last executing test programs: 16.679148493s ago: executing program 0 (id=465): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x14, 0x4, "1df73cc1"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000007c0)=ANY=[@ANYBLOB="200c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 11.370332509s ago: executing program 0 (id=483): socket(0x10, 0x3, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) (async) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000100)={0x9, @capture={0x1000, 0x1, {0x5, 0xc}, 0xc4c, 0x5}}) (async) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) (async, rerun: 64) socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) (async) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async, rerun: 64) r5 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) (rerun: 64) ftruncate(r5, 0xffff) (async) fcntl$addseals(r5, 0x409, 0x7) (async) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) lseek(r6, 0x1000000000931f, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x10, 0x0, 0x0) (async, rerun: 32) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (rerun: 32) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) (async) open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0xfded4000) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) 10.255735427s ago: executing program 0 (id=485): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x3, 0x3, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x7, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x0, 0x3, 0xd, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x40, 0x1, 0x4, 0x45, 0x0, 0xff, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x80, 0x4, 0xff, 0x2, 0x5, 0x70, 0x4, 0x6}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x7000000000, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3, 0x0, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.602036775s ago: executing program 0 (id=486): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x300) sendmsg$inet(r2, 0x0, 0x0) unshare(0x42000000) gettid() unshare(0x0) timer_create(0xb, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3e, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000002c0)={0x6, 0x1, 0x0, "ee9b6baf21878e5ed730f4706a14d4000091e2e776ab4988d65ca500008000", 0xf6c1a1f}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @initdev={0xac, 0x1e, 0x3, 0x0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044094) 8.343838025s ago: executing program 1 (id=488): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0445611, 0x0) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db60000000904001005030001000921000036012205000905810300000cfd07090502032000810800"/63], 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(r0, r3, &(0x7f00000001c0), 0x0, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x447e, 0x3380, 0x1, 0x40024a}, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x10, 0x4004, @fd_index=0x3, 0x8000000000, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r6, 0x627, 0x14, 0x4b, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={r9}) syz_usb_connect$cdc_ncm(0x3, 0x77, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x8, 0x30, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "c7cf"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x29, 0xd, 0x6}, {0x6, 0x24, 0x1a, 0x81d, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x7, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xf9, 0x7, 0x4}}}}}}}]}}, &(0x7f0000002640)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x40, 0x1, 0x3, 0x40, 0xcb}, 0x2e, &(0x7f0000000300)={0x5, 0xf, 0x2e, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x70, 0x1, 0x6, 0x2, 0xe6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x5, 0xf}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x5, 0x0, 0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0x6, 0xe}]}, 0x6, [{0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x421}}, {0x2b, &(0x7f0000002480)=@string={0x2b, 0x3, "a4cd0722023625f54a676fd96f16dbc19faf95b39b014d74a4ef918fbab43d18a72409b9e8022576f5"}}, {0x47, &(0x7f00000024c0)=@string={0x47, 0x3, "b3d815d33e3db084122b787f5173829b65bf89844683e130e52d4ac5adf16eef650d943fc73a7377ac84ba1e00f330d438882af733f3663349980cded9b85ba67981c5f4cd"}}, {0x80, &(0x7f0000002540)=@string={0x80, 0x3, "0060e4ee7eae1610516fae2e0fcf1a29036934c14806564d1b27216404bde1925279e703133187618d154987230f33b90a6077bec3bdcd3e9baf26829fe54c9894337c1e31d16c9a9ce906b891d19e8adcb67ad2d27794b5aa0684defc8a70d9289ad47f8601b10126f01e2a731958ce84cd6f785186798bd08015500adb"}}, {0x4, &(0x7f00000025c0)=@lang_id={0x4, 0x3, 0x422}}, {0x40, &(0x7f0000002600)=@string={0x40, 0x3, "1b98eca34eeea28c26e27169686711a44b3e20b26d9bbd17ac3f1f91615f44a03f326130954483189585e17273d1c0d280e0b334ff8ccdf654309ef4a78b"}}]}) syz_usb_control_io(r2, &(0x7f00000026c0)={0x9, &(0x7f0000000100)={0x20, 0x11, 0x3b, {0x57, 0x21, "a7ea3163fd3bc518194b120c1e73554cfc4ad2841ef4f6a3fd7459ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d5c32ed6b5217cdbb6fadb2ea38a39253d9ee7a288982d5337a364daf5c13e2f1ed1209"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x48, 0x8009}, 'syz0\x00', 0x19}) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x27, 0x55, 0xca, 0x20, 0x471, 0x328, 0x89bc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x9, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x0, 0x0, 0x2c, 0xd7, 0x77}}]}}]}}, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r10, 0x0, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x2) r12 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000001001"], 0x10}, 0x40) r13 = dup3(r11, r0, 0x80000) read$FUSE(r13, &(0x7f0000000400)={0x2020}, 0x2020) 5.81774632s ago: executing program 2 (id=498): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x6f, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x57, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000640)=[@ip_retopts={{0x44, 0x0, 0x7, {[@cipso={0x86, 0xc, 0x1, [{0x7, 0x6, "f20c5e05"}]}, @noop, @noop, @lsrr={0x83, 0x27, 0xa1, [@broadcast, @multicast1, @loopback, @multicast2, @private=0xa010102, @multicast2, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x3d}]}, @generic={0x89, 0x3, '3'}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x10}, @empty}}}], 0x6c}, 0x41) fchdir(r1) openat2$dir(0xffffff9c, &(0x7f0000000500)='./cgroup/../file0\x00', &(0x7f0000000540)={0x24a00, 0x0, 0x8}, 0x18) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x48000, 0x44) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x23) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) 5.385437464s ago: executing program 2 (id=499): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd31, 0x0, {{@in6=@loopback, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xb, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) 5.312306252s ago: executing program 0 (id=500): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121081, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) socket(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') r5 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00'}) socket$kcm(0x10, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000080)={0x800103, 0xfffff7fd, 0x22, 0xce9, 0x1101, 0x5}) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x110) 5.107625211s ago: executing program 1 (id=501): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x29a, 0x0, 0x7fffffffffffffff}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xe2f5b6da09b13d83, 0x4) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x210, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x1e8, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x164, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0x5d}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_emit_ethernet(0x76, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fa0a6b", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [@fragment={0x2c}, @srh]}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r5) fsopen(&(0x7f0000000180)='efs\x00', 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r8, 0x7}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 4.973537127s ago: executing program 3 (id=502): eventfd2(0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) r6 = openat$autofs(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x10}}, './file0\x00'}) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x3}, 0x20) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000)) r10 = openat$fuse(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) read$FUSE(r10, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r12, r13, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80048, &(0x7f0000000380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r12}, 0x2c, {'group_id', 0x3d, r14}, 0x2c, {[], [{@dont_hash}]}}) msgsnd(0x0, &(0x7f0000000480)={0x2, "164b4a4c1a9a74b4b36254d2312c9e2e5788e4e34dee706197b06fd2eb12081abf67dca7ade6c9724cbd0bf386ed97b4b47a3546dedfb738767fbfd3bc23d4193ed9b5efde23147180c23ce3975466bb7c1d2d1aea49002dfd71583e441724ebd0c2759888e5367a9e8ba779b35e60e545d5db0862836dc3222a0548ba9abd09e97acb9111a2b12ef64edf8eca3761139b2cd54ce9af23e52b883fd20cd9ffecdb175356db1f85b1351307ddde54395621706e6097e74295dcbbaeacf3ab0c94d8c718d28de3c6e0fd65457a7a939a65aa25d7c1694455d2cb74e4fe9c73f4228196a9679cbac960bc6f87d6fb4f48eac7a10b507d3930a7348cb054ce882ab8ad213c57cda2dd0a87d23f549e2fdecd77f3d10b9caf85f4431af45bcab3333c2ad5e4376538c5cdec9ebebed32d9df63a4662501b657a4140e4dd55db2eb8c29884a725b7abb359225d9b8d915a4427fa3a855a6ede6f265c0000dd287fc6368f1bb7847ef58dad2b08e233cae7627e42a72b2f86daf233011c7d72f16c5eaa112d9b3bf8e13e132591a594bf6e5ccc4713ff28aee4b93be8376df41eb43df805b647c22ed1bc5421fea5eb7f5ded5706134d557f533f9f2bd30982dadf41cdc99e8ff9a111b5970b0e3895efd213f90999a9d5e261f3833c3a9af4922b2b741628958c851c15d3da1f2fba12079675ccc363d777a4d3b4d99f5df648216c360fc3857f49aee0191f4e43522e3c291785c627fbf13245e3d4a3b4ac29e927be385c22b7a4e12d4eaa0d0a401bf5be912ee48ea3fabb62a005f7a5004087e19fbe18c557e39194b9b8d7e4943ee4c5044b36fb7ab96b3d0e519245db572f6c5a734586a0f5e2932388b1d33109c7ad1ebf73fe0472ef56245e9adace46d20121e61f4ed816504c3ff10c10045f8820122446737a1ab019b492e56561b794879ba6fc03de4bc3563afd241a0448846fba1533d1320b2efebac6793de902a349be1a7cabd63bb6cede2bd24dbde03bc586a3a4a7f27d0fd4d8c11157f22faddbfc73d52abb78938fe9d11bc9652cf43fc6a0ec747e3ca801415b19f13b9311f4718c1f1a3ff6fd5508c7e17c3b4b81788ea77d241d678c43bdd4cefa37fe3bd001de9e99b4dfb7134349191d2e3fc34ed2e4101e8bfbf9b4f9c28f0ba6b40f184028d84b2b5dc41c1f108dcea1508972a940c96943911439c946682cb31d689d7225878ec81d9775c5e090e7e30b36fce44d4450234f7ad7d63d7d0d9ee43d03d8f3a3ab633d37bc43c21c59aefbe4c93b684970693e90928d23cf61eb32184ab997cc6c2b25ce0a3c112e72f6bbfbbb82d62c5671bcbbe9b33bfe0243830fbbfed5ccb74f2799dc29c3a8ad07d065228b6545ab32b12deacffaa8443e293ee5d6b43edfa0d3bb23fa6966a616618b7a221072fdd9a031ce7721"}, 0x401, 0x0) msgctl$IPC_RMID(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.761386128s ago: executing program 4 (id=503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x2) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) 4.19589728s ago: executing program 2 (id=504): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x21, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xec}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 4.028243833s ago: executing program 2 (id=505): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) close(0xffffffffffffffff) r2 = openat$null(0xffffff9c, &(0x7f0000000200), 0x4000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000240)={0x1, 'pim6reg\x00', 0x1}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000080007000d000000", 0x24) syz_open_dev$media(0x0, 0x4007, 0x0) r4 = socket(0x10, 0x2, 0x8) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_create(0x0, 0x0, &(0x7f00000000c0)=0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000002c0), 0x8, 0x4) timer_settime(r5, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) timer_delete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x7e, 0x8, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x0, 0xffff888101827518}, 0x20, 0x8000, 0x5, 0xffffffff}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000040)={0x1856, 0x80069, 0x4, 0xfff, 0xb, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(r8, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x70, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2d0e0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_MTU={0x8, 0x4, 0x3bb5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3.27559552s ago: executing program 1 (id=506): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012bbd7000fddb63690011000200303030303a000200000008000b0000080000060011000400000008001500020000010400"/63], 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r2 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000000)=0x4, 0x4) connect$l2tp6(r2, &(0x7f0000000300)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xe3, 0x4}, 0x20) 3.039739279s ago: executing program 1 (id=507): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x3, 0x3, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x7, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x0, 0x3, 0xd, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x40, 0x1, 0x4, 0x45, 0x0, 0xff, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x80, 0x4, 0xff, 0x2, 0x5, 0x70, 0x4, 0x6}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x7000000000, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3, 0x0, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.03504072s ago: executing program 2 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b840)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="8e422f8435c3fb55311009d7fade6b93386e9fcb40ef2ec94f65596cfe6d7822fe27d02c6b980519b83659f55d3ff95d6f9def465d050e8b22b7bc265d1063c7e2c4bab49f3f4acf9f879e83e1014728930eed40c380f638e2808ada2969147d7909ea9b69c93284d944b102af918e466a3554c32668f8b153d75c74040af1d4593c28260c92f2276aadae38d1a0a54b63680a61a2ec09da9f8e1d7342", 0x9d}, {&(0x7f0000000480)="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", 0xfd}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000580)="46232092232fac442314b37bcfb084294ad1e6565902b2c940f34962c39af6c4bb36b4981d29e4c0b7ed776d8c5afd84bc663643c5b06f4d9da696cb6e58fb4d6e0ad334d4675c3663ee62e905c2d7ce4035281e57fa9fc9c5bff7fe39ea2a55f0ce8ee5be0e3e6197be456f5141e7c19941991d2baf15d328c1bae782b5c9ca89bffc9c29b49ebc0b239642dad7116c85bfc67dbfc3fc5f5a7778bb44c1f70f160563078f2320fbe5e959d12a80d3d3f1b80dd738f582aa95cf6e67e3ebc2524b737e88ac114b0c23ed2b0892dd3f1257cfb0dc298727ebd39f3d52cc4338ca90f36d462565c89343de8d2ba92d073e490de511b553f24e", 0xf8}, {&(0x7f0000000280)="4f3b55b780239b9ef931ce04a481e0ceb3d416166d60555f749ba4e5fe26b69481dc84b61e1ee3", 0x27}], 0x5, &(0x7f0000000740)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0, r1]}}], 0x4c, 0x20000801}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="27a0e004d0eb1a2d610c7a0c7e53d31e5d0635a74c8ae81037a4e67b384451c11d4d4b143f43997270a7c0e293ee80ea3f25a5e983aa3946b3542de13e668ac9722eedc3d750840c048f0c11ca263c8630687b8fc7ecc5ac8653e53e04f941ac63de2a2aa8229a5f6c01fe05bc44f85a3bd60f9732baf89dcb", 0x79}, {&(0x7f0000000840)="fccae37a014f059b58874845c977992f355c8957d677940de1873d85307c9634962acec06dd9d1e766467179ecd636ab6d400cebfc65e1e1ea6cf5d883edb5215c", 0x41}, {&(0x7f0000002180)="56b710ee12e42620c8b8335c5834a0869b5102b8286a0a0fd109598427346cec5ddbf078683297d24cb9003522055f522225a62ccd0c34bf5be333d21d33f0841eefd2b8797f74baceed056b39229ad2b57ffd959af3e2a8fbe8f1d96793611476c3822e22a4a8a8f98778fadb9a13029d19f1", 0x73}, {&(0x7f0000001a00)="3ee2d6949cee15feee18faf2790badd0a3196d6beb113a585ed44b7d47a79d4c0e8c581e4913aaf5a9d49623cc98b057b87f5acd08dba4d810781324e07751b51f63fd7ba8965ec36d9c4d51811b682347caa915adf39cda7fae159f2587af0b77ed9e26c7d1d7391b78249548971c0ac7c096d614f27ef4", 0x78}], 0x4, &(0x7f0000002200)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1800000001000000020000007469b3561588def1019ef6c2fef5b53e46d5f06e26e8dcb743500d9aa81acde1f2f1571fdae39c2e6f6cc254f9d93612440ce8ee349b3fcfee91f134f000f35801c94a95b4c587590979ee6d118306f64e6566e3a3a58032b05f43df17cc2e88158abc3fc4a02d7ff190259fd63dd515c39343f0b80d58c6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x3c, 0x48025}}, {{&(0x7f0000001ac0)=@file={0x0, './file1/file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001b40)="d27a7194b93ba6a1cd79950801b02a8aa80cda08f2122512dff0e73377c73a347cc66e4fe372a52ffcc077ccfc8d98d761e97399d6", 0x35}, {&(0x7f0000001b80)="01767b2d56c1c264594d80089be1a5475f3576e5c825c43a8fea65ab23512337506ce4107e296e9e007d5ca2663614d2ebd3bdd9c68bc978aa06267c826cfacb0895a2433471a5257c804e152bcabae85da75185a53773bf4a77d124c0bceea2aaf0050778cb2173873e4c3e30e50402911b48c370ab9c2e47ecf59a085ee92a0da30145aef582613c2e9a1daa993ecf89bdb92c8320f2aaa660211539f6ab9ee4c94c8c4fba2e4998a220ccafed8f521009277b4295b9", 0xb7}, {&(0x7f0000001c40)="0be9520b9a24be1fa2e6d3103301465adbb93bc3fdff0bbdd8f88730bd83661a80895931882fea90c6ecf6d648deedecd6f8d4b6610095f69560a8dc0aec07aaccdeb80bcefe9282128cf622834a3ca4ad97da039d00a25f24b29b3629a965d7624a893aefd646f0fe068e", 0x6b}], 0x3, &(0x7f0000001d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x20, 0x4008050}}, {{&(0x7f0000001d40)=@file={0x0, './cgroup/cgroup.procs\x00'}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001dc0)="700e232b0b7de1", 0x7}, {&(0x7f0000001e00)="3e93f45b4bb361a8fbf9ec023bbbda29db013da110ef97", 0x17}, {&(0x7f0000001e40)="b285eacd54cb8e60b031861be7ed8b9b5aaeb2b1a4d12831ffc8ff68681e69bbdc75f6f81fe82833d617f5ebc986054e3988b7f2bff8e2319d4c13bcfbf34e183269b4ec713b5179d6f3f4f3313e177f30cb8ea023dc820d7f7a7725c583c32efe3aeaaa2de3ed79f68079e17c4ef59e2f736fd04df0d4caf0842cb82461345b72ee052f412fe4e4222a3c7ea94dfd432cdd28e885ad03d3160676bb020e3c51325f9be66a77fbb902a35cb8ed485f889d0300000000000000ae68f9a65067ed28066b950b657974ed3b44e8249e13f39eb3bfc18c584afb93402de677c1fad959c0ac", 0xe3}], 0x3, &(0x7f0000001fc0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32], 0x5c, 0x5}}, {{&(0x7f0000002040)=@file={0x0, './cgroup/cgroup.procs\x00'}, 0x6e, &(0x7f0000002300), 0x0, &(0x7f0000002900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, r0, r2]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0xc0, 0x4004051}}, {{&(0x7f0000002500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002580)="ea5e8b3b6c1e30e527a50174ceb1ab99bc84f8a16c25b4290b6c6a21fb5acd79bad9dd0e58ae11b0478cf80c73c1ede461103e05fd4a9e79b057f83f637754cbe46df7697f3716166e94d19074ba", 0x4e}, {&(0x7f0000002600)="65af388b6483355306900a6e36168636b1e0f12d3db38849309d81fb2891b5d9ce58adf370e5f34657dd826c82f3180cb84be30708f8fdbd809c0e69e6b366cbecc84f9a5e669eafc0097e761bd3ec3826a446a2109d5acd0bb33aae1db7165efddea4a6046dc22a5ca945ac81ea66e7664ebb1c5c8996dc4bbc3335b55b5aa3feaa397cc1a626a63f0df1cfb7d4183a803ea2acbc53", 0x96}, {&(0x7f00000026c0)="f21a149aef5e47e05a5b7c6bd020a755b057572865f2eb1e", 0x18}, {&(0x7f0000002700)="1b93", 0x2}, {&(0x7f0000003000)="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", 0x1000}], 0x5, &(0x7f00000027c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x18}}], 0x90, 0x4008000}}, {{&(0x7f0000002880)=@file={0x0, './cgroup/cgroup.procs\x00'}, 0x6e, &(0x7f0000002b00), 0x0, &(0x7f0000002d40)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x84, 0x28000040}}, {{0x0, 0x0, &(0x7f000000b5c0), 0x0, &(0x7f0000000700)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r2, r0]}}], 0x3c, 0x40020}}, {{&(0x7f000000b640)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f000000b740)=[{&(0x7f0000000680)="4cc97e33d0316f4a6f6d5c580cdd0e59ce68d8eb030079505e1e1590411c60b605f5ce1798cee1795f428fa2ef0b606d1773957acd3cab860fefbc13f67f67c9400b86757162c1fb64c46a8e358cdcee9e06092a7e5924718fb6f1c0a20a0e343361b9", 0x63}], 0x1, &(0x7f00000020c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x18}}], 0x8c, 0x4044815}}], 0x9, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40881) unshare(0x2c060000) unshare(0x24020400) r5 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000001c0), 0x200000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1d, 0x0, 0x0, 0x20066}, {0x6, 0x1, 0x83, 0x7fff0000}]}) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f00000000c0)=""/77) r6 = eventfd(0xf) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000240)={0x3, r6}) unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='i', 0x1, 0x4050, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = syz_io_uring_setup(0x53f, &(0x7f0000000980)={0x0, 0x6800, 0x400, 0x2, 0xfe}, &(0x7f0000000240)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x46, 0x0, r0, 0x0, &(0x7f00000022c0)="3fa0b97f7a117e6d4e4bac449cb4fe65d3bd5ec0ba65f0a393ab6848f5e832f706b6674950939ac1de83c4801ee633cb43dc0ef66c11de1c3619d7480fab3f8917053c9779d1a36d28e839049b64054138378395d7a19cbb57751684a1f16aa107adc1f25407d239a6424afcdd03832a6ea876c56b38ed6bab7b7cbcb4794aee27aae6fd64e51749b2decccc72513724833fe0c63b2d94be4484fd20e13934d46fc037e9d8931d", 0xa7, 0x20004044}) 3.034550406s ago: executing program 3 (id=509): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xec}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (fail_nth: 5) 3.009591913s ago: executing program 0 (id=510): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x300) sendmsg$inet(r2, 0x0, 0x0) unshare(0x42000000) r3 = gettid() unshare(0x0) timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3e, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000002c0)={0x6, 0x1, 0x0, "ee9b6baf21878e5ed730f4706a14d4000091e2e776ab4988d65ca500008000", 0xf6c1a1f}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @initdev={0xac, 0x1e, 0x3, 0x0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044094) 2.480000374s ago: executing program 2 (id=511): r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0x36) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x3, 0xfffd}, 0x8) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501009cbd89d64dfea930195a2fe2df"], 0x0) (async) syz_usb_connect(0x2, 0x41, &(0x7f0000000000)=ANY=[], 0x0) 2.479409657s ago: executing program 1 (id=512): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}}}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000140)="ead5e96719a4459180", 0x9}, {&(0x7f0000000180)="f3f97053495b072215aee86419350000dabdd25350d74b711d5ed9b131c5abd8796e5759ab1f639211e68e24bf44", 0x2e}], 0x3, &(0x7f0000000240)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d", 0x3c}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc080) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230007) close(r4) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x10, 0x1, 0x1, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x37303250}) r6 = syz_io_uring_setup(0x497, &(0x7f0000000500)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r9}}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) io_setup(0x8, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r10, &(0x7f0000000040)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4) syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.369981995s ago: executing program 3 (id=513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x418}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x98}}, 0x20050800) 1.994463959s ago: executing program 3 (id=514): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\\/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x40, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) 1.271590019s ago: executing program 1 (id=517): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001020000400000004000000000000000", @ANYRES32, @ANYBLOB="0900000000000000000100a00000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x40, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) 797.364139ms ago: executing program 4 (id=518): r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f0000000040)={0x100002, 0x1000f9}, 0x20) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4004884) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x5, 0x9, 0x4, 0x10, 0xfffffffd, {0x77359400}, {0x5, 0xc, 0x0, 0x6, 0x1, 0x8, "ad5015f6"}, 0x5}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x2, @raw_data="19c0364f5205b9bd6db7f75d1f3f2a0eb82ca627586657a266bb1324fbd29d963196a152971e3b31c17afe0e56ccd63d04281de1b1e10be71d72ba913880e17d3537eb473374e5d501a891c3a32bbffe55b217cc2a2b04b93d6ac386e2dcd7fceb8a1df13d59f713d1573ff9ebb61230b2e747771895d1058bc8952c82b57396f5b1eb4f8b4553165c1cc4b2a5b6d9517d7550d5c3bdfc2ae2f30da7546ae8e13cc845bc070f83808eae6900635a5562a6e1648fae328fda8fd83cf18c880439a5f3bed0c458b5cf"}) 591.713842ms ago: executing program 4 (id=519): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x2, 0xfffffffc, 'syz1\x00', &(0x7f0000000400)=['\x1a//@.(-,^$\xcd\\*-\x00', '/dev/snd/controlC#\x00'], 0x22}) (async) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$kcm(0x2d, 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x3f, 0x19, 0x200, 0x70bd2d, 0x80, {0x2, 0x18, 0x24, 0x0, 0xfd, 0x0, 0xfd, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20008010) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r3}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r5, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) (async) preadv(r5, 0x0, 0x0, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pipe2$watch_queue(0x0, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x1, 0x0) (async) fcntl$setpipe(r2, 0x407, 0x182ed58f) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$vsock_stream(0x28, 0x1, 0x0) 551.523382ms ago: executing program 4 (id=520): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x61}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x63, 0x0, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f88a8d34258b7ce59c9f907afa16494c9529c474f408faf3b9f94bd27baf2da8080408833ba4d60cbac74d7"}}}}, 0x71) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x8702, 0x1, 0x3}, 0x76, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x220, 0x0, 0x1}, 0x18, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r5, 0x0) syz_usbip_server_init(0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x2}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x80046601, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r9, &(0x7f0000002bc0)=[{{&(0x7f0000001200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}, {{&(0x7f00000013c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x16, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x3}]}}}], 0x18}}], 0x2, 0x4000000) r10 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r10, &(0x7f0000000040), 0xe09) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000740)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000, 0x0, 0x2, 0x4, 0x0, 0x1}, &(0x7f0000000780)=0x20) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r10, 0x3b8c, &(0x7f0000000700)={0x30, r11, 0x1, 0x0, 0x4, 0x5, 0x1, &(0x7f0000000680)=""/103}) 146.094063ms ago: executing program 3 (id=521): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x181300) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000400000088"]) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000380)='wg1\x00', 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000e80)="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", 0x445}], 0x1}}], 0x3, 0x100000c0) 0s ago: executing program 3 (id=522): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000011000000000000000000008"], 0x0) kernel console output (not intermixed with test programs): 3][ T5888] gspca_sunplus: reg_r err -71 [ 158.673828][ T5888] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 158.982649][ T5888] usb 1-1: USB disconnect, device number 7 [ 160.226720][ T5906] usb 5-1: USB disconnect, device number 12 [ 160.857005][ T5906] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 161.021103][ T6931] program syz.3.215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.041667][ T5906] usb 5-1: config 0 has no interfaces? [ 161.050448][ T5906] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 161.077617][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.141417][ T5906] usb 5-1: Product: syz [ 161.145984][ T5906] usb 5-1: Manufacturer: syz [ 161.155360][ T5906] usb 5-1: SerialNumber: syz [ 161.346259][ T5906] usb 5-1: config 0 descriptor?? [ 161.548958][ T979] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 161.583702][ T6923] netlink: 68 bytes leftover after parsing attributes in process `syz.4.211'. [ 161.711878][ T5906] usb 5-1: USB disconnect, device number 13 [ 161.731979][ T979] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 161.747502][ T979] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 161.786992][ T979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.015241][ T979] usb 4-1: config 1 has no interface number 0 [ 162.036608][ T979] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 162.099484][ T979] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 162.176561][ T979] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.378372][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.422008][ T979] usb 4-1: Product: syz [ 162.426246][ T979] usb 4-1: Manufacturer: syz [ 162.431021][ T979] usb 4-1: SerialNumber: syz [ 162.465146][ T979] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 162.483543][ T979] cdc_ncm 4-1:1.1: bind() failure [ 162.705550][ T979] usb 4-1: USB disconnect, device number 9 [ 163.191891][ T6972] program syz.1.226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.704845][ T6976] FAULT_INJECTION: forcing a failure. [ 163.704845][ T6976] name failslab, interval 1, probability 0, space 0, times 0 [ 163.734905][ T6982] overlayfs: missing 'lowerdir' [ 163.754261][ T6976] CPU: 0 UID: 0 PID: 6976 Comm: syz.3.228 Not tainted syzkaller #0 PREEMPT(full) [ 163.754282][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 163.754291][ T6976] Call Trace: [ 163.754298][ T6976] [ 163.754305][ T6976] dump_stack_lvl+0x189/0x250 [ 163.754330][ T6976] ? __pfx____ratelimit+0x10/0x10 [ 163.754348][ T6976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.754368][ T6976] ? __pfx__printk+0x10/0x10 [ 163.754388][ T6976] ? __pfx___might_resched+0x10/0x10 [ 163.754405][ T6976] ? fs_reclaim_acquire+0x7d/0x100 [ 163.754427][ T6976] should_fail_ex+0x414/0x560 [ 163.754457][ T6976] should_failslab+0xa8/0x100 [ 163.754483][ T6976] __kmalloc_cache_noprof+0x70/0x3d0 [ 163.754506][ T6976] ? __request_module+0x2b5/0x5e0 [ 163.754526][ T6976] __request_module+0x2b5/0x5e0 [ 163.754547][ T6976] ? __pfx___request_module+0x10/0x10 [ 163.754561][ T6976] ? __up_read+0x280/0x680 [ 163.754582][ T6976] ? __pfx___up_read+0x10/0x10 [ 163.754616][ T6976] crypto_alg_mod_lookup+0xeb/0x5f0 [ 163.754644][ T6976] crypto_alloc_tfm_node+0x13e/0x3f0 [ 163.754676][ T6976] alg_bind+0x2f7/0x570 [ 163.754704][ T6976] __sys_bind+0x2c3/0x3e0 [ 163.754734][ T6976] ? __pfx___sys_bind+0x10/0x10 [ 163.754772][ T6976] __ia32_sys_bind+0x7a/0x90 [ 163.754791][ T6976] __do_fast_syscall_32+0xb6/0x2b0 [ 163.754812][ T6976] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.754832][ T6976] do_fast_syscall_32+0x34/0x80 [ 163.754850][ T6976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.754868][ T6976] RIP: 0023:0xf7f76539 [ 163.754881][ T6976] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 163.754892][ T6976] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 163.754910][ T6976] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 163.754921][ T6976] RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.754930][ T6976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.754940][ T6976] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 163.754950][ T6976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.754971][ T6976] [ 164.102037][ T6982] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 164.108069][ T6982] syzkaller1: Linktype set failed because interface is up [ 164.191463][ T976] syzkaller1: tun_net_xmit 90 [ 164.845295][ T6996] netlink: 'syz.3.230': attribute type 4 has an invalid length. [ 164.867711][ T6996] netlink: 'syz.3.230': attribute type 4 has an invalid length. [ 164.913066][ T5906] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 165.027832][ T6998] FAULT_INJECTION: forcing a failure. [ 165.027832][ T6998] name failslab, interval 1, probability 0, space 0, times 0 [ 165.042855][ T6998] CPU: 1 UID: 0 PID: 6998 Comm: syz.1.234 Not tainted syzkaller #0 PREEMPT(full) [ 165.042869][ T6998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.042875][ T6998] Call Trace: [ 165.042880][ T6998] [ 165.042884][ T6998] dump_stack_lvl+0x189/0x250 [ 165.042902][ T6998] ? __pfx____ratelimit+0x10/0x10 [ 165.042913][ T6998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.042924][ T6998] ? __pfx__printk+0x10/0x10 [ 165.042934][ T6998] ? __lock_acquire+0xab9/0xd20 [ 165.042948][ T6998] should_fail_ex+0x414/0x560 [ 165.042966][ T6998] should_failslab+0xa8/0x100 [ 165.042982][ T6998] kmem_cache_alloc_noprof+0x73/0x3c0 [ 165.042994][ T6998] ? skb_clone+0x212/0x3a0 [ 165.043010][ T6998] skb_clone+0x212/0x3a0 [ 165.043024][ T6998] __netlink_deliver_tap+0x404/0x850 [ 165.043041][ T6998] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.043053][ T6998] netlink_deliver_tap+0x19c/0x1b0 [ 165.043064][ T6998] netlink_unicast+0x7fa/0x9e0 [ 165.043078][ T6998] ? __pfx_netlink_unicast+0x10/0x10 [ 165.043088][ T6998] ? netlink_sendmsg+0x642/0xb30 [ 165.043097][ T6998] ? skb_put+0x11b/0x210 [ 165.043110][ T6998] netlink_sendmsg+0x805/0xb30 [ 165.043126][ T6998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.043137][ T6998] ? __import_iovec+0x5d4/0x7f0 [ 165.043148][ T6998] ? aa_sock_msg_perm+0xf1/0x1d0 [ 165.043159][ T6998] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 165.043170][ T6998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.043181][ T6998] __sock_sendmsg+0x21c/0x270 [ 165.043195][ T6998] ____sys_sendmsg+0x505/0x830 [ 165.043220][ T6998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.043256][ T6998] ___sys_sendmsg+0x21f/0x2a0 [ 165.043277][ T6998] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.043307][ T6998] ? __fget_files+0x2a/0x420 [ 165.043316][ T6998] ? __fget_files+0x3a0/0x420 [ 165.043330][ T6998] __sys_sendmsg+0x164/0x220 [ 165.043343][ T6998] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.043363][ T6998] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.043375][ T6998] __do_fast_syscall_32+0xb6/0x2b0 [ 165.043386][ T6998] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.043398][ T6998] do_fast_syscall_32+0x34/0x80 [ 165.043409][ T6998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.043421][ T6998] RIP: 0023:0xf7fb7539 [ 165.043430][ T6998] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 165.043438][ T6998] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 165.043449][ T6998] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 165.043455][ T6998] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.043460][ T6998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.043466][ T6998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 165.043471][ T6998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.043485][ T6998] [ 165.156123][ T5906] usb 3-1: config 0 has no interfaces? [ 165.363117][ T5906] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 165.375535][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.386536][ T5906] usb 3-1: Product: syz [ 165.391074][ T5906] usb 3-1: Manufacturer: syz [ 165.404090][ T5906] usb 3-1: SerialNumber: syz [ 165.431921][ T5906] usb 3-1: config 0 descriptor?? [ 165.973622][ T6992] netlink: 68 bytes leftover after parsing attributes in process `syz.2.233'. [ 165.997004][ T5898] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 166.025859][ T7010] program syz.0.237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.089911][ T5888] usb 3-1: USB disconnect, device number 10 [ 166.168112][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 166.175825][ T5898] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 166.187262][ T5898] usb 5-1: can't read configurations, error -61 [ 166.434782][ T5898] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 166.554312][ T7020] veth1_macvtap: left promiscuous mode [ 166.559965][ T7020] macsec0: entered promiscuous mode [ 166.593304][ T7020] veth1_macvtap: entered promiscuous mode [ 166.707156][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 166.801923][ T5898] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 166.907234][ T7020] macsec0: left promiscuous mode [ 166.912310][ T5898] usb 5-1: can't read configurations, error -61 [ 166.927592][ T5898] usb usb5-port1: attempt power cycle [ 166.943636][ T7018] vlan2: entered allmulticast mode [ 167.276979][ T5898] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 167.454894][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 167.469242][ T5898] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 167.476987][ T5898] usb 5-1: can't read configurations, error -61 [ 167.607006][ T5898] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 167.689191][ T979] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 167.732748][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 167.741836][ T7051] program syz.3.249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.765998][ T5898] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 167.774433][ T5898] usb 5-1: can't read configurations, error -61 [ 167.786067][ T5898] usb usb5-port1: unable to enumerate USB device [ 167.856939][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 167.883212][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.915124][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.944754][ T979] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 168.053985][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.088717][ T979] usb 1-1: config 0 descriptor?? [ 168.120314][ T979] hub 1-1:0.0: USB hub found [ 168.270800][ T7067] FAULT_INJECTION: forcing a failure. [ 168.270800][ T7067] name failslab, interval 1, probability 0, space 0, times 0 [ 168.342203][ T7067] CPU: 1 UID: 0 PID: 7067 Comm: syz.3.252 Not tainted syzkaller #0 PREEMPT(full) [ 168.342229][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.342238][ T7067] Call Trace: [ 168.342244][ T7067] [ 168.342249][ T7067] dump_stack_lvl+0x189/0x250 [ 168.342266][ T7067] ? __pfx____ratelimit+0x10/0x10 [ 168.342277][ T7067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.342291][ T7067] ? __pfx__printk+0x10/0x10 [ 168.342303][ T7067] ? __pfx___might_resched+0x10/0x10 [ 168.342312][ T7067] ? fs_reclaim_acquire+0x7d/0x100 [ 168.342324][ T7067] should_fail_ex+0x414/0x560 [ 168.342342][ T7067] should_failslab+0xa8/0x100 [ 168.342359][ T7067] kmem_cache_alloc_noprof+0x73/0x3c0 [ 168.342373][ T7067] ? getname_flags+0xb8/0x540 [ 168.342385][ T7067] getname_flags+0xb8/0x540 [ 168.342394][ T7067] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 168.342407][ T7067] __ia32_sys_link+0x69/0x90 [ 168.342428][ T7067] __do_fast_syscall_32+0xb6/0x2b0 [ 168.342439][ T7067] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.342451][ T7067] do_fast_syscall_32+0x34/0x80 [ 168.342462][ T7067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.342473][ T7067] RIP: 0023:0xf7f76539 [ 168.342483][ T7067] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 168.342490][ T7067] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 168.342501][ T7067] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 0000000080000400 [ 168.342508][ T7067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.342513][ T7067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.342518][ T7067] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 168.342523][ T7067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.342537][ T7067] [ 169.654647][ T7085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.257'. [ 169.763310][ T7088] tipc: Enabling of bearer rejected, media not registered [ 169.957470][ T5906] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 170.046087][ T7097] veth1_macvtap: left promiscuous mode [ 170.089089][ T7097] macsec0: entered promiscuous mode [ 170.099254][ T979] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 170.130866][ T979] usbhid 1-1:0.0: can't add hid device: -71 [ 170.142639][ T7099] program syz.4.261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.146964][ T979] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 170.156904][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 170.175970][ T7095] veth1_macvtap: entered promiscuous mode [ 170.187339][ T7095] macsec0: left promiscuous mode [ 170.205492][ T7097] vlan2: entered allmulticast mode [ 170.212227][ T979] usb 1-1: USB disconnect, device number 8 [ 170.232631][ T5906] usb 3-1: unable to get BOS descriptor or descriptor too short [ 170.240567][ T976] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 170.269433][ T5906] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 170.284797][ T5906] usb 3-1: config 4 has no interface number 0 [ 170.295704][ T5906] usb 3-1: config 4 interface 30 has no altsetting 0 [ 170.313594][ T5906] usb 3-1: string descriptor 0 read error: -22 [ 170.330554][ T5906] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 170.341904][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.363821][ T5906] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 170.382939][ T5906] dw2102: su3000_power_ctrl: 1, initialized 0 [ 170.389183][ T5906] dvb-usb: bulk message failed: -22 (2/0) [ 170.402674][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.493322][ T976] usb 2-1: config 0 has no interfaces? [ 170.501176][ T976] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 170.512949][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.521503][ T5906] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 170.533502][ T5906] usb 3-1: media controller created [ 170.543277][ T976] usb 2-1: Product: syz [ 170.550268][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 170.556055][ T976] usb 2-1: Manufacturer: syz [ 170.579130][ T7085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.593748][ T7085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.603490][ T976] usb 2-1: SerialNumber: syz [ 170.716016][ T5906] dw2102: i2c transfer failed. [ 170.735378][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 170.742867][ T976] usb 2-1: config 0 descriptor?? [ 170.751858][ T5906] dw2102: i2c transfer failed. [ 170.760572][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 170.771675][ T5906] dw2102: i2c transfer failed. [ 170.811241][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 170.823122][ T5906] dw2102: i2c transfer failed. [ 170.832663][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 170.851158][ T5906] dw2102: i2c transfer failed. [ 170.877234][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 170.883878][ T5906] dw2102: i2c transfer failed. [ 170.898820][ T5906] dvb-usb: MAC address: 02:02:02:02:02:02 [ 171.192601][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.334651][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 171.346454][ T5906] dw2102: command 0x0e transfer failed. [ 171.353339][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 171.363799][ T5906] dw2102: command 0x0e transfer failed. [ 171.740402][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 171.755700][ T5906] dw2102: command 0x0e transfer failed. [ 171.773833][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 171.797003][ T5906] dw2102: command 0x0e transfer failed. [ 171.815950][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 171.873936][ T5906] dw2102: command 0x51 transfer failed. [ 171.982161][ T5906] dvb-usb: bulk message failed: -22 (5/0) [ 172.002346][ T5906] dw2102: i2c probe for address 0x68 failed. [ 172.023329][ T5906] dvb-usb: bulk message failed: -22 (5/0) [ 172.251992][ T5906] dw2102: i2c probe for address 0x69 failed. [ 172.676302][ T7144] overlayfs: missing 'lowerdir' [ 172.731230][ T5906] dvb-usb: bulk message failed: -22 (5/0) [ 172.763945][ T5906] dw2102: i2c probe for address 0x6a failed. [ 172.782017][ T5906] dw2102: probing for demodulator failed. Is the external power switched on? [ 172.805208][ T5906] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 172.859069][ T7149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.272'. [ 172.868671][ T7149] netlink: 44 bytes leftover after parsing attributes in process `syz.2.272'. [ 172.887003][ T30] audit: type=1326 audit(1759271902.342:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.2.272" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e539 code=0x0 [ 173.109469][ T5888] usb 2-1: USB disconnect, device number 10 [ 173.162652][ T5906] rc_core: IR keymap rc-tt-1500 not found [ 173.183691][ T5906] Registered IR keymap rc-empty [ 173.229487][ T5906] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 173.365467][ T5906] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input9 [ 173.409134][ T7162] program syz.0.274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.470216][ T5906] dvb-usb: schedule remote query interval to 250 msecs. [ 173.505372][ T5906] dw2102: su3000_power_ctrl: 0, initialized 1 [ 173.537738][ T5906] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 173.665196][ T5906] usb 3-1: USB disconnect, device number 11 [ 173.814772][ T7170] netlink: 36 bytes leftover after parsing attributes in process `syz.2.278'. [ 173.923065][ T5906] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 173.931509][ T7171] FAULT_INJECTION: forcing a failure. [ 173.931509][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 173.931539][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT(full) [ 173.931557][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 173.931565][ T7171] Call Trace: [ 173.931571][ T7171] [ 173.931578][ T7171] dump_stack_lvl+0x189/0x250 [ 173.931602][ T7171] ? __pfx____ratelimit+0x10/0x10 [ 173.931619][ T7171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.931637][ T7171] ? __pfx__printk+0x10/0x10 [ 173.931654][ T7171] ? __lock_acquire+0xab9/0xd20 [ 173.931676][ T7171] should_fail_ex+0x414/0x560 [ 173.931703][ T7171] should_failslab+0xa8/0x100 [ 173.931737][ T7171] kmem_cache_alloc_noprof+0x73/0x3c0 [ 173.931760][ T7171] ? skb_clone+0x212/0x3a0 [ 173.931787][ T7171] skb_clone+0x212/0x3a0 [ 173.931811][ T7171] __netlink_deliver_tap+0x404/0x850 [ 173.931843][ T7171] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.931863][ T7171] netlink_deliver_tap+0x19c/0x1b0 [ 173.931883][ T7171] netlink_unicast+0x7fa/0x9e0 [ 173.931908][ T7171] ? __pfx_netlink_unicast+0x10/0x10 [ 173.931933][ T7171] ? netlink_sendmsg+0x642/0xb30 [ 173.931950][ T7171] ? skb_put+0x11b/0x210 [ 173.931972][ T7171] netlink_sendmsg+0x805/0xb30 [ 173.931998][ T7171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.932020][ T7171] ? __import_iovec+0x5d4/0x7f0 [ 173.932037][ T7171] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.932055][ T7171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.932073][ T7171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.932093][ T7171] __sock_sendmsg+0x21c/0x270 [ 173.932113][ T7171] ____sys_sendmsg+0x505/0x830 [ 173.932139][ T7171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.932177][ T7171] ___sys_sendmsg+0x21f/0x2a0 [ 173.932201][ T7171] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.932258][ T7171] ? __fget_files+0x2a/0x420 [ 173.932274][ T7171] ? __fget_files+0x3a0/0x420 [ 173.932300][ T7171] __sys_sendmsg+0x164/0x220 [ 173.932324][ T7171] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.932361][ T7171] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.932383][ T7171] __do_fast_syscall_32+0xb6/0x2b0 [ 173.932403][ T7171] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.932425][ T7171] do_fast_syscall_32+0x34/0x80 [ 173.932444][ T7171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.932464][ T7171] RIP: 0023:0xf7f51539 [ 173.932478][ T7171] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 173.932491][ T7171] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 173.932509][ T7171] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 173.932521][ T7171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.932530][ T7171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.932540][ T7171] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 173.932550][ T7171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.932576][ T7171] [ 173.932610][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 174.037205][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 174.037620][ T7171] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 174.038027][ T7171] netlink: 44 bytes leftover after parsing attributes in process `syz.0.277'. [ 174.038168][ T7171] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 174.296966][ T5906] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.391480][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 174.393742][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.393760][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.393781][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 174.393792][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.395369][ T24] usb 2-1: config 0 descriptor?? [ 174.397686][ T24] hub 2-1:0.0: USB hub found [ 174.462846][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 174.500691][ T5906] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.501818][ T5906] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 174.501841][ T5906] usb 3-1: config 4 has no interface number 0 [ 174.501869][ T5906] usb 3-1: config 4 interface 30 has no altsetting 0 [ 174.510690][ T5906] usb 3-1: string descriptor 0 read error: -22 [ 174.510820][ T5906] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 174.510841][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.521861][ T5906] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 174.521886][ T5906] dw2102: su3000_power_ctrl: 1, initialized 0 [ 174.521898][ T5906] dvb-usb: bulk message failed: -22 (2/0) [ 174.524694][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.525442][ T5906] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 174.525472][ T5906] usb 3-1: media controller created [ 174.525494][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 174.525509][ T5906] dw2102: i2c transfer failed. [ 174.525524][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 174.525535][ T5906] dw2102: i2c transfer failed. [ 174.525549][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 174.525570][ T5906] dw2102: i2c transfer failed. [ 174.525585][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 174.525598][ T5906] dw2102: i2c transfer failed. [ 174.525611][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 174.525621][ T5906] dw2102: i2c transfer failed. [ 174.525628][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 174.525634][ T5906] dw2102: i2c transfer failed. [ 174.525640][ T5906] dvb-usb: MAC address: 02:02:02:02:02:02 [ 174.560441][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.701106][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 175.276861][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.313385][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.525117][ T5906] dw2102: command 0x0e transfer failed. [ 175.546902][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 175.552938][ T5906] dw2102: command 0x0e transfer failed. [ 175.876906][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 175.889151][ T5906] dw2102: command 0x0e transfer failed. [ 175.909340][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 175.952945][ T5906] dw2102: command 0x0e transfer failed. [ 175.987524][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 176.023815][ T5906] dw2102: command 0x51 transfer failed. [ 176.033050][ T5906] dvb-usb: bulk message failed: -22 (5/0) [ 176.054360][ T5906] dw2102: i2c probe for address 0x68 failed. [ 176.061641][ T5906] dvb-usb: bulk message failed: -22 (5/0) [ 176.067807][ T5906] dw2102: i2c probe for address 0x69 failed. [ 176.073798][ T5906] dvb-usb: bulk message failed: -22 (5/0) [ 176.096928][ T5906] dw2102: i2c probe for address 0x6a failed. [ 176.179962][ T5906] dw2102: probing for demodulator failed. Is the external power switched on? [ 176.312503][ T24] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 176.350775][ T5906] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 176.355766][ T7216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 176.438321][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.288'. [ 176.446299][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 176.447590][ T5906] rc_core: IR keymap rc-tt-1500 not found [ 176.466330][ T5906] Registered IR keymap rc-empty [ 176.471417][ T30] audit: type=1326 audit(1759271905.922:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.0.288" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f51539 code=0x0 [ 176.549114][ T5906] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 176.553724][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 176.609628][ T7222] program syz.1.290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.613613][ T5906] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input10 [ 176.661619][ T24] usb 2-1: USB disconnect, device number 11 [ 176.688996][ T5906] dvb-usb: schedule remote query interval to 250 msecs. [ 176.807564][ T7226] overlayfs: missing 'lowerdir' [ 176.922013][ T5906] dw2102: su3000_power_ctrl: 0, initialized 1 [ 176.972554][ T5906] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 177.026753][ T5906] usb 3-1: USB disconnect, device number 12 [ 177.096911][ T5926] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 177.329891][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.343311][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 177.370523][ T5926] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 177.380066][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.404103][ T5926] usb 5-1: Product: syz [ 177.425210][ T5926] usb 5-1: Manufacturer: syz [ 177.546701][ T5906] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 177.550067][ T5926] usb 5-1: SerialNumber: syz [ 177.659686][ T5926] usb 5-1: config 0 descriptor?? [ 177.675647][ T7228] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.935361][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.944883][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.063560][ T7251] netlink: 36 bytes leftover after parsing attributes in process `syz.1.297'. [ 178.147106][ T5926] rc_core: IR keymap rc-streamzap not found [ 178.171407][ T5926] Registered IR keymap rc-empty [ 178.219388][ T5926] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 178.314881][ T5926] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 178.329481][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 178.486948][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 178.540267][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 178.576323][ T24] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 178.598330][ T24] usb 2-1: config 4 has no interface number 0 [ 178.605586][ T24] usb 2-1: config 4 interface 30 has no altsetting 0 [ 178.618193][ T24] usb 2-1: string descriptor 0 read error: -22 [ 178.633667][ T24] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 178.713093][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.749833][ T24] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 178.780809][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 178.798779][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 178.883917][ T7261] FAULT_INJECTION: forcing a failure. [ 178.883917][ T7261] name failslab, interval 1, probability 0, space 0, times 0 [ 178.915230][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.941333][ T7261] CPU: 1 UID: 0 PID: 7261 Comm: syz.2.301 Not tainted syzkaller #0 PREEMPT(full) [ 178.941364][ T7261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.941377][ T7261] Call Trace: [ 178.941387][ T7261] [ 178.941394][ T7261] dump_stack_lvl+0x189/0x250 [ 178.941422][ T7261] ? __pfx____ratelimit+0x10/0x10 [ 178.941439][ T7261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.941457][ T7261] ? __pfx__printk+0x10/0x10 [ 178.941475][ T7261] ? __lock_acquire+0xab9/0xd20 [ 178.941499][ T7261] should_fail_ex+0x414/0x560 [ 178.941528][ T7261] should_failslab+0xa8/0x100 [ 178.941555][ T7261] kmem_cache_alloc_noprof+0x73/0x3c0 [ 178.941576][ T7261] ? skb_clone+0x212/0x3a0 [ 178.941602][ T7261] skb_clone+0x212/0x3a0 [ 178.941628][ T7261] __netlink_deliver_tap+0x404/0x850 [ 178.941660][ T7261] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.941680][ T7261] netlink_deliver_tap+0x19c/0x1b0 [ 178.941704][ T7261] netlink_unicast+0x7fa/0x9e0 [ 178.941727][ T7261] ? __pfx_netlink_unicast+0x10/0x10 [ 178.941745][ T7261] ? netlink_sendmsg+0x642/0xb30 [ 178.941760][ T7261] ? skb_put+0x11b/0x210 [ 178.941781][ T7261] netlink_sendmsg+0x805/0xb30 [ 178.941807][ T7261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.941832][ T7261] ? __import_iovec+0x5d4/0x7f0 [ 178.941851][ T7261] ? aa_sock_msg_perm+0xf1/0x1d0 [ 178.941871][ T7261] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.941890][ T7261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.941910][ T7261] __sock_sendmsg+0x21c/0x270 [ 178.941931][ T7261] ____sys_sendmsg+0x505/0x830 [ 178.941958][ T7261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.941997][ T7261] ___sys_sendmsg+0x21f/0x2a0 [ 178.942021][ T7261] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.942080][ T7261] ? __fget_files+0x2a/0x420 [ 178.942095][ T7261] ? __fget_files+0x3a0/0x420 [ 178.942119][ T7261] __sys_sendmsg+0x164/0x220 [ 178.942143][ T7261] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.942181][ T7261] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.942203][ T7261] __do_fast_syscall_32+0xb6/0x2b0 [ 178.942223][ T7261] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.942243][ T7261] do_fast_syscall_32+0x34/0x80 [ 178.942261][ T7261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.942282][ T7261] RIP: 0023:0xf706e539 [ 178.942295][ T7261] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 178.942305][ T7261] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 178.942325][ T7261] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 178.942337][ T7261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.942345][ T7261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.942363][ T7261] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 178.942372][ T7261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.942394][ T7261] [ 179.321638][ T24] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 179.330710][ T24] usb 2-1: media controller created [ 179.336151][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 179.342015][ T24] dw2102: i2c transfer failed. [ 179.347118][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 179.353005][ T24] dw2102: i2c transfer failed. [ 179.357951][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 179.363782][ T24] dw2102: i2c transfer failed. [ 179.368712][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 179.374555][ T24] dw2102: i2c transfer failed. [ 179.378186][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.379501][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 179.395083][ T24] dw2102: i2c transfer failed. [ 179.399981][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 179.405756][ T24] dw2102: i2c transfer failed. [ 179.410599][ T24] dvb-usb: MAC address: 02:02:02:02:02:02 [ 179.433447][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.458143][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 179.463984][ T24] dw2102: command 0x0e transfer failed. [ 179.469611][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 179.475490][ T24] dw2102: command 0x0e transfer failed. [ 179.525740][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.592041][ T7270] veth1_macvtap: left promiscuous mode [ 179.644209][ T7270] macsec0: entered promiscuous mode [ 179.662254][ T7269] veth1_macvtap: entered promiscuous mode [ 179.670902][ T7269] macsec0: left promiscuous mode [ 179.688117][ T7273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.303'. [ 179.733863][ T7269] vlan2: entered allmulticast mode [ 179.742994][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.303'. [ 179.774832][ T30] audit: type=1326 audit(1759271909.232:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.0.303" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f51539 code=0x0 [ 179.800113][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 179.807110][ T24] dw2102: command 0x0e transfer failed. [ 179.814576][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 179.820969][ T24] dw2102: command 0x0e transfer failed. [ 179.856212][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 179.863902][ T5926] usb 5-1: USB disconnect, device number 18 [ 179.878331][ T7276] program syz.3.304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.887853][ T24] dw2102: command 0x51 transfer failed. [ 179.893473][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 179.913703][ T24] dw2102: i2c probe for address 0x68 failed. [ 179.935289][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 179.948870][ T24] dw2102: i2c probe for address 0x69 failed. [ 179.968099][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 179.973873][ T24] dw2102: i2c probe for address 0x6a failed. [ 179.984225][ T24] dw2102: probing for demodulator failed. Is the external power switched on? [ 179.993866][ T24] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 180.096928][ T24] rc_core: IR keymap rc-tt-1500 not found [ 180.122230][ T24] Registered IR keymap rc-empty [ 180.155142][ T7282] veth1_macvtap: left promiscuous mode [ 180.162551][ T24] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 180.213892][ T24] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input12 [ 180.225396][ T7282] macsec0: entered promiscuous mode [ 180.354149][ T7291] veth1_macvtap: entered promiscuous mode [ 180.376164][ T24] dvb-usb: schedule remote query interval to 250 msecs. [ 180.395204][ T24] dw2102: su3000_power_ctrl: 0, initialized 1 [ 180.400724][ T7291] macsec0: left promiscuous mode [ 180.444691][ T24] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 180.481561][ T24] usb 2-1: USB disconnect, device number 12 [ 180.660463][ T7282] vlan2: entered allmulticast mode [ 180.739493][ T24] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 181.394463][ T7310] overlayfs: missing 'lowerdir' [ 181.683927][ T7316] program syz.1.316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.121436][ T976] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 182.145690][ T7325] netlink: 36 bytes leftover after parsing attributes in process `syz.2.318'. [ 182.278420][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 182.294989][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 182.310302][ T976] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 182.422867][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 182.447180][ T5906] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 182.499630][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 182.534436][ T976] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 182.556944][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.573833][ T976] usb 2-1: Product: syz [ 182.579398][ T976] usb 2-1: Manufacturer: syz [ 182.597617][ T976] usb 2-1: SerialNumber: syz [ 182.612206][ T976] usb 2-1: config 0 descriptor?? [ 182.627035][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 182.633092][ T7321] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 182.645175][ T976] radioshark2 2-1:0.0: Invalid radioSHARK2 device [ 182.655425][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.320'. [ 182.664852][ T7333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.320'. [ 182.684661][ T976] radioshark2 2-1:0.0: probe with driver radioshark2 failed with error -22 [ 182.694260][ T30] audit: type=1326 audit(1759271912.142:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.0.320" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f51539 code=0x0 [ 182.731079][ T5906] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.756375][ T5906] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 182.765930][ T5906] usb 3-1: config 4 has no interface number 0 [ 182.775901][ T5906] usb 3-1: config 4 interface 30 has no altsetting 0 [ 182.794412][ T5906] usb 3-1: string descriptor 0 read error: -22 [ 182.801199][ T5906] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 182.829976][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.864073][ T5906] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 182.885053][ T5906] dw2102: su3000_power_ctrl: 1, initialized 0 [ 182.891782][ T5906] dvb-usb: bulk message failed: -22 (2/0) [ 182.905983][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.961463][ T5906] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 182.992591][ T7341] netlink: 'syz.1.317': attribute type 33 has an invalid length. [ 183.000665][ T7341] netlink: 51 bytes leftover after parsing attributes in process `syz.1.317'. [ 183.007727][ T5906] usb 3-1: media controller created [ 183.016029][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 183.023447][ T5906] dw2102: i2c transfer failed. [ 183.028556][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 183.034493][ T5906] dw2102: i2c transfer failed. [ 183.041184][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 183.057366][ T5888] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 183.102439][ T5906] dw2102: i2c transfer failed. [ 183.126933][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 183.196275][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.225563][ T5906] dw2102: i2c transfer failed. [ 183.227456][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.254791][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 183.279176][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.312742][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.322107][ T5906] dw2102: i2c transfer failed. [ 183.360812][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 183.410403][ T5888] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 183.426240][ T5906] dw2102: i2c transfer failed. [ 183.439035][ T5906] dvb-usb: MAC address: 02:02:02:02:02:02 [ 183.449284][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 183.475643][ T5888] usb 5-1: SerialNumber: syz [ 183.525024][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.588431][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 183.628092][ T5906] dw2102: command 0x0e transfer failed. [ 183.654204][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 183.665048][ T5906] dw2102: command 0x0e transfer failed. [ 183.721563][ T5888] usb 5-1: skipping empty audio interface (v1) [ 183.746105][ T5888] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 183.762139][ T5888] usb 5-1: USB disconnect, device number 19 [ 183.786705][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.877722][ T5980] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 183.986888][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 183.992950][ T5906] dw2102: command 0x0e transfer failed. [ 183.999221][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 184.006715][ T5906] dw2102: command 0x0e transfer failed. [ 184.012593][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 184.018579][ T5906] dw2102: command 0x51 transfer failed. [ 184.024273][ T5906] dvb-usb: bulk message failed: -22 (5/0) [ 184.030265][ T5906] dw2102: i2c probe for address 0x68 failed. [ 184.036492][ T5906] dvb-usb: bulk message failed: -22 (5/0) [ 184.042377][ T5906] dw2102: i2c probe for address 0x69 failed. [ 184.048465][ T5980] usb 1-1: Using ep0 maxpacket: 8 [ 184.053595][ T5906] dvb-usb: bulk message failed: -22 (5/0) [ 184.059907][ T5906] dw2102: i2c probe for address 0x6a failed. [ 184.066249][ T5906] dw2102: probing for demodulator failed. Is the external power switched on? [ 184.077094][ T5906] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 184.086059][ T5980] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 184.094309][ T5980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.107138][ T5980] usb 1-1: config 0 has no interface number 0 [ 184.142757][ T5980] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 184.159245][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.169745][ T5906] rc_core: IR keymap rc-tt-1500 not found [ 184.175569][ T5906] Registered IR keymap rc-empty [ 184.183379][ T5980] usb 1-1: Product: syz [ 184.190477][ T5906] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 184.199814][ T5980] usb 1-1: Manufacturer: syz [ 184.204455][ T5980] usb 1-1: SerialNumber: syz [ 184.237194][ T5906] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input13 [ 184.250452][ T5980] usb 1-1: config 0 descriptor?? [ 184.268762][ T5906] dvb-usb: schedule remote query interval to 250 msecs. [ 184.287788][ T5980] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 184.294875][ T5906] dw2102: su3000_power_ctrl: 0, initialized 1 [ 184.314324][ T5980] usb 1-1: No valid video chain found. [ 184.320164][ T5906] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 184.368372][ T5906] usb 3-1: USB disconnect, device number 13 [ 184.493056][ T5906] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 184.506350][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 184.522855][ T7344] netlink: 44 bytes leftover after parsing attributes in process `syz.0.324'. [ 184.542087][ T5926] usb 1-1: USB disconnect, device number 9 [ 184.976957][ T5906] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 184.985619][ T976] usb 2-1: USB disconnect, device number 13 [ 185.168962][ T5906] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 185.192464][ T5906] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 185.216990][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.524313][ T5906] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 185.546914][ T976] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 185.789523][ T976] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.806910][ T976] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 185.848981][ T976] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 185.880993][ T976] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.891988][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.902407][ T976] usb 2-1: Product: 㟃鲍Ṝ䙃ꃰ㩊ᑽ⧏㗱څ厤 [ 185.921251][ T976] usb 2-1: Manufacturer: ఊ [ 185.926099][ T976] usb 2-1: SerialNumber: syz [ 186.085231][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 186.163955][ T7375] overlayfs: missing 'lowerdir' [ 186.640944][ T7384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.334'. [ 186.655441][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.334'. [ 186.729119][ T30] audit: type=1326 audit(1759271916.192:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.4.334" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0 [ 186.847526][ T5906] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 187.055965][ T5906] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 187.064285][ T5906] stv0680 3-1:4.0: last error: 86, command = 0x70 [ 187.073754][ T5906] usb 3-1: USB disconnect, device number 14 [ 187.877819][ T7396] program syz.2.339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.437780][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 188.444774][ T976] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 188.513906][ T976] cdc_ncm 2-1:1.0: bind() failure [ 188.538318][ T976] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 188.558179][ T976] cdc_ncm 2-1:1.1: bind() failure [ 188.875847][ T976] usb 2-1: USB disconnect, device number 14 [ 188.890580][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 188.926974][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.030917][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 189.040667][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 189.048723][ T51] Bluetooth: hci4: hardware error 0x00 [ 189.097542][ T5906] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 189.105881][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.176947][ T979] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 189.256926][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 189.264499][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.276415][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.329407][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 189.346172][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.372062][ T24] usb 1-1: config 0 descriptor?? [ 189.382738][ T5906] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 189.406355][ T24] hub 1-1:0.0: USB hub found [ 189.465893][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.476918][ T979] usb 3-1: Using ep0 maxpacket: 16 [ 189.506736][ T5906] usb 5-1: config 0 descriptor?? [ 189.954699][ T5906] hub 5-1:0.0: USB hub found [ 189.997796][ T979] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 190.096949][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.146524][ T979] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 190.159848][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.276029][ T979] usb 3-1: Product: syz [ 190.289417][ T979] usb 3-1: Manufacturer: syz [ 190.398269][ T979] usb 3-1: SerialNumber: syz [ 190.507783][ T979] usb 3-1: config 0 descriptor?? [ 190.537978][ T979] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 190.693363][ T979] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 191.348170][ T5906] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 191.396396][ T979] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 191.415276][ T979] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 191.432010][ T7416] binder: 7415:7416 unknown command 0 [ 191.437880][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 191.464593][ T7416] binder: 7415:7416 ioctl c0306201 80000440 returned -22 [ 191.493154][ T5906] usbhid 5-1:0.0: can't add hid device: -71 [ 191.602474][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 191.768654][ T24] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 191.803980][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 191.818266][ T5906] usb 5-1: USB disconnect, device number 20 [ 191.867060][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 191.947967][ T24] usb 1-1: USB disconnect, device number 10 [ 192.085724][ T7444] netlink: 20 bytes leftover after parsing attributes in process `syz.4.348'. [ 192.088170][ T7444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.348'. [ 192.092659][ T30] audit: type=1326 audit(1759271921.552:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7442 comm="syz.4.348" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0 [ 192.149826][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.151355][ T979] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 192.157900][ T979] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 192.158458][ T979] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 192.160302][ T979] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 192.160749][ T979] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 192.161158][ T979] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 192.369042][ T979] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 192.369059][ T979] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 192.369067][ T979] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 192.369074][ T979] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 192.369082][ T979] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 192.372212][ T979] usb 3-1: USB disconnect, device number 15 [ 192.691522][ T7453] program syz.1.350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.966604][ T7456] overlayfs: missing 'lowerdir' [ 193.184615][ T7468] netlink: 36 bytes leftover after parsing attributes in process `syz.4.355'. [ 193.476970][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 193.886924][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 193.896387][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 193.905828][ T24] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 193.922906][ T24] usb 5-1: config 4 has no interface number 0 [ 193.937012][ T24] usb 5-1: config 4 interface 30 has no altsetting 0 [ 193.960206][ T24] usb 5-1: string descriptor 0 read error: -22 [ 193.968385][ T24] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 194.014789][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.071368][ T24] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 194.092851][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 194.118494][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 194.166519][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.204768][ T24] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 194.233759][ T24] usb 5-1: media controller created [ 194.259596][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 194.286742][ T7468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.304033][ T24] dw2102: i2c transfer failed. [ 194.323285][ T7468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.336518][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.344402][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.369206][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 194.601697][ T24] dw2102: i2c transfer failed. [ 194.642607][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 194.817090][ T24] dw2102: i2c transfer failed. [ 194.930505][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 195.006946][ T24] dw2102: i2c transfer failed. [ 195.054826][ T7492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.362'. [ 195.079354][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 195.096647][ T24] dw2102: i2c transfer failed. [ 195.103983][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 195.107119][ T7493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'. [ 195.110401][ T24] dw2102: i2c transfer failed. [ 195.124017][ T24] dvb-usb: MAC address: 02:02:02:02:02:02 [ 195.171930][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.187327][ T5980] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 195.250540][ T30] audit: type=1326 audit(1759271924.712:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7490 comm="syz.1.362" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7539 code=0x0 [ 195.298412][ T7496] program syz.4.363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.348364][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 195.369612][ T5980] usb 3-1: Using ep0 maxpacket: 32 [ 195.397004][ T24] dw2102: command 0x0e transfer failed. [ 195.403079][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 195.409322][ T24] dw2102: command 0x0e transfer failed. [ 195.441919][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.472382][ T7498] netlink: 'syz.4.364': attribute type 4 has an invalid length. [ 195.489274][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.499946][ T5980] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 195.521536][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.533029][ T5980] usb 3-1: config 0 descriptor?? [ 195.569913][ T5980] hub 3-1:0.0: USB hub found [ 195.764757][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 195.887006][ T24] dw2102: command 0x0e transfer failed. [ 195.892616][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 195.899563][ T24] dw2102: command 0x0e transfer failed. [ 195.905227][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 195.911164][ T24] dw2102: command 0x51 transfer failed. [ 195.916751][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 195.922660][ T24] dw2102: i2c probe for address 0x68 failed. [ 195.929205][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 195.934975][ T24] dw2102: i2c probe for address 0x69 failed. [ 195.941335][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 195.947140][ T24] dw2102: i2c probe for address 0x6a failed. [ 195.953928][ T24] dw2102: probing for demodulator failed. Is the external power switched on? [ 195.962804][ T24] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 196.045287][ T30] audit: type=1326 audit(1759271925.492:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 196.067091][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.387069][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 196.395152][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 196.401678][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 196.409771][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 196.588757][ T30] audit: type=1326 audit(1759271925.712:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 196.649985][ T24] rc_core: IR keymap rc-tt-1500 not found [ 196.655740][ T24] Registered IR keymap rc-empty [ 196.724471][ T24] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 196.802493][ T30] audit: type=1326 audit(1759271925.712:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 196.847281][ T24] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input14 [ 196.977425][ T24] dvb-usb: schedule remote query interval to 250 msecs. [ 196.998055][ T30] audit: type=1326 audit(1759271925.712:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 197.019805][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.056240][ T24] dw2102: su3000_power_ctrl: 0, initialized 1 [ 197.122823][ T24] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 197.185588][ T24] usb 5-1: USB disconnect, device number 21 [ 197.196115][ T30] audit: type=1326 audit(1759271925.712:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 197.316996][ T30] audit: type=1326 audit(1759271925.712:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 197.408183][ T24] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 197.436925][ T30] audit: type=1326 audit(1759271925.712:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 197.537086][ T30] audit: type=1326 audit(1759271925.712:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 197.577025][ T30] audit: type=1326 audit(1759271925.712:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 197.607149][ T30] audit: type=1326 audit(1759271925.712:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 197.656111][ T30] audit: type=1326 audit(1759271925.712:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 197.754352][ T5980] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 197.783851][ T30] audit: type=1326 audit(1759271925.712:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 197.866931][ T5980] usbhid 3-1:0.0: can't add hid device: -71 [ 197.873225][ T5980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 197.926000][ T30] audit: type=1326 audit(1759271925.712:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 197.977850][ T5980] usb 3-1: USB disconnect, device number 16 [ 198.017864][ T30] audit: type=1326 audit(1759271925.712:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 198.115510][ T7515] FAULT_INJECTION: forcing a failure. [ 198.115510][ T7515] name failslab, interval 1, probability 0, space 0, times 0 [ 198.166940][ T7515] CPU: 0 UID: 0 PID: 7515 Comm: syz.2.368 Not tainted syzkaller #0 PREEMPT(full) [ 198.166961][ T7515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.166971][ T7515] Call Trace: [ 198.166978][ T7515] [ 198.166985][ T7515] dump_stack_lvl+0x189/0x250 [ 198.167012][ T7515] ? __pfx____ratelimit+0x10/0x10 [ 198.167030][ T7515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.167049][ T7515] ? __pfx__printk+0x10/0x10 [ 198.167068][ T7515] ? __lock_acquire+0xab9/0xd20 [ 198.167094][ T7515] should_fail_ex+0x414/0x560 [ 198.167126][ T7515] should_failslab+0xa8/0x100 [ 198.167152][ T7515] kmem_cache_alloc_noprof+0x73/0x3c0 [ 198.167175][ T7515] ? skb_clone+0x212/0x3a0 [ 198.167201][ T7515] skb_clone+0x212/0x3a0 [ 198.167226][ T7515] __netlink_deliver_tap+0x404/0x850 [ 198.167257][ T7515] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.167278][ T7515] netlink_deliver_tap+0x19c/0x1b0 [ 198.167298][ T7515] netlink_unicast+0x7fa/0x9e0 [ 198.167324][ T7515] ? __pfx_netlink_unicast+0x10/0x10 [ 198.167344][ T7515] ? netlink_sendmsg+0x642/0xb30 [ 198.167361][ T7515] ? skb_put+0x11b/0x210 [ 198.167391][ T7515] netlink_sendmsg+0x805/0xb30 [ 198.167420][ T7515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.167442][ T7515] ? __import_iovec+0x5d4/0x7f0 [ 198.167461][ T7515] ? aa_sock_msg_perm+0xf1/0x1d0 [ 198.167479][ T7515] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.167496][ T7515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.167515][ T7515] __sock_sendmsg+0x21c/0x270 [ 198.167535][ T7515] ____sys_sendmsg+0x505/0x830 [ 198.167559][ T7515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.167595][ T7515] ___sys_sendmsg+0x21f/0x2a0 [ 198.167615][ T7515] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.167671][ T7515] ? __fget_files+0x2a/0x420 [ 198.167686][ T7515] ? __fget_files+0x3a0/0x420 [ 198.167713][ T7515] __sys_sendmsg+0x164/0x220 [ 198.167737][ T7515] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.167775][ T7515] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.167797][ T7515] __do_fast_syscall_32+0xb6/0x2b0 [ 198.167817][ T7515] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.167840][ T7515] do_fast_syscall_32+0x34/0x80 [ 198.167859][ T7515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.167879][ T7515] RIP: 0023:0xf706e539 [ 198.167893][ T7515] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 198.167905][ T7515] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 198.167923][ T7515] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 198.167935][ T7515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.167944][ T7515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.167955][ T7515] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 198.167964][ T7515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.167992][ T7515] [ 199.046744][ T7533] FAULT_INJECTION: forcing a failure. [ 199.046744][ T7533] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 199.170734][ T7533] CPU: 0 UID: 0 PID: 7533 Comm: syz.0.373 Not tainted syzkaller #0 PREEMPT(full) [ 199.170759][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.170770][ T7533] Call Trace: [ 199.170777][ T7533] [ 199.170785][ T7533] dump_stack_lvl+0x189/0x250 [ 199.170811][ T7533] ? __pfx____ratelimit+0x10/0x10 [ 199.170830][ T7533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.170850][ T7533] ? __pfx__printk+0x10/0x10 [ 199.170867][ T7533] ? __might_fault+0xb0/0x130 [ 199.170900][ T7533] should_fail_ex+0x414/0x560 [ 199.170928][ T7533] _copy_from_user+0x2d/0xb0 [ 199.170952][ T7533] sctp_setsockopt+0x19f/0x1200 [ 199.170974][ T7533] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 199.170995][ T7533] do_sock_setsockopt+0x17c/0x1b0 [ 199.171021][ T7533] __ia32_sys_setsockopt+0x13f/0x1b0 [ 199.171049][ T7533] __do_fast_syscall_32+0xb6/0x2b0 [ 199.171069][ T7533] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.171091][ T7533] do_fast_syscall_32+0x34/0x80 [ 199.171111][ T7533] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.171132][ T7533] RIP: 0023:0xf7f51539 [ 199.171147][ T7533] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 199.171161][ T7533] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 199.171187][ T7533] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 199.171199][ T7533] RDX: 000000000000006e RSI: 0000000080000000 RDI: 000000000000001c [ 199.171210][ T7533] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.171220][ T7533] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 199.171231][ T7533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.171257][ T7533] [ 199.482924][ T7542] veth1_macvtap: left promiscuous mode [ 199.488530][ T7542] macsec0: entered promiscuous mode [ 199.609048][ T7545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.376'. [ 199.618738][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 199.636938][ T5906] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 199.698763][ T7542] veth1_macvtap: entered promiscuous mode [ 199.704771][ T7542] macsec0: left promiscuous mode [ 199.734748][ T7546] vlan2: entered allmulticast mode [ 199.757038][ T5926] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 199.810624][ T5906] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 199.820067][ T5906] usb 2-1: config 0 has no interface number 0 [ 199.849671][ T5906] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 199.860009][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.869351][ T5906] usb 2-1: Product: syz [ 199.875519][ T5906] usb 2-1: Manufacturer: syz [ 199.890673][ T5906] usb 2-1: SerialNumber: syz [ 199.921686][ T5906] usb 2-1: config 0 descriptor?? [ 199.927014][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 199.954131][ T5926] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 199.980092][ T5926] usb 4-1: config 0 has no interface number 0 [ 200.018339][ T5926] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 200.034253][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.067380][ T5926] usb 4-1: Product: syz [ 200.082420][ T5926] usb 4-1: Manufacturer: syz [ 200.099844][ T5926] usb 4-1: SerialNumber: syz [ 200.132139][ T5926] usb 4-1: config 0 descriptor?? [ 200.148928][ T5926] smsc95xx v2.0.0 [ 200.546537][ T5926] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 200.562049][ T7557] overlayfs: missing 'lowerdir' [ 200.567157][ T5926] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 200.743112][ T7562] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 200.757458][ T5980] syzkaller1: tun_net_xmit 90 [ 200.773266][ T979] usb 2-1: USB disconnect, device number 15 [ 200.793134][ T7562] syzkaller1: Linktype set failed because interface is up [ 200.843773][ T7559] loop6: detected capacity change from 0 to 524287999 [ 201.190805][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 201.201798][ T5926] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 201.225622][ T5926] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 201.273708][ T5926] usb 4-1: USB disconnect, device number 10 [ 201.296926][ T979] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 201.497113][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 201.519662][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.554745][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.585550][ T979] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 201.635613][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.676484][ T979] usb 3-1: config 0 descriptor?? [ 201.708022][ T7581] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 201.710736][ T979] hub 3-1:0.0: USB hub found [ 202.116395][ T7593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.388'. [ 202.127799][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 203.104643][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.392'. [ 203.180146][ T7610] veth1_macvtap: left promiscuous mode [ 203.185884][ T7610] macsec0: entered promiscuous mode [ 203.215245][ T7610] veth1_macvtap: entered promiscuous mode [ 203.237047][ T7610] macsec0: left promiscuous mode [ 203.655504][ T7610] vlan2: entered allmulticast mode [ 203.697091][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 203.956994][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 204.052479][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.086113][ T24] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 204.135930][ T979] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 204.146502][ T7621] program syz.2.393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.159292][ T24] usb 2-1: config 4 has no interface number 0 [ 204.165376][ T24] usb 2-1: config 4 interface 30 has no altsetting 0 [ 204.188212][ T979] usbhid 3-1:0.0: can't add hid device: -71 [ 204.247317][ T979] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 204.290691][ T24] usb 2-1: string descriptor 0 read error: -22 [ 204.338898][ T24] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 204.368819][ T979] usb 3-1: USB disconnect, device number 17 [ 204.390157][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.437731][ T24] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 204.453340][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 204.473602][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 204.504862][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.553425][ T24] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 204.562210][ T24] usb 2-1: media controller created [ 204.568038][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 204.574076][ T24] dw2102: i2c transfer failed. [ 204.579023][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 204.586220][ T24] dw2102: i2c transfer failed. [ 204.625305][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 204.654493][ T7625] syz_tun: entered allmulticast mode [ 204.667168][ T24] dw2102: i2c transfer failed. [ 204.686977][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 204.720881][ T24] dw2102: i2c transfer failed. [ 204.727402][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.743349][ T7625] syz_tun: left allmulticast mode [ 204.757842][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 204.771732][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.790038][ T24] dw2102: i2c transfer failed. [ 204.818738][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 204.824477][ T24] dw2102: i2c transfer failed. [ 204.883285][ T24] dvb-usb: MAC address: 02:02:02:02:02:02 [ 204.915805][ T7634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.398'. [ 204.959230][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.031819][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 205.052820][ T24] dw2102: command 0x0e transfer failed. [ 205.072085][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 205.085812][ T24] dw2102: command 0x0e transfer failed. [ 205.142493][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 205.142509][ T30] audit: type=1326 audit(1759271934.602:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 205.222615][ T30] audit: type=1326 audit(1759271934.642:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 205.244446][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.301734][ T7639] netlink: 277 bytes leftover after parsing attributes in process `syz.3.399'. [ 205.314492][ T7639] netlink: 277 bytes leftover after parsing attributes in process `syz.3.399'. [ 205.334209][ T7639] netlink: 277 bytes leftover after parsing attributes in process `syz.3.399'. [ 205.344138][ T7639] netlink: 277 bytes leftover after parsing attributes in process `syz.3.399'. [ 205.362767][ T7639] netlink: 277 bytes leftover after parsing attributes in process `syz.3.399'. [ 205.373133][ T7639] netlink: 277 bytes leftover after parsing attributes in process `syz.3.399'. [ 205.399069][ T7639] netlink: 277 bytes leftover after parsing attributes in process `syz.3.399'. [ 205.407183][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 205.413779][ T24] dw2102: command 0x0e transfer failed. [ 205.425143][ T7639] netlink: 277 bytes leftover after parsing attributes in process `syz.3.399'. [ 205.429628][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 205.440449][ T7639] netlink: 277 bytes leftover after parsing attributes in process `syz.3.399'. [ 205.451486][ T30] audit: type=1326 audit(1759271934.642:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 205.506771][ T24] dw2102: command 0x0e transfer failed. [ 205.551036][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 205.573504][ T24] dw2102: command 0x51 transfer failed. [ 205.582128][ T30] audit: type=1326 audit(1759271934.642:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 205.615995][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 205.647062][ T24] dw2102: i2c probe for address 0x68 failed. [ 205.705506][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 205.722035][ T30] audit: type=1326 audit(1759271934.642:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76558 code=0x7ffc0000 [ 205.743868][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.878657][ T24] dw2102: i2c probe for address 0x69 failed. [ 205.886000][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 205.997085][ T24] dw2102: i2c probe for address 0x6a failed. [ 206.046895][ T24] dw2102: probing for demodulator failed. Is the external power switched on? [ 206.071510][ T24] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 206.079516][ T30] audit: type=1326 audit(1759271934.642:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 206.121158][ T30] audit: type=1326 audit(1759271934.642:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 206.142976][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.161370][ T30] audit: type=1326 audit(1759271934.642:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 206.212353][ T30] audit: type=1326 audit(1759271934.642:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 206.236257][ T30] audit: type=1326 audit(1759271934.642:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 206.348615][ T7665] program syz.2.405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.390222][ T979] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 206.477347][ T24] rc_core: IR keymap rc-tt-1500 not found [ 206.483277][ T24] Registered IR keymap rc-empty [ 206.498137][ T24] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 206.559335][ T24] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input15 [ 206.569330][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 206.606451][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.645935][ T24] dvb-usb: schedule remote query interval to 250 msecs. [ 206.654012][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.685598][ T24] dw2102: su3000_power_ctrl: 0, initialized 1 [ 206.707622][ T979] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 206.720265][ T24] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 206.729730][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.029790][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 207.042853][ T7682] FAULT_INJECTION: forcing a failure. [ 207.042853][ T7682] name failslab, interval 1, probability 0, space 0, times 0 [ 207.057241][ T5898] dw2102: i2c transfer failed. [ 207.081566][ T7682] CPU: 0 UID: 0 PID: 7682 Comm: syz.1.408 Not tainted syzkaller #0 PREEMPT(full) [ 207.081596][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.081606][ T7682] Call Trace: [ 207.081620][ T7682] [ 207.081628][ T7682] dump_stack_lvl+0x189/0x250 [ 207.081653][ T7682] ? __pfx____ratelimit+0x10/0x10 [ 207.081673][ T7682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.081694][ T7682] ? __pfx__printk+0x10/0x10 [ 207.081715][ T7682] ? __pfx___might_resched+0x10/0x10 [ 207.081738][ T7682] should_fail_ex+0x414/0x560 [ 207.081769][ T7682] should_failslab+0xa8/0x100 [ 207.081795][ T7682] kmem_cache_alloc_noprof+0x73/0x3c0 [ 207.081817][ T7682] ? taskstats_exit+0x14a/0xa30 [ 207.081843][ T7682] taskstats_exit+0x14a/0xa30 [ 207.081861][ T7682] ? do_exit+0x352/0x2300 [ 207.081878][ T7682] ? seccomp_filter_release+0xe3/0x120 [ 207.081894][ T7682] do_exit+0x630/0x2300 [ 207.081915][ T7682] ? do_raw_spin_lock+0x121/0x290 [ 207.081933][ T7682] ? __pfx_do_exit+0x10/0x10 [ 207.081960][ T7682] do_group_exit+0x21c/0x2d0 [ 207.081976][ T7682] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.081992][ T7682] get_signal+0x1286/0x1340 [ 207.082020][ T7682] arch_do_signal_or_restart+0x9a/0x750 [ 207.082038][ T7682] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 207.082050][ T7682] ? __sys_recvmmsg+0x19d/0x280 [ 207.082076][ T7682] ? exit_to_user_mode_loop+0x40/0x110 [ 207.082098][ T7682] exit_to_user_mode_loop+0x75/0x110 [ 207.082117][ T7682] __do_fast_syscall_32+0x1f4/0x2b0 [ 207.082133][ T7682] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.082149][ T7682] do_fast_syscall_32+0x34/0x80 [ 207.082164][ T7682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.082180][ T7682] RIP: 0023:0xf7fb7539 [ 207.082191][ T7682] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 207.082203][ T7682] RSP: 002b:00000000f546455c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 207.082218][ T7682] RAX: fffffffffffffe00 RBX: 0000000000000008 RCX: 00000000800034c0 [ 207.082227][ T7682] RDX: 000000000000013c RSI: 0000000000000700 RDI: 0000000000000000 [ 207.082235][ T7682] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.082242][ T7682] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.082250][ T7682] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.082269][ T7682] [ 207.327085][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 207.332901][ T5898] dw2102: i2c transfer failed. [ 207.596996][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 207.602893][ T5898] dw2102: i2c transfer failed. [ 207.643682][ T24] usb 2-1: USB disconnect, device number 16 [ 207.682827][ T979] usb 5-1: config 0 descriptor?? [ 207.713050][ T979] hub 5-1:0.0: USB hub found [ 207.750788][ T5944] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 207.931157][ T5926] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 207.947211][ T43] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 208.366508][ T24] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 208.408890][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.417137][ T5944] usb 3-1: config 4 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.436043][ T43] usb 1-1: config 127 has an invalid interface number: 106 but max is 0 [ 208.449065][ T43] usb 1-1: config 127 has no interface number 0 [ 208.455484][ T5944] usb 3-1: config 4 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.470327][ T5926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.482361][ T43] usb 1-1: config 127 interface 106 altsetting 8 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 208.516647][ T5926] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 208.543730][ T5944] usb 3-1: config 4 interface 0 has no altsetting 0 [ 208.565428][ T5926] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 208.578550][ T5944] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 208.588515][ T43] usb 1-1: config 127 interface 106 altsetting 8 endpoint 0xF has invalid maxpacket 255, setting to 8 [ 208.602715][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.612553][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.624234][ T43] usb 1-1: config 127 interface 106 has no altsetting 0 [ 208.652628][ T5926] usb 4-1: config 0 descriptor?? [ 208.704663][ T43] usb 1-1: string descriptor 0 read error: -22 [ 208.713926][ T43] usb 1-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8 [ 208.725687][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.752431][ T7668] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 208.766753][ T43] ftdi_sio 1-1:127.106: FTDI USB Serial Device converter detected [ 208.790380][ T43] usb 1-1: Detected SIO [ 208.808811][ T43] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 208.867626][ T7689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.903007][ T7689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.979534][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.067441][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.113907][ T43] usb 1-1: USB disconnect, device number 11 [ 209.125452][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 209.152590][ T43] ftdi_sio 1-1:127.106: device disconnected [ 209.179625][ T5944] usbhid 3-1:4.0: can't add hid device: -71 [ 209.188812][ T5944] usbhid 3-1:4.0: probe with driver usbhid failed with error -71 [ 209.246050][ T5944] usb 3-1: USB disconnect, device number 18 [ 209.527942][ T7695] 8021q: VLANs not supported on ip6gre0 [ 209.727208][ T7697] FAULT_INJECTION: forcing a failure. [ 209.727208][ T7697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.757233][ T979] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 209.795113][ T979] usbhid 5-1:0.0: can't add hid device: -71 [ 209.814033][ T7697] CPU: 1 UID: 0 PID: 7697 Comm: syz.2.413 Not tainted syzkaller #0 PREEMPT(full) [ 209.814057][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 209.814068][ T7697] Call Trace: [ 209.814075][ T7697] [ 209.814083][ T7697] dump_stack_lvl+0x189/0x250 [ 209.814109][ T7697] ? __pfx____ratelimit+0x10/0x10 [ 209.814129][ T7697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.814149][ T7697] ? __pfx__printk+0x10/0x10 [ 209.814169][ T7697] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 209.814194][ T7697] should_fail_ex+0x414/0x560 [ 209.814225][ T7697] _copy_from_user+0x2d/0xb0 [ 209.814248][ T7697] sg_io+0x29f/0x8a0 [ 209.814278][ T7697] scsi_ioctl+0x1399/0x1fb0 [ 209.814307][ T7697] ? __pfx_scsi_ioctl+0x10/0x10 [ 209.814363][ T7697] ? __pfx___might_resched+0x10/0x10 [ 209.814389][ T7697] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 209.814419][ T7697] ? scsi_block_when_processing_errors+0x390/0x470 [ 209.814447][ T7697] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 209.814492][ T7697] sg_ioctl+0x1886/0x2230 [ 209.814521][ T7697] ? __pfx_sg_ioctl+0x10/0x10 [ 209.814543][ T7697] ? __fget_files+0x2a/0x420 [ 209.814564][ T7697] ? __fget_files+0x3a0/0x420 [ 209.814579][ T7697] ? __fget_files+0x2a/0x420 [ 209.814599][ T7697] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 209.814624][ T7697] __ia32_compat_sys_ioctl+0x543/0x840 [ 209.814649][ T7697] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 209.814672][ T7697] ? __fget_files+0x3a0/0x420 [ 209.814694][ T7697] ? fput+0xa0/0xd0 [ 209.814714][ T7697] ? ksys_write+0x22a/0x250 [ 209.814745][ T7697] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.814767][ T7697] __do_fast_syscall_32+0xb6/0x2b0 [ 209.814788][ T7697] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.814811][ T7697] do_fast_syscall_32+0x34/0x80 [ 209.814831][ T7697] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.814851][ T7697] RIP: 0023:0xf706e539 [ 209.814872][ T7697] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 209.814887][ T7697] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 209.814906][ T7697] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000005393 [ 209.814918][ T7697] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.814928][ T7697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.814938][ T7697] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 209.814948][ T7697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.814973][ T7697] [ 209.815180][ T979] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 210.235319][ T7706] __nla_validate_parse: 60 callbacks suppressed [ 210.235331][ T7706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.416'. [ 210.276403][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 210.276418][ T30] audit: type=1326 audit(1759271939.732:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.4.416" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0 [ 210.390402][ T979] usb 5-1: USB disconnect, device number 22 [ 210.588948][ T7718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.418581][ T5944] usb 4-1: USB disconnect, device number 11 [ 212.685061][ T7748] FAULT_INJECTION: forcing a failure. [ 212.685061][ T7748] name failslab, interval 1, probability 0, space 0, times 0 [ 212.739963][ T7748] CPU: 1 UID: 0 PID: 7748 Comm: syz.3.427 Not tainted syzkaller #0 PREEMPT(full) [ 212.739979][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.739986][ T7748] Call Trace: [ 212.739990][ T7748] [ 212.739995][ T7748] dump_stack_lvl+0x189/0x250 [ 212.740012][ T7748] ? __pfx____ratelimit+0x10/0x10 [ 212.740023][ T7748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.740035][ T7748] ? __pfx__printk+0x10/0x10 [ 212.740045][ T7748] ? __lock_acquire+0xab9/0xd20 [ 212.740059][ T7748] should_fail_ex+0x414/0x560 [ 212.740077][ T7748] should_failslab+0xa8/0x100 [ 212.740093][ T7748] kmem_cache_alloc_noprof+0x73/0x3c0 [ 212.740106][ T7748] ? skb_clone+0x212/0x3a0 [ 212.740122][ T7748] skb_clone+0x212/0x3a0 [ 212.740136][ T7748] __netlink_deliver_tap+0x404/0x850 [ 212.740154][ T7748] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.740166][ T7748] netlink_deliver_tap+0x19c/0x1b0 [ 212.740177][ T7748] netlink_unicast+0x7fa/0x9e0 [ 212.740191][ T7748] ? __pfx_netlink_unicast+0x10/0x10 [ 212.740202][ T7748] ? netlink_sendmsg+0x642/0xb30 [ 212.740211][ T7748] ? skb_put+0x11b/0x210 [ 212.740224][ T7748] netlink_sendmsg+0x805/0xb30 [ 212.740240][ T7748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.740252][ T7748] ? __import_iovec+0x5d4/0x7f0 [ 212.740263][ T7748] ? aa_sock_msg_perm+0xf1/0x1d0 [ 212.740274][ T7748] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.740285][ T7748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.740296][ T7748] __sock_sendmsg+0x21c/0x270 [ 212.740308][ T7748] ____sys_sendmsg+0x505/0x830 [ 212.740323][ T7748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.740344][ T7748] ___sys_sendmsg+0x21f/0x2a0 [ 212.740357][ T7748] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.740388][ T7748] ? __fget_files+0x2a/0x420 [ 212.740397][ T7748] ? __fget_files+0x3a0/0x420 [ 212.740411][ T7748] __sys_sendmsg+0x164/0x220 [ 212.740424][ T7748] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.740445][ T7748] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.740457][ T7748] __do_fast_syscall_32+0xb6/0x2b0 [ 212.740468][ T7748] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.740481][ T7748] do_fast_syscall_32+0x34/0x80 [ 212.740493][ T7748] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.740506][ T7748] RIP: 0023:0xf7f76539 [ 212.740515][ T7748] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 212.740523][ T7748] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 212.740534][ T7748] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 212.740541][ T7748] RDX: 0000000024044884 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.740547][ T7748] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.740552][ T7748] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 212.740558][ T7748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.740572][ T7748] [ 212.806910][ T5888] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 213.473303][ T7758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.430'. [ 213.496489][ T30] audit: type=1326 audit(1759271942.952:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.3.430" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f76539 code=0x0 [ 213.519740][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 213.531215][ T5888] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 213.545769][ T5888] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.552775][ T5888] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 213.562007][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.608461][ T5888] usb 5-1: config 0 descriptor?? [ 213.877275][ T5980] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 214.057390][ T5980] usb 3-1: Using ep0 maxpacket: 32 [ 214.066220][ T5980] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.078392][ T5980] usb 3-1: config 0 has no interface number 0 [ 214.104374][ T5980] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 214.122069][ T5980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.131772][ T5980] usb 3-1: Product: syz [ 214.136149][ T5980] usb 3-1: Manufacturer: syz [ 214.141398][ T5980] usb 3-1: SerialNumber: syz [ 214.150125][ T5980] usb 3-1: config 0 descriptor?? [ 214.162004][ T5980] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 214.171233][ T5980] usb 3-1: selecting invalid altsetting 1 [ 214.177263][ T5980] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 214.196218][ T5980] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 214.210951][ T5980] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 214.219673][ T5980] usb 3-1: media controller created [ 214.250875][ T5980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.473835][ T5888] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 214.609820][ T5980] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 214.657936][ T5980] zl10353_read_register: readreg error (reg=127, ret==-71) [ 214.719331][ T5980] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 214.941464][ T5980] usb 3-1: USB disconnect, device number 19 [ 214.982223][ T5888] corsair-psu 0003:1B1C:1C09.0002: unable to query firmware (-71) [ 215.102304][ T5888] corsair-psu 0003:1B1C:1C09.0002: probe with driver corsair-psu failed with error -71 [ 215.331470][ T5888] usb 5-1: USB disconnect, device number 23 [ 216.556933][ T5928] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 216.618675][ T7809] overlayfs: missing 'lowerdir' [ 216.732918][ T7809] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 216.743816][ T7809] syzkaller1: Linktype set failed because interface is up [ 216.766955][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 216.797213][ T5888] syzkaller1: tun_net_xmit 90 [ 216.851354][ T5928] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 216.868708][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.896893][ T5928] usb 2-1: Product: syz [ 216.904565][ T5928] usb 2-1: Manufacturer: syz [ 216.915973][ T5928] usb 2-1: SerialNumber: syz [ 216.945534][ T5928] usb 2-1: config 0 descriptor?? [ 217.182009][ T5928] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 217.420334][ T7807] trusted_key: encrypted_key: master key parameter 'defaijp:syz' is invalid [ 217.739645][ T7821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.446'. [ 217.823835][ T30] audit: type=1326 audit(1759271947.282:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.2.446" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e539 code=0x0 [ 218.023474][ T7824] FAULT_INJECTION: forcing a failure. [ 218.023474][ T7824] name failslab, interval 1, probability 0, space 0, times 0 [ 218.042709][ T7824] CPU: 0 UID: 0 PID: 7824 Comm: syz.0.448 Not tainted syzkaller #0 PREEMPT(full) [ 218.042732][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 218.042742][ T7824] Call Trace: [ 218.042749][ T7824] [ 218.042759][ T7824] dump_stack_lvl+0x189/0x250 [ 218.042784][ T7824] ? __pfx____ratelimit+0x10/0x10 [ 218.042804][ T7824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.042822][ T7824] ? __pfx__printk+0x10/0x10 [ 218.042839][ T7824] ? rcu_is_watching+0x15/0xb0 [ 218.042858][ T7824] ? trace_fib_table_lookup+0x85/0x200 [ 218.042888][ T7824] should_fail_ex+0x414/0x560 [ 218.042917][ T7824] should_failslab+0xa8/0x100 [ 218.042945][ T7824] kmem_cache_alloc_noprof+0x73/0x3c0 [ 218.042966][ T7824] ? dst_alloc+0x105/0x170 [ 218.042986][ T7824] ? fib_lookup+0x76/0x440 [ 218.043008][ T7824] dst_alloc+0x105/0x170 [ 218.043034][ T7824] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 218.043066][ T7824] ? ip_route_output_key_hash+0xde/0x2e0 [ 218.043089][ T7824] ip_route_output_key_hash+0x1b9/0x2e0 [ 218.043116][ T7824] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 218.043146][ T7824] ? __pfx_call_rcu+0x10/0x10 [ 218.043165][ T7824] ? percpu_counter_add_batch+0xea/0x1e0 [ 218.043192][ T7824] ip_route_output_flow+0x2a/0x150 [ 218.043219][ T7824] ? security_sk_classify_flow+0x70/0x180 [ 218.043244][ T7824] tcp_v4_connect+0x846/0x1a00 [ 218.043269][ T7824] ? insn_get_opcode+0x940/0xf30 [ 218.043296][ T7824] ? __pfx_tcp_v4_connect+0x10/0x10 [ 218.043324][ T7824] __inet_stream_connect+0x2ae/0xe80 [ 218.043363][ T7824] ? __pfx___inet_stream_connect+0x10/0x10 [ 218.043391][ T7824] ? __kasan_kmalloc+0x93/0xb0 [ 218.043417][ T7824] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 218.043439][ T7824] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 218.043464][ T7824] tcp_sendmsg_locked+0x4d9b/0x5620 [ 218.043486][ T7824] ? tcp_sendmsg_locked+0x571/0x5620 [ 218.043506][ T7824] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 218.043558][ T7824] ? __lock_acquire+0xab9/0xd20 [ 218.043587][ T7824] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 218.043603][ T7824] ? __local_bh_enable_ip+0x12d/0x1c0 [ 218.043623][ T7824] ? __local_bh_enable_ip+0x12d/0x1c0 [ 218.043652][ T7824] tcp_sendmsg+0x2f/0x50 [ 218.043668][ T7824] __sock_sendmsg+0x19c/0x270 [ 218.043689][ T7824] __sys_sendto+0x3bd/0x520 [ 218.043713][ T7824] ? __pfx___sys_sendto+0x10/0x10 [ 218.043730][ T7824] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 218.043763][ T7824] ? __fget_files+0x3a0/0x420 [ 218.043791][ T7824] ? ksys_write+0x22a/0x250 [ 218.043824][ T7824] __ia32_sys_sendto+0xdd/0x100 [ 218.043849][ T7824] __do_fast_syscall_32+0xb6/0x2b0 [ 218.043869][ T7824] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.043892][ T7824] do_fast_syscall_32+0x34/0x80 [ 218.043913][ T7824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.043933][ T7824] RIP: 0023:0xf7f51539 [ 218.043948][ T7824] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 218.043963][ T7824] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 218.043981][ T7824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 218.043993][ T7824] RDX: 0000000000000000 RSI: 00000000200007fd RDI: 0000000080e68000 [ 218.044004][ T7824] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 218.044015][ T7824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 218.044025][ T7824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.044052][ T7824] [ 218.475200][ T5928] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 218.571201][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 218.658360][ T7831] vxlan0: entered promiscuous mode [ 218.701658][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.719524][ T2900] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.730915][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.781963][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.356243][ T976] usb 2-1: USB disconnect, device number 17 [ 219.606964][ T5928] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 220.294011][ T5928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.314404][ T5928] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 220.395371][ T5928] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 220.774833][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.806215][ T5928] usb 1-1: config 0 descriptor?? [ 220.845155][ T7870] hsr_slave_0: left promiscuous mode [ 220.873561][ T7870] hsr_slave_1: left promiscuous mode [ 220.897249][ T5888] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 221.073672][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 221.102924][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.150949][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.220246][ T7872] 8021q: VLANs not supported on ip6gre0 [ 221.251232][ T5888] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 221.312734][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.343409][ T5888] usb 5-1: config 0 descriptor?? [ 221.366518][ T5888] hub 5-1:0.0: USB hub found [ 221.737818][ T7880] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 223.069051][ T5944] usb 1-1: USB disconnect, device number 12 [ 223.267057][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 223.431352][ T43] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.441484][ T43] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 223.476504][ T5888] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 223.537347][ T5888] usbhid 5-1:0.0: can't add hid device: -71 [ 223.543319][ T5888] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 223.557175][ T5944] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 223.585987][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.607140][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 223.639720][ T5888] usb 5-1: USB disconnect, device number 24 [ 223.643493][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 223.677984][ T43] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.689487][ T43] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.697864][ T43] usb 4-1: Product: syz [ 223.709598][ T43] usb 4-1: Manufacturer: syz [ 223.736920][ T5944] usb 1-1: Using ep0 maxpacket: 32 [ 223.746384][ T5944] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 223.757265][ T43] cdc_wdm 4-1:1.0: skipping garbage [ 223.762469][ T43] cdc_wdm 4-1:1.0: skipping garbage [ 223.769850][ T5944] usb 1-1: config 0 has no interface number 0 [ 223.775935][ T5944] usb 1-1: config 0 interface 184 has no altsetting 0 [ 223.795279][ T976] IPVS: starting estimator thread 0... [ 223.919984][ T7904] IPVS: using max 51 ests per chain, 122400 per kthread [ 224.042475][ T5944] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 224.064692][ T7893] hsr_slave_0: left promiscuous mode [ 224.075966][ T7893] hsr_slave_1: left promiscuous mode [ 224.083181][ T43] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 224.120513][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.148206][ T43] cdc_wdm 4-1:1.0: Unknown control protocol [ 224.184681][ T5944] usb 1-1: Product: syz [ 224.222999][ T5944] usb 1-1: Manufacturer: syz [ 224.247995][ T5944] usb 1-1: SerialNumber: syz [ 224.262713][ T5944] usb 1-1: config 0 descriptor?? [ 224.324017][ T5944] smsc75xx v1.0.0 [ 224.377284][ T5888] usb 4-1: USB disconnect, device number 12 [ 224.915964][ T5944] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 224.965672][ T5944] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 226.892916][ T7942] sch_tbf: burst 18 is lower than device lo mtu (65550) ! [ 227.456905][ T5888] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 227.696330][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 227.730089][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.137730][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.157013][ T5888] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 228.166093][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.360110][ T5944] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000034: -71 [ 228.371106][ T5944] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write BURST_CAP: -71 [ 228.419983][ T5944] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 228.598360][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 228.658258][ T5888] usb 2-1: config 0 descriptor?? [ 228.689716][ T5888] hub 2-1:0.0: USB hub found [ 228.692127][ T5944] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 228.768512][ T7961] 8021q: VLANs not supported on ip6tnl0 [ 229.082071][ T5944] usb 1-1: USB disconnect, device number 13 [ 231.111847][ T5888] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 231.456763][ T5888] usbhid 2-1:0.0: can't add hid device: -71 [ 231.605201][ T5888] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 231.725133][ T5888] usb 2-1: USB disconnect, device number 18 [ 232.157331][ T5888] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 232.192765][ T8004] FAULT_INJECTION: forcing a failure. [ 232.192765][ T8004] name failslab, interval 1, probability 0, space 0, times 0 [ 232.215117][ T8004] CPU: 0 UID: 0 PID: 8004 Comm: syz.4.491 Not tainted syzkaller #0 PREEMPT(full) [ 232.215141][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.215150][ T8004] Call Trace: [ 232.215155][ T8004] [ 232.215160][ T8004] dump_stack_lvl+0x189/0x250 [ 232.215178][ T8004] ? __pfx____ratelimit+0x10/0x10 [ 232.215190][ T8004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.215201][ T8004] ? __pfx__printk+0x10/0x10 [ 232.215211][ T8004] ? __lock_acquire+0xab9/0xd20 [ 232.215225][ T8004] should_fail_ex+0x414/0x560 [ 232.215243][ T8004] should_failslab+0xa8/0x100 [ 232.215259][ T8004] kmem_cache_alloc_noprof+0x73/0x3c0 [ 232.215272][ T8004] ? skb_clone+0x212/0x3a0 [ 232.215287][ T8004] skb_clone+0x212/0x3a0 [ 232.215302][ T8004] __netlink_deliver_tap+0x404/0x850 [ 232.215320][ T8004] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.215331][ T8004] netlink_deliver_tap+0x19c/0x1b0 [ 232.215342][ T8004] netlink_unicast+0x7fa/0x9e0 [ 232.215357][ T8004] ? __pfx_netlink_unicast+0x10/0x10 [ 232.215367][ T8004] ? netlink_sendmsg+0x642/0xb30 [ 232.215377][ T8004] ? skb_put+0x11b/0x210 [ 232.215390][ T8004] netlink_sendmsg+0x805/0xb30 [ 232.215406][ T8004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.215418][ T8004] ? __import_iovec+0x5d4/0x7f0 [ 232.215429][ T8004] ? aa_sock_msg_perm+0xf1/0x1d0 [ 232.215440][ T8004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.215453][ T8004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.215464][ T8004] __sock_sendmsg+0x21c/0x270 [ 232.215476][ T8004] ____sys_sendmsg+0x505/0x830 [ 232.215492][ T8004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.215512][ T8004] ___sys_sendmsg+0x21f/0x2a0 [ 232.215526][ T8004] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.215556][ T8004] ? __fget_files+0x2a/0x420 [ 232.215565][ T8004] ? __fget_files+0x3a0/0x420 [ 232.215579][ T8004] __sys_sendmsg+0x164/0x220 [ 232.215592][ T8004] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.215613][ T8004] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.215625][ T8004] __do_fast_syscall_32+0xb6/0x2b0 [ 232.215637][ T8004] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.215649][ T8004] do_fast_syscall_32+0x34/0x80 [ 232.215660][ T8004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.215672][ T8004] RIP: 0023:0xf704e539 [ 232.215681][ T8004] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 232.215689][ T8004] RSP: 002b:00000000f543e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 232.215706][ T8004] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800007c0 [ 232.215713][ T8004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.215718][ T8004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.215723][ T8004] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 232.215729][ T8004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.215743][ T8004] [ 232.746929][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 232.777580][ T5888] usb 2-1: no configurations [ 232.782218][ T5888] usb 2-1: can't read configurations, error -22 [ 232.784062][ T8009] FAULT_INJECTION: forcing a failure. [ 232.784062][ T8009] name failslab, interval 1, probability 0, space 0, times 0 [ 232.805918][ T8009] CPU: 1 UID: 0 PID: 8009 Comm: syz.3.493 Not tainted syzkaller #0 PREEMPT(full) [ 232.805941][ T8009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.805951][ T8009] Call Trace: [ 232.805958][ T8009] [ 232.805965][ T8009] dump_stack_lvl+0x189/0x250 [ 232.805991][ T8009] ? __pfx____ratelimit+0x10/0x10 [ 232.806011][ T8009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.806032][ T8009] ? __pfx__printk+0x10/0x10 [ 232.806050][ T8009] ? __lock_acquire+0xab9/0xd20 [ 232.806076][ T8009] should_fail_ex+0x414/0x560 [ 232.806107][ T8009] should_failslab+0xa8/0x100 [ 232.806134][ T8009] kmem_cache_alloc_noprof+0x73/0x3c0 [ 232.806156][ T8009] ? skb_clone+0x212/0x3a0 [ 232.806183][ T8009] skb_clone+0x212/0x3a0 [ 232.806209][ T8009] __netlink_deliver_tap+0x404/0x850 [ 232.806241][ T8009] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.806262][ T8009] netlink_deliver_tap+0x19c/0x1b0 [ 232.806283][ T8009] netlink_unicast+0x7fa/0x9e0 [ 232.806310][ T8009] ? __pfx_netlink_unicast+0x10/0x10 [ 232.806329][ T8009] ? netlink_sendmsg+0x642/0xb30 [ 232.806347][ T8009] ? skb_put+0x11b/0x210 [ 232.806371][ T8009] netlink_sendmsg+0x805/0xb30 [ 232.806400][ T8009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.806422][ T8009] ? __import_iovec+0x5d4/0x7f0 [ 232.806441][ T8009] ? aa_sock_msg_perm+0xf1/0x1d0 [ 232.806460][ T8009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.806479][ T8009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.806499][ T8009] __sock_sendmsg+0x21c/0x270 [ 232.806521][ T8009] ____sys_sendmsg+0x505/0x830 [ 232.806549][ T8009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.806586][ T8009] ___sys_sendmsg+0x21f/0x2a0 [ 232.806611][ T8009] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.806668][ T8009] ? __fget_files+0x2a/0x420 [ 232.806685][ T8009] ? __fget_files+0x3a0/0x420 [ 232.806718][ T8009] __sys_sendmsg+0x164/0x220 [ 232.806743][ T8009] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.806781][ T8009] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.806806][ T8009] __do_fast_syscall_32+0xb6/0x2b0 [ 232.806824][ T8009] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.806843][ T8009] do_fast_syscall_32+0x34/0x80 [ 232.806861][ T8009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.806882][ T8009] RIP: 0023:0xf7f76539 [ 232.806897][ T8009] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 232.806911][ T8009] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 232.806930][ T8009] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 232.806942][ T8009] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.806952][ T8009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.806963][ T8009] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 232.806973][ T8009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.807000][ T8009] [ 232.957074][ T5888] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 233.398806][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 233.408203][ T5888] usb 2-1: no configurations [ 233.412817][ T5888] usb 2-1: can't read configurations, error -22 [ 233.419892][ T5888] usb usb2-port1: attempt power cycle [ 233.560292][ T8020] veth1_macvtap: left promiscuous mode [ 233.584019][ T8020] macsec0: entered promiscuous mode [ 233.631234][ T8024] veth1_macvtap: entered promiscuous mode [ 233.654172][ T8024] macsec0: left promiscuous mode [ 233.770217][ T5888] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 233.800028][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 233.805903][ T5888] usb 2-1: no configurations [ 233.821041][ T5888] usb 2-1: can't read configurations, error -22 [ 233.825620][ T8020] vlan2: entered allmulticast mode [ 233.987215][ T5888] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 234.060227][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 234.090744][ T5888] usb 2-1: no configurations [ 234.101244][ T5888] usb 2-1: can't read configurations, error -22 [ 234.112878][ T5888] usb usb2-port1: unable to enumerate USB device [ 234.460139][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 234.713925][ T8039] overlayfs: missing 'lowerdir' [ 234.729253][ T8039] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 234.735353][ T8039] syzkaller1: Linktype set failed because interface is up [ 234.767186][ T5888] syzkaller1: tun_net_xmit 90 [ 235.399569][ C1] sd 0:0:1:0: [sda] tag#5139 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 235.410074][ C1] sd 0:0:1:0: [sda] tag#5139 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00 [ 235.442127][ T5888] syzkaller1: tun_net_xmit 90 [ 235.470190][ T12] syzkaller1: tun_net_xmit 86 [ 236.878807][ T8066] FAULT_INJECTION: forcing a failure. [ 236.878807][ T8066] name failslab, interval 1, probability 0, space 0, times 0 [ 236.892702][ T8066] CPU: 0 UID: 0 PID: 8066 Comm: syz.3.509 Not tainted syzkaller #0 PREEMPT(full) [ 236.892721][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 236.892729][ T8066] Call Trace: [ 236.892735][ T8066] [ 236.892741][ T8066] dump_stack_lvl+0x189/0x250 [ 236.892762][ T8066] ? __pfx____ratelimit+0x10/0x10 [ 236.892776][ T8066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.892792][ T8066] ? __pfx__printk+0x10/0x10 [ 236.892805][ T8066] ? __lock_acquire+0xab9/0xd20 [ 236.892824][ T8066] should_fail_ex+0x414/0x560 [ 236.892848][ T8066] should_failslab+0xa8/0x100 [ 236.892868][ T8066] kmem_cache_alloc_noprof+0x73/0x3c0 [ 236.892886][ T8066] ? skb_clone+0x212/0x3a0 [ 236.892906][ T8066] skb_clone+0x212/0x3a0 [ 236.892926][ T8066] __netlink_deliver_tap+0x404/0x850 [ 236.892949][ T8066] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.892965][ T8066] netlink_deliver_tap+0x19c/0x1b0 [ 236.892981][ T8066] netlink_unicast+0x7fa/0x9e0 [ 236.893000][ T8066] ? __pfx_netlink_unicast+0x10/0x10 [ 236.893015][ T8066] ? netlink_sendmsg+0x642/0xb30 [ 236.893028][ T8066] ? skb_put+0x11b/0x210 [ 236.893046][ T8066] netlink_sendmsg+0x805/0xb30 [ 236.893067][ T8066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.893083][ T8066] ? __import_iovec+0x5d4/0x7f0 [ 236.893099][ T8066] ? aa_sock_msg_perm+0xf1/0x1d0 [ 236.893114][ T8066] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.893130][ T8066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.893145][ T8066] __sock_sendmsg+0x21c/0x270 [ 236.893161][ T8066] ____sys_sendmsg+0x505/0x830 [ 236.893181][ T8066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.893210][ T8066] ___sys_sendmsg+0x21f/0x2a0 [ 236.893234][ T8066] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.893277][ T8066] ? __fget_files+0x2a/0x420 [ 236.893289][ T8066] ? __fget_files+0x3a0/0x420 [ 236.893308][ T8066] __sys_sendmsg+0x164/0x220 [ 236.893326][ T8066] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.893354][ T8066] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.893371][ T8066] __do_fast_syscall_32+0xb6/0x2b0 [ 236.893387][ T8066] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.893403][ T8066] do_fast_syscall_32+0x34/0x80 [ 236.893418][ T8066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.893434][ T8066] RIP: 0023:0xf7f76539 [ 236.893446][ T8066] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 236.893457][ T8066] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 236.893472][ T8066] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 236.893481][ T8066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.893489][ T8066] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.893497][ T8066] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 236.893505][ T8066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.893524][ T8066] [ 237.460161][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.558943][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.674578][ T8088] tipc: Can't bind to reserved service type 2 [ 237.696944][ T43] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 237.907100][ T43] usb 3-1: device descriptor read/64, error -71 [ 238.067942][ T5926] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 238.111505][ T8094] FAULT_INJECTION: forcing a failure. [ 238.111505][ T8094] name failslab, interval 1, probability 0, space 0, times 0 [ 238.126600][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz.4.515 Not tainted syzkaller #0 PREEMPT(full) [ 238.126624][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 238.126634][ T8094] Call Trace: [ 238.126642][ T8094] [ 238.126650][ T8094] dump_stack_lvl+0x189/0x250 [ 238.126677][ T8094] ? __pfx____ratelimit+0x10/0x10 [ 238.126695][ T8094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.126716][ T8094] ? __pfx__printk+0x10/0x10 [ 238.126734][ T8094] ? __lock_acquire+0xab9/0xd20 [ 238.126760][ T8094] should_fail_ex+0x414/0x560 [ 238.126790][ T8094] should_failslab+0xa8/0x100 [ 238.126819][ T8094] kmem_cache_alloc_noprof+0x73/0x3c0 [ 238.126840][ T8094] ? skb_clone+0x212/0x3a0 [ 238.126865][ T8094] skb_clone+0x212/0x3a0 [ 238.126888][ T8094] __netlink_deliver_tap+0x404/0x850 [ 238.126926][ T8094] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.126945][ T8094] netlink_deliver_tap+0x19c/0x1b0 [ 238.126965][ T8094] netlink_unicast+0x7fa/0x9e0 [ 238.126991][ T8094] ? __pfx_netlink_unicast+0x10/0x10 [ 238.127011][ T8094] ? netlink_sendmsg+0x642/0xb30 [ 238.127028][ T8094] ? skb_put+0x11b/0x210 [ 238.127052][ T8094] netlink_sendmsg+0x805/0xb30 [ 238.127081][ T8094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.127104][ T8094] ? __import_iovec+0x5d4/0x7f0 [ 238.127123][ T8094] ? aa_sock_msg_perm+0xf1/0x1d0 [ 238.127142][ T8094] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 238.127161][ T8094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.127182][ T8094] __sock_sendmsg+0x21c/0x270 [ 238.127203][ T8094] ____sys_sendmsg+0x505/0x830 [ 238.127230][ T8094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.127269][ T8094] ___sys_sendmsg+0x21f/0x2a0 [ 238.127293][ T8094] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.127350][ T8094] ? __fget_files+0x2a/0x420 [ 238.127365][ T8094] ? __fget_files+0x3a0/0x420 [ 238.127392][ T8094] __sys_sendmsg+0x164/0x220 [ 238.127416][ T8094] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.127451][ T8094] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.127471][ T8094] __do_fast_syscall_32+0xb6/0x2b0 [ 238.127490][ T8094] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.127511][ T8094] do_fast_syscall_32+0x34/0x80 [ 238.127528][ T8094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.127545][ T8094] RIP: 0023:0xf704e539 [ 238.127560][ T8094] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 238.127574][ T8094] RSP: 002b:00000000f543e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 238.127591][ T8094] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 238.127603][ T8094] RDX: 0000000020050800 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.127613][ T8094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.127623][ T8094] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 238.127633][ T8094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.127659][ T8094] [ 238.146977][ T43] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 238.595558][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 238.610693][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 238.637088][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 238.668299][ T5926] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 238.826945][ T43] usb 3-1: device descriptor read/64, error -71 [ 238.903524][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.924499][ T5926] usb 4-1: Product: syz [ 238.933062][ T5926] usb 4-1: Manufacturer: syz [ 238.952565][ T5926] usb 4-1: SerialNumber: syz [ 238.997384][ T43] usb usb3-port1: attempt power cycle [ 239.023892][ T5926] usb 4-1: config 0 descriptor?? [ 239.097560][ T979] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 239.158007][ T5926] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 239.167891][ T5926] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 239.257407][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 239.266102][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.287116][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.313703][ T979] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 239.336784][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.359114][ T8113] syzkaller1: entered promiscuous mode [ 239.377506][ T979] usb 2-1: config 0 descriptor?? [ 239.379336][ T8113] syzkaller1: entered allmulticast mode [ 239.382709][ T43] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 239.400751][ T979] hub 2-1:0.0: USB hub found [ 239.419543][ T8112] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 239.433684][ T43] usb 3-1: device descriptor read/8, error -71 [ 239.573908][ T5926] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 239.582228][ T5926] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 239.609295][ T5926] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 239.616385][ T5926] em28xx 4-1:0.0: No AC97 audio processor [ 239.635499][ T5926] usb 4-1: USB disconnect, device number 13 [ 239.677392][ T43] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 239.685073][ T8118] program syz.3.521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.695349][ T5926] em28xx 4-1:0.0: Disconnecting em28xx [ 239.713153][ T5926] em28xx 4-1:0.0: Freeing device [ 239.727820][ T43] usb 3-1: device descriptor read/8, error -71 [ 239.860800][ T43] usb usb3-port1: unable to enumerate USB device [ 239.891946][ T8120] ------------[ cut here ]------------ [ 239.897710][ T8120] WARNING: CPU: 0 PID: 8120 at fs/nsfs.c:493 nsfs_fh_to_dentry+0xc56/0xd50 [ 239.906381][ T8120] Modules linked in: [ 239.911772][ T8120] CPU: 0 UID: 0 PID: 8120 Comm: syz.3.522 Not tainted syzkaller #0 PREEMPT(full) [ 239.921911][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.932022][ T8120] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 239.937794][ T8120] Code: 64 24 40 e9 41 f8 ff ff e8 f7 2d 7b ff 90 0f 0b 90 e9 64 f6 ff ff e8 e9 2d 7b ff 90 0f 0b 90 e9 ab f6 ff ff e8 db 2d 7b ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 cd 2d 7b ff 45 31 e4 4c 8b 7c 24 08 e9 [ 239.957646][ T8120] RSP: 0018:ffffc9000f317a40 EFLAGS: 00010283 [ 239.963743][ T8120] RAX: ffffffff8242e7b5 RBX: 00000000efffffff RCX: 0000000000080000 [ 239.971868][ T8120] RDX: ffffc9000d39b000 RSI: 000000000000003a RDI: 000000000000003b [ 239.979893][ T8120] RBP: ffffc9000f317b10 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586 [ 239.987951][ T8120] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: ffffffff8242dc9c [ 239.995941][ T8120] R13: dffffc0000000000 R14: ffff888030dbebd4 R15: 0000000000000000 [ 240.003945][ T8120] FS: 0000000000000000(0000) GS:ffff88812637e000(0063) knlGS:00000000f5466b40 [ 240.014011][ T8120] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 240.021534][ T8120] CR2: 00000000f5465e7c CR3: 000000007a186000 CR4: 00000000003526f0 [ 240.029560][ T8120] Call Trace: [ 240.032851][ T8120] [ 240.035792][ T8120] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 240.041335][ T8120] exportfs_decode_fh_raw+0x178/0x6e0 [ 240.046739][ T8120] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 240.052632][ T8120] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 240.058624][ T8120] do_handle_to_path+0xa4/0x1a0 [ 240.063527][ T8120] do_handle_open+0x6b4/0x8f0 [ 240.068240][ T8120] ? __pfx_do_handle_open+0x10/0x10 [ 240.073464][ T8120] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.078719][ T8120] __do_fast_syscall_32+0xb6/0x2b0 [ 240.083845][ T8120] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.089154][ T8120] do_fast_syscall_32+0x34/0x80 [ 240.094018][ T8120] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.100425][ T8120] RIP: 0023:0xf7f76539 [ 240.104511][ T8120] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 240.125157][ T8120] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000156 [ 240.135079][ T8120] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 240.143221][ T8120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.151297][ T8120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.159344][ T8120] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 240.167396][ T8120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.175404][ T8120] [ 240.178527][ T8120] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 240.185815][ T8120] CPU: 0 UID: 0 PID: 8120 Comm: syz.3.522 Not tainted syzkaller #0 PREEMPT(full) [ 240.195005][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.205075][ T8120] Call Trace: [ 240.208358][ T8120] [ 240.211286][ T8120] dump_stack_lvl+0x99/0x250 [ 240.215898][ T8120] ? __asan_memcpy+0x40/0x70 [ 240.220505][ T8120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.225703][ T8120] ? __pfx__printk+0x10/0x10 [ 240.230300][ T8120] vpanic+0x281/0x750 [ 240.234288][ T8120] ? __pfx__printk+0x10/0x10 [ 240.238885][ T8120] ? __pfx_vpanic+0x10/0x10 [ 240.243379][ T8120] ? is_bpf_text_address+0x26/0x2b0 [ 240.248574][ T8120] panic+0xb9/0xc0 [ 240.252354][ T8120] ? __pfx_panic+0x10/0x10 [ 240.256782][ T8120] __warn+0x31b/0x4b0 [ 240.260778][ T8120] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 240.266241][ T8120] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 240.271339][ T8120] report_bug+0x2be/0x4f0 [ 240.275675][ T8120] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 240.280814][ T8120] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 240.285921][ T8120] ? nsfs_fh_to_dentry+0xc58/0xd50 [ 240.291054][ T8120] handle_bug+0x84/0x160 [ 240.295306][ T8120] exc_invalid_op+0x1a/0x50 [ 240.299820][ T8120] asm_exc_invalid_op+0x1a/0x20 [ 240.304675][ T8120] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 240.310460][ T8120] Code: 64 24 40 e9 41 f8 ff ff e8 f7 2d 7b ff 90 0f 0b 90 e9 64 f6 ff ff e8 e9 2d 7b ff 90 0f 0b 90 e9 ab f6 ff ff e8 db 2d 7b ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 cd 2d 7b ff 45 31 e4 4c 8b 7c 24 08 e9 [ 240.330084][ T8120] RSP: 0018:ffffc9000f317a40 EFLAGS: 00010283 [ 240.336160][ T8120] RAX: ffffffff8242e7b5 RBX: 00000000efffffff RCX: 0000000000080000 [ 240.344171][ T8120] RDX: ffffc9000d39b000 RSI: 000000000000003a RDI: 000000000000003b [ 240.352143][ T8120] RBP: ffffc9000f317b10 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586 [ 240.360121][ T8120] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: ffffffff8242dc9c [ 240.368441][ T8120] R13: dffffc0000000000 R14: ffff888030dbebd4 R15: 0000000000000000 [ 240.376521][ T8120] ? nsfs_fh_to_dentry+0x13c/0xd50 [ 240.381637][ T8120] ? nsfs_fh_to_dentry+0xc55/0xd50 [ 240.386752][ T8120] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 240.392218][ T8120] exportfs_decode_fh_raw+0x178/0x6e0 [ 240.397582][ T8120] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 240.403397][ T8120] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 240.409335][ T8120] do_handle_to_path+0xa4/0x1a0 [ 240.414198][ T8120] do_handle_open+0x6b4/0x8f0 [ 240.419137][ T8120] ? __pfx_do_handle_open+0x10/0x10 [ 240.424344][ T8120] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.429556][ T8120] __do_fast_syscall_32+0xb6/0x2b0 [ 240.434672][ T8120] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.439865][ T8120] do_fast_syscall_32+0x34/0x80 [ 240.444715][ T8120] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.451058][ T8120] RIP: 0023:0xf7f76539 [ 240.455145][ T8120] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 240.474764][ T8120] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000156 [ 240.483186][ T8120] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 240.491165][ T8120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.499132][ T8120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.507105][ T8120] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 240.515156][ T8120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.523125][ T8120] [ 240.526398][ T8120] Kernel Offset: disabled [ 240.530712][ T8120] Rebooting in 86400 seconds..