22700_attach() [ 821.556472][ T43] DVB: Unable to find symbol tda10046_attach() [ 821.648977][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 821.677051][ T43] usb 2-1: USB disconnect, device number 116 [ 821.771859][T15698] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2479'. [ 821.879168][ T24] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 822.034705][ T5944] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 822.066654][ T5944] usbhid 5-1:0.0: can't add hid device: -71 [ 822.081495][ T5944] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 822.159103][ T43] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 822.167504][ T5944] usb 5-1: USB disconnect, device number 95 [ 822.358980][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 822.372771][ T24] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 822.415562][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 822.519155][ T24] usb 4-1: can't read configurations, error -22 [ 822.550598][ T43] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 822.558724][ T43] usb 2-1: config 4 has no interface number 0 [ 822.616453][ T978] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 822.640014][ T978] usbhid 3-1:0.0: can't add hid device: -71 [ 822.653788][ T978] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 822.688083][ T43] usb 2-1: config 4 interface 30 has no altsetting 0 [ 822.749473][ T43] usb 2-1: string descriptor 0 read error: -22 [ 822.758262][ T43] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 822.769359][ T24] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 822.799583][ T978] usb 3-1: USB disconnect, device number 114 [ 822.847309][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2482'. [ 822.864837][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.955661][ T43] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 822.972415][ T43] dw2102: su3000_power_ctrl: 1, initialized 0 [ 822.985080][ T43] dvb-usb: bulk message failed: -22 (2/0) [ 823.052267][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 823.135490][ T43] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 823.213176][T15698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.251485][T15698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.279467][ T43] usb 2-1: media controller created [ 823.284760][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 823.290627][ T43] dw2102: i2c transfer failed. [ 823.299086][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 823.304837][ T43] dw2102: i2c transfer failed. [ 823.309710][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 823.315441][ T43] dw2102: i2c transfer failed. [ 823.325613][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 823.345920][ T43] dw2102: i2c transfer failed. [ 823.356083][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 823.370337][ T43] dw2102: i2c transfer failed. [ 823.375213][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 823.395715][ T43] dw2102: i2c transfer failed. [ 823.419605][ T43] dvb-usb: MAC address: 02:02:02:02:02:02 [ 823.433470][ T978] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 823.457521][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.534874][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 823.546236][ T43] dw2102: command 0x0e transfer failed. [ 823.575448][T15716] veth1_macvtap: left promiscuous mode [ 823.575491][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 823.588898][T15716] macsec0: entered promiscuous mode [ 823.613255][T15716] veth1_macvtap: entered promiscuous mode [ 823.619506][ T43] dw2102: command 0x0e transfer failed. [ 823.630432][ T978] usb 3-1: config 0 has no interfaces? [ 823.639999][T15716] macsec0: left promiscuous mode [ 823.665008][ T978] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 823.709067][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.737518][ T978] usb 3-1: Product: syz [ 823.749027][ T978] usb 3-1: Manufacturer: syz [ 823.758342][ T978] usb 3-1: SerialNumber: syz [ 823.780961][ T978] usb 3-1: config 0 descriptor?? [ 823.806564][T15716] vlan3: entered allmulticast mode [ 823.812268][T15716] syz_tun: entered allmulticast mode [ 823.935068][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 823.960882][ T43] dw2102: command 0x0e transfer failed. [ 823.999251][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 824.008409][ T43] dw2102: command 0x0e transfer failed. [ 824.028261][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 824.050359][ T43] dw2102: command 0x51 transfer failed. [ 824.063912][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 824.083525][ T43] dw2102: i2c probe for address 0x68 failed. [ 824.108317][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 824.124672][ T43] dw2102: i2c probe for address 0x69 failed. [ 824.165573][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 824.180182][ T43] dw2102: i2c probe for address 0x6a failed. [ 824.192311][ T43] dw2102: probing for demodulator failed. Is the external power switched on? [ 824.210623][ T43] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 824.410274][T15712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2483'. [ 824.465495][ T43] rc_core: IR keymap rc-tt-1500 not found [ 824.505984][ T43] Registered IR keymap rc-empty [ 824.516632][ T43] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 824.586763][ T43] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input96 [ 824.623908][ T43] dvb-usb: schedule remote query interval to 250 msecs. [ 824.634232][ T43] dw2102: su3000_power_ctrl: 0, initialized 1 [ 824.644137][ T43] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 824.660481][ T43] usb 2-1: USB disconnect, device number 117 [ 824.704430][ T43] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 824.733301][ T5939] usb 3-1: USB disconnect, device number 115 [ 824.938974][ T24] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 825.009198][ T43] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 825.122395][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.141163][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 825.154208][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.173732][ T43] usb 2-1: config 4 has an invalid interface number: 5 but max is 3 [ 825.182254][ T24] usb 4-1: config 0 descriptor?? [ 825.332442][ T43] usb 2-1: config 4 has an invalid interface number: 234 but max is 3 [ 825.341013][ T43] usb 2-1: config 4 has an invalid interface number: 84 but max is 3 [ 825.349768][ T43] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 825.359148][ T43] usb 2-1: config 4 has an invalid interface number: 4 but max is 3 [ 825.389601][ T43] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 825.398427][ T43] usb 2-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 825.409455][ T43] usb 2-1: config 4 has 5 interfaces, different from the descriptor's value: 4 [ 825.418673][ T43] usb 2-1: config 4 has no interface number 0 [ 825.445831][ T43] usb 2-1: config 4 has no interface number 1 [ 825.467505][ T43] usb 2-1: config 4 has no interface number 3 [ 825.478704][ T43] usb 2-1: config 4 interface 5 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 825.490131][ T43] usb 2-1: config 4 interface 5 altsetting 2 endpoint 0xC has invalid maxpacket 1088, setting to 64 [ 825.501795][ T43] usb 2-1: config 4 interface 5 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 825.516029][ T43] usb 2-1: too many endpoints for config 4 interface 234 altsetting 103: 231, using maximum allowed: 30 [ 825.528073][ T43] usb 2-1: config 4 interface 234 altsetting 103 has an invalid descriptor for endpoint zero, skipping [ 825.539853][ T43] usb 2-1: config 4 interface 234 altsetting 103 has an invalid descriptor for endpoint zero, skipping [ 825.555914][ T43] usb 2-1: config 4 interface 234 altsetting 103 endpoint 0x7 has invalid wMaxPacketSize 0 [ 825.621589][ T43] usb 2-1: config 4 interface 234 altsetting 103 has a duplicate endpoint with address 0x1, skipping [ 825.642263][ T43] usb 2-1: config 4 interface 234 altsetting 103 has 4 endpoint descriptors, different from the interface descriptor's value: 231 [ 825.659279][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 825.667566][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 825.675986][ T43] usb 2-1: config 4 interface 84 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 825.712823][ T24] usb 4-1: USB disconnect, device number 110 [ 825.720088][ T43] usb 2-1: config 4 interface 84 altsetting 127 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 825.734933][ T43] usb 2-1: config 4 interface 84 altsetting 127 has a duplicate endpoint with address 0x4, skipping [ 825.747461][ T43] usb 2-1: config 4 interface 84 altsetting 127 endpoint 0xA has invalid maxpacket 58518, setting to 64 [ 825.758921][ T43] usb 2-1: config 4 interface 84 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 825.770213][ T43] usb 2-1: config 4 interface 84 altsetting 127 has an endpoint descriptor with address 0x2E, changing to 0xE [ 825.795771][ T43] usb 2-1: config 4 interface 84 altsetting 127 endpoint 0xE has invalid maxpacket 33782, setting to 1024 [ 825.813677][ T43] usb 2-1: config 4 interface 84 altsetting 127 has an endpoint descriptor with address 0x22, changing to 0x2 [ 825.839435][ T43] usb 2-1: config 4 interface 84 altsetting 127 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 825.852378][ T43] usb 2-1: config 4 interface 84 altsetting 127 has 8 endpoint descriptors, different from the interface descriptor's value: 9 [ 825.866558][ T43] usb 2-1: config 4 interface 4 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 825.898658][ T43] usb 2-1: too many endpoints for config 4 interface 2 altsetting 8: 126, using maximum allowed: 30 [ 825.931341][ T43] usb 2-1: config 4 interface 2 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 126 [ 825.960337][ T43] usb 2-1: config 4 interface 5 has no altsetting 0 [ 825.967087][ T43] usb 2-1: config 4 interface 234 has no altsetting 0 [ 825.975480][ T43] usb 2-1: config 4 interface 84 has no altsetting 0 [ 825.982364][ T43] usb 2-1: config 4 interface 4 has no altsetting 0 [ 825.989524][ T43] usb 2-1: config 4 interface 2 has no altsetting 0 [ 826.007037][ T43] usb 2-1: New USB device found, idVendor=05c6, idProduct=9046, bcdDevice=cf.de [ 826.020758][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.032085][ T43] usb 2-1: Product: syz [ 826.036271][ T43] usb 2-1: Manufacturer: syz [ 826.041563][ T43] usb 2-1: SerialNumber: syz [ 826.139259][ T24] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 826.278939][ T978] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 826.308979][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 826.316088][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.342569][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 826.353013][T15722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.368980][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.381519][T15722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.441965][T15722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.449515][ T24] usb 4-1: config 0 descriptor?? [ 826.450799][T15722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.473993][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 826.520899][ T24] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 826.521805][ T978] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 826.540849][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.549168][ T978] usb 3-1: Product: syz [ 826.553353][ T978] usb 3-1: Manufacturer: syz [ 826.558071][ T978] usb 3-1: SerialNumber: syz [ 826.582234][ T24] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 826.582523][ T978] usb 3-1: config 0 descriptor?? [ 826.631441][ T43] usb 2-1: USB disconnect, device number 118 [ 826.709312][ T978] as10x_usb: device has been detected [ 826.736150][ C1] ldusb 4-1:0.0: Ring buffer overflow, 8 bytes dropped [ 826.771665][ T978] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 826.936529][ T978] usb 3-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 826.953092][T15739] FAULT_INJECTION: forcing a failure. [ 826.953092][T15739] name failslab, interval 1, probability 0, space 0, times 0 [ 826.973037][ T978] as10x_usb: error during firmware upload part1 [ 826.989515][ T978] Registered device Sky IT Digital Key (green led) [ 826.996800][T15739] CPU: 0 UID: 0 PID: 15739 Comm: syz.2.2490 Not tainted syzkaller #0 PREEMPT(full) [ 826.996824][T15739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 826.996835][T15739] Call Trace: [ 826.996842][T15739] [ 826.996849][T15739] dump_stack_lvl+0x189/0x250 [ 826.996875][T15739] ? __pfx____ratelimit+0x10/0x10 [ 826.996892][T15739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 826.996909][T15739] ? __pfx__printk+0x10/0x10 [ 826.996930][T15739] ? __pfx___might_resched+0x10/0x10 [ 826.996947][T15739] ? fs_reclaim_acquire+0x7d/0x100 [ 826.996969][T15739] should_fail_ex+0x414/0x560 [ 826.997000][T15739] should_failslab+0xa8/0x100 [ 826.997024][T15739] __kmalloc_noprof+0xcb/0x4f0 [ 826.997043][T15739] ? kfree+0x4d/0x440 [ 826.997061][T15739] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 826.997085][T15739] tomoyo_realpath_from_path+0xe3/0x5d0 [ 826.997115][T15739] tomoyo_check_open_permission+0x1c1/0x3b0 [ 826.997197][T15739] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 826.997230][T15739] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 826.997249][T15739] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 826.997295][T15739] ? lockref_get+0x15/0x60 [ 826.997318][T15739] ? tomoyo_file_open+0x165/0x220 [ 826.997342][T15739] security_file_open+0xb1/0x270 [ 826.997364][T15739] do_dentry_open+0x384/0x13f0 [ 826.997388][T15739] ? vfs_open+0x31/0x340 [ 826.997456][T15739] vfs_open+0x3b/0x340 [ 826.997472][T15739] ? path_openat+0x2ecd/0x3830 [ 826.997500][T15739] path_openat+0x2ee5/0x3830 [ 826.997519][T15739] ? arch_stack_walk+0xfc/0x150 [ 826.997558][T15739] ? stack_depot_save_flags+0x40/0x860 [ 826.997588][T15739] ? __pfx_path_openat+0x10/0x10 [ 826.997607][T15739] ? do_fast_syscall_32+0x34/0x80 [ 826.997625][T15739] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 826.997661][T15739] do_filp_open+0x1fa/0x410 [ 826.997679][T15739] ? __lock_acquire+0xab9/0xd20 [ 826.997697][T15739] ? __pfx_do_filp_open+0x10/0x10 [ 826.997740][T15739] ? _raw_spin_unlock+0x28/0x50 [ 826.997757][T15739] ? alloc_fd+0x64c/0x6c0 [ 826.997791][T15739] do_sys_openat2+0x121/0x1c0 [ 826.997814][T15739] ? __pfx_do_sys_openat2+0x10/0x10 [ 826.997838][T15739] ? ksys_write+0x22a/0x250 [ 826.997869][T15739] __ia32_compat_sys_openat+0x131/0x160 [ 826.997895][T15739] __do_fast_syscall_32+0xb6/0x2b0 [ 826.997915][T15739] ? lockdep_hardirqs_on+0x9c/0x150 [ 826.997940][T15739] do_fast_syscall_32+0x34/0x80 [ 826.997961][T15739] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 826.997981][T15739] RIP: 0023:0xf701e539 [ 826.997997][T15739] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 826.998012][T15739] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 826.998030][T15739] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800002c0 [ 826.998043][T15739] RDX: 0000000000042801 RSI: 0000000000000000 RDI: 0000000000000000 [ 826.998054][T15739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 826.998065][T15739] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 826.998076][T15739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 826.998104][T15739] [ 826.998152][T15739] ERROR: Out of memory at tomoyo_realpath_from_path. [ 827.016395][ C1] ldusb 4-1:0.0: Ring buffer overflow, 8 bytes dropped [ 827.025652][T15739] random: crng reseeded on system resumption [ 827.302151][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2487'. [ 827.871039][ T24] usb 3-1: USB disconnect, device number 116 [ 827.913138][ T24] Unregistered device Sky IT Digital Key (green led) [ 827.916283][ T24] as10x_usb: device has been disconnected [ 828.299038][ T978] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 828.423411][T15760] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2496'. [ 828.451538][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.462930][ T978] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 828.474979][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.494668][ T978] usb 6-1: config 0 descriptor?? [ 828.532138][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2495'. [ 828.668933][ T24] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 828.753177][ T978] usbhid 6-1:0.0: can't add hid device: -71 [ 828.772095][ T978] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 828.793800][ T43] usb 4-1: USB disconnect, device number 111 [ 828.798704][ T978] usb 6-1: USB disconnect, device number 61 [ 828.814773][ T43] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 828.832824][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 828.861324][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 828.884273][ T24] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 828.900230][ T24] usb 2-1: config 4 has no interface number 0 [ 828.907008][ T24] usb 2-1: config 4 interface 30 has no altsetting 0 [ 828.923506][ T24] usb 2-1: string descriptor 0 read error: -22 [ 828.938026][ T24] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 828.978968][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.013445][ T24] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 829.023923][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 829.031647][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 829.041964][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 829.101515][ T24] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 829.127955][ T24] usb 2-1: media controller created [ 829.151575][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 829.181368][ T24] dw2102: i2c transfer failed. [ 829.186304][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 829.194788][ T24] dw2102: i2c transfer failed. [ 829.208968][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 829.231435][ T24] dw2102: i2c transfer failed. [ 829.246175][T15760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.259070][ T978] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 829.268700][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 829.298687][ T24] dw2102: i2c transfer failed. [ 829.309388][T15760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.341377][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 829.347209][ T24] dw2102: i2c transfer failed. [ 829.399685][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 829.405456][ T24] dw2102: i2c transfer failed. [ 829.432291][ T24] dvb-usb: MAC address: 02:02:02:02:02:02 [ 829.449053][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 829.478653][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.515165][ T978] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 829.534940][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.587901][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 829.612029][ T978] usb 6-1: config 0 descriptor?? [ 829.644385][ T978] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 829.699523][ T978] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 829.718782][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 829.724671][ T24] dw2102: command 0x0e transfer failed. [ 829.763094][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 829.798209][ T24] dw2102: command 0x0e transfer failed. [ 829.949479][ T43] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 830.154537][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 830.186778][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 830.197920][T15786] overlayfs: missing 'lowerdir' [ 830.213163][ T43] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 830.229827][ T24] dw2102: command 0x0e transfer failed. [ 830.242964][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 830.264126][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.278280][ T24] dw2102: command 0x0e transfer failed. [ 830.285168][T15786] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 830.291586][ T43] usb 4-1: Product: syz [ 830.295936][T15786] syzkaller1: Linktype set failed because interface is up [ 830.303367][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 830.313925][ T43] usb 4-1: Manufacturer: syz [ 830.319166][ T24] dw2102: command 0x51 transfer failed. [ 830.328141][ T43] usb 4-1: SerialNumber: syz [ 830.338582][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 830.349266][ T5895] syzkaller1: tun_net_xmit 90 [ 830.365241][ T43] usb 4-1: config 0 descriptor?? [ 830.389974][ T24] dw2102: i2c probe for address 0x68 failed. [ 830.451567][ T43] as10x_usb: device has been detected [ 830.457856][ T43] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 830.469003][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 830.474865][ T24] dw2102: i2c probe for address 0x69 failed. [ 830.481981][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 830.493799][ T24] dw2102: i2c probe for address 0x6a failed. [ 830.510313][ T24] dw2102: probing for demodulator failed. Is the external power switched on? [ 830.526800][ T24] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 830.538567][ T43] usb 4-1: DVB: registering adapter 3 frontend 0 (Sky IT Digital Key (green led))... [ 830.556105][ T43] as10x_usb: error during firmware upload part1 [ 830.564754][ T43] Registered device Sky IT Digital Key (green led) [ 830.579088][ T43] syzkaller1: tun_net_xmit 90 [ 830.620203][ T5944] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 830.639355][T15781] random: crng reseeded on system resumption [ 830.706905][ T43] usb 4-1: USB disconnect, device number 112 [ 830.720608][ T24] rc_core: IR keymap rc-tt-1500 not found [ 830.746079][ T24] Registered IR keymap rc-empty [ 830.759961][ T24] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 830.802893][ T43] Unregistered device Sky IT Digital Key (green led) [ 830.813170][ T5944] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 830.829529][ T43] as10x_usb: device has been disconnected [ 830.838169][ T24] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input97 [ 830.914859][ T5944] usb 5-1: config 0 has no interface number 0 [ 830.915674][ T24] dvb-usb: schedule remote query interval to 250 msecs. [ 830.924656][ T5944] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 830.938117][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.941823][ T24] dw2102: su3000_power_ctrl: 0, initialized 1 [ 830.976914][ T24] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 830.997615][ T24] usb 2-1: USB disconnect, device number 119 [ 831.017303][ T5944] usb 5-1: config 0 descriptor?? [ 831.044834][ T5944] usb 5-1: selecting invalid altsetting 1 [ 831.060679][ T5944] dvb_ttusb_budget: ttusb_init_controller: error [ 831.067869][ T5944] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 831.105827][ T43] usb 6-1: USB disconnect, device number 62 [ 831.154729][ T43] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 831.269513][T15788] FAULT_INJECTION: forcing a failure. [ 831.269513][T15788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.310378][ T5944] DVB: Unable to find symbol cx22700_attach() [ 831.328627][T15788] CPU: 0 UID: 0 PID: 15788 Comm: syz.4.2502 Not tainted syzkaller #0 PREEMPT(full) [ 831.328652][T15788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 831.328663][T15788] Call Trace: [ 831.328670][T15788] [ 831.328677][T15788] dump_stack_lvl+0x189/0x250 [ 831.328702][T15788] ? __pfx____ratelimit+0x10/0x10 [ 831.328721][T15788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.328742][T15788] ? __pfx__printk+0x10/0x10 [ 831.328753][T15788] ? __might_fault+0xb0/0x130 [ 831.328787][T15788] should_fail_ex+0x414/0x560 [ 831.328818][T15788] _copy_from_user+0x2d/0xb0 [ 831.328840][T15788] compat_i2cdev_ioctl+0x38b/0x5c0 [ 831.328867][T15788] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 831.328891][T15788] ? __fget_files+0x3a0/0x420 [ 831.328907][T15788] ? __fget_files+0x2a/0x420 [ 831.328927][T15788] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 831.328951][T15788] __ia32_compat_sys_ioctl+0x543/0x840 [ 831.328977][T15788] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 831.328999][T15788] ? __fget_files+0x3a0/0x420 [ 831.329021][T15788] ? fput+0xa0/0xd0 [ 831.329041][T15788] ? ksys_write+0x22a/0x250 [ 831.329073][T15788] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.329096][T15788] __do_fast_syscall_32+0xb6/0x2b0 [ 831.329117][T15788] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.329139][T15788] do_fast_syscall_32+0x34/0x80 [ 831.329159][T15788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 831.329179][T15788] RIP: 0023:0xf7ff5539 [ 831.329202][T15788] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 831.329218][T15788] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 831.329235][T15788] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 831.329248][T15788] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 831.329259][T15788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 831.329269][T15788] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 831.329280][T15788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 831.329305][T15788] [ 831.332525][ T24] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 831.518154][T15798] program syz.5.2505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 831.579702][ T5944] DVB: Unable to find symbol tda10046_attach() [ 831.586186][ T5944] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 831.587996][T15799] unknown channel width for channel at 909000KHz? [ 831.719116][ T5944] usb 5-1: USB disconnect, device number 96 [ 831.899287][ T5834] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 832.210580][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 832.220505][ T5834] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 832.230528][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 832.240653][ T5834] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 832.254749][ T5834] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 832.278167][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.315094][ T5834] usb 6-1: Product: syz [ 832.339231][ T5944] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 832.351654][ T5834] usb 6-1: Manufacturer: syz [ 832.368928][ T5834] usb 6-1: SerialNumber: syz [ 832.431613][ T43] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 832.459395][ T5834] usb 6-1: config 0 descriptor?? [ 832.498591][ T5834] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 832.590157][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 832.601803][ T43] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 832.612968][ T43] usb 5-1: config 0 has no interface number 0 [ 832.622044][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 832.632174][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.640578][ T43] usb 5-1: Product: syz [ 832.645043][ T43] usb 5-1: Manufacturer: syz [ 832.649746][ T43] usb 5-1: SerialNumber: syz [ 832.664920][ T43] usb 5-1: config 0 descriptor?? [ 832.700966][ C1] hrtimer: interrupt took 154173 ns [ 832.764986][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 832.888254][ T5944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.924228][ T5944] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 832.933431][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.941503][ T5944] usb 4-1: Product: syz [ 832.967412][ T5944] usb 4-1: Manufacturer: syz [ 833.000197][ T5944] usb 4-1: SerialNumber: syz [ 833.005923][ T43] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 833.016585][ T5944] usb 4-1: config 0 descriptor?? [ 833.046638][ T43] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 833.073806][ T43] usb 5-1: Failed to create links for entity 5 [ 833.077027][ T5944] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 833.100862][ T5944] usb 4-1: selecting invalid altsetting 1 [ 833.107810][ T43] usb 5-1: Failed to register entities (-22). [ 833.179175][ T43] usb 5-1: USB disconnect, device number 97 [ 833.274443][ T5944] gspca_stk014: init reg: 0x00 [ 833.279931][ T5944] stk014 4-1:0.0: probe with driver stk014 failed with error -5 [ 833.314598][T15801] netlink: 'syz.5.2506': attribute type 1 has an invalid length. [ 833.322716][T15801] netlink: 'syz.5.2506': attribute type 3 has an invalid length. [ 833.349013][T15801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2506'. [ 833.389031][ T5834] scsi host1: usb-storage 6-1:0.0 [ 833.401910][ T5834] usb 6-1: USB disconnect, device number 63 [ 833.525940][ T5944] usb 4-1: USB disconnect, device number 113 [ 833.676253][T15828] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2512'. [ 833.929135][ T978] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 834.109115][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 834.162439][ T978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 834.192908][ T978] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 834.239342][ T978] usb 5-1: config 4 has no interface number 0 [ 834.268922][ T978] usb 5-1: config 4 interface 30 has no altsetting 0 [ 834.299622][ T978] usb 5-1: string descriptor 0 read error: -22 [ 834.306104][ T978] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 834.365625][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.393338][ T978] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 834.409204][ T978] dw2102: su3000_power_ctrl: 1, initialized 0 [ 834.418661][ T978] dvb-usb: bulk message failed: -22 (2/0) [ 834.464933][ T978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 834.506892][ T978] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 834.535878][ T978] usb 5-1: media controller created [ 834.551793][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 834.636996][ T978] dw2102: i2c transfer failed. [ 834.651782][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 834.673558][ T978] dw2102: i2c transfer failed. [ 834.712237][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 834.726578][T15853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.742548][ T978] dw2102: i2c transfer failed. [ 834.758595][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 834.765060][T15853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.774851][ T978] dw2102: i2c transfer failed. [ 834.783786][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 834.800150][ T978] dw2102: i2c transfer failed. [ 834.818999][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 834.828259][ T978] dw2102: i2c transfer failed. [ 834.839116][ T43] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 834.847090][ T978] dvb-usb: MAC address: 02:02:02:02:02:02 [ 834.894173][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 834.981644][T15850] delete_channel: no stack [ 835.001943][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 835.025909][ T978] dw2102: command 0x0e transfer failed. [ 835.071347][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 835.080461][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 835.087831][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.106693][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.114003][ T978] dw2102: command 0x0e transfer failed. [ 835.154477][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 835.180895][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.211951][ T43] usb 2-1: config 0 descriptor?? [ 835.219655][ T43] hub 2-1:0.0: USB hub found [ 835.497814][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 835.504672][ T978] dw2102: command 0x0e transfer failed. [ 835.593829][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 835.619237][ T978] dw2102: command 0x0e transfer failed. [ 835.709093][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 835.751227][T15868] overlayfs: missing 'lowerdir' [ 835.761101][ T978] dw2102: command 0x51 transfer failed. [ 835.767281][ T978] dvb-usb: bulk message failed: -22 (5/0) [ 835.773538][ T978] dw2102: i2c probe for address 0x68 failed. [ 835.783590][ T978] dvb-usb: bulk message failed: -22 (5/0) [ 835.790309][ T978] dw2102: i2c probe for address 0x69 failed. [ 835.798893][ T978] dvb-usb: bulk message failed: -22 (5/0) [ 835.806427][ T978] dw2102: i2c probe for address 0x6a failed. [ 835.822084][ T978] dw2102: probing for demodulator failed. Is the external power switched on? [ 835.847513][ T978] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 835.862918][T15864] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 835.870910][ T5944] syzkaller1: tun_net_xmit 90 [ 835.875689][T15864] syzkaller1: Linktype set failed because interface is up [ 836.019185][ T7442] syzkaller1: tun_net_xmit 86 [ 836.039050][ T5834] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 836.046726][ T978] rc_core: IR keymap rc-tt-1500 not found [ 836.076646][ T978] Registered IR keymap rc-empty [ 836.090309][ T978] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 836.117752][ T978] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input98 [ 836.168364][ T978] dvb-usb: schedule remote query interval to 250 msecs. [ 836.205084][ T978] dw2102: su3000_power_ctrl: 0, initialized 1 [ 836.232641][ T5834] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 836.281233][ T5834] usb 6-1: config 0 has no interface number 0 [ 836.298330][ T978] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 836.316791][ T5834] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 836.344810][ T978] usb 5-1: USB disconnect, device number 98 [ 836.354013][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.406194][ T5834] usb 6-1: config 0 descriptor?? [ 836.419557][ T5834] usb 6-1: selecting invalid altsetting 1 [ 836.434061][ T5834] dvb_ttusb_budget: ttusb_init_controller: error [ 836.448695][ T5834] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 836.582258][ T978] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 836.841453][ T5834] DVB: Unable to find symbol cx22700_attach() [ 837.013038][ T5834] DVB: Unable to find symbol tda10046_attach() [ 837.032631][ T5834] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 837.132074][ T5834] usb 6-1: USB disconnect, device number 64 [ 837.175242][ T43] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 837.280908][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 837.323554][T15878] tipc: Enabled bearer , priority 0 [ 837.333409][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 837.334079][T15878] syzkaller0: entered promiscuous mode [ 837.365042][T15878] syzkaller0: entered allmulticast mode [ 837.446730][T15878] FAULT_INJECTION: forcing a failure. [ 837.446730][T15878] name failslab, interval 1, probability 0, space 0, times 0 [ 837.485239][ T43] usb 2-1: USB disconnect, device number 120 [ 837.559837][T15878] CPU: 0 UID: 0 PID: 15878 Comm: syz.5.2523 Not tainted syzkaller #0 PREEMPT(full) [ 837.559863][T15878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 837.559875][T15878] Call Trace: [ 837.559884][T15878] [ 837.559893][T15878] dump_stack_lvl+0x189/0x250 [ 837.559921][T15878] ? __pfx____ratelimit+0x10/0x10 [ 837.559942][T15878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.559963][T15878] ? __pfx__printk+0x10/0x10 [ 837.559983][T15878] ? __pfx___might_resched+0x10/0x10 [ 837.560002][T15878] ? fs_reclaim_acquire+0x7d/0x100 [ 837.560025][T15878] should_fail_ex+0x414/0x560 [ 837.560056][T15878] should_failslab+0xa8/0x100 [ 837.560082][T15878] __kmalloc_noprof+0xcb/0x4f0 [ 837.560104][T15878] ? tomoyo_encode+0x28b/0x550 [ 837.560127][T15878] tomoyo_encode+0x28b/0x550 [ 837.560152][T15878] tomoyo_realpath_from_path+0x58d/0x5d0 [ 837.560174][T15878] ? tomoyo_domain+0xd9/0x130 [ 837.560198][T15878] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 837.560222][T15878] tomoyo_path_number_perm+0x1e8/0x5a0 [ 837.560249][T15878] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 837.560290][T15878] ? __lock_acquire+0xab9/0xd20 [ 837.560326][T15878] ? __fget_files+0x2a/0x420 [ 837.560349][T15878] ? __fget_files+0x3a0/0x420 [ 837.560362][T15878] ? __fget_files+0x2a/0x420 [ 837.560381][T15878] security_file_ioctl_compat+0xcb/0x2d0 [ 837.560409][T15878] __ia32_compat_sys_ioctl+0x128/0x840 [ 837.560435][T15878] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 837.560459][T15878] ? __fget_files+0x3a0/0x420 [ 837.560482][T15878] ? fput+0xa0/0xd0 [ 837.560503][T15878] ? ksys_write+0x22a/0x250 [ 837.560562][T15878] ? lockdep_hardirqs_on+0x9c/0x150 [ 837.560585][T15878] __do_fast_syscall_32+0xb6/0x2b0 [ 837.560607][T15878] ? lockdep_hardirqs_on+0x9c/0x150 [ 837.560631][T15878] do_fast_syscall_32+0x34/0x80 [ 837.560652][T15878] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 837.560673][T15878] RIP: 0023:0xf702e539 [ 837.560689][T15878] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 837.560704][T15878] RSP: 002b:00000000f541e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 837.560724][T15878] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 837.560737][T15878] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 837.560748][T15878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 837.560759][T15878] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 837.560769][T15878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 837.560796][T15878] [ 837.841727][T15878] ERROR: Out of memory at tomoyo_realpath_from_path. [ 837.850232][T15878] tipc: Resetting bearer [ 837.963016][T15877] tipc: Resetting bearer [ 838.028459][T15877] tipc: Disabling bearer [ 838.108172][T15888] syzkaller0: entered promiscuous mode [ 838.116953][T15888] syzkaller0: entered allmulticast mode [ 838.575058][T15900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2530'. [ 838.757565][T15905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2531'. [ 838.843224][T15910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2529'. [ 838.870174][ T978] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 839.071484][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 839.093142][ T978] usb 4-1: unable to get BOS descriptor or descriptor too short [ 839.146238][ T978] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 839.192158][ T978] usb 4-1: config 4 has no interface number 0 [ 839.230784][ T978] usb 4-1: config 4 interface 30 has no altsetting 0 [ 839.256218][ T978] usb 4-1: string descriptor 0 read error: -22 [ 839.272357][ T978] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 839.305560][T15916] netlink: 'syz.1.2533': attribute type 1 has an invalid length. [ 839.311253][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.396292][ T978] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 839.423375][ T978] dw2102: su3000_power_ctrl: 1, initialized 0 [ 839.448933][ T978] dvb-usb: bulk message failed: -22 (2/0) [ 839.486184][ T978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 839.529937][ T978] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 839.566242][T15917] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 839.576854][ T978] usb 4-1: media controller created [ 839.587335][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 839.607987][ T978] dw2102: i2c transfer failed. [ 839.619614][T15917] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 839.637252][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 839.646238][ T978] dw2102: i2c transfer failed. [ 839.671509][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 839.682531][T15922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.698653][ T978] dw2102: i2c transfer failed. [ 839.726095][T15922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.740683][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 839.762004][T15916] bond4: (slave bridge12): Enslaving as an active interface with a down link [ 839.779375][ T978] dw2102: i2c transfer failed. [ 839.785472][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 839.803680][ T978] dw2102: i2c transfer failed. [ 839.821872][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 839.833488][T15919] gretap1: entered promiscuous mode [ 839.838790][T15919] gretap1: entered allmulticast mode [ 839.860304][ T978] dw2102: i2c transfer failed. [ 839.872208][T15919] bond4: (slave gretap1): making interface the new active one [ 839.880007][ T978] dvb-usb: MAC address: 02:02:02:02:02:02 [ 839.901881][T15919] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 839.942433][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 840.070233][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 840.096104][ T978] dw2102: command 0x0e transfer failed. [ 840.109102][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 840.165241][T15924] vlan4: entered allmulticast mode [ 840.178880][ T978] dw2102: command 0x0e transfer failed. [ 840.510945][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 840.516699][ T978] dw2102: command 0x0e transfer failed. [ 840.563417][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 840.584596][ T978] dw2102: command 0x0e transfer failed. [ 840.590240][T15938] overlayfs: missing 'lowerdir' [ 840.604030][ T978] dvb-usb: bulk message failed: -22 (1/0) [ 840.666258][ T978] dw2102: command 0x51 transfer failed. [ 840.697499][T15941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2540'. [ 840.716657][ T978] dvb-usb: bulk message failed: -22 (5/0) [ 840.717308][T15938] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 840.728546][T15938] syzkaller1: Linktype set failed because interface is up [ 840.764400][ T978] dw2102: i2c probe for address 0x68 failed. [ 840.780127][ T978] dvb-usb: bulk message failed: -22 (5/0) [ 840.787016][ T978] dw2102: i2c probe for address 0x69 failed. [ 840.871453][ T978] dvb-usb: bulk message failed: -22 (5/0) [ 840.959118][ T978] dw2102: i2c probe for address 0x6a failed. [ 840.965250][ T978] dw2102: probing for demodulator failed. Is the external power switched on? [ 840.975212][ T978] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 841.049721][ T978] rc_core: IR keymap rc-tt-1500 not found [ 841.060402][ T978] Registered IR keymap rc-empty [ 841.087364][ T978] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 841.101530][ T24] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 841.118559][ T43] syzkaller1: tun_net_xmit 90 [ 841.134510][ T978] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input99 [ 841.195309][ T978] dvb-usb: schedule remote query interval to 250 msecs. [ 841.226599][ T978] dw2102: su3000_power_ctrl: 0, initialized 1 [ 841.247870][ T978] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 841.284343][ T24] usb 6-1: config 0 has no interfaces? [ 841.308318][ T24] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 841.316160][ T978] usb 4-1: USB disconnect, device number 114 [ 841.334672][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.354159][ T24] usb 6-1: Product: syz [ 841.367516][ T24] usb 6-1: Manufacturer: syz [ 841.378872][ T24] usb 6-1: SerialNumber: syz [ 841.393218][ T24] usb 6-1: config 0 descriptor?? [ 841.630694][ T24] usb 6-1: USB disconnect, device number 65 [ 841.854632][ T978] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 842.919030][ T24] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 843.099017][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 843.144174][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.192055][T15975] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2548'. [ 843.218910][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.260071][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 843.365389][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.392010][ T24] usb 6-1: config 0 descriptor?? [ 843.411449][ T24] hub 6-1:0.0: USB hub found [ 843.498980][ T5895] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 843.698902][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 843.717179][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 843.739118][ T5895] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 843.761696][ T5895] usb 5-1: config 4 has no interface number 0 [ 843.787184][ T5895] usb 5-1: config 4 interface 30 has no altsetting 0 [ 843.826695][ T5895] usb 5-1: string descriptor 0 read error: -22 [ 843.840515][ T5895] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 843.890404][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.973520][ T5895] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 844.008520][ T5895] dw2102: su3000_power_ctrl: 1, initialized 0 [ 844.027368][ T5895] dvb-usb: bulk message failed: -22 (2/0) [ 844.063079][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 844.081139][ T5895] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 844.109091][ T5895] usb 5-1: media controller created [ 844.128998][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 844.151333][ T5895] dw2102: i2c transfer failed. [ 844.174814][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 844.189930][ T5895] dw2102: i2c transfer failed. [ 844.199062][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 844.207768][ T5895] dw2102: i2c transfer failed. [ 844.212871][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 844.219211][ T5895] dw2102: i2c transfer failed. [ 844.224176][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 844.230585][ T5895] dw2102: i2c transfer failed. [ 844.235523][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 844.241630][ T5895] dw2102: i2c transfer failed. [ 844.246662][ T5895] dvb-usb: MAC address: 02:02:02:02:02:02 [ 844.258572][T15977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.295919][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 844.315362][T15977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.380804][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 844.402074][ T5895] dw2102: command 0x0e transfer failed. [ 844.422029][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 844.438286][ T5895] dw2102: command 0x0e transfer failed. [ 844.759151][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 844.767554][ T5895] dw2102: command 0x0e transfer failed. [ 844.776899][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 844.783366][ T5895] dw2102: command 0x0e transfer failed. [ 844.811395][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 844.825147][ T5895] dw2102: command 0x51 transfer failed. [ 844.837462][ T5895] dvb-usb: bulk message failed: -22 (5/0) [ 844.852323][ T5895] dw2102: i2c probe for address 0x68 failed. [ 844.867263][ T5895] dvb-usb: bulk message failed: -22 (5/0) [ 844.878102][ T5895] dw2102: i2c probe for address 0x69 failed. [ 844.884720][ T5895] dvb-usb: bulk message failed: -22 (5/0) [ 844.890742][ T5895] dw2102: i2c probe for address 0x6a failed. [ 844.896872][ T5895] dw2102: probing for demodulator failed. Is the external power switched on? [ 844.906056][ T5895] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 845.051294][ T5895] rc_core: IR keymap rc-tt-1500 not found [ 845.057195][ T5895] Registered IR keymap rc-empty [ 845.071653][ T5895] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 845.084851][ T5895] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input100 [ 845.100820][ T5895] dvb-usb: schedule remote query interval to 250 msecs. [ 845.117182][ T5895] dw2102: su3000_power_ctrl: 0, initialized 1 [ 845.127542][ T5895] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 845.150478][ T5895] usb 5-1: USB disconnect, device number 99 [ 845.214786][ T5895] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 845.252447][ T24] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 845.265821][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 845.272086][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 845.299778][ T24] usb 6-1: USB disconnect, device number 66 [ 845.463338][T15985] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 845.533787][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2553'. [ 845.625398][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2553'. [ 845.636770][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2553'. [ 845.879202][ T5834] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 845.939227][T16002] macsec0: entered promiscuous mode [ 845.948251][T16002] macsec0: left promiscuous mode [ 845.970486][T16002] vlan3: entered allmulticast mode [ 846.074705][T16007] overlayfs: missing 'lowerdir' [ 846.101594][ T5834] usb 3-1: config 0 has no interfaces? [ 846.115719][ T5834] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 846.137187][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.199391][ T5834] usb 3-1: Product: syz [ 846.214200][T16007] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 846.227784][ T5834] usb 3-1: Manufacturer: syz [ 846.247907][T16007] syzkaller1: linktype set to 272 [ 846.254706][ T5834] usb 3-1: SerialNumber: syz [ 846.295011][ T5834] usb 3-1: config 0 descriptor?? [ 846.860751][ T5834] usb 3-1: USB disconnect, device number 117 [ 848.819515][T16046] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 848.988895][ T978] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 849.159180][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 849.170716][ T978] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 849.179407][ T978] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 849.191919][ T978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 849.218921][ T978] usb 2-1: config 1 has no interface number 0 [ 849.228939][ T978] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 849.251062][ T978] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 849.288902][ T978] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 849.308422][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.390215][ T978] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 849.702187][ T978] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 849.828774][T16056] veth1_macvtap: left promiscuous mode [ 849.838370][T16056] macsec0: entered promiscuous mode [ 849.871569][T16057] veth1_macvtap: entered promiscuous mode [ 849.877749][T16057] macsec0: left promiscuous mode [ 849.908917][ T24] usb 2-1: USB disconnect, device number 121 [ 849.916415][ T24] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 849.998775][T16059] vlan3: entered allmulticast mode [ 850.143893][T16063] overlayfs: missing 'lowerdir' [ 850.908971][T16065] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 850.916344][T16065] syzkaller1: linktype set to 272 [ 851.303015][ T978] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 851.480523][ T978] usb 2-1: config 0 has no interfaces? [ 851.501371][ T978] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 851.528966][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.548907][ T978] usb 2-1: Product: syz [ 851.553333][ T978] usb 2-1: Manufacturer: syz [ 851.564002][ T978] usb 2-1: SerialNumber: syz [ 851.586383][ T978] usb 2-1: config 0 descriptor?? [ 851.850292][ T978] usb 2-1: USB disconnect, device number 122 [ 852.839038][ T5895] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 853.069049][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 853.090822][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.127516][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.219076][ T978] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 853.255230][ T5895] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 853.298475][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.346248][ T5895] usb 4-1: config 0 descriptor?? [ 853.369067][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 853.377140][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.407714][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.430480][ T978] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 853.519268][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.537099][ T978] usb 2-1: config 0 descriptor?? [ 853.546718][ T978] hub 2-1:0.0: USB hub found [ 853.801791][ T5895] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 853.819105][ T5895] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 853.865617][ T5895] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 853.873033][ T5895] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 853.884909][ T5895] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 853.902814][ T5895] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 853.908414][T16111] vlan3: entered allmulticast mode [ 854.013919][T16101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.027566][T16101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.180722][ T5895] usb 4-1: USB disconnect, device number 115 [ 854.289002][ T5939] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 854.408747][T16121] overlayfs: missing 'lowerdir' [ 854.445452][T16121] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 854.453624][T16121] syzkaller1: linktype set to 272 [ 854.459441][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 854.477495][ T5939] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 854.489192][ T5939] usb 6-1: config 8 has no interface number 0 [ 854.504367][ T5939] usb 6-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 854.522269][ T5939] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 854.536654][ T5939] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 854.551379][ T5939] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 854.562279][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.575545][ T5939] usb 6-1: Product: syz [ 854.579901][ T5939] usb 6-1: Manufacturer: syz [ 854.586674][ T5939] usb 6-1: SerialNumber: syz [ 854.820625][ T5939] vmk80xx 6-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 854.879377][ T5939] vmk80xx 6-1:8.188: probe with driver vmk80xx failed with error -22 [ 854.950733][ T5939] usb 6-1: USB disconnect, device number 67 [ 855.522595][ T978] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 855.587805][ T978] usbhid 2-1:0.0: can't add hid device: -71 [ 855.616025][ T978] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 855.680154][ T978] usb 2-1: USB disconnect, device number 123 [ 856.069317][T16139] FAULT_INJECTION: forcing a failure. [ 856.069317][T16139] name failslab, interval 1, probability 0, space 0, times 0 [ 856.113047][T16139] CPU: 1 UID: 0 PID: 16139 Comm: syz.1.2592 Not tainted syzkaller #0 PREEMPT(full) [ 856.113072][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 856.113083][T16139] Call Trace: [ 856.113091][T16139] [ 856.113099][T16139] dump_stack_lvl+0x189/0x250 [ 856.113126][T16139] ? __pfx____ratelimit+0x10/0x10 [ 856.113146][T16139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 856.113167][T16139] ? __pfx__printk+0x10/0x10 [ 856.113190][T16139] ? __pfx___might_resched+0x10/0x10 [ 856.113212][T16139] should_fail_ex+0x414/0x560 [ 856.113243][T16139] should_failslab+0xa8/0x100 [ 856.113271][T16139] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 856.113295][T16139] ? __alloc_skb+0x112/0x2d0 [ 856.113320][T16139] __alloc_skb+0x112/0x2d0 [ 856.113360][T16139] netlink_sendmsg+0x5c6/0xb30 [ 856.113391][T16139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 856.113414][T16139] ? __import_iovec+0x5d4/0x7f0 [ 856.113434][T16139] ? aa_sock_msg_perm+0xf1/0x1d0 [ 856.113455][T16139] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 856.113475][T16139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 856.113496][T16139] __sock_sendmsg+0x21c/0x270 [ 856.113517][T16139] ____sys_sendmsg+0x505/0x830 [ 856.113544][T16139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 856.113582][T16139] ___sys_sendmsg+0x21f/0x2a0 [ 856.113607][T16139] ? __pfx____sys_sendmsg+0x10/0x10 [ 856.113663][T16139] ? __fget_files+0x2a/0x420 [ 856.113685][T16139] ? __fget_files+0x3a0/0x420 [ 856.113712][T16139] __sys_sendmsg+0x164/0x220 [ 856.113737][T16139] ? __pfx___sys_sendmsg+0x10/0x10 [ 856.113774][T16139] ? lockdep_hardirqs_on+0x9c/0x150 [ 856.113794][T16139] __do_fast_syscall_32+0xb6/0x2b0 [ 856.113814][T16139] ? lockdep_hardirqs_on+0x9c/0x150 [ 856.113835][T16139] do_fast_syscall_32+0x34/0x80 [ 856.113854][T16139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 856.113875][T16139] RIP: 0023:0xf70be539 [ 856.113891][T16139] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 856.113906][T16139] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 856.113926][T16139] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000100 [ 856.113939][T16139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 856.113951][T16139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 856.113962][T16139] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 856.113972][T16139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 856.113998][T16139] [ 857.397069][T16166] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2600'. [ 857.565975][ T30] kauditd_printk_skb: 195 callbacks suppressed [ 857.565990][ T30] audit: type=1326 audit(1759271805.772:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.5.2600" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702e539 code=0x0 [ 857.950663][T16171] fuse: Bad value for 'fd' [ 858.209330][ T978] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 858.432188][ T978] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 858.475721][ T978] usb 2-1: config 0 has no interface number 0 [ 858.503778][ T978] usb 2-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88 [ 858.538991][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.579559][ T978] usb 2-1: config 0 descriptor?? [ 858.595868][ T978] quatech2 2-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected [ 859.493861][ T978] usb 2-1: qt2_attach - failed to power on unit: -71 [ 859.507720][ T978] quatech2 2-1:0.212: probe with driver quatech2 failed with error -71 [ 859.673001][ T978] usb 2-1: USB disconnect, device number 124 [ 859.693516][T16203] macsec0: entered promiscuous mode [ 859.716091][T16199] 8021q: VLANs not supported on ip6gre0 [ 860.529536][T16227] delete_channel: no stack [ 860.765311][T16229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2616'. [ 860.788464][T16233] FAULT_INJECTION: forcing a failure. [ 860.788464][T16233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.859381][ T43] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 860.912696][T16233] CPU: 1 UID: 0 PID: 16233 Comm: syz.5.2617 Not tainted syzkaller #0 PREEMPT(full) [ 860.912713][T16233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 860.912720][T16233] Call Trace: [ 860.912725][T16233] [ 860.912731][T16233] dump_stack_lvl+0x189/0x250 [ 860.912747][T16233] ? __pfx____ratelimit+0x10/0x10 [ 860.912760][T16233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 860.912771][T16233] ? __pfx__printk+0x10/0x10 [ 860.912781][T16233] ? __might_fault+0xb0/0x130 [ 860.912801][T16233] should_fail_ex+0x414/0x560 [ 860.912819][T16233] _copy_from_user+0x2d/0xb0 [ 860.912833][T16233] __ia32_compat_sys_ioctl+0x2d5/0x840 [ 860.912849][T16233] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 860.912880][T16233] ? count_memcg_event_mm+0x21/0x260 [ 860.912899][T16233] ? ksys_write+0x1e1/0x250 [ 860.912918][T16233] ? lockdep_hardirqs_on+0x9c/0x150 [ 860.912930][T16233] __do_fast_syscall_32+0xb6/0x2b0 [ 860.912945][T16233] ? lockdep_hardirqs_on+0x9c/0x150 [ 860.912957][T16233] do_fast_syscall_32+0x34/0x80 [ 860.912969][T16233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 860.912981][T16233] RIP: 0023:0xf702e539 [ 860.912991][T16233] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 860.913000][T16233] RSP: 002b:00000000f541e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 860.913011][T16233] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000402c5828 [ 860.913018][T16233] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 860.913024][T16233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 860.913030][T16233] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 860.913036][T16233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 860.913049][T16233] [ 860.914999][ T30] audit: type=1326 audit(1759271809.122:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16222 comm="syz.2.2616" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701e539 code=0x0 [ 861.020328][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 861.200613][ T43] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 861.212443][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.220866][ T43] usb 4-1: Product: syz [ 861.234967][ T43] usb 4-1: Manufacturer: syz [ 861.240049][ T43] usb 4-1: SerialNumber: syz [ 861.254729][ T43] usb 4-1: config 0 descriptor?? [ 861.391054][ T978] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 861.559104][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 861.573910][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.585558][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.603453][ T978] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 861.613183][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.632880][ T978] usb 2-1: config 0 descriptor?? [ 861.646127][ T978] hub 2-1:0.0: USB hub found [ 861.687271][ T43] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 861.713655][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 861.726390][ T43] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 861.739354][ T43] usb 4-1: media controller created [ 861.763813][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 861.803165][T16243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2619'. [ 861.906881][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 861.928116][ T43] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 861.966938][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 862.006235][ T43] usb 4-1: USB disconnect, device number 116 [ 862.430078][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 864.558492][ T978] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 864.654256][ T978] usbhid 2-1:0.0: can't add hid device: -71 [ 864.738783][ T978] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 864.751527][T16274] macsec0: left promiscuous mode [ 864.929858][ T978] usb 2-1: USB disconnect, device number 125 [ 865.009668][T16275] vlan4: entered allmulticast mode [ 865.550005][ T978] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 865.708997][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 865.731465][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.742901][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.789401][ T978] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 865.798457][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.860189][T16299] FAULT_INJECTION: forcing a failure. [ 865.860189][T16299] name failslab, interval 1, probability 0, space 0, times 0 [ 865.886993][T16299] CPU: 1 UID: 0 PID: 16299 Comm: syz.5.2630 Not tainted syzkaller #0 PREEMPT(full) [ 865.887019][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 865.887029][T16299] Call Trace: [ 865.887036][T16299] [ 865.887042][T16299] dump_stack_lvl+0x189/0x250 [ 865.887059][T16299] ? __pfx____ratelimit+0x10/0x10 [ 865.887071][T16299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.887083][T16299] ? __pfx__printk+0x10/0x10 [ 865.887095][T16299] ? __pfx___might_resched+0x10/0x10 [ 865.887108][T16299] should_fail_ex+0x414/0x560 [ 865.887129][T16299] should_failslab+0xa8/0x100 [ 865.887146][T16299] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 865.887160][T16299] ? __alloc_skb+0x112/0x2d0 [ 865.887174][T16299] __alloc_skb+0x112/0x2d0 [ 865.887187][T16299] netlink_sendmsg+0x5c6/0xb30 [ 865.887204][T16299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.887216][T16299] ? __import_iovec+0x5d4/0x7f0 [ 865.887228][T16299] ? aa_sock_msg_perm+0xf1/0x1d0 [ 865.887238][T16299] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 865.887249][T16299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.887261][T16299] __sock_sendmsg+0x21c/0x270 [ 865.887273][T16299] ____sys_sendmsg+0x52d/0x830 [ 865.887288][T16299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 865.887309][T16299] ___sys_sendmsg+0x21f/0x2a0 [ 865.887322][T16299] ? __pfx____sys_sendmsg+0x10/0x10 [ 865.887352][T16299] ? __fget_files+0x2a/0x420 [ 865.887362][T16299] ? __fget_files+0x3a0/0x420 [ 865.887376][T16299] __sys_sendmmsg+0x28e/0x430 [ 865.887392][T16299] ? __pfx___sys_sendmmsg+0x10/0x10 [ 865.887408][T16299] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 865.887429][T16299] ? ksys_write+0x22a/0x250 [ 865.887450][T16299] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 865.887465][T16299] __do_fast_syscall_32+0xb6/0x2b0 [ 865.887477][T16299] ? lockdep_hardirqs_on+0x9c/0x150 [ 865.887490][T16299] do_fast_syscall_32+0x34/0x80 [ 865.887501][T16299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 865.887514][T16299] RIP: 0023:0xf702e539 [ 865.887523][T16299] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 865.887532][T16299] RSP: 002b:00000000f541e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 865.887543][T16299] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000800002c0 [ 865.887551][T16299] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 865.887557][T16299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 865.887563][T16299] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 865.887569][T16299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 865.887583][T16299] [ 866.226012][T16300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2629'. [ 866.474673][ T30] audit: type=1326 audit(1759271814.482:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16294 comm="syz.4.2629" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5539 code=0x0 [ 866.537099][ T978] usb 2-1: config 0 descriptor?? [ 866.750272][ T978] hub 2-1:0.0: USB hub found [ 866.895800][T16306] overlayfs: missing 'lowerdir' [ 867.382540][T16316] ------------[ cut here ]------------ [ 867.388070][T16316] WARNING: CPU: 0 PID: 16316 at fs/nsfs.c:493 nsfs_fh_to_dentry+0xc56/0xd50 [ 867.396985][T16316] Modules linked in: [ 867.400989][T16316] CPU: 0 UID: 0 PID: 16316 Comm: syz.2.2632 Not tainted syzkaller #0 PREEMPT(full) [ 867.410408][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 867.420503][T16316] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 867.426226][T16316] Code: 64 24 40 e9 41 f8 ff ff e8 f7 2d 7b ff 90 0f 0b 90 e9 64 f6 ff ff e8 e9 2d 7b ff 90 0f 0b 90 e9 ab f6 ff ff e8 db 2d 7b ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 cd 2d 7b ff 45 31 e4 4c 8b 7c 24 08 e9 [ 867.439072][ T43] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 867.446006][T16316] RSP: 0018:ffffc9000b937a40 EFLAGS: 00010283 [ 867.459931][T16316] RAX: ffffffff8242e7b5 RBX: 00000000effffffc RCX: 0000000000080000 [ 867.468161][T16316] RDX: ffffc9000beda000 RSI: 000000000000003a RDI: 000000000000003b [ 867.476436][T16316] RBP: ffffc9000b937b10 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586 [ 867.484504][T16316] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: ffffffff8242dc9c [ 867.492585][T16316] R13: dffffc0000000000 R14: ffff888030010914 R15: 0000000000000000 [ 867.500806][T16316] FS: 0000000000000000(0000) GS:ffff88812637e000(0063) knlGS:00000000f540eb40 [ 867.509884][T16316] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 867.516579][T16316] CR2: 0000000080000040 CR3: 00000000615de000 CR4: 00000000003526f0 [ 867.524793][T16316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 867.533036][T16316] DR3: 00000000fd8e000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 867.541175][T16316] Call Trace: [ 867.544489][T16316] [ 867.547450][T16316] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 867.553056][T16316] exportfs_decode_fh_raw+0x178/0x6e0 [ 867.558545][T16316] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 867.564681][T16316] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 867.570854][T16316] do_handle_to_path+0xa4/0x1a0 [ 867.575816][T16316] do_handle_open+0x6b4/0x8f0 [ 867.580585][T16316] ? __pfx_do_handle_open+0x10/0x10 [ 867.585845][T16316] ? lockdep_hardirqs_on+0x9c/0x150 [ 867.591410][T16316] __do_fast_syscall_32+0xb6/0x2b0 [ 867.596593][T16316] do_fast_syscall_32+0x34/0x80 [ 867.601490][T16316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 867.607837][T16316] RIP: 0023:0xf701e539 [ 867.611950][T16316] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 867.631717][T16316] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000156 [ 867.640185][T16316] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 867.648171][T16316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 867.656354][T16316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 867.664373][T16316] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 867.672924][T16316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 867.681427][T16316] [ 867.684487][T16316] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 867.691771][T16316] CPU: 0 UID: 0 PID: 16316 Comm: syz.2.2632 Not tainted syzkaller #0 PREEMPT(full) [ 867.701122][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 867.711178][T16316] Call Trace: [ 867.714505][T16316] [ 867.717436][T16316] dump_stack_lvl+0x99/0x250 [ 867.722130][T16316] ? __asan_memcpy+0x40/0x70 [ 867.726728][T16316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 867.731938][T16316] ? __pfx__printk+0x10/0x10 [ 867.736525][T16316] vpanic+0x281/0x750 [ 867.741026][T16316] ? __pfx__printk+0x10/0x10 [ 867.745700][T16316] ? __pfx_vpanic+0x10/0x10 [ 867.750239][T16316] ? is_bpf_text_address+0x26/0x2b0 [ 867.755476][T16316] panic+0xb9/0xc0 [ 867.759215][T16316] ? __pfx_panic+0x10/0x10 [ 867.763660][T16316] __warn+0x31b/0x4b0 [ 867.767644][T16316] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 867.772745][T16316] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 867.777846][T16316] report_bug+0x2be/0x4f0 [ 867.782176][T16316] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 867.787370][T16316] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 867.792495][T16316] ? nsfs_fh_to_dentry+0xc58/0xd50 [ 867.797597][T16316] handle_bug+0x84/0x160 [ 867.801838][T16316] exc_invalid_op+0x1a/0x50 [ 867.806326][T16316] asm_exc_invalid_op+0x1a/0x20 [ 867.811164][T16316] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 867.816871][T16316] Code: 64 24 40 e9 41 f8 ff ff e8 f7 2d 7b ff 90 0f 0b 90 e9 64 f6 ff ff e8 e9 2d 7b ff 90 0f 0b 90 e9 ab f6 ff ff e8 db 2d 7b ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 cd 2d 7b ff 45 31 e4 4c 8b 7c 24 08 e9 [ 867.836496][T16316] RSP: 0018:ffffc9000b937a40 EFLAGS: 00010283 [ 867.842714][T16316] RAX: ffffffff8242e7b5 RBX: 00000000effffffc RCX: 0000000000080000 [ 867.850680][T16316] RDX: ffffc9000beda000 RSI: 000000000000003a RDI: 000000000000003b [ 867.859028][T16316] RBP: ffffc9000b937b10 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586 [ 867.867008][T16316] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: ffffffff8242dc9c [ 867.875059][T16316] R13: dffffc0000000000 R14: ffff888030010914 R15: 0000000000000000 [ 867.883039][T16316] ? nsfs_fh_to_dentry+0x13c/0xd50 [ 867.888143][T16316] ? nsfs_fh_to_dentry+0xc55/0xd50 [ 867.893347][T16316] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 867.898900][T16316] exportfs_decode_fh_raw+0x178/0x6e0 [ 867.904276][T16316] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 867.910221][T16316] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 867.916135][T16316] do_handle_to_path+0xa4/0x1a0 [ 867.921010][T16316] do_handle_open+0x6b4/0x8f0 [ 867.925866][T16316] ? __pfx_do_handle_open+0x10/0x10 [ 867.931072][T16316] ? lockdep_hardirqs_on+0x9c/0x150 [ 867.936353][T16316] __do_fast_syscall_32+0xb6/0x2b0 [ 867.941473][T16316] do_fast_syscall_32+0x34/0x80 [ 867.946330][T16316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 867.952657][T16316] RIP: 0023:0xf701e539 [ 867.957082][T16316] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 867.976874][T16316] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000156 [ 867.985280][T16316] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 867.993248][T16316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 868.001212][T16316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 868.009269][T16316] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 868.017266][T16316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 868.025264][T16316] [ 868.028728][T16316] Kernel Offset: disabled [ 868.033153][T16316] Rebooting in 86400 seconds..