last executing test programs: 9m3.884218006s ago: executing program 1 (id=9210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e37e1b"], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) 9m1.416204225s ago: executing program 1 (id=9220): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0xffffff72, 0x1e}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7, 0x7fff, 0x3, 0x1, 0x8, 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r5, &(0x7f0000000040), 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28010000070a0103"], 0x128}, 0x1, 0x0, 0x0, 0x200440d5}, 0x4000) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r4, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r4, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 8m58.283034605s ago: executing program 1 (id=9232): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) r2 = socket(0x1e, 0x4, 0x0) getsockname$packet(r2, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x11, 0xa419, 0x32314d54, 0x47524247, 0x0, [{0x5, 0xb8}, {0x8, 0x4b0c}, {0x9, 0x401}, {0x401, 0x66}, {0x3d27, 0x4}, {0xf534, 0xa}, {0x7e, 0x2}, {0x8801, 0x6}], 0x21, 0xa5, 0x8, 0x2}}) mprotect(&(0x7f00008c2000/0x1000)=nil, 0x1000, 0x3000000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0xfffffff9, 0x6}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000300)={r8}, &(0x7f0000000400)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b0b0a0600000025bd7000fedbdf25ff0100000400000005002000000000000f000000000000000100000000001000"], 0xffffff36}}, 0x44000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000225bd7000fbdbdf251000000005002e000000000008003b000400000005003300020000000a000900aaaaaaaaaabb000008000600", @ANYRES32=r1, @ANYBLOB='\b\x00+\x00g\x00\x00\x00'], 0x50}, 0x1, 0x0, 0x0, 0x20044811}, 0x20000c44) stat(0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905b5", @ANYBLOB='cy'], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 8m51.905001602s ago: executing program 1 (id=9252): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0xffffff72, 0x1e}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r4 = syz_open_dev$audion(&(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7, 0x7fff, 0x3, 0x1, 0x8, 0x2}) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28010000070a0103"], 0x128}, 0x1, 0x0, 0x0, 0x200440d5}, 0x4000) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) splice(r5, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 8m41.256328928s ago: executing program 1 (id=9273): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x0) 8m40.346532132s ago: executing program 1 (id=9277): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xa) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x29, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x48001) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000007fff9ec2ff2e4cf7111d64edffff40000000000000000500000a1400ffffff7f0000000000f3"], 0xc0}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) bpf$MAP_CREATE(0x200000000000001d, &(0x7f0000000b00)=ANY=[], 0x48) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x9, 0xc, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}}, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) (async) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/60, 0x3c, 0x40, 0x0, 0x0) (async) recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/60, 0x3c, 0x40, 0x0, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000002c0)={0x4, 0x1, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000240)={0x5, 0x4, 0xda56}) (async) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000240)={0x5, 0x4, 0xda56}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m11.839933651s ago: executing program 32 (id=9277): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xa) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x29, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x48001) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000007fff9ec2ff2e4cf7111d64edffff40000000000000000500000a1400ffffff7f0000000000f3"], 0xc0}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd60081f2000783afffe800000000000000000000000000020ff02000000000000000000000000000186009078000020000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001020000000400000126000400050100000000020044933fb8804359f07142ff705f00c71870ccb72eee7af43f52c0d9e2b389a25a8ec305bbac078fdba1c20a3dee29c66c9aac593e2cb0f2d6e87c3d69907e2047254e144a764f20923373a188548a3ea7dea45091b5c2b8cd4015825ba981a85ef2727b82d6f4b491c2b8557a226c94f2c153166323c7d5a1ea86"], 0x0) bpf$MAP_CREATE(0x200000000000001d, &(0x7f0000000b00)=ANY=[], 0x48) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x9, 0xc, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}}, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) (async) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/60, 0x3c, 0x40, 0x0, 0x0) (async) recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/60, 0x3c, 0x40, 0x0, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000002c0)={0x4, 0x1, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r6}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000240)={0x5, 0x4, 0xda56}) (async) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000240)={0x5, 0x4, 0xda56}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.33714355s ago: executing program 5 (id=11414): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0x928, 0x0) sendto$unix(r3, &(0x7f0000000640)="52bd5495bf58ada6bc3e33b242249cc600da2374ca0062e7293566f7a7ca9d3c2cd9f3716a9b407fcb991ac7896a3b34b35c4a73e1215bb6e1dc395b7d9186d4218f56b0e849aee07d8034b470ac3f44a6c4414ab8022c532a01b766f451eb656a12a8ef7d381c364994e892091a967575e97d754fb8aeafdb4a279f975e1afc370558dd5be613d6b95ea88870707407603b28e1a9a84a7e91d61cdb9163cbee628cf0e0ffae58d021681629cc70d6d50bc99557e6011dd9247f61d93b01c29cd7bf5f60c2352778e1ad87d0d35d444080a88e8b46295a4ae73e74b406eb80f2ff1074a5c1c33b7748184a11df090085cd6d93367fad83376491", 0xfa, 0x0, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @private=0xa010101}, 0x2, 0x0, 0x3}}, 0x26) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000100)={&(0x7f0000000080)=[{0xa, 0x0, 0x0, 0x0}, {0x6, 0x8001, 0x0, 0x0}], 0x2}) 6.199203451s ago: executing program 0 (id=11415): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) r2 = socket(0x1e, 0x4, 0x0) getsockname$packet(r2, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x11, 0xa419, 0x32314d54, 0x47524247, 0x0, [{0x5, 0xb8}, {0x8, 0x4b0c}, {0x9, 0x401}, {0x401, 0x66}, {0x3d27, 0x4}, {0xf534, 0xa}, {0x7e, 0x2}, {0x8801, 0x6}], 0x21, 0xa5, 0x8, 0x2}}) mprotect(&(0x7f00008c2000/0x1000)=nil, 0x1000, 0x3000000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0xfffffff9, 0x6}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000300)={r8}, &(0x7f0000000400)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b0b0a0600000025bd7000fedbdf25ff0100000400000005002000000000000f000000000000000100000000001000"], 0xffffff36}}, 0x44000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000225bd7000fbdbdf251000000005002e000000000008003b000400000005003300020000000a000900aaaaaaaaaabb000008000600", @ANYRES32=r1, @ANYBLOB='\b\x00+\x00g\x00\x00\x00'], 0x50}, 0x1, 0x0, 0x0, 0x20044811}, 0x20000c44) stat(0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905b5", @ANYBLOB='cy'], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 5.029043233s ago: executing program 5 (id=11418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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", @ANYRESHEX=0x0], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0) (fail_nth: 2) 4.882747317s ago: executing program 5 (id=11419): rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x7551b000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r6 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) rt_sigqueueinfo(r6, 0x21, &(0x7f0000000100)={0x1f}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r9, 0x2, &(0x7f0000000600)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x4000c}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x5, r7, 0x0, 0x0, 0x100000001}]) io_getevents(r9, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000023896) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) 4.286456961s ago: executing program 2 (id=11420): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x2}, 0xfe7c, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x100002000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000f80)=0xd) io_uring_setup(0x6bd, &(0x7f00000000c0)={0x0, 0x18a9, 0x2, 0x1, 0x5e}) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$rxrpc(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 3.989008173s ago: executing program 4 (id=11422): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x300, &(0x7f00000002c0)={0x2, &(0x7f0000000000)=[{0x2d, 0x0, 0x40}, {0x6}]}) 3.869008018s ago: executing program 4 (id=11424): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x2804c8c4}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x1, 0x9, 0x9, 0x5, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0xc, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0xb, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0xf, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff7f, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x52, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x8, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8f, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x6, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x87, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x3, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x7, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x98, 0x0, 0x4, 0xee, 0x0, 0x4}, {0x6, 0x1, 0x800, 0x3, 0x2, 0x1}, 0x5, 0x8, 0x21d4}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) write(r1, &(0x7f0000000080)="16", 0x1) 3.81088523s ago: executing program 5 (id=11425): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x8, &(0x7f0000006680)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000140), 0x4003) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0xae, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) socket$inet(0xa, 0x801, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) munlockall() r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r2, &(0x7f0000008f40), 0x0, 0x2122, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0xb, &(0x7f00000001c0)=""/2, &(0x7f0000000340)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x4) syz_clone3(&(0x7f00000000c0)={0x23a44580, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0xa, 0x9, 0x7, 0x103, 0x6, 0x86, 0x8, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}}) 3.734492893s ago: executing program 2 (id=11426): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @empty=0x64000000}, 0x10) 3.54103858s ago: executing program 2 (id=11428): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0x928, 0x0) sendto$unix(r1, &(0x7f0000000640)="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", 0xfa, 0x0, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e21}, 0x6e) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000000080)=[{0xa, 0x0, 0x0, 0x0}, {0x6, 0x8001, 0x0, 0x0}], 0x2}) 3.529348234s ago: executing program 4 (id=11429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e21, 0x8, @loopback, 0x4}}, 0x0, 0x0, 0x2, 0x0, "c5f37081326dd7522df6283901be8b18078b072cc2cce27a675619ed2697db7edc31f32d5569fa033509f3db509c9aad33269479cd3503f15b4291d3e07d92ac46029d5384c936377e56629c4b37cee1"}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x240088c8}, 0x4000000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008015) 3.357050013s ago: executing program 4 (id=11431): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x21, 0x2, 0xa) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r2, &(0x7f0000000500)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004200)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4c449d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e434f70e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507e7ce7ffb4d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f2e78855f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56cc27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dd6e5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51115821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae92f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36c7cedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b0", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffd, {0x4, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0xffffffffffffffff, 0x800000000000, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0xd, 0xffffffff, 0x1, 0x6000, 0x0, r4, 0xee01, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0xfffffffffffffffc}}, 0x20) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x3f000000, 0x1000, 0x10c0014}) 3.182540472s ago: executing program 4 (id=11432): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0x928, 0x0) sendto$unix(r3, &(0x7f0000000640)="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", 0xfa, 0x0, &(0x7f0000000740)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @private=0xa010101}, 0x2, 0x0, 0x3}}, 0x26) r4 = dup3(r1, r2, 0x80000) getpeername$packet(r4, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000100)={&(0x7f0000000080)=[{0xa, 0x0, 0x0, 0x0}, {0x6, 0x8001, 0x0, 0x0}], 0x2}) 2.542201942s ago: executing program 3 (id=11433): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000400)="1e8fcce8", 0x4}], 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0x9, 0x4) 2.408201437s ago: executing program 5 (id=11434): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0xc3ff, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, 0x0, 0x0) getsockname$unix(r5, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 2.273467503s ago: executing program 3 (id=11435): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7, 0x7fff, 0x3, 0x1, 0x8, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000040), 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2801"], 0x128}, 0x1, 0x0, 0x0, 0x200440d5}, 0x4000) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 1.999300954s ago: executing program 0 (id=11436): rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x7551b000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) rt_sigqueueinfo(r1, 0x21, &(0x7f0000000100)={0x1f}) 1.764293769s ago: executing program 0 (id=11437): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x2}, 0xfe7c, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x100002000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000f80)=0xd) io_uring_setup(0x6bd, &(0x7f00000000c0)={0x0, 0x18a9, 0x2, 0x1, 0x5e}) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$rxrpc(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 1.304834191s ago: executing program 2 (id=11438): rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x7551b000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r5 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) rt_sigqueueinfo(r5, 0x21, &(0x7f0000000100)={0x1f}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r8, 0x2, &(0x7f0000000600)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x4000c}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x5, r6, 0x0, 0x0, 0x100000001}]) io_getevents(r8, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) 1.265556591s ago: executing program 0 (id=11439): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x2804c8c4}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x1, 0x9, 0x9, 0x5, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0xc, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0xb, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0xf, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff7f, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x52, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x8, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8f, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x6, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x87, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x3, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x7, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x98, 0x0, 0x4, 0xee, 0x0, 0x4}, {0x6, 0x1, 0x800, 0x3, 0x2, 0x1}, 0x5, 0x8, 0x21d4}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) write(r1, &(0x7f0000000080)="16", 0x1) 1.117221548s ago: executing program 2 (id=11440): rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x7551b000) 1.112599487s ago: executing program 3 (id=11441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="46176a45d472"}, 0x10) r3 = fsopen(&(0x7f0000000040)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r5, 0x2, 0x0) getdents(r5, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 985.656593ms ago: executing program 3 (id=11442): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x6000000, 0x18, &(0x7f0000000000)=0x9, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0086401, &(0x7f00000001c0)={0x69, &(0x7f0000000080)=""/105}) fcntl$notify(r1, 0x402, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x52c0, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x8042, 0x1f6) r3 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) write$binfmt_register(r3, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x3, 0x3a, '](/]}6', 0x3a, 'acl', 0x3a, './file1'}, 0x30) ioctl$SOUND_MIXER_INFO(r3, 0x805c4d65, &(0x7f0000000240)) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x880, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x4003) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00000ad000/0x3000)=nil) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc0010058, 0x0, 0x9}]}) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r4, r4}, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xe88000000, 0x0) 865.41875ms ago: executing program 5 (id=11443): socket$vsock_stream(0x28, 0x1, 0x0) r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='soft\x00', &(0x7f0000000580)='\x00', 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x4, &(0x7f0000000100)={0x16, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 837.890557ms ago: executing program 0 (id=11444): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) (async) sendmmsg$inet6(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="76eccf92", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)="d2181a37", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d80)="8df5699aeae93d75e907", 0xa}, {0x0}], 0x2}}, {{&(0x7f0000001200)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb99}, 0x1c, 0x0, 0x0, &(0x7f0000001580)}}], 0x4, 0x44085) 741.00045ms ago: executing program 2 (id=11445): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7, 0x7fff, 0x3, 0x1, 0x8, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000040), 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2801"], 0x128}, 0x1, 0x0, 0x0, 0x200440d5}, 0x4000) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 689.475403ms ago: executing program 0 (id=11446): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'hsr0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000110001000000000000000000000000000000000000000000000000000800030068737230"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = io_uring_setup(0x2a0d, &(0x7f0000000240)={0x0, 0x86a0, 0x800, 0x3, 0xb3}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp6\x00') open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_io_uring_setup(0x42f3, &(0x7f0000000240)={0x0, 0x7b60, 0x51005, 0x800, 0x3c1}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001080008400000000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'gretap0\x00', 0x1}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000000000000000000000000000000008000300687372302800128008000100687372001c00028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000110001040078615d9f0a4a3b4796b3e6", @ANYRES32=r6, @ANYBLOB="fab0817da4b5f31a24001280110001006272696467655f736c617665000000000c0005800500090001000000140003006272"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x31}, [@ldst={0x6, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 606.870569ms ago: executing program 3 (id=11447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e21, 0x8, @loopback, 0x4}}, 0x0, 0x0, 0x2, 0x0, "c5f37081326dd7522df6283901be8b18078b072cc2cce27a675619ed2697db7edc31f32d5569fa033509f3db509c9aad33269479cd3503f15b4291d3e07d92ac46029d5384c936377e56629c4b37cee1"}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x240088c8}, 0x4000000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008015) 526.742581ms ago: executing program 3 (id=11448): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0x928, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000000080)=[{0xa, 0x0, 0x0, 0x0}, {0x6, 0x8001, 0x0, 0x0}], 0x2}) 0s ago: executing program 4 (id=11449): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc044560f, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) ptrace$setregs(0xf, 0xffffffffffffffff, 0x402, 0x0) ioctl$OTPSELECT(r0, 0x80044d0d, &(0x7f0000000140)=0x2) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000340)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x4f, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x84}}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff, 0x38, 0x0, @val=@tcx}, 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0xd) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r2) fstatfs(0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): d USB device number 9 using dummy_hcd [ 2052.513775][T27303] usb 1-1: device descriptor read/64, error -71 [ 2052.602251][ T9427] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2052.638137][ T9427] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 2052.638161][ T9427] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2052.638254][ T9427] vhci_hcd vhci_hcd.0: Device attached [ 2052.770016][T27303] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2052.900110][T27303] usb 1-1: device descriptor read/64, error -71 [ 2052.900284][T27304] usb 6-1: new low-speed USB device number 77 using dummy_hcd [ 2052.900449][T27298] usb 43-1: new low-speed USB device number 9 using vhci_hcd [ 2053.010410][T27303] usb usb1-port1: attempt power cycle [ 2053.052380][T27304] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2053.053173][T27304] usb 6-1: config 0 has no interfaces? [ 2053.053203][T27304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.085630][T27304] usb 6-1: config 0 descriptor?? [ 2053.201487][ T9438] syz.3.11157 (9438): drop_caches: 2 [ 2053.288254][ T9428] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 8 [ 2053.291704][T18351] vhci_hcd vhci_hcd.5: stop threads [ 2053.291722][T18351] vhci_hcd vhci_hcd.5: release socket [ 2053.291764][T18351] vhci_hcd vhci_hcd.5: disconnect device [ 2053.300865][T27304] usb 6-1: string descriptor 0 read error: -71 [ 2053.307351][T27304] usb 6-1: USB disconnect, device number 77 [ 2053.359805][T27303] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2053.394271][T27303] usb 1-1: device descriptor read/8, error -71 [ 2053.645525][T27303] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2053.660163][T27303] usb 1-1: device descriptor read/8, error -71 [ 2053.769559][T27303] usb usb1-port1: unable to enumerate USB device [ 2053.920815][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11164'. [ 2053.988570][ T9466] syz.5.11165 (9466): drop_caches: 2 [ 2054.027413][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11163'. [ 2054.036814][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11163'. [ 2054.259315][T27282] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2054.423838][T27282] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2054.423887][T27282] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 2054.466335][T27282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.466375][T27282] usb 3-1: Product: syz [ 2054.468207][T27282] usb 3-1: Manufacturer: syz [ 2054.468223][T27282] usb 3-1: SerialNumber: syz [ 2054.679209][T27285] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2054.839580][T27285] usb 6-1: Using ep0 maxpacket: 32 [ 2054.849221][T27285] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2054.869027][T27285] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.877465][T27285] usb 6-1: Product: syz [ 2054.877486][T27285] usb 6-1: Manufacturer: syz [ 2054.877500][T27285] usb 6-1: SerialNumber: syz [ 2054.898837][T27285] usb 6-1: config 0 descriptor?? [ 2054.910740][T27285] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2054.918770][T27285] dvb-usb: bulk message failed: -22 (4/0) [ 2054.926380][T27285] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2054.936993][T27285] dvb-usb: bulk message failed: -22 (5/0) [ 2054.942925][T27285] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2054.960918][T27285] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2054.974653][T27285] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2054.982932][T27285] usb 6-1: media controller created [ 2055.007216][T27285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2055.038920][T27285] usb 6-1: selecting invalid altsetting 3 [ 2055.044879][T27285] ttusb2: set interface to alts=3 failed [ 2055.124887][ T9473] dvb-usb: bulk message failed: -22 (7/0) [ 2055.124928][ T9473] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 2055.124984][ T9473] ttusb2: i2c transfer failed. [ 2055.219322][T27285] DVB: Unable to find symbol tda10086_attach() [ 2055.227595][T27285] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2055.236978][T27285] dvb-usb: bulk message failed: -22 (4/0) [ 2055.236993][T27285] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2055.237098][T27285] dvb-usb: bulk message failed: -22 (5/0) [ 2055.237111][T27285] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2055.237151][T27285] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2055.285125][T27285] usb 6-1: USB disconnect, device number 78 [ 2055.324766][T27285] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2056.075763][ T9494] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 2056.075792][ T9494] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2056.094521][ T9494] vhci_hcd vhci_hcd.0: Device attached [ 2056.118015][ T9494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11172'. [ 2056.339249][T27285] usb 39-1: new low-speed USB device number 11 using vhci_hcd [ 2056.385794][ T9495] vhci_hcd: connection reset by peer [ 2056.396057][ T4488] vhci_hcd vhci_hcd.3: stop threads [ 2056.396120][ T4488] vhci_hcd vhci_hcd.3: release socket [ 2056.396191][ T4488] vhci_hcd vhci_hcd.3: disconnect device [ 2056.972791][T27282] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2056.972873][T27282] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 2056.972910][T27282] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2056.989027][T27282] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2057.031930][T27282] usb 3-1: USB disconnect, device number 80 [ 2057.210912][ T9504] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2057.236075][ T9504] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2057.236104][ T9504] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2057.251772][ T9504] vhci_hcd vhci_hcd.0: Device attached [ 2057.499749][T27287] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 2057.651385][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11179'. [ 2057.653360][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11179'. [ 2057.690871][T27287] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2057.701114][T27287] usb 4-1: config 0 has no interfaces? [ 2057.701166][T27287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.719361][T27287] usb 4-1: config 0 descriptor?? [ 2057.927995][ T9505] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 10 [ 2057.928485][T18351] vhci_hcd vhci_hcd.3: stop threads [ 2057.928502][T18351] vhci_hcd vhci_hcd.3: release socket [ 2057.928551][T18351] vhci_hcd vhci_hcd.3: disconnect device [ 2057.949195][T27287] usb 4-1: string descriptor 0 read error: -71 [ 2057.966905][T27287] usb 4-1: USB disconnect, device number 62 [ 2057.980327][T27298] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2058.544866][ T9525] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11178'. [ 2058.594519][ T9525] netlink: 'syz.4.11178': attribute type 6 has an invalid length. [ 2058.594567][ T9525] netlink: 'syz.4.11178': attribute type 5 has an invalid length. [ 2058.594585][ T9525] netlink: 'syz.4.11178': attribute type 4 has an invalid length. [ 2058.841285][T27304] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2058.933359][ T9535] syz.3.11185 (9535): drop_caches: 2 [ 2059.023035][T27304] usb 6-1: Using ep0 maxpacket: 32 [ 2059.030489][T27304] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2059.030545][T27304] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2059.032583][T27304] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 2059.032608][T27304] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2059.032625][T27304] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2059.032644][T27304] usb 6-1: config 128 has no interface number 0 [ 2059.032683][T27304] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2059.032706][T27304] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2059.032726][T27304] usb 6-1: config 128 interface 127 has no altsetting 0 [ 2059.121504][T27304] usb 6-1: language id specifier not provided by device, defaulting to English [ 2059.150794][T27304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.150842][T27304] usb 6-1: Product: syz [ 2059.150872][T27304] usb 6-1: Manufacturer: syz [ 2059.150884][T27304] usb 6-1: SerialNumber: syz [ 2059.401558][ T9542] FAULT_INJECTION: forcing a failure. [ 2059.401558][ T9542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2059.417798][ T9542] CPU: 0 UID: 0 PID: 9542 Comm: syz.3.11189 Tainted: G L syzkaller #0 PREEMPT(full) [ 2059.417829][ T9542] Tainted: [L]=SOFTLOCKUP [ 2059.417837][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2059.417848][ T9542] Call Trace: [ 2059.417856][ T9542] [ 2059.417865][ T9542] dump_stack_lvl+0xe8/0x150 [ 2059.417898][ T9542] should_fail_ex+0x410/0x560 [ 2059.417930][ T9542] _copy_from_user+0x2d/0xb0 [ 2059.417952][ T9542] get_compat_msghdr+0xb3/0x4c0 [ 2059.417979][ T9542] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2059.418004][ T9542] ? __lock_acquire+0x6df/0x2e50 [ 2059.418031][ T9542] ___sys_recvmsg+0x1db/0x5a0 [ 2059.418052][ T9542] ? lock_acquire+0x115/0x350 [ 2059.418074][ T9542] ? __pfx____sys_recvmsg+0x10/0x10 [ 2059.418099][ T9542] ? lock_acquire+0x115/0x350 [ 2059.418130][ T9542] ? __fget_files+0x3a2/0x420 [ 2059.418164][ T9542] do_recvmmsg+0x38b/0x7f0 [ 2059.418192][ T9542] ? __pfx_do_recvmmsg+0x10/0x10 [ 2059.418225][ T9542] ? get_old_timespec32+0xba/0x140 [ 2059.418247][ T9542] ? __pfx_get_old_timespec32+0x10/0x10 [ 2059.418278][ T9542] __sys_recvmmsg+0x12f/0x290 [ 2059.418301][ T9542] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2059.418322][ T9542] ? ksys_write+0x242/0x270 [ 2059.418352][ T9542] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2059.418380][ T9542] __do_fast_syscall_32+0x27a/0x6a0 [ 2059.418409][ T9542] ? do_fast_syscall_32+0x33/0x70 [ 2059.418435][ T9542] ? asm_int80_emulation+0x1a/0x20 [ 2059.418453][ T9542] ? do_int80_emulation+0x299/0x500 [ 2059.418478][ T9542] ? trace_irq_disable+0x3b/0x140 [ 2059.418500][ T9542] do_fast_syscall_32+0x33/0x70 [ 2059.418527][ T9542] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2059.418550][ T9542] RIP: 0023:0xf7ff80ec [ 2059.418568][ T9542] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2059.418585][ T9542] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2059.418605][ T9542] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 2059.418619][ T9542] RDX: 00000000000003b4 RSI: 0000000002040000 RDI: 0000000080003700 [ 2059.418631][ T9542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2059.418642][ T9542] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2059.418654][ T9542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2059.418681][ T9542] [ 2059.463437][ T5685] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2059.668086][T27304] usb 6-1: USB disconnect, device number 79 [ 2059.684157][ T5685] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2059.698105][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.706258][ T5685] usb 1-1: Product: syz [ 2059.706280][ T5685] usb 1-1: Manufacturer: syz [ 2059.706294][ T5685] usb 1-1: SerialNumber: syz [ 2059.723974][ T5685] usb 1-1: config 0 descriptor?? [ 2059.731867][ T5685] hub 1-1:0.0: bad descriptor, ignoring hub [ 2059.737868][ T5685] hub 1-1:0.0: probe with driver hub failed with error -5 [ 2059.869364][ T9540] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 2059.869391][ T9540] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2059.886893][ T9540] vhci_hcd vhci_hcd.0: Device attached [ 2059.910282][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11186'. [ 2059.932669][ T5685] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2059.934334][ T9555] vhci_hcd: connection closed [ 2059.934887][ T4488] vhci_hcd vhci_hcd.2: stop threads [ 2059.934911][ T4488] vhci_hcd vhci_hcd.2: release socket [ 2059.934930][ T4488] vhci_hcd vhci_hcd.2: disconnect device [ 2059.966101][ T5685] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2059.976171][ T5685] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2059.985086][ T5685] usb 1-1: media controller created [ 2060.004534][ T5685] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2060.097998][ T5685] DVB: Unable to find symbol dib7000p_attach() [ 2060.104895][ T5685] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2060.134518][ T9538] dib0700: tx buffer length is larger than 4. Not supported. [ 2060.164982][ T9563] netlink: 296 bytes leftover after parsing attributes in process `syz.5.11192'. [ 2060.165026][ T9563] netlink: 296 bytes leftover after parsing attributes in process `syz.5.11192'. [ 2060.309638][ T5685] rc_core: IR keymap rc-dib0700-rc5 not found [ 2060.316116][ T5685] Registered IR keymap rc-empty [ 2060.321649][ T5685] dvb-usb: could not initialize remote control. [ 2060.328625][ T5685] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2060.346153][ T5685] usb 1-1: USB disconnect, device number 13 [ 2060.383411][ T5685] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2060.861032][T27303] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 2060.948029][ T9576] syz.2.11196 (9576): drop_caches: 2 [ 2060.954208][ T5685] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2061.021588][T27303] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 2061.027979][T27303] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 2061.028005][T27303] usb 6-1: Product: syz [ 2061.028018][T27303] usb 6-1: Manufacturer: syz [ 2061.028031][T27303] usb 6-1: SerialNumber: syz [ 2061.034841][T27303] usb 6-1: config 0 descriptor?? [ 2061.129473][ T5685] usb 4-1: Using ep0 maxpacket: 32 [ 2061.135532][ T5685] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2061.150737][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.158881][ T5685] usb 4-1: Product: syz [ 2061.158902][ T5685] usb 4-1: Manufacturer: syz [ 2061.158917][ T5685] usb 4-1: SerialNumber: syz [ 2061.181168][ T5685] usb 4-1: config 0 descriptor?? [ 2061.192128][ T5685] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2061.200032][ T5685] dvb-usb: bulk message failed: -22 (4/0) [ 2061.206364][ T5685] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2061.217843][ T5685] dvb-usb: bulk message failed: -22 (5/0) [ 2061.217863][ T5685] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2061.240856][ T5685] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2061.251112][ T5685] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2061.259695][ T5685] usb 4-1: media controller created [ 2061.293128][ T5685] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2061.305353][T27303] peak_usb 6-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 2061.335267][ T5685] usb 4-1: selecting invalid altsetting 3 [ 2061.341219][ T5685] ttusb2: set interface to alts=3 failed [ 2061.391970][ T5685] DVB: Unable to find symbol tda10086_attach() [ 2061.398519][ T5685] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2061.402707][ T9572] dvb-usb: bulk message failed: -22 (7/0) [ 2061.402727][ T9572] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 2061.402792][ T9572] ttusb2: i2c transfer failed. [ 2061.426418][T27285] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2061.440522][ T5685] dvb-usb: bulk message failed: -22 (4/0) [ 2061.446362][ T5685] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2061.456861][ T5685] dvb-usb: bulk message failed: -22 (5/0) [ 2061.456880][ T5685] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2061.456940][ T5685] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2061.484756][ T5685] usb 4-1: USB disconnect, device number 63 [ 2061.512146][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11205'. [ 2061.541344][ T5685] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2061.630292][ T9586] kAFS: unable to lookup cell '' [ 2061.658293][T27303] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 2061.658334][T27303] peak_usb 6-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 2061.715502][T27303] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 2061.730687][T27303] usb 6-1: USB disconnect, device number 80 [ 2062.004466][ T9588] syz.2.11200 (9588): drop_caches: 2 [ 2062.661590][T27304] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2062.810667][T27304] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2062.810730][T27304] usb 6-1: too many configurations: 88, using maximum allowed: 8 [ 2062.811863][T27304] usb 6-1: config index 0 descriptor too short (expected 65133, got 72) [ 2062.812817][T27304] usb 6-1: config index 1 descriptor too short (expected 65133, got 72) [ 2062.815737][T27304] usb 6-1: config index 2 descriptor too short (expected 65133, got 72) [ 2062.816843][T27304] usb 6-1: config index 3 descriptor too short (expected 65133, got 72) [ 2062.817769][T27304] usb 6-1: config index 4 descriptor too short (expected 65133, got 72) [ 2062.822503][T27304] usb 6-1: config index 5 descriptor too short (expected 65133, got 72) [ 2062.825389][T27304] usb 6-1: config index 6 descriptor too short (expected 65133, got 72) [ 2062.826304][T27304] usb 6-1: config index 7 descriptor too short (expected 65133, got 72) [ 2062.831237][T27304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.831260][T27304] usb 6-1: Product: syz [ 2062.831274][T27304] usb 6-1: Manufacturer: syz [ 2062.831287][T27304] usb 6-1: SerialNumber: syz [ 2062.921691][T27303] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2063.011390][ T9613] netlink: 580 bytes leftover after parsing attributes in process `syz.4.11214'. [ 2063.126902][ C1] usb 6-1: ath9k_htc: invalid pkt_len (fef1) [ 2063.159535][ T9620] syz_tun: entered allmulticast mode [ 2063.173211][ T9619] syz_tun: left allmulticast mode [ 2063.330353][ T5685] usb 6-1: USB disconnect, device number 81 [ 2063.595618][ T9626] bridge0: port 3(dummy0) entered disabled state [ 2063.596086][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 2063.596884][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 2063.966198][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.966637][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.989221][T27303] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2063.989413][T27303] ath9k_htc: Failed to initialize the device [ 2064.008731][ T5685] usb 6-1: ath9k_htc: USB layer deinitialized [ 2064.045243][ T9626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2064.087697][ T9626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2064.480622][T27303] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2064.496530][ T9626] batman_adv: batadv0: Interface deactivated: gretap1 [ 2064.610418][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.610489][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.610518][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.610545][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.641665][T27303] usb 4-1: Using ep0 maxpacket: 32 [ 2064.642372][T27303] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2064.649503][T27303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.649525][T27303] usb 4-1: Product: syz [ 2064.649539][T27303] usb 4-1: Manufacturer: syz [ 2064.649552][T27303] usb 4-1: SerialNumber: syz [ 2064.691654][ T9654] syz.0.11224 (9654): drop_caches: 2 [ 2064.701103][T27303] usb 4-1: config 0 descriptor?? [ 2064.707406][T27303] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2064.707515][T27303] dvb-usb: bulk message failed: -22 (4/0) [ 2064.707531][T27303] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2064.707641][T27303] dvb-usb: bulk message failed: -22 (5/0) [ 2064.707654][T27303] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2064.758405][T27303] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2064.762711][T27303] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2064.762762][T27303] usb 4-1: media controller created [ 2064.807862][T27303] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2064.845256][T27303] usb 4-1: selecting invalid altsetting 3 [ 2064.845288][T27303] ttusb2: set interface to alts=3 failed [ 2064.935910][ T9637] dvb-usb: bulk message failed: -22 (7/0) [ 2064.935948][ T9637] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 2064.936003][ T9637] ttusb2: i2c transfer failed. [ 2064.985237][T27303] DVB: Unable to find symbol tda10086_attach() [ 2064.985275][T27303] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2064.991331][T27303] dvb-usb: bulk message failed: -22 (4/0) [ 2064.991354][T27303] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2064.991460][T27303] dvb-usb: bulk message failed: -22 (5/0) [ 2064.991472][T27303] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2064.991527][T27303] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2065.006205][T27303] usb 4-1: USB disconnect, device number 64 [ 2065.173866][T27303] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2065.613669][ T9673] FAULT_INJECTION: forcing a failure. [ 2065.613669][ T9673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2065.628890][ T9673] CPU: 0 UID: 0 PID: 9673 Comm: syz.0.11230 Tainted: G L syzkaller #0 PREEMPT(full) [ 2065.628921][ T9673] Tainted: [L]=SOFTLOCKUP [ 2065.628928][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2065.628940][ T9673] Call Trace: [ 2065.628950][ T9673] [ 2065.628959][ T9673] dump_stack_lvl+0xe8/0x150 [ 2065.628992][ T9673] should_fail_ex+0x410/0x560 [ 2065.629030][ T9673] _copy_from_user+0x2d/0xb0 [ 2065.629050][ T9673] get_compat_msghdr+0xb3/0x4c0 [ 2065.629075][ T9673] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2065.629097][ T9673] ? __lock_acquire+0x6df/0x2e50 [ 2065.629124][ T9673] ___sys_recvmsg+0x1db/0x5a0 [ 2065.629145][ T9673] ? lock_acquire+0x115/0x350 [ 2065.629166][ T9673] ? __pfx____sys_recvmsg+0x10/0x10 [ 2065.629191][ T9673] ? lock_acquire+0x115/0x350 [ 2065.629223][ T9673] ? __fget_files+0x3a2/0x420 [ 2065.629257][ T9673] do_recvmmsg+0x38b/0x7f0 [ 2065.629286][ T9673] ? __pfx_do_recvmmsg+0x10/0x10 [ 2065.629318][ T9673] ? get_old_timespec32+0xba/0x140 [ 2065.629340][ T9673] ? __pfx_get_old_timespec32+0x10/0x10 [ 2065.629371][ T9673] __sys_recvmmsg+0x12f/0x290 [ 2065.629394][ T9673] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2065.629415][ T9673] ? ksys_write+0x242/0x270 [ 2065.629446][ T9673] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2065.629474][ T9673] __do_fast_syscall_32+0x27a/0x6a0 [ 2065.629503][ T9673] ? do_fast_syscall_32+0x33/0x70 [ 2065.629529][ T9673] ? asm_int80_emulation+0x1a/0x20 [ 2065.629547][ T9673] ? do_int80_emulation+0x299/0x500 [ 2065.629572][ T9673] ? trace_irq_disable+0x3b/0x140 [ 2065.629594][ T9673] do_fast_syscall_32+0x33/0x70 [ 2065.629621][ T9673] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2065.629643][ T9673] RIP: 0023:0xf70bf0ec [ 2065.629660][ T9673] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2065.629676][ T9673] RSP: 002b:00000000f548c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2065.629697][ T9673] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 2065.629717][ T9673] RDX: 00000000000003b4 RSI: 0000000002040000 RDI: 0000000080003700 [ 2065.629729][ T9673] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2065.629741][ T9673] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2065.629750][ T9673] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2065.629778][ T9673] [ 2066.215912][ T9635] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2066.362023][ T9635] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 2066.363258][ T9635] usb 4-1: config 1 has an invalid interface number: 13 but max is 0 [ 2066.363280][ T9635] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2066.363297][ T9635] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 2066.363316][ T9635] usb 4-1: config 1 has no interface number 1 [ 2066.363373][ T9635] usb 4-1: config 1 interface 13 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2066.363397][ T9635] usb 4-1: config 1 interface 13 has no altsetting 0 [ 2066.365405][ T9635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.365426][ T9635] usb 4-1: Product: syz [ 2066.365439][ T9635] usb 4-1: Manufacturer: syz [ 2066.365452][ T9635] usb 4-1: SerialNumber: syz [ 2066.402065][ T9635] usb-storage 4-1:1.0: USB Mass Storage device detected [ 2066.412712][ T9635] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 2066.425942][ T9635] scsi host1: usb-storage 4-1:1.0 [ 2066.451329][ T9635] usb-storage 4-1:1.13: USB Mass Storage device detected [ 2066.464581][ T9635] usb-storage 4-1:1.13: Quirks match for vid 174c pid 55aa: 400000 [ 2066.512616][ T9695] input: syz0 as /devices/virtual/input/input170 [ 2066.622649][ T9635] usb 4-1: USB disconnect, device number 65 [ 2066.875240][ T30] audit: type=1326 audit(1788285446.068:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.5.11239" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x0 [ 2067.086551][ T9709] netlink: 9 bytes leftover after parsing attributes in process `syz.4.11240'. [ 2067.104173][ T9709] netlink: 'syz.4.11240': attribute type 10 has an invalid length. [ 2067.104212][ T9709] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11240'. [ 2067.104292][ T9709] dummy0: entered promiscuous mode [ 2067.104823][ T9709] bridge0: port 1(dummy0) entered blocking state [ 2067.104898][ T9709] bridge0: port 1(dummy0) entered disabled state [ 2067.105045][ T9709] dummy0: entered allmulticast mode [ 2067.158680][ T9709] bridge0: port 1(dummy0) entered blocking state [ 2067.158819][ T9709] bridge0: port 1(dummy0) entered forwarding state [ 2068.314078][ T9715] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11241'. [ 2068.314158][ T9715] netlink: 'syz.3.11241': attribute type 6 has an invalid length. [ 2068.314221][ T9715] netlink: 'syz.3.11241': attribute type 5 has an invalid length. [ 2068.314353][ T9715] netlink: 'syz.3.11241': attribute type 4 has an invalid length. [ 2069.569397][ T5685] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2069.719648][ T5685] usb 4-1: Using ep0 maxpacket: 32 [ 2069.725782][ T5685] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2069.735780][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.747047][ T5685] usb 4-1: config 0 descriptor?? [ 2069.820260][ T9743] FAULT_INJECTION: forcing a failure. [ 2069.820260][ T9743] name failslab, interval 1, probability 0, space 0, times 0 [ 2069.820319][ T9743] CPU: 1 UID: 0 PID: 9743 Comm: syz.2.11249 Tainted: G L syzkaller #0 PREEMPT(full) [ 2069.820345][ T9743] Tainted: [L]=SOFTLOCKUP [ 2069.820352][ T9743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2069.820363][ T9743] Call Trace: [ 2069.820371][ T9743] [ 2069.820382][ T9743] dump_stack_lvl+0xe8/0x150 [ 2069.820414][ T9743] should_fail_ex+0x410/0x560 [ 2069.820446][ T9743] ? __alloc_skb+0x1db/0x7a0 [ 2069.820474][ T9743] should_failslab+0xa8/0x100 [ 2069.820497][ T9743] ? __alloc_skb+0x1db/0x7a0 [ 2069.820521][ T9743] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 2069.820548][ T9743] ? __alloc_skb+0x18d/0x7a0 [ 2069.820571][ T9743] ? __alloc_skb+0x1db/0x7a0 [ 2069.820601][ T9743] __alloc_skb+0x1db/0x7a0 [ 2069.820631][ T9743] netlink_sendmsg+0x5d4/0xb40 [ 2069.820671][ T9743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2069.820700][ T9743] ? apparmor_socket_sendmsg+0x98/0x360 [ 2069.820730][ T9743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2069.820751][ T9743] sock_sendmsg_nosec+0x13a/0x180 [ 2069.820777][ T9743] ____sys_sendmsg+0x54e/0x850 [ 2069.820802][ T9743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2069.820837][ T9743] ___sys_sendmsg+0x2a5/0x360 [ 2069.820856][ T9743] ? __lock_acquire+0x6df/0x2e50 [ 2069.820879][ T9743] ? __pfx____sys_sendmsg+0x10/0x10 [ 2069.820898][ T9743] ? get_pid_task+0x20/0x1f0 [ 2069.820917][ T9743] ? get_pid_task+0x20/0x1f0 [ 2069.820932][ T9743] ? get_pid_task+0x20/0x1f0 [ 2069.820978][ T9743] ? __fget_files+0x2a/0x420 [ 2069.821000][ T9743] ? __fget_files+0x3a2/0x420 [ 2069.821033][ T9743] __sys_sendmsg+0x177/0x240 [ 2069.821055][ T9743] ? __pfx___sys_sendmsg+0x10/0x10 [ 2069.821092][ T9743] __do_fast_syscall_32+0x27a/0x6a0 [ 2069.821123][ T9743] ? do_fast_syscall_32+0x33/0x70 [ 2069.821149][ T9743] ? asm_int80_emulation+0x1a/0x20 [ 2069.821166][ T9743] ? do_int80_emulation+0x299/0x500 [ 2069.821191][ T9743] ? trace_irq_disable+0x3b/0x140 [ 2069.821214][ T9743] do_fast_syscall_32+0x33/0x70 [ 2069.821241][ T9743] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2069.821264][ T9743] RIP: 0023:0xf6fcf0ec [ 2069.821281][ T9743] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2069.821298][ T9743] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2069.821319][ T9743] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 2069.821332][ T9743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2069.821343][ T9743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2069.821355][ T9743] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2069.821367][ T9743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2069.821394][ T9743] [ 2069.998437][ T9739] bridge0: left promiscuous mode [ 2070.070796][ T5685] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2070.078365][ T9750] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 2070.082292][ T5685] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2070.083183][ T5685] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2070.083229][ T5685] usb 4-1: media controller created [ 2070.094584][ T5685] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2070.136811][ T9751] netlink: 76 bytes leftover after parsing attributes in process `syz.5.11251'. [ 2070.136858][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11251'. [ 2070.143793][ T9751] fuse: Unknown parameter 'default_permission' [ 2070.238167][ T5685] az6027: usb out operation failed. (-71) [ 2070.238518][ T5685] az6027: usb out operation failed. (-71) [ 2070.238531][ T5685] stb0899_attach: Driver disabled by Kconfig [ 2070.238541][ T5685] az6027: no front-end attached [ 2070.238541][ T5685] [ 2070.238868][ T5685] az6027: usb out operation failed. (-71) [ 2070.238881][ T5685] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2070.254188][ T5685] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input171 [ 2070.264385][ T5685] dvb-usb: schedule remote query interval to 400 msecs. [ 2070.264407][ T5685] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2070.276613][ T5685] usb 4-1: USB disconnect, device number 66 [ 2070.422033][ T5685] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2070.502028][ T9757] syz.2.11252 (9757): drop_caches: 2 [ 2071.109345][ T5864] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2071.161538][ T9772] FAULT_INJECTION: forcing a failure. [ 2071.161538][ T9772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2071.161581][ T9772] CPU: 0 UID: 0 PID: 9772 Comm: syz.2.11258 Tainted: G L syzkaller #0 PREEMPT(full) [ 2071.161605][ T9772] Tainted: [L]=SOFTLOCKUP [ 2071.161612][ T9772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2071.161622][ T9772] Call Trace: [ 2071.161630][ T9772] [ 2071.161638][ T9772] dump_stack_lvl+0xe8/0x150 [ 2071.161668][ T9772] should_fail_ex+0x410/0x560 [ 2071.161699][ T9772] _copy_from_user+0x2d/0xb0 [ 2071.161722][ T9772] move_addr_to_kernel+0x7e/0x160 [ 2071.161749][ T9772] get_compat_msghdr+0x3db/0x4c0 [ 2071.161774][ T9772] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2071.161807][ T9772] ___sys_sendmsg+0x201/0x360 [ 2071.161826][ T9772] ? __lock_acquire+0x6df/0x2e50 [ 2071.161850][ T9772] ? __pfx____sys_sendmsg+0x10/0x10 [ 2071.161873][ T9772] ? kstrtoull+0x137/0x1d0 [ 2071.161918][ T9772] ? __fget_files+0x2a/0x420 [ 2071.161943][ T9772] ? __fget_files+0x3a2/0x420 [ 2071.161974][ T9772] __sys_sendmmsg+0x2de/0x4d0 [ 2071.161998][ T9772] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2071.162041][ T9772] ? fput+0xa0/0xd0 [ 2071.162062][ T9772] ? ksys_write+0x242/0x270 [ 2071.162093][ T9772] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2071.162126][ T9772] __do_fast_syscall_32+0x27a/0x6a0 [ 2071.162156][ T9772] ? do_fast_syscall_32+0x33/0x70 [ 2071.162184][ T9772] ? asm_int80_emulation+0x1a/0x20 [ 2071.162201][ T9772] ? do_int80_emulation+0x299/0x500 [ 2071.162226][ T9772] ? trace_irq_disable+0x3b/0x140 [ 2071.162249][ T9772] do_fast_syscall_32+0x33/0x70 [ 2071.162276][ T9772] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2071.162297][ T9772] RIP: 0023:0xf6fcf0ec [ 2071.162313][ T9772] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2071.162330][ T9772] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2071.162349][ T9772] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001c40 [ 2071.162362][ T9772] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2071.162373][ T9772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2071.162385][ T9772] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2071.162395][ T9772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2071.162421][ T9772] [ 2071.277558][ T5864] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2071.277607][ T5864] usb 4-1: New USB device found, idVendor=045e, idProduct=0c5e, bcdDevice=15.a9 [ 2071.280422][ T5864] usb 4-1: config 8 has an invalid interface number: 38 but max is 0 [ 2071.280446][ T5864] usb 4-1: config 8 has no interface number 0 [ 2071.280486][ T5864] usb 4-1: config 8 interface 38 has no altsetting 0 [ 2071.293071][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.293104][ T5864] usb 4-1: Product: syz [ 2071.293118][ T5864] usb 4-1: Manufacturer: syz [ 2071.293132][ T5864] usb 4-1: SerialNumber: syz [ 2071.310800][ T5864] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2071.517187][ T9765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2071.525252][ T9765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2071.564115][ T9774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2071.564592][ T9774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2071.577733][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2071.578390][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2071.605380][ T5864] hub 4-1:8.38: bad descriptor, ignoring hub [ 2071.605420][ T5864] hub 4-1:8.38: probe with driver hub failed with error -5 [ 2071.641905][ T5864] r8152-cfgselector 4-1: USB disconnect, device number 67 [ 2071.941996][ T9755] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11254'. [ 2071.942045][ T9755] netlink: 'syz.0.11254': attribute type 6 has an invalid length. [ 2071.942081][ T9755] netlink: 'syz.0.11254': attribute type 5 has an invalid length. [ 2071.942099][ T9755] netlink: 'syz.0.11254': attribute type 4 has an invalid length. [ 2072.097076][ T9781] syzkaller0: entered promiscuous mode [ 2072.103826][ T9781] syzkaller0: entered allmulticast mode [ 2072.118470][ T9781] tipc: Started in network mode [ 2072.125483][ T9781] tipc: Node identity f64baab9d04d, cluster identity 4711 [ 2072.149325][ T9781] tipc: Enabled bearer , priority 0 [ 2072.183706][ T9781] tipc: Resetting bearer [ 2072.228169][ T9780] tipc: Resetting bearer [ 2072.428217][ T9780] tipc: Disabling bearer [ 2072.577566][ T9790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11263'. [ 2072.589352][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11263'. [ 2072.608991][T26927] IPVS: starting estimator thread 0... [ 2072.699357][ T9792] IPVS: using max 54 ests per chain, 129600 per kthread [ 2073.023119][ T5705] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2073.110489][ T9805] syz.0.11269 (9805): drop_caches: 2 [ 2073.179941][ T5705] usb 3-1: Using ep0 maxpacket: 32 [ 2073.180778][ T5705] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2073.181720][ T5705] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 2073.181743][ T5705] usb 3-1: config 4 has no interface number 0 [ 2073.181780][ T5705] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2073.181803][ T5705] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2073.181838][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.195310][ T5705] hub 3-1:4.128: USB hub found [ 2073.401606][ T5705] hub 3-1:4.128: 6 ports detected [ 2073.401667][ T5705] hub 3-1:4.128: Using single TT (err -22) [ 2073.402072][ T5705] hub 3-1:4.128: insufficient power available to use all downstream ports [ 2073.671597][ T5705] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 2073.693361][ T5705] usb 3-1: USB disconnect, device number 81 [ 2073.890626][T27303] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 2074.049927][T27303] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 2074.063097][T27303] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 2074.063137][T27303] usb 1-1: Product: syz [ 2074.063178][T27303] usb 1-1: Manufacturer: syz [ 2074.063192][T27303] usb 1-1: SerialNumber: syz [ 2074.074537][T27303] usb 1-1: config 0 descriptor?? [ 2074.159189][ T5705] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2074.311385][ T5705] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2074.328912][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.328964][ T5705] usb 6-1: Product: syz [ 2074.328999][ T5705] usb 6-1: Manufacturer: syz [ 2074.329016][ T5705] usb 6-1: SerialNumber: syz [ 2074.337241][ T5705] usb 6-1: config 0 descriptor?? [ 2074.362979][ T5705] hub 6-1:0.0: bad descriptor, ignoring hub [ 2074.363021][ T5705] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2074.439877][T27303] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 2074.569383][ T5705] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2074.576248][ T5705] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2074.578360][ T5705] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2074.578408][ T5705] usb 6-1: media controller created [ 2074.604142][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2074.657358][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11271'. [ 2074.706481][ T5705] DVB: Unable to find symbol dib7000p_attach() [ 2074.706521][ T5705] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2074.771199][ T9814] dib0700: tx buffer length is larger than 4. Not supported. [ 2074.809644][ T5705] rc_core: IR keymap rc-dib0700-rc5 not found [ 2074.811166][ T5705] Registered IR keymap rc-empty [ 2074.811442][ T5705] dvb-usb: could not initialize remote control. [ 2074.811452][ T5705] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2074.814781][ T5705] usb 6-1: USB disconnect, device number 82 [ 2074.860367][ T5705] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2075.856275][ T9840] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11279'. [ 2075.858368][ T9840] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11279'. [ 2076.178865][ T9844] syz.3.11281 (9844): drop_caches: 2 [ 2076.790153][T27303] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 2076.790198][T27303] peak_usb 1-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 2076.871990][T27303] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 2076.889933][T27303] usb 1-1: USB disconnect, device number 14 [ 2077.161035][ T5705] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 2077.310094][ T5705] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 2077.323790][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.323840][ T5705] usb 4-1: Product: syz [ 2077.324069][ T5705] usb 4-1: Manufacturer: syz [ 2077.324084][ T5705] usb 4-1: SerialNumber: syz [ 2077.327531][ T5705] usb 4-1: config 0 descriptor?? [ 2077.519190][ T5685] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2077.584928][ T5705] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 2077.584986][ T5705] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 2077.591575][ T5705] usb 4-1: USB disconnect, device number 68 [ 2077.669165][ T5685] usb 3-1: Using ep0 maxpacket: 16 [ 2077.670034][ T5685] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 2077.686566][ T5685] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 2077.686661][ T5685] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2077.686691][ T5685] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2077.690582][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.693988][ T5685] usb 3-1: config 0 descriptor?? [ 2077.697882][ T9868] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2077.955857][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11290'. [ 2077.966575][ T9870] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11290'. [ 2077.976183][ T9870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11290'. [ 2078.152530][ T5685] samsung 0003:0419:0001.0041: unknown main item tag 0x0 [ 2078.152579][ T5685] samsung 0003:0419:0001.0041: unknown main item tag 0x0 [ 2078.152842][ T5685] samsung 0003:0419:0001.0041: unknown main item tag 0x0 [ 2078.152869][ T5685] samsung 0003:0419:0001.0041: unknown main item tag 0x0 [ 2078.152894][ T5685] samsung 0003:0419:0001.0041: unknown main item tag 0x0 [ 2078.152919][ T5685] samsung 0003:0419:0001.0041: unknown main item tag 0x0 [ 2078.152953][ T5685] samsung 0003:0419:0001.0041: unknown main item tag 0x0 [ 2078.152978][ T5685] samsung 0003:0419:0001.0041: unknown main item tag 0x0 [ 2078.153002][ T5685] samsung 0003:0419:0001.0041: unknown main item tag 0x0 [ 2078.153027][ T5685] samsung 0003:0419:0001.0041: unknown main item tag 0x0 [ 2078.176469][ T5685] input: HID 0419:0001 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0419:0001.0041/input/input173 [ 2078.184442][ T5685] samsung 0003:0419:0001.0041: input,hidraw0: USB HID v7f.fd Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 2078.800343][T27303] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2078.922031][ T9635] usb 3-1: USB disconnect, device number 82 [ 2078.963046][T27303] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2078.971799][T27303] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2078.983916][T27303] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2078.994945][T27303] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2078.995036][T27303] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2079.018703][T27303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.026997][T27303] usb 4-1: Product: syz [ 2079.031362][T27303] usb 4-1: Manufacturer: syz [ 2079.036054][T27303] usb 4-1: SerialNumber: syz [ 2079.079180][ T5705] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2079.229306][ T5705] usb 6-1: Using ep0 maxpacket: 8 [ 2079.230970][ T5705] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2079.232115][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.238521][ T5705] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2079.238561][ T5705] pvrusb2: ********** [ 2079.238571][ T5705] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2079.238582][ T5705] pvrusb2: Important functionality might not be entirely working. [ 2079.238591][ T5705] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2079.238601][ T5705] pvrusb2: ********** [ 2079.405097][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11297'. [ 2079.437033][T27303] usb 4-1: USB disconnect, device number 69 [ 2079.440509][ T2346] pvrusb2: Invalid write control endpoint [ 2079.516627][ T2346] pvrusb2: Invalid write control endpoint [ 2079.516672][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2079.517081][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2079.517092][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2079.517152][ T2346] pvrusb2: Device being rendered inoperable [ 2079.517225][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2079.517279][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2079.524243][ T2346] pvrusb2: Attached sub-driver cx25840 [ 2079.524314][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2079.524326][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2080.229364][T27303] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2080.389314][T27303] usb 4-1: Using ep0 maxpacket: 32 [ 2080.395426][T27303] usb 4-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 2080.411726][T27303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.411769][T27303] usb 4-1: Product: syz [ 2080.411804][T27303] usb 4-1: Manufacturer: syz [ 2080.411822][T27303] usb 4-1: SerialNumber: syz [ 2080.675124][T27303] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2080.754982][T27303] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 2080.769723][T27303] usb 4-1: USB disconnect, device number 70 [ 2081.189456][T27303] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2081.336520][ T9920] FAULT_INJECTION: forcing a failure. [ 2081.336520][ T9920] name failslab, interval 1, probability 0, space 0, times 0 [ 2081.349506][T27303] usb 1-1: Using ep0 maxpacket: 32 [ 2081.355449][T27303] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2081.366105][ T9920] CPU: 1 UID: 0 PID: 9920 Comm: syz.3.11307 Tainted: G L syzkaller #0 PREEMPT(full) [ 2081.366137][ T9920] Tainted: [L]=SOFTLOCKUP [ 2081.366145][ T9920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2081.366156][ T9920] Call Trace: [ 2081.366165][ T9920] [ 2081.366173][ T9920] dump_stack_lvl+0xe8/0x150 [ 2081.366205][ T9920] should_fail_ex+0x410/0x560 [ 2081.366238][ T9920] should_failslab+0xa8/0x100 [ 2081.366263][ T9920] __kmalloc_cache_noprof+0xa3/0x600 [ 2081.366293][ T9920] ? percpu_ref_init+0xc5/0x350 [ 2081.366317][ T9920] ? percpu_ref_init+0xc5/0x350 [ 2081.366346][ T9920] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 2081.366374][ T9920] percpu_ref_init+0xc5/0x350 [ 2081.366403][ T9920] io_ring_ctx_alloc+0x318/0xb80 [ 2081.366431][ T9920] ? io_prepare_config+0x8c8/0xc70 [ 2081.366466][ T9920] io_uring_create+0x50/0x990 [ 2081.366496][ T9920] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 2081.366522][ T9920] ? __fget_files+0x2a/0x420 [ 2081.366547][ T9920] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 2081.366586][ T9920] ? ksys_write+0x242/0x270 [ 2081.366622][ T9920] __do_fast_syscall_32+0x27a/0x6a0 [ 2081.366652][ T9920] ? do_fast_syscall_32+0x33/0x70 [ 2081.366678][ T9920] ? asm_int80_emulation+0x1a/0x20 [ 2081.366695][ T9920] ? do_int80_emulation+0x299/0x500 [ 2081.366720][ T9920] ? trace_irq_disable+0x3b/0x140 [ 2081.366743][ T9920] do_fast_syscall_32+0x33/0x70 [ 2081.366769][ T9920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2081.366790][ T9920] RIP: 0023:0xf7ff80ec [ 2081.366808][ T9920] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2081.366824][ T9920] RSP: 002b:00000000f54b643c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2081.366844][ T9920] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 2081.366858][ T9920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2081.366869][ T9920] RBP: 00000000f54b64fc R08: 0000000000000000 R09: 0000000000000000 [ 2081.366881][ T9920] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2081.366893][ T9920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2081.366920][ T9920] [ 2081.523127][T27303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.523154][T27303] usb 1-1: Product: syz [ 2081.523168][T27303] usb 1-1: Manufacturer: syz [ 2081.523182][T27303] usb 1-1: SerialNumber: syz [ 2081.630895][T27303] usb 1-1: config 0 descriptor?? [ 2081.642027][T27303] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2081.650176][T27303] dvb-usb: bulk message failed: -22 (4/0) [ 2081.650196][T27303] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2081.650316][T27303] dvb-usb: bulk message failed: -22 (5/0) [ 2081.650329][T27303] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2081.686430][T27303] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2081.696548][T27303] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2081.704802][T27303] usb 1-1: media controller created [ 2081.723200][T27303] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2081.733043][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11308'. [ 2081.756471][T27303] usb 1-1: selecting invalid altsetting 3 [ 2081.762434][T27303] ttusb2: set interface to alts=3 failed [ 2081.806064][T27303] DVB: Unable to find symbol tda10086_attach() [ 2081.812768][T27303] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2081.822635][T27303] dvb-usb: bulk message failed: -22 (4/0) [ 2081.831386][T27303] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2081.842192][T27303] dvb-usb: bulk message failed: -22 (5/0) [ 2081.842213][T27303] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2081.842279][T27303] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2081.879159][ T9635] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2081.897944][ T5864] usb 6-1: USB disconnect, device number 83 [ 2081.971174][ T5705] usb 1-1: USB disconnect, device number 15 [ 2082.031218][ T9635] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2082.046836][ T9635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.046879][ T9635] usb 4-1: Product: syz [ 2082.046914][ T9635] usb 4-1: Manufacturer: syz [ 2082.046931][ T9635] usb 4-1: SerialNumber: syz [ 2082.083989][ T9635] usb 4-1: config 0 descriptor?? [ 2082.095044][ T9635] hub 4-1:0.0: bad descriptor, ignoring hub [ 2082.101350][ T9635] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2082.128636][ T5705] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2082.297030][ T9635] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2082.308817][ T9635] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2082.319701][ T9635] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2082.329910][ T9635] usb 4-1: media controller created [ 2082.351955][ T9635] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2082.413272][ T9635] DVB: Unable to find symbol dib7000p_attach() [ 2082.420372][ T9635] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2082.459284][ T5864] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 2082.519216][ T9635] rc_core: IR keymap rc-dib0700-rc5 not found [ 2082.525395][ T9635] Registered IR keymap rc-empty [ 2082.525699][ T9635] dvb-usb: could not initialize remote control. [ 2082.525709][ T9635] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2082.552537][ T9635] usb 4-1: USB disconnect, device number 71 [ 2082.588636][ T9635] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2082.609729][ T5864] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2082.610942][ T5864] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 2082.610964][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2082.610982][ T5864] usb 6-1: config 0 has no interface number 0 [ 2082.612893][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.612915][ T5864] usb 6-1: Product: syz [ 2082.612928][ T5864] usb 6-1: Manufacturer: syz [ 2082.612941][ T5864] usb 6-1: SerialNumber: syz [ 2082.615770][ T5864] usb 6-1: config 0 descriptor?? [ 2082.702279][ T9947] syz.2.11315 (9947): drop_caches: 2 [ 2083.399379][ T9635] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2083.549528][ T9635] usb 4-1: Using ep0 maxpacket: 8 [ 2083.555397][ T9635] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2083.569433][ T9635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2083.569476][ T9635] usb 4-1: Product: П [ 2083.569511][ T9635] usb 4-1: Manufacturer: ✶ﹾ쮞Ḧ퍜ꤤ톽鉈擼婺鳲䗴䶧ꂇ镭궙㗃๾䎪稻쉋撪⠉㐥撪鑝안饈漐䃣㮹錦❎뇦ᧅ䎥憫䩉닻ࢣ럼澚骖䇿哏씂懑迱쐽姐⨙ꆓ뷿믔ೖꞽ貇壂㙅扵䙀겮䪞岪䀶㑍녁㜀釾혛ೡ鐟㍥⑈㡂箾溳諤﫮⡓퍖櫲횙똏ꬉ [ 2083.569543][ T9635] usb 4-1: SerialNumber: 瞬⏫哘﮴嶇蓉褂汷讑䒥ꕟ瀜ۦ䱃숻곳㎺둮庥繊招澯꼗㺐乭㪎ḛⲪⴋ纛鯻⹜晵뚡䌺檐㓴㥯숺釀멐溼掓漏速鵀胳㏡㞟ᒯ맼㋺힋ꢭ༹碾亼七佛撞磉ᰬ뵔蜠棧Ắ߰ [ 2083.890908][ T9635] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2084.087462][ T9635] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2084.096281][ T9635] usb 4-1: found format II with max.bitrate = 6, frame size=4095 [ 2084.096325][ T9635] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2084.141135][ T9967] FAULT_INJECTION: forcing a failure. [ 2084.141135][ T9967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2084.141198][ T9967] CPU: 0 UID: 0 PID: 9967 Comm: syz.0.11321 Tainted: G L syzkaller #0 PREEMPT(full) [ 2084.141223][ T9967] Tainted: [L]=SOFTLOCKUP [ 2084.141229][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2084.141238][ T9967] Call Trace: [ 2084.141245][ T9967] [ 2084.141252][ T9967] dump_stack_lvl+0xe8/0x150 [ 2084.141281][ T9967] should_fail_ex+0x410/0x560 [ 2084.141316][ T9967] _copy_from_user+0x2d/0xb0 [ 2084.141337][ T9967] move_addr_to_kernel+0x7e/0x160 [ 2084.141363][ T9967] get_compat_msghdr+0x3db/0x4c0 [ 2084.141386][ T9967] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2084.141424][ T9967] ___sys_sendmsg+0x201/0x360 [ 2084.141442][ T9967] ? __lock_acquire+0x6df/0x2e50 [ 2084.141465][ T9967] ? __pfx____sys_sendmsg+0x10/0x10 [ 2084.141487][ T9967] ? kstrtoull+0x137/0x1d0 [ 2084.141534][ T9967] ? __fget_files+0x2a/0x420 [ 2084.141556][ T9967] ? __fget_files+0x3a2/0x420 [ 2084.141587][ T9967] __sys_sendmmsg+0x2de/0x4d0 [ 2084.141612][ T9967] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2084.141655][ T9967] ? fput+0xa0/0xd0 [ 2084.141683][ T9967] ? ksys_write+0x242/0x270 [ 2084.141714][ T9967] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2084.141739][ T9967] __do_fast_syscall_32+0x27a/0x6a0 [ 2084.141767][ T9967] ? do_fast_syscall_32+0x33/0x70 [ 2084.141792][ T9967] ? asm_int80_emulation+0x1a/0x20 [ 2084.141809][ T9967] ? do_int80_emulation+0x299/0x500 [ 2084.141834][ T9967] ? trace_irq_disable+0x3b/0x140 [ 2084.141855][ T9967] do_fast_syscall_32+0x33/0x70 [ 2084.141881][ T9967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2084.141902][ T9967] RIP: 0023:0xf70bf0ec [ 2084.141919][ T9967] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2084.141935][ T9967] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2084.141955][ T9967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001c40 [ 2084.141968][ T9967] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2084.141978][ T9967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2084.141988][ T9967] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2084.142000][ T9967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2084.142026][ T9967] [ 2084.339075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 2084.417032][ T9635] usb 4-1: USB disconnect, device number 72 [ 2084.514083][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11322'. [ 2085.037821][ T5864] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 2085.038031][ T5864] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82 [ 2085.041746][ T5864] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 2085.041826][ T5864] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 2085.041901][ T5864] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 2085.054334][ T5864] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2085.066251][ T5864] usb 6-1: USB disconnect, device number 84 [ 2085.078955][ T5864] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2085.079745][ T5864] keyspan 6-1:0.133: device disconnected [ 2085.219401][ T5705] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2085.271163][ T9982] can: request_module (can-proto-0) failed. [ 2085.278615][ T9987] FAULT_INJECTION: forcing a failure. [ 2085.278615][ T9987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2085.292087][ T9987] CPU: 1 UID: 0 PID: 9987 Comm: syz.5.11328 Tainted: G L syzkaller #0 PREEMPT(full) [ 2085.292126][ T9987] Tainted: [L]=SOFTLOCKUP [ 2085.292134][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2085.292146][ T9987] Call Trace: [ 2085.292154][ T9987] [ 2085.292163][ T9987] dump_stack_lvl+0xe8/0x150 [ 2085.292195][ T9987] should_fail_ex+0x410/0x560 [ 2085.292228][ T9987] _copy_from_user+0x2d/0xb0 [ 2085.292249][ T9987] snd_seq_oss_write+0x154/0x950 [ 2085.292403][ T9987] ? kstrtouint+0x6e/0xe0 [ 2085.292429][ T9987] ? lock_acquire+0x115/0x350 [ 2085.292448][ T9987] ? get_pid_task+0x20/0x1f0 [ 2085.292471][ T9987] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 2085.292494][ T9987] ? __lock_acquire+0x6df/0x2e50 [ 2085.292514][ T9987] ? common_file_perm+0x20e/0x2b0 [ 2085.292539][ T9987] ? security_file_permission+0x75/0x260 [ 2085.292568][ T9987] odev_write+0x5a/0x80 [ 2085.292588][ T9987] ? __pfx_odev_write+0x10/0x10 [ 2085.292606][ T9987] vfs_write+0x296/0xba0 [ 2085.292639][ T9987] ? __pfx_vfs_write+0x10/0x10 [ 2085.292665][ T9987] ? __fget_files+0x2a/0x420 [ 2085.292692][ T9987] ? __fget_files+0x2a/0x420 [ 2085.292713][ T9987] ? __fget_files+0x3a2/0x420 [ 2085.292733][ T9987] ? __fget_files+0x2a/0x420 [ 2085.292764][ T9987] ksys_write+0x150/0x270 [ 2085.292792][ T9987] ? __pfx_ksys_write+0x10/0x10 [ 2085.292826][ T9987] __do_fast_syscall_32+0x27a/0x6a0 [ 2085.292855][ T9987] ? do_fast_syscall_32+0x33/0x70 [ 2085.292879][ T9987] ? asm_int80_emulation+0x1a/0x20 [ 2085.292897][ T9987] ? do_int80_emulation+0x299/0x500 [ 2085.292922][ T9987] ? trace_irq_disable+0x3b/0x140 [ 2085.292944][ T9987] do_fast_syscall_32+0x33/0x70 [ 2085.292975][ T9987] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2085.292996][ T9987] RIP: 0023:0xf704f0ec [ 2085.293013][ T9987] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2085.293030][ T9987] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2085.293050][ T9987] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000100 [ 2085.293065][ T9987] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2085.293076][ T9987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2085.293087][ T9987] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2085.293098][ T9987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2085.293134][ T9987] [ 2085.369439][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 2085.370269][ T5705] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2085.375902][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.375926][ T5705] usb 4-1: Product: syz [ 2085.375940][ T5705] usb 4-1: Manufacturer: syz [ 2085.375953][ T5705] usb 4-1: SerialNumber: syz [ 2085.386959][ T5705] usb 4-1: config 0 descriptor?? [ 2085.402341][ T5705] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2085.402433][ T5705] dvb-usb: bulk message failed: -22 (4/0) [ 2085.402447][ T5705] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2085.402558][ T5705] dvb-usb: bulk message failed: -22 (5/0) [ 2085.402571][ T5705] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2085.412491][ T5705] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2085.414676][ T5705] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2085.414918][ T5705] usb 4-1: media controller created [ 2085.465080][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2085.546122][ T5705] usb 4-1: selecting invalid altsetting 3 [ 2085.546143][ T5705] ttusb2: set interface to alts=3 failed [ 2085.605447][ T9980] dvb-usb: bulk message failed: -22 (7/0) [ 2085.605467][ T9980] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 2085.605504][ T9980] ttusb2: i2c transfer failed. [ 2085.702238][ T5705] DVB: Unable to find symbol tda10086_attach() [ 2085.702260][ T5705] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2085.704061][ T5705] dvb-usb: bulk message failed: -22 (4/0) [ 2085.704079][ T5705] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2085.704189][ T5705] dvb-usb: bulk message failed: -22 (5/0) [ 2085.704202][ T5705] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2085.704262][ T5705] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2085.710118][ T5705] usb 4-1: USB disconnect, device number 73 [ 2085.808073][ T5705] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2085.932091][ T9994] netlink: 9 bytes leftover after parsing attributes in process `syz.0.11331'. [ 2085.945114][ T9994] netlink: 'syz.0.11331': attribute type 10 has an invalid length. [ 2085.953499][ T9994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11331'. [ 2086.049144][T27303] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2086.209571][T27303] usb 6-1: Using ep0 maxpacket: 32 [ 2086.215863][T27303] usb 6-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 2086.226645][T27303] usb 6-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 2086.226727][T27303] usb 6-1: too many endpoints for config 1 interface 2 altsetting 0: 39, using maximum allowed: 30 [ 2086.226779][T27303] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 39 [ 2086.268866][T27303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.268909][T27303] usb 6-1: Product: syz [ 2086.268946][T27303] usb 6-1: Manufacturer: syz [ 2086.268963][T27303] usb 6-1: SerialNumber: syz [ 2086.331027][T10000] syz.3.11333 (10000): drop_caches: 2 [ 2086.399205][ T4495] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2086.517234][ T9992] overlayfs: missing 'lowerdir' [ 2086.568655][ T4495] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 2086.585056][ T4495] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2086.595566][ T4495] usb 3-1: config 0 has no interfaces? [ 2086.601538][ T4495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.616893][ T4495] usb 3-1: config 0 descriptor?? [ 2086.632736][T10003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11334'. [ 2086.852700][ T9997] netlink: 148 bytes leftover after parsing attributes in process `syz.2.11332'. [ 2086.865222][ T4495] usb 3-1: USB disconnect, device number 83 [ 2087.080006][ T5864] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2087.156063][T27303] usb 6-1: USB disconnect, device number 85 [ 2087.240226][ T5864] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2087.245405][ T5864] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 2087.245433][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2087.245451][ T5864] usb 4-1: config 0 has no interface number 0 [ 2087.245488][ T5864] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2087.245508][ T5864] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2087.247387][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.247409][ T5864] usb 4-1: Product: syz [ 2087.247422][ T5864] usb 4-1: Manufacturer: syz [ 2087.247436][ T5864] usb 4-1: SerialNumber: syz [ 2087.252195][ T5864] usb 4-1: config 0 descriptor?? [ 2087.488126][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11335'. [ 2087.542161][ T5864] usb 4-1: USB disconnect, device number 74 [ 2087.839187][ T4495] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2088.012225][ T4495] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2088.012291][ T4495] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2088.031317][ T4495] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2088.031357][ T4495] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2088.031429][ T4495] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2088.067193][ T4495] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.067235][ T4495] usb 6-1: Product: syz [ 2088.067263][ T4495] usb 6-1: Manufacturer: syz [ 2088.067282][ T4495] usb 6-1: SerialNumber: syz [ 2088.385123][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11347'. [ 2088.389210][ T5864] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2088.437426][ T4495] usb 6-1: USB disconnect, device number 86 [ 2088.539935][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 2088.546079][ T5864] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2088.563174][ T5864] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2088.563221][ T5864] usb 4-1: config 0 has no interface number 0 [ 2088.582090][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.582120][ T5864] usb 4-1: Product: syz [ 2088.582154][ T5864] usb 4-1: Manufacturer: syz [ 2088.582168][ T5864] usb 4-1: SerialNumber: syz [ 2088.592001][ T5864] usb 4-1: config 0 descriptor?? [ 2088.603407][ T5864] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2088.603433][ T5864] usb 4-1: selecting invalid altsetting 1 [ 2088.603448][ T5864] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2088.616321][ T5864] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2088.622184][ T5864] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2088.622236][ T5864] usb 4-1: media controller created [ 2088.661213][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2089.065521][T10045] bond1: Unable to set down delay as MII monitoring is disabled [ 2089.084557][T10045] bond1 (unregistering): Released all slaves [ 2089.305476][T10050] FAULT_INJECTION: forcing a failure. [ 2089.305476][T10050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2089.329218][ T4495] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2089.341985][T10050] CPU: 1 UID: 0 PID: 10050 Comm: syz.0.11351 Tainted: G L syzkaller #0 PREEMPT(full) [ 2089.342017][T10050] Tainted: [L]=SOFTLOCKUP [ 2089.342025][T10050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2089.342036][T10050] Call Trace: [ 2089.342044][T10050] [ 2089.342052][T10050] dump_stack_lvl+0xe8/0x150 [ 2089.342086][T10050] should_fail_ex+0x410/0x560 [ 2089.342120][T10050] _copy_to_user+0x31/0xb0 [ 2089.342142][T10050] simple_read_from_buffer+0xe1/0x170 [ 2089.342172][T10050] proc_fail_nth_read+0x1bb/0x230 [ 2089.342198][T10050] ? common_file_perm+0x20e/0x2b0 [ 2089.342220][T10050] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2089.342250][T10050] ? rw_verify_area+0x24a/0x4c0 [ 2089.342277][T10050] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2089.342303][T10050] vfs_read+0x213/0xa80 [ 2089.342332][T10050] ? __pfx___mutex_lock+0x10/0x10 [ 2089.342361][T10050] ? __pfx_vfs_read+0x10/0x10 [ 2089.342388][T10050] ? __fget_files+0x2a/0x420 [ 2089.342416][T10050] ? __fget_files+0x3a2/0x420 [ 2089.342438][T10050] ? __fget_files+0x2a/0x420 [ 2089.342470][T10050] ksys_read+0x150/0x270 [ 2089.342498][T10050] ? __pfx_ksys_read+0x10/0x10 [ 2089.342528][T10050] ? asm_int80_emulation+0x1a/0x20 [ 2089.342553][T10050] do_int80_emulation+0x198/0x500 [ 2089.342579][T10050] ? trace_irq_disable+0x3b/0x140 [ 2089.342597][T10050] ? asm_int80_emulation+0x1a/0x20 [ 2089.342614][T10050] ? clear_bhb_loop+0x70/0xc0 [ 2089.342632][T10050] ? clear_bhb_loop+0x70/0xc0 [ 2089.342655][T10050] asm_int80_emulation+0x1a/0x20 [ 2089.342673][T10050] RIP: 0023:0xf71f75ab [ 2089.342691][T10050] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2089.342716][T10050] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2089.342737][T10050] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f54ad5d0 [ 2089.342750][T10050] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2089.342761][T10050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2089.342772][T10050] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2089.342783][T10050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2089.342812][T10050] [ 2089.382944][T10040] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 2089.407246][T10040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2089.409774][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11348'. [ 2089.489445][ T4495] usb 6-1: Using ep0 maxpacket: 32 [ 2089.500030][ T4495] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2089.542127][ T4495] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2089.542154][ T4495] usb 6-1: config 0 has no interface number 0 [ 2089.605158][ T4495] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.605187][ T4495] usb 6-1: Product: syz [ 2089.605201][ T4495] usb 6-1: Manufacturer: syz [ 2089.605215][ T4495] usb 6-1: SerialNumber: syz [ 2089.613312][ T4495] usb 6-1: config 0 descriptor?? [ 2089.670083][ T4495] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2089.679274][ T4495] usb 6-1: selecting invalid altsetting 1 [ 2089.685154][ T4495] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2089.695505][ T4495] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2089.706310][ T4495] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2089.714927][ T4495] usb 6-1: media controller created [ 2089.734139][ T4495] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2089.750798][ T5864] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2089.750880][ T5864] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2089.816917][ T5864] usb 4-1: USB disconnect, device number 75 [ 2089.847691][T10045] netlink: 100 bytes leftover after parsing attributes in process `syz.5.11350'. [ 2089.847731][T10045] openvswitch: netlink: Flow key attr not present in new flow. [ 2089.859165][ T5705] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2089.867025][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11350'. [ 2089.991626][ T5705] usb 3-1: device descriptor read/64, error -71 [ 2090.229193][ T5705] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2090.327813][T10061] syz.0.11356 (10061): drop_caches: 2 [ 2090.361821][ T5705] usb 3-1: device descriptor read/64, error -71 [ 2090.394017][ T4495] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2090.394089][ T4495] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2090.410571][ T4495] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2090.473406][ T5705] usb usb3-port1: attempt power cycle [ 2090.481077][ T4495] usb 6-1: USB disconnect, device number 87 [ 2090.639181][ T5864] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2090.791341][ T5864] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2090.795559][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.795585][ T5864] usb 4-1: Product: syz [ 2090.795599][ T5864] usb 4-1: Manufacturer: syz [ 2090.795613][ T5864] usb 4-1: SerialNumber: syz [ 2090.811441][ T5705] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2090.827999][ T5864] usb 4-1: config 0 descriptor?? [ 2090.834070][ T5864] hub 4-1:0.0: bad descriptor, ignoring hub [ 2090.834102][ T5864] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2090.839602][ T5705] usb 3-1: device descriptor read/8, error -71 [ 2090.941485][ T30] audit: type=1326 audit(1788285470.138:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.0.11361" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2090.941627][ T30] audit: type=1326 audit(1788285470.138:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.0.11361" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2090.942531][ T30] audit: type=1326 audit(1788285470.138:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.0.11361" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2090.943607][ T30] audit: type=1326 audit(1788285470.138:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.0.11361" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2090.943862][ T30] audit: type=1326 audit(1788285470.138:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.0.11361" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2090.947117][ T30] audit: type=1326 audit(1788285470.138:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.0.11361" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2090.947162][ T30] audit: type=1326 audit(1788285470.138:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.0.11361" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2090.948653][ T30] audit: type=1326 audit(1788285470.138:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.0.11361" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2090.948941][ T30] audit: type=1326 audit(1788285470.138:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.0.11361" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2090.953584][ T30] audit: type=1326 audit(1788285470.148:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.0.11361" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 2090.992936][ T4495] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2091.080530][ T5705] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2091.144415][ T5864] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 2091.188895][ T5705] usb 3-1: device descriptor read/8, error -71 [ 2091.290433][ T5705] usb usb3-port1: unable to enumerate USB device [ 2091.309158][ T4495] usb 6-1: Using ep0 maxpacket: 8 [ 2091.315112][ T4495] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2091.328901][ T4495] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2091.337247][ T4495] usb 6-1: Product: П [ 2091.337267][ T4495] usb 6-1: Manufacturer: ✶ﹾ쮞Ḧ퍜ꤤ톽鉈擼婺鳲䗴䶧ꂇ镭궙㗃๾䎪稻쉋撪⠉㐥撪鑝안饈漐䃣㮹錦❎뇦ᧅ䎥憫䩉닻ࢣ럼澚骖䇿哏씂懑迱쐽姐⨙ꆓ뷿믔ೖꞽ貇壂㙅扵䙀겮䪞岪䀶㑍녁㜀釾혛ೡ鐟㍥⑈㡂箾溳諤﫮⡓퍖櫲횙똏ꬉ [ 2091.337294][ T4495] usb 6-1: SerialNumber: 瞬⏫哘﮴嶇蓉褂汷讑䒥ꕟ瀜ۦ䱃숻곳㎺둮庥繊招澯꼗㺐乭㪎ḛⲪⴋ纛鯻⹜晵뚡䌺檐㓴㥯숺釀멐溼掓漏速鵀胳㏡㞟ᒯ맼㋺힋ꢭ༹碾亼七佛撞磉ᰬ뵔蜠棧Ắ߰ [ 2091.453450][ T5864] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2091.456332][ T5864] dib0700: firmware download failed at 7 with -22 [ 2091.492779][ T5864] usb 4-1: USB disconnect, device number 76 [ 2091.645257][ T4495] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2091.825259][ T4495] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2091.825308][ T4495] usb 6-1: found format II with max.bitrate = 6, frame size=4095 [ 2091.825336][ T4495] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2091.921259][ T4495] usb 6-1: USB disconnect, device number 88 [ 2092.026738][T10075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11362'. [ 2092.166563][T10082] syz.4.11364 (10082): drop_caches: 2 [ 2092.400727][T10088] FAULT_INJECTION: forcing a failure. [ 2092.400727][T10088] name failslab, interval 1, probability 0, space 0, times 0 [ 2092.400788][T10088] CPU: 0 UID: 0 PID: 10088 Comm: syz.0.11376 Tainted: G L syzkaller #0 PREEMPT(full) [ 2092.400812][T10088] Tainted: [L]=SOFTLOCKUP [ 2092.400818][T10088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2092.400826][T10088] Call Trace: [ 2092.400833][T10088] [ 2092.400841][T10088] dump_stack_lvl+0xe8/0x150 [ 2092.400871][T10088] should_fail_ex+0x410/0x560 [ 2092.400902][T10088] ? __alloc_skb+0x1db/0x7a0 [ 2092.400929][T10088] should_failslab+0xa8/0x100 [ 2092.400952][T10088] ? __alloc_skb+0x1db/0x7a0 [ 2092.400975][T10088] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 2092.401000][T10088] ? __alloc_skb+0x18d/0x7a0 [ 2092.401026][T10088] ? __alloc_skb+0x1db/0x7a0 [ 2092.401056][T10088] __alloc_skb+0x1db/0x7a0 [ 2092.401085][T10088] netlink_ack+0x136/0xb30 [ 2092.401105][T10088] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2092.401134][T10088] ? __lock_acquire+0x6df/0x2e50 [ 2092.401164][T10088] netlink_rcv_skb+0x2a4/0x4a0 [ 2092.401186][T10088] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2092.401213][T10088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2092.401245][T10088] ? netlink_deliver_tap+0x2e/0x1b0 [ 2092.401269][T10088] ? netlink_deliver_tap+0x2e/0x1b0 [ 2092.401295][T10088] netlink_unicast+0x7bd/0x940 [ 2092.401324][T10088] netlink_sendmsg+0x813/0xb40 [ 2092.401359][T10088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2092.401388][T10088] ? apparmor_socket_sendmsg+0x98/0x360 [ 2092.401417][T10088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2092.401437][T10088] sock_sendmsg_nosec+0x13a/0x180 [ 2092.401464][T10088] ____sys_sendmsg+0x54e/0x850 [ 2092.401488][T10088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2092.401520][T10088] ___sys_sendmsg+0x2a5/0x360 [ 2092.401538][T10088] ? __lock_acquire+0x6df/0x2e50 [ 2092.401560][T10088] ? __pfx____sys_sendmsg+0x10/0x10 [ 2092.401579][T10088] ? get_pid_task+0x20/0x1f0 [ 2092.401596][T10088] ? get_pid_task+0x20/0x1f0 [ 2092.401611][T10088] ? get_pid_task+0x20/0x1f0 [ 2092.401653][T10088] ? __fget_files+0x2a/0x420 [ 2092.401676][T10088] ? __fget_files+0x3a2/0x420 [ 2092.401708][T10088] __sys_sendmsg+0x177/0x240 [ 2092.401728][T10088] ? __pfx___sys_sendmsg+0x10/0x10 [ 2092.401763][T10088] __do_fast_syscall_32+0x27a/0x6a0 [ 2092.401791][T10088] ? do_fast_syscall_32+0x33/0x70 [ 2092.401816][T10088] ? asm_int80_emulation+0x1a/0x20 [ 2092.401833][T10088] ? do_int80_emulation+0x299/0x500 [ 2092.401856][T10088] ? trace_irq_disable+0x3b/0x140 [ 2092.401878][T10088] do_fast_syscall_32+0x33/0x70 [ 2092.401905][T10088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2092.401926][T10088] RIP: 0023:0xf70bf0ec [ 2092.401943][T10088] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2092.401959][T10088] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2092.401979][T10088] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 2092.401992][T10088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2092.402003][T10088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2092.402014][T10088] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2092.402025][T10088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2092.402051][T10088] [ 2093.077287][T10106] syz_tun: entered allmulticast mode [ 2093.081925][T10102] syz_tun: left allmulticast mode [ 2093.359237][T20673] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 2093.511387][T20673] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2093.512328][T20673] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 2093.512350][T20673] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2093.512367][T20673] usb 3-1: config 0 has no interface number 0 [ 2093.516603][T20673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.516626][T20673] usb 3-1: Product: syz [ 2093.516640][T20673] usb 3-1: Manufacturer: syz [ 2093.516653][T20673] usb 3-1: SerialNumber: syz [ 2093.523263][T20673] usb 3-1: config 0 descriptor?? [ 2093.580623][ T4495] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2093.749547][ T4495] usb 1-1: Using ep0 maxpacket: 32 [ 2093.755760][ T4495] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2093.768918][ T4495] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 2093.777591][ T4495] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2093.777618][ T4495] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2093.777638][ T4495] usb 1-1: config 1 has no interface number 0 [ 2093.777681][ T4495] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2093.777705][ T4495] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2093.777746][ T4495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.841867][ T4495] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 2094.059233][ T4495] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 2094.640069][T10133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11375'. [ 2095.125299][ T9635] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 2096.046222][T20673] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 2096.054866][T20673] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 82 [ 2096.067914][T20673] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 2096.077863][T20673] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 2096.087113][T20673] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 2096.098798][T20673] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2096.111944][T20673] usb 3-1: USB disconnect, device number 88 [ 2096.123729][T20673] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2096.134125][T20673] keyspan 3-1:0.133: device disconnected [ 2096.250612][T10136] syz.2.11381 (10136): drop_caches: 2 [ 2096.311639][T20673] usb 1-1: USB disconnect, device number 16 [ 2096.320923][T20673] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 2096.393539][T10144] input: syz1 as /devices/virtual/input/input175 [ 2096.683688][T10152] FAULT_INJECTION: forcing a failure. [ 2096.683688][T10152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2096.683745][T10152] CPU: 1 UID: 0 PID: 10152 Comm: syz.3.11385 Tainted: G L syzkaller #0 PREEMPT(full) [ 2096.683770][T10152] Tainted: [L]=SOFTLOCKUP [ 2096.683776][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2096.683786][T10152] Call Trace: [ 2096.683792][T10152] [ 2096.683799][T10152] dump_stack_lvl+0xe8/0x150 [ 2096.683831][T10152] should_fail_ex+0x410/0x560 [ 2096.683863][T10152] _copy_from_user+0x2d/0xb0 [ 2096.683885][T10152] get_compat_msghdr+0xb3/0x4c0 [ 2096.683911][T10152] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2096.683935][T10152] ? kfree+0x4d/0x650 [ 2096.683964][T10152] ___sys_recvmsg+0x1db/0x5a0 [ 2096.683990][T10152] ? __pfx____sys_recvmsg+0x10/0x10 [ 2096.684014][T10152] ? lock_acquire+0x115/0x350 [ 2096.684058][T10152] do_recvmmsg+0x38b/0x7f0 [ 2096.684086][T10152] ? __pfx_do_recvmmsg+0x10/0x10 [ 2096.684118][T10152] ? __mutex_unlock_slowpath+0x731/0x900 [ 2096.684156][T10152] __sys_recvmmsg+0x1a5/0x290 [ 2096.684198][T10152] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2096.684220][T10152] ? ksys_write+0x242/0x270 [ 2096.684250][T10152] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2096.684277][T10152] __do_fast_syscall_32+0x27a/0x6a0 [ 2096.684303][T10152] ? do_fast_syscall_32+0x33/0x70 [ 2096.684328][T10152] ? asm_int80_emulation+0x1a/0x20 [ 2096.684346][T10152] ? do_int80_emulation+0x299/0x500 [ 2096.684370][T10152] ? trace_irq_disable+0x3b/0x140 [ 2096.684391][T10152] do_fast_syscall_32+0x33/0x70 [ 2096.684418][T10152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2096.684446][T10152] RIP: 0023:0xf7ff80ec [ 2096.684463][T10152] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2096.684479][T10152] RSP: 002b:00000000f547450c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2096.684499][T10152] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800019c0 [ 2096.684512][T10152] RDX: 0000000000000002 RSI: 0000000000010100 RDI: 0000000000000000 [ 2096.684524][T10152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2096.684535][T10152] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2096.684546][T10152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2096.684572][T10152] [ 2097.112227][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 2097.112292][ T30] audit: type=1326 audit(1788285476.308:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.11390" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2097.148513][ T30] audit: type=1326 audit(1788285476.308:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.11390" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2097.148586][ T30] audit: type=1326 audit(1788285476.308:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.11390" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2097.148642][ T30] audit: type=1326 audit(1788285476.308:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.11390" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2097.148688][ T30] audit: type=1326 audit(1788285476.308:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.11390" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2097.148731][ T30] audit: type=1326 audit(1788285476.308:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.11390" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2097.148774][ T30] audit: type=1326 audit(1788285476.308:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.11390" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2097.148816][ T30] audit: type=1326 audit(1788285476.308:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.11390" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2097.148860][ T30] audit: type=1326 audit(1788285476.308:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.11390" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2097.148901][ T30] audit: type=1326 audit(1788285476.308:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10161 comm="syz.5.11390" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2097.177458][T10166] syz_tun: entered allmulticast mode [ 2097.284957][T10166] syz_tun: left allmulticast mode [ 2097.639200][ T5705] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2097.790568][ T5705] usb 6-1: Using ep0 maxpacket: 32 [ 2097.797402][ T5705] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2097.823544][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.823588][ T5705] usb 6-1: Product: syz [ 2097.823626][ T5705] usb 6-1: Manufacturer: syz [ 2097.823638][ T5705] usb 6-1: SerialNumber: syz [ 2097.826335][ T5705] usb 6-1: config 0 descriptor?? [ 2097.852888][ T5705] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2097.852980][ T5705] dvb-usb: bulk message failed: -22 (4/0) [ 2097.852994][ T5705] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2097.853108][ T5705] dvb-usb: bulk message failed: -22 (5/0) [ 2097.853120][ T5705] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2097.860136][ T5705] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2097.860934][ T5705] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2097.860981][ T5705] usb 6-1: media controller created [ 2097.895389][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2097.925045][ T5705] usb 6-1: selecting invalid altsetting 3 [ 2097.925066][ T5705] ttusb2: set interface to alts=3 failed [ 2097.988086][ T5705] DVB: Unable to find symbol tda10086_attach() [ 2097.988110][ T5705] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2097.990237][ T5705] dvb-usb: bulk message failed: -22 (4/0) [ 2097.990255][ T5705] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2097.990371][ T5705] dvb-usb: bulk message failed: -22 (5/0) [ 2097.990384][ T5705] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2097.990444][ T5705] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2098.049255][ T9635] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2098.126002][T10170] dvb-usb: bulk message failed: -22 (7/0) [ 2098.132104][T10170] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 2098.142348][T10170] ttusb2: i2c transfer failed. [ 2098.147403][ T5705] usb 6-1: USB disconnect, device number 89 [ 2098.199846][ T9635] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2098.212098][ T9635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.214660][ T5705] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2098.229961][ T9635] usb 4-1: Product: syz [ 2098.229979][ T9635] usb 4-1: Manufacturer: syz [ 2098.230003][ T9635] usb 4-1: SerialNumber: syz [ 2098.250008][ T9635] usb 4-1: config 0 descriptor?? [ 2098.257328][ T9635] hub 4-1:0.0: bad descriptor, ignoring hub [ 2098.263384][ T9635] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2098.329234][T10185] openvswitch: netlink: nsh attribute has 8 unknown bytes. [ 2098.466664][ T9635] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 2098.481384][ T9635] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2098.491917][ T9635] dib0700: firmware download failed at 7 with -22 [ 2098.530597][ T9635] usb 4-1: USB disconnect, device number 77 [ 2098.715483][T10193] qrtr: Invalid version 0 [ 2098.765045][T10195] FAULT_INJECTION: forcing a failure. [ 2098.765045][T10195] name failslab, interval 1, probability 0, space 0, times 0 [ 2098.765089][T10195] CPU: 0 UID: 0 PID: 10195 Comm: syz.5.11399 Tainted: G L syzkaller #0 PREEMPT(full) [ 2098.765113][T10195] Tainted: [L]=SOFTLOCKUP [ 2098.765120][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2098.765130][T10195] Call Trace: [ 2098.765138][T10195] [ 2098.765145][T10195] dump_stack_lvl+0xe8/0x150 [ 2098.765174][T10195] should_fail_ex+0x410/0x560 [ 2098.765208][T10195] should_failslab+0xa8/0x100 [ 2098.765232][T10195] __kmalloc_noprof+0xfe/0x720 [ 2098.765260][T10195] ? tomoyo_encode+0x2ad/0x570 [ 2098.765279][T10195] ? tomoyo_encode+0x2ad/0x570 [ 2098.765303][T10195] tomoyo_encode+0x2ad/0x570 [ 2098.765336][T10195] tomoyo_realpath_from_path+0x5fa/0x640 [ 2098.765366][T10195] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2098.765392][T10195] tomoyo_path_number_perm+0x246/0x5f0 [ 2098.765422][T10195] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2098.765448][T10195] ? __lock_acquire+0x6df/0x2e50 [ 2098.765480][T10195] ? hook_file_ioctl_compat+0x1f2/0x600 [ 2098.765517][T10195] ? __fget_files+0x2a/0x420 [ 2098.765544][T10195] ? __fget_files+0x3a2/0x420 [ 2098.765566][T10195] ? __fget_files+0x2a/0x420 [ 2098.765592][T10195] security_file_ioctl_compat+0xc3/0x2a0 [ 2098.765620][T10195] __ia32_compat_sys_ioctl+0x139/0x950 [ 2098.765643][T10195] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2098.765663][T10195] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2098.765691][T10195] ? __fget_files+0x3a2/0x420 [ 2098.765719][T10195] ? fput+0xa0/0xd0 [ 2098.765740][T10195] ? ksys_write+0x242/0x270 [ 2098.765776][T10195] __do_fast_syscall_32+0x27a/0x6a0 [ 2098.765803][T10195] ? do_fast_syscall_32+0x33/0x70 [ 2098.765829][T10195] ? asm_int80_emulation+0x1a/0x20 [ 2098.765846][T10195] ? do_int80_emulation+0x299/0x500 [ 2098.765871][T10195] ? trace_irq_disable+0x3b/0x140 [ 2098.765893][T10195] do_fast_syscall_32+0x33/0x70 [ 2098.765921][T10195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2098.765943][T10195] RIP: 0023:0xf704f0ec [ 2098.765960][T10195] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2098.765976][T10195] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2098.765995][T10195] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000040047435 [ 2098.766008][T10195] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 2098.766019][T10195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2098.766030][T10195] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2098.766041][T10195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2098.766068][T10195] [ 2098.768479][T10195] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2098.868183][T10193] syzkaller1: entered promiscuous mode [ 2098.868207][T10193] syzkaller1: entered allmulticast mode [ 2098.873224][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.873276][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.942745][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11400'. [ 2099.530404][ T5705] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2099.689910][ T5705] usb 6-1: Using ep0 maxpacket: 16 [ 2099.692505][ T5705] usb 6-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 2099.696756][ T5705] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2099.696834][ T5705] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2099.696853][ T5705] usb 6-1: config 1 has no interface number 1 [ 2099.696952][ T5705] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2099.697092][ T5705] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2099.707358][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.707439][ T5705] usb 6-1: Product: syz [ 2099.707453][ T5705] usb 6-1: Manufacturer: syz [ 2099.707520][ T5705] usb 6-1: SerialNumber: syz [ 2100.209362][ T5705] usb 6-1: 0:1 : does not exist [ 2100.209798][ T5705] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 2100.211101][ T5705] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2100.215087][ T5705] usb 6-1: 2:1 : invalid channels 0 [ 2100.388530][ T5705] usb 6-1: USB disconnect, device number 90 [ 2101.250533][T10231] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11413'. [ 2101.389153][T27303] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2101.559890][T27303] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2101.573925][T27303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.582258][T27303] usb 3-1: Product: syz [ 2101.586530][T27303] usb 3-1: Manufacturer: syz [ 2101.589188][ T5864] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2101.600187][T27303] usb 3-1: SerialNumber: syz [ 2101.609349][T27303] usb 3-1: config 0 descriptor?? [ 2101.617964][T27303] hub 3-1:0.0: bad descriptor, ignoring hub [ 2101.618020][T27303] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2101.738091][T10239] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11416'. [ 2101.741131][ T5864] usb 6-1: Using ep0 maxpacket: 32 [ 2101.753346][ T5864] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2101.774111][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.774162][ T5864] usb 6-1: Product: syz [ 2101.774192][ T5864] usb 6-1: Manufacturer: syz [ 2101.774205][ T5864] usb 6-1: SerialNumber: syz [ 2101.781837][ T5864] usb 6-1: config 0 descriptor?? [ 2101.792006][ T5864] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2101.792107][ T5864] dvb-usb: bulk message failed: -22 (4/0) [ 2101.792121][ T5864] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2101.792233][ T5864] dvb-usb: bulk message failed: -22 (5/0) [ 2101.792245][ T5864] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2101.800114][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2101.804574][ T5864] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2101.804626][ T5864] usb 6-1: media controller created [ 2101.848933][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2101.892496][T27303] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2101.895171][ T5864] usb 6-1: selecting invalid altsetting 3 [ 2101.895189][ T5864] ttusb2: set interface to alts=3 failed [ 2101.915012][T27303] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2101.925153][T27303] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2101.933754][T27303] usb 3-1: media controller created [ 2101.953765][T27303] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2101.961629][T10242] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2101.987856][T10235] dvb-usb: bulk message failed: -22 (7/0) [ 2101.994402][T10235] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 2101.994450][T10235] ttusb2: i2c transfer failed. [ 2102.006243][T10242] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 2102.006268][T10242] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2102.006339][T10242] vhci_hcd vhci_hcd.0: Device attached [ 2102.033950][ T5864] DVB: Unable to find symbol tda10086_attach() [ 2102.033971][ T5864] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2102.034876][ T5864] dvb-usb: bulk message failed: -22 (4/0) [ 2102.034893][ T5864] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2102.035011][ T5864] dvb-usb: bulk message failed: -22 (5/0) [ 2102.035023][ T5864] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2102.035084][ T5864] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2102.054015][ T5864] usb 6-1: USB disconnect, device number 91 [ 2102.129011][T27303] DVB: Unable to find symbol dib7000p_attach() [ 2102.129125][T27303] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2102.172341][ T5864] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2102.247496][T10237] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 2102.269157][T27303] rc_core: IR keymap rc-dib0700-rc5 not found [ 2102.269625][ T5705] usb 39-1: new low-speed USB device number 12 using vhci_hcd [ 2102.281077][T20673] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 2102.290874][T27303] Registered IR keymap rc-empty [ 2102.296051][T27303] dvb-usb: could not initialize remote control. [ 2102.302634][T27303] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2102.314988][T27303] usb 3-1: USB disconnect, device number 89 [ 2102.345877][T27303] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2102.435695][T20673] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2102.436496][T20673] usb 4-1: config 0 has no interfaces? [ 2102.436528][T20673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.442599][T20673] usb 4-1: config 0 descriptor?? [ 2102.487568][T10246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2102.491863][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11415'. [ 2102.642479][T10249] FAULT_INJECTION: forcing a failure. [ 2102.642479][T10249] name failslab, interval 1, probability 0, space 0, times 0 [ 2102.642559][T10249] CPU: 0 UID: 0 PID: 10249 Comm: syz.5.11418 Tainted: G L syzkaller #0 PREEMPT(full) [ 2102.642582][T10249] Tainted: [L]=SOFTLOCKUP [ 2102.642588][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2102.642597][T10249] Call Trace: [ 2102.642603][T10249] [ 2102.642611][T10249] dump_stack_lvl+0xe8/0x150 [ 2102.642644][T10249] should_fail_ex+0x410/0x560 [ 2102.642678][T10249] ? __alloc_skb+0x1db/0x7a0 [ 2102.642704][T10249] should_failslab+0xa8/0x100 [ 2102.642727][T10249] ? __alloc_skb+0x1db/0x7a0 [ 2102.642749][T10249] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 2102.642771][T10249] ? __alloc_skb+0x18d/0x7a0 [ 2102.642795][T10249] ? __alloc_skb+0x1db/0x7a0 [ 2102.642826][T10249] __alloc_skb+0x1db/0x7a0 [ 2102.642854][T10249] netlink_sendmsg+0x5d4/0xb40 [ 2102.642885][T10249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2102.642914][T10249] ? apparmor_socket_sendmsg+0x98/0x360 [ 2102.642943][T10249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2102.642964][T10249] sock_sendmsg_nosec+0x13a/0x180 [ 2102.642991][T10249] ____sys_sendmsg+0x54e/0x850 [ 2102.643023][T10249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2102.643056][T10249] ___sys_sendmsg+0x2a5/0x360 [ 2102.643074][T10249] ? __lock_acquire+0x6df/0x2e50 [ 2102.643096][T10249] ? __pfx____sys_sendmsg+0x10/0x10 [ 2102.643115][T10249] ? get_pid_task+0x20/0x1f0 [ 2102.643133][T10249] ? get_pid_task+0x20/0x1f0 [ 2102.643148][T10249] ? get_pid_task+0x20/0x1f0 [ 2102.643191][T10249] ? __fget_files+0x2a/0x420 [ 2102.643214][T10249] ? __fget_files+0x3a2/0x420 [ 2102.643245][T10249] __sys_sendmsg+0x177/0x240 [ 2102.643265][T10249] ? __pfx___sys_sendmsg+0x10/0x10 [ 2102.643301][T10249] __do_fast_syscall_32+0x27a/0x6a0 [ 2102.643331][T10249] ? do_fast_syscall_32+0x33/0x70 [ 2102.643355][T10249] ? asm_int80_emulation+0x1a/0x20 [ 2102.643372][T10249] ? do_int80_emulation+0x299/0x500 [ 2102.643397][T10249] ? trace_irq_disable+0x3b/0x140 [ 2102.643418][T10249] do_fast_syscall_32+0x33/0x70 [ 2102.643444][T10249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2102.643465][T10249] RIP: 0023:0xf704f0ec [ 2102.643483][T10249] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2102.643499][T10249] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2102.643519][T10249] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 2102.643532][T10249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2102.643543][T10249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2102.643554][T10249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2102.643565][T10249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2102.643606][T10249] [ 2102.664719][T10244] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 11 [ 2102.666433][T18353] vhci_hcd vhci_hcd.3: stop threads [ 2102.666458][T18353] vhci_hcd vhci_hcd.3: release socket [ 2102.666559][T18353] vhci_hcd vhci_hcd.3: disconnect device [ 2102.667911][T20673] usb 4-1: string descriptor 0 read error: -71 [ 2102.674013][T20673] usb 4-1: USB disconnect, device number 78 [ 2102.760471][ T5864] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2102.769216][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 2102.769232][ T30] audit: type=1326 audit(1788285481.938:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.11419" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2102.769275][ T30] audit: type=1326 audit(1788285481.938:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.11419" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2102.769312][ T30] audit: type=1326 audit(1788285481.958:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.11419" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2102.769354][ T30] audit: type=1326 audit(1788285481.958:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.11419" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2102.769392][ T30] audit: type=1326 audit(1788285481.958:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.11419" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2102.769429][ T30] audit: type=1326 audit(1788285481.958:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.11419" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2102.769466][ T30] audit: type=1326 audit(1788285481.958:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.11419" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2102.769501][ T30] audit: type=1326 audit(1788285481.958:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.11419" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2102.769545][ T30] audit: type=1326 audit(1788285481.958:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.11419" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2102.769581][ T30] audit: type=1326 audit(1788285481.958:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.5.11419" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2102.910755][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 2102.917684][ T5864] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2102.925507][ T5864] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 2102.925584][ T5864] usb 1-1: config 0 has no interface number 0 [ 2102.925676][ T5864] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 2102.925752][ T5864] usb 1-1: config 0 interface 200 has no altsetting 0 [ 2103.080845][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.081100][ T5864] usb 1-1: Product: syz [ 2103.081114][ T5864] usb 1-1: Manufacturer: syz [ 2103.081127][ T5864] usb 1-1: SerialNumber: syz [ 2103.237605][ T5864] usb 1-1: config 0 descriptor?? [ 2103.661788][T10259] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2104.639289][T27303] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2104.799156][T27303] usb 3-1: Using ep0 maxpacket: 32 [ 2104.804951][T27303] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2104.814942][ T5864] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input177 [ 2104.822944][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.823155][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.823354][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.823580][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.823804][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.824027][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.824251][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.824493][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.824715][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.824939][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.825166][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.825364][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.825557][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.825747][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.825962][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.826162][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.826358][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.826556][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.826737][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.826909][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.827112][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.827317][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.827518][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.827728][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.827939][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.828169][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.828379][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.828593][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.828792][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.828992][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.829432][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.829629][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.829854][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.830048][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.830237][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.830428][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.830619][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.830810][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.831013][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.831209][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.831406][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.831603][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.831795][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.831994][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.832200][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.832420][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.832631][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.832829][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.833025][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.833219][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.833412][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.833606][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.833803][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.834000][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.834193][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.834387][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.834589][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.834784][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.834981][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.835184][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.835391][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 2104.835603][ C0] usb 1-1: hanwang_irq - urb shutting down with status: -2 [ 2104.851271][ T5864] usb 1-1: USB disconnect, device number 17 [ 2105.044595][T27303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.044623][T27303] usb 3-1: Product: syz [ 2105.044637][T27303] usb 3-1: Manufacturer: syz [ 2105.044654][T27303] usb 3-1: SerialNumber: syz [ 2105.219008][T27303] usb 3-1: config 0 descriptor?? [ 2105.326644][T27303] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2105.334407][T27303] dvb-usb: bulk message failed: -22 (4/0) [ 2105.334427][T27303] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2105.334539][T27303] dvb-usb: bulk message failed: -22 (5/0) [ 2105.334553][T27303] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2105.375285][T27303] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2105.385279][T27303] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2105.393496][T27303] usb 3-1: media controller created [ 2105.410424][T27303] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2105.439528][T27303] usb 3-1: selecting invalid altsetting 3 [ 2105.445376][T27303] ttusb2: set interface to alts=3 failed [ 2105.485627][T27303] DVB: Unable to find symbol tda10086_attach() [ 2105.485659][T27303] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2105.500747][T27303] dvb-usb: bulk message failed: -22 (4/0) [ 2105.506575][T27303] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2105.506727][T27303] dvb-usb: bulk message failed: -22 (5/0) [ 2105.506744][T27303] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2105.506806][T27303] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2105.611945][ T5861] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2105.643072][T10282] dvb-usb: bulk message failed: -22 (7/0) [ 2105.643107][T10282] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 2105.643159][T10282] ttusb2: i2c transfer failed. [ 2105.644756][ T5864] usb 3-1: USB disconnect, device number 90 [ 2105.721468][ T5864] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2105.769915][ T5861] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2105.771616][ T5861] usb 6-1: config 0 has no interfaces? [ 2105.773589][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.773611][ T5861] usb 6-1: Product: syz [ 2105.773625][ T5861] usb 6-1: Manufacturer: syz [ 2105.773639][ T5861] usb 6-1: SerialNumber: syz [ 2105.777569][ T5861] usb 6-1: config 0 descriptor?? [ 2106.110491][T10289] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.162242][T10289] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 2106.162760][T10289] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2106.186237][ T4495] usb 6-1: USB disconnect, device number 92 [ 2106.558319][T10307] ipvlan1: entered promiscuous mode [ 2106.578887][T10306] ipvlan1: left promiscuous mode [ 2107.080398][ T5864] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2107.240699][ T5864] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2107.245138][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.245164][ T5864] usb 6-1: Product: syz [ 2107.245178][ T5864] usb 6-1: Manufacturer: syz [ 2107.245191][ T5864] usb 6-1: SerialNumber: syz [ 2107.247931][ T5864] usb 6-1: config 0 descriptor?? [ 2107.249931][ T5864] hub 6-1:0.0: bad descriptor, ignoring hub [ 2107.249954][ T5864] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2107.292177][T10327] hsr_slave_0: left promiscuous mode [ 2107.303959][T10327] hsr_slave_1: left promiscuous mode [ 2107.313192][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11446'. [ 2107.359124][ T4495] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2107.368533][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11446'. [ 2107.421522][ T5705] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2107.443116][T10324] bond0: entered promiscuous mode [ 2107.443165][T10324] bond_slave_0: entered promiscuous mode [ 2107.456558][ T5864] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2107.459536][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2107.460308][ T5864] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2107.460363][ T5864] usb 6-1: media controller created [ 2107.461910][T10324] bond_slave_1: entered promiscuous mode [ 2107.472686][T10324] gretap0: entered promiscuous mode [ 2107.486798][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2107.502433][T10324] bond0: left promiscuous mode [ 2107.502455][T10324] bond_slave_0: left promiscuous mode [ 2107.502768][T10324] bond_slave_1: left promiscuous mode [ 2107.513642][ T4495] usb 4-1: Using ep0 maxpacket: 32 [ 2107.520042][ T4495] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2107.544357][ T4495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.544397][ T4495] usb 4-1: Product: syz [ 2107.544431][ T4495] usb 4-1: Manufacturer: syz [ 2107.544448][ T4495] usb 4-1: SerialNumber: syz [ 2107.550311][T10324] gretap0: left promiscuous mode [ 2107.575594][ T4495] usb 4-1: config 0 descriptor?? [ 2107.584667][ T4495] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2107.592590][ T4495] dvb-usb: bulk message failed: -22 (4/0) [ 2107.598546][ T4495] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2107.608889][ T4495] dvb-usb: bulk message failed: -22 (5/0) [ 2107.608910][ T4495] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2107.632480][ T4495] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2107.643236][ T4495] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2107.651409][ T4495] usb 4-1: media controller created [ 2107.658633][T10314] dib0700: tx buffer length is larger than 4. Not supported. [ 2107.676708][ T4495] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2107.700878][ T4495] usb 4-1: selecting invalid altsetting 3 [ 2107.706824][ T4495] ttusb2: set interface to alts=3 failed [ 2107.707932][ T5864] DVB: Unable to find symbol dib7000p_attach() [ 2107.707944][ T5864] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2107.778319][T10327] dummy0 (unregistering): left allmulticast mode [ 2107.778430][T10327] bridge0: port 3(dummy0) entered disabled state [ 2107.786103][T10333] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11449'. [ 2107.802902][T10326] ------------[ cut here ]------------ [ 2107.802936][T10326] usb 6-1: BOGUS control dir, pipe 80005d80 doesn't match bRequestType c0 [ 2107.802973][T10326] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.3.11448/10326 [ 2107.827686][T10326] Modules linked in: [ 2107.831858][T10326] CPU: 1 UID: 0 PID: 10326 Comm: syz.3.11448 Tainted: G L syzkaller #0 PREEMPT(full) [ 2107.843160][T10326] Tainted: [L]=SOFTLOCKUP [ 2107.847550][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2107.857747][T10326] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 2107.863617][T10326] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 2107.883381][T10326] RSP: 0018:ffffc900052cf778 EFLAGS: 00010246 [ 2107.889740][T10326] RAX: 0000000000000000 RBX: ffff888067a37b00 RCX: 0000000080005d80 [ 2107.897869][T10326] RDX: ffff8880206b0020 RSI: ffffffff8cc51600 RDI: ffffffff9087c5e0 [ 2107.905920][T10326] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 2107.913966][T10326] R10: ffffc900052cf860 R11: fffff52000a59f18 R12: 1ffff110096170ac [ 2107.922009][T10326] R13: ffff88804b0b8560 R14: ffff8880206b0020 R15: 0000000080005d80 [ 2107.930056][T10326] FS: 0000000000000000(0000) GS:ffff888124dda000(0063) knlGS:00000000f54b6b40 [ 2107.939107][T10326] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2107.945713][T10326] CR2: 000000002f617ff8 CR3: 00000000358cc000 CR4: 00000000003526f0 [ 2107.950752][ T5864] rc_core: IR keymap rc-dib0700-rc5 not found [ 2107.950859][ T5864] Registered IR keymap rc-empty [ 2107.964706][T10326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2107.972796][T10326] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2107.980832][T10326] Call Trace: [ 2107.984125][T10326] [ 2107.987082][T10326] usb_start_wait_urb+0x13f/0x5b0 [ 2107.992198][T10326] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2107.997792][T10326] usb_control_msg+0x234/0x3e0 [ 2108.002688][T10326] dib0700_i2c_xfer+0xbb9/0xf80 [ 2108.007690][T10326] __i2c_transfer+0x7bf/0x1fe0 [ 2108.012617][T10326] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2108.018445][T10326] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2108.024303][T10326] ? rt_mutex_lock_nested+0x156/0x1c0 [ 2108.029730][T10326] ? i2c_transfer+0xc7/0x2d0 [ 2108.034322][T10326] i2c_transfer+0x1cb/0x2d0 [ 2108.038841][T10326] i2cdev_ioctl_rdwr+0x460/0x740 [ 2108.043872][T10326] compat_i2cdev_ioctl+0x59f/0x5c0 [ 2108.048988][T10326] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2108.054696][T10326] ? __fget_files+0x3a2/0x420 [ 2108.059465][T10326] ? __fget_files+0x2a/0x420 [ 2108.064103][T10326] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2108.069756][T10326] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2108.075245][T10326] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2108.081303][T10326] ? kmem_cache_free+0x182/0x650 [ 2108.086278][T10326] ? __se_sys_futex_time32+0x3ab/0x440 [ 2108.091873][T10326] ? rcu_is_watching+0x16/0xb0 [ 2108.096700][T10326] __do_fast_syscall_32+0x27a/0x6a0 [ 2108.101968][T10326] ? do_fast_syscall_32+0x33/0x70 [ 2108.107029][T10326] ? asm_int80_emulation+0x1a/0x20 [ 2108.112202][T10326] ? do_int80_emulation+0x299/0x500 [ 2108.117428][T10326] ? trace_irq_disable+0x3b/0x140 [ 2108.122573][T10326] do_fast_syscall_32+0x33/0x70 [ 2108.127479][T10326] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2108.133876][T10326] RIP: 0023:0xf7ff80ec [ 2108.137960][T10326] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2108.157882][T10326] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2108.166476][T10326] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000707 [ 2108.174507][T10326] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2108.182549][T10326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2108.190631][T10326] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2108.198643][T10326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2108.206692][T10326] [ 2108.209810][T10326] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2108.217159][T10326] CPU: 1 UID: 0 PID: 10326 Comm: syz.3.11448 Tainted: G L syzkaller #0 PREEMPT(full) [ 2108.228197][T10326] Tainted: [L]=SOFTLOCKUP [ 2108.232530][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2108.242594][T10326] Call Trace: [ 2108.245886][T10326] [ 2108.248827][T10326] vpanic+0x56d/0xa60 [ 2108.252833][T10326] ? __pfx__printk+0x10/0x10 [ 2108.257440][T10326] ? __pfx_vpanic+0x10/0x10 [ 2108.261963][T10326] ? is_bpf_text_address+0x292/0x2b0 [ 2108.267260][T10326] ? is_bpf_text_address+0x26/0x2b0 [ 2108.272497][T10326] panic+0xc5/0xd0 [ 2108.276248][T10326] ? __pfx_panic+0x10/0x10 [ 2108.280712][T10326] __warn+0x315/0x4c0 [ 2108.284720][T10326] ? usb_submit_urb+0x1057/0x18b0 [ 2108.289765][T10326] ? usb_submit_urb+0x1057/0x18b0 [ 2108.294815][T10326] __report_bug+0x276/0x570 [ 2108.299456][T10326] ? usb_submit_urb+0x1057/0x18b0 [ 2108.304512][T10326] ? __pfx___report_bug+0x10/0x10 [ 2108.309552][T10326] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2108.315396][T10326] ? kasan_save_track+0x4f/0x80 [ 2108.320270][T10326] report_bug_entry+0x19b/0x290 [ 2108.325151][T10326] ? usb_submit_urb+0x1100/0x18b0 [ 2108.330200][T10326] ? usb_submit_urb+0x1105/0x18b0 [ 2108.335248][T10326] handle_bug+0xce/0x200 [ 2108.339507][T10326] exc_invalid_op+0x1a/0x50 [ 2108.344017][T10326] asm_exc_invalid_op+0x1a/0x20 [ 2108.348883][T10326] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 2108.354536][T10326] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 2108.374156][T10326] RSP: 0018:ffffc900052cf778 EFLAGS: 00010246 [ 2108.380238][T10326] RAX: 0000000000000000 RBX: ffff888067a37b00 RCX: 0000000080005d80 [ 2108.388209][T10326] RDX: ffff8880206b0020 RSI: ffffffff8cc51600 RDI: ffffffff9087c5e0 [ 2108.396221][T10326] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 2108.404205][T10326] R10: ffffc900052cf860 R11: fffff52000a59f18 R12: 1ffff110096170ac [ 2108.412211][T10326] R13: ffff88804b0b8560 R14: ffff8880206b0020 R15: 0000000080005d80 [ 2108.420216][T10326] ? usb_submit_urb+0x1091/0x18b0 [ 2108.425312][T10326] usb_start_wait_urb+0x13f/0x5b0 [ 2108.430369][T10326] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2108.435955][T10326] usb_control_msg+0x234/0x3e0 [ 2108.440748][T10326] dib0700_i2c_xfer+0xbb9/0xf80 [ 2108.445628][T10326] __i2c_transfer+0x7bf/0x1fe0 [ 2108.450416][T10326] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2108.456239][T10326] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2108.462070][T10326] ? rt_mutex_lock_nested+0x156/0x1c0 [ 2108.467463][T10326] ? i2c_transfer+0xc7/0x2d0 [ 2108.472082][T10326] i2c_transfer+0x1cb/0x2d0 [ 2108.476605][T10326] i2cdev_ioctl_rdwr+0x460/0x740 [ 2108.481580][T10326] compat_i2cdev_ioctl+0x59f/0x5c0 [ 2108.486725][T10326] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2108.492385][T10326] ? __fget_files+0x3a2/0x420 [ 2108.497069][T10326] ? __fget_files+0x2a/0x420 [ 2108.501676][T10326] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2108.507233][T10326] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2108.512702][T10326] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2108.518684][T10326] ? kmem_cache_free+0x182/0x650 [ 2108.523637][T10326] ? __se_sys_futex_time32+0x3ab/0x440 [ 2108.529119][T10326] ? rcu_is_watching+0x16/0xb0 [ 2108.533912][T10326] __do_fast_syscall_32+0x27a/0x6a0 [ 2108.539132][T10326] ? do_fast_syscall_32+0x33/0x70 [ 2108.544187][T10326] ? asm_int80_emulation+0x1a/0x20 [ 2108.549306][T10326] ? do_int80_emulation+0x299/0x500 [ 2108.554532][T10326] ? trace_irq_disable+0x3b/0x140 [ 2108.559580][T10326] do_fast_syscall_32+0x33/0x70 [ 2108.564456][T10326] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2108.570792][T10326] RIP: 0023:0xf7ff80ec [ 2108.574878][T10326] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2108.594495][T10326] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2108.602927][T10326] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000707 [ 2108.610907][T10326] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2108.618888][T10326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2108.626882][T10326] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2108.634875][T10326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2108.642881][T10326] [ 2108.646380][T10326] Kernel Offset: disabled [ 2108.650750][T10326] Rebooting in 86400 seconds..