last executing test programs: 16.72066945s ago: executing program 4 (id=743): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$caif_stream(0x25, 0x1, 0x1) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0xa280000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100003b7431087d077a6201000102030109022400010000000009040000020338b20009050e0000000000000905b3"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 12.902289729s ago: executing program 4 (id=749): mount$bind(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x8b101a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x111, 0x4}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070705000080030005000000000002004e22ac14140a0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2, 0x1}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x29, 0xd0, 0x2, 0x4, 0x14, @remote, @mcast2, 0x1, 0x8000, 0x4, 0x81}}) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="06a0612695d92290822d48e94c4b42bad79603f252fd2da391bf7cc46084796eaca3cc9eb1a066b5898d53ca0200bd27fe9f2de9bd3478a8ba4919b528b22a32f5a6b0d21f7dc9e772d813f6a878ae01c310a05941fdff7d7eb5f6be8d5dad4472dd20bd20b9879b4dc68e64", 0x6c, 0x20044050, &(0x7f0000000700)={0x11, 0xf6, r3, 0x1, 0x5}, 0x14) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x5}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0x4}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}}, 0x20000000) syz_usb_connect(0x2, 0x803, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x2, 0x5, 0x4, 0x10, 0xe}, 0x21, &(0x7f0000000380)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x7, 0x0, 0x5, [0xcf, 0xff3f9f, 0xff0180, 0xff0030]}]}, 0x2, [{0xd3, &(0x7f0000000440)=@string={0xd3, 0x3, "d1ded5af3502aec3e58af36bb22c7431c5bb583de29212b3ab08f43703d45d80a72263e9bed564054caf6c7a04649d8a7afa1b35692a573a7c41082da32c726629f532adadafce41c051b8f9794281fed9f0f1c1a6f31020c137d395803a92012779c6b50bcd1e2bbf9483bd76db14c7b92126f07bc59b04902c221c255979dbe8765ff67116705f597508007b677273a306fc2910183af33b309c0ff732e1a4bb0c831c40d2fd9d2f4b363138f24787c7156bc4cb6f69d2ab9ae920f7f69a31969330a43c159234c441971c7081140d97"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc07}}]}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) sendfile(r5, r2, &(0x7f0000000780)=0x420, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000100)="baf80c66b8e726e78b66efbafc0cb007eebaf80c66b8fa23268c66efbafc0cb86000efc18d04006c0f011b66660f28acc4df26260f78350f01df0fc777ec650f01c3f32e650f35", 0x47}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f00000001c0)={0x1fd, 0x1, 0x4000, 0x2000, &(0x7f000090f000/0x2000)=nil}) 12.743841461s ago: executing program 1 (id=750): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)={0x54, 0x12, 0x905, 0x70bd29, 0x25dfdbfd, {0x3, 0x9, 0x4, 0xfe, {0x4e22, 0x4e24, [0xfffffffb, 0x924, 0x26, 0xa], [0xfffffffd, 0x1, 0x1, 0x1], 0x0, [0x10000, 0xfff]}, 0x6, 0xfffffffc}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "01050000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000051}, 0x800) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0881) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x160, {0xd34b, 0x7}, 0x10, 0x4}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(r6, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1002, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x6, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x0, 0x5, 0x2, 0x0, 0x6, 0x0, 0x80000000, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x9000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x0, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1000001, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x5e, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0x1d, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x7, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2000002, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0x10002, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000000d80)={'syz0\x00', {0xb, 0x3, 0x4, 0x9}, 0x3, [0xfffff47e, 0x0, 0x0, 0x3, 0xf, 0x0, 0x7ff, 0xa, 0x5, 0x3, 0x5, 0x40, 0x1, 0x1, 0x7, 0x6, 0x0, 0x7, 0x1, 0xdef, 0x9, 0x7, 0x200, 0x5, 0x73c, 0x5, 0x4, 0x7f, 0x4, 0x6, 0xfffffff9, 0x8, 0x6, 0x4, 0x7, 0x7, 0x1939, 0x8, 0x7, 0x2, 0xe12c, 0x8162, 0x4, 0x3, 0x1, 0x41, 0x7, 0x10000, 0x101, 0x8, 0xc000, 0x6, 0x4, 0x4, 0x5, 0x6, 0xfff, 0x0, 0x104, 0xf8ad, 0x2, 0x3, 0x7fffdfff], [0xfffffff8, 0xff, 0x4, 0x8, 0x1e0f, 0xfffffff7, 0x5, 0x7, 0xffffffff, 0x0, 0x4, 0x100, 0x8, 0xe63, 0x1, 0xa3a5, 0x2, 0x2, 0xb9, 0x6, 0x3, 0x43d, 0x6, 0xe, 0x4, 0x3, 0x6, 0x9, 0x1, 0x11, 0x5, 0x4, 0x8, 0x30000, 0x81, 0xfffffe00, 0x0, 0x10001, 0x6ff, 0x9, 0x8, 0xffffa467, 0x5, 0xfffffffb, 0x0, 0xfe, 0x9, 0x6aac, 0x0, 0x3, 0x4, 0xfff, 0x200, 0x2, 0xe456, 0x100, 0x9, 0x0, 0x1c00000, 0x6, 0x3, 0xfffffff6, 0xffff1068, 0x3], [0x9, 0x4, 0x6, 0xff, 0x101, 0x5, 0x0, 0x2, 0x80000001, 0x96, 0x7, 0x1, 0xfffffffa, 0x1, 0x4, 0xfb, 0x10001, 0x8, 0x80000000, 0x3, 0x1, 0x100001, 0x1, 0x7, 0x3, 0x40000000, 0x8, 0x3, 0x5, 0x3, 0xb89, 0xf, 0x0, 0x9, 0x3, 0xff, 0x0, 0x2, 0x1ff, 0x4501, 0x9, 0x0, 0x4009, 0x7, 0x966, 0x6, 0x10000, 0xf, 0xffffffff, 0x9, 0xe2, 0x1, 0x8, 0x1, 0x8, 0x3ff, 0x5, 0xfffefffd, 0x3, 0x0, 0x80, 0x6, 0x7, 0xc], [0x5, 0x7f, 0x7, 0x9, 0x2, 0x6, 0x45c, 0x5, 0xab73, 0x5, 0x7, 0x0, 0x5, 0xed5a, 0x9, 0x4, 0x9, 0x8, 0x8, 0x3, 0xeb, 0x6, 0x5, 0xff, 0xffffffff, 0x7fff, 0x4, 0xcb7, 0xa3, 0xffff, 0x8, 0x80000000, 0x3, 0x1ff, 0xfffff26e, 0xf81e, 0x6, 0x9, 0x3, 0x8, 0x5, 0xe5, 0x2, 0x4, 0x4, 0x3, 0x0, 0xfffffff9, 0x7, 0x1ff, 0x204000, 0x5, 0x80, 0x9, 0x7, 0x5078, 0xd, 0x8001, 0x8000, 0x3000000, 0x200, 0x45, 0x0, 0x3]}, 0x45c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xa) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) unshare(0x22020600) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) 10.894905533s ago: executing program 1 (id=752): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0xdb4, 0x0, 0x48, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0x31, {0x5, 0x10001}, 0x6}, 0x1) 10.863240558s ago: executing program 2 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x6, 0x1f7c, 0x9}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6bde2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x8800) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7aa}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="d2dcaafb519c2ec1800000002047", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x8000) ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x9, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/306], 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000fc0)={0xc, 0xdb1f, 0xf, 0x5, 0x6, "c02db8159fdcae50281e45d2767f7c7199e33d"}) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000003640)="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", 0x2de}], 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 10.4148848s ago: executing program 1 (id=754): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) setuid(0xee01) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc408, 0x103) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="180100001000010800"/20, @ANYRES32=r4, @ANYBLOB="0b00000000000000f8001a8018000a8014000700fe80"], 0x118}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3, @ANYRES64=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000001000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0920000000000035090100000000089500000000000000bf020000000000007b9af8ff00000000b5090800000000007b9af0ff00000000bd0000000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9100000000000056070000000000002400000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.200770679s ago: executing program 1 (id=755): sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x5, 0x2, 0x5, 0x0, 0x769, 0x4000000000000000, 0x9, 0x2}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086a04270000000000000109022400010000000009040000010300000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a80)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200145000000450133ed42860410a804a83f83f226e6b33fafff0689fce2f335c61a248712cd81107f40e849bee5d5c2294fd5d33741c9000000000000000000000000000012776c27e4aebe624c4685fbcb47d5e8ae8b1c5070ad37aa8ee7dcd5b2f3353d268f4830e4d6463fd9e71481bfda01f68703e08ed32ccbd40d072930cab7b1f3aa8a1116b9391b30787265b9687d1adc1589c34169e2b0ff9527a7281bf1b0679a0adbe0cb5862a3342e35"], 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 10.108344724s ago: executing program 2 (id=756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) get_robust_list(r0, &(0x7f0000000200)=&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f0000000240)=0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e1e, 0x42, @initdev={0xfe, 0x88, '\x00', 0x20, 0x0}, 0xa12d}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000040)=0x2, 0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'j\x1e=\x01!\x88\xdc\xc3u\x1d\xbcQ{\x8c\x8b\xe8&\xfa\xf1\xfe\x16u6\x1f\ty\x15\x8b\x89\xc1\xbb}(\x99o\xdb*\x8eI\xa3s\xb4\xc6\xb5\x10\xf9\xfa\x18}\xf8(\xb5\xf7\x8aSe'}, {0x20, '[k'}, {0x20, '\x10o-\xc5h\b\x90x\x00\x00\x00\x00\x00\xc4G\xb2\x11\x82\x9b\x98s0\xfd\xa0_\xdd\x8fQ`\x00\x00\x00\x00\x00\x00'}]}, 0x6b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100"], 0x0) syz_open_procfs(r0, &(0x7f0000000280)='net/tcp\x00') 8.392914036s ago: executing program 2 (id=757): r0 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000080)=@v2={0x2000300}, 0x14, 0x0) 6.620525133s ago: executing program 1 (id=766): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x2001000, 0x3a, 0xffffff01, 0x3a, 0x2, 0xfffffffb, 0x3e}, 0x1c) r1 = socket(0x10, 0x803, 0x0) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=ANY=[@ANYBLOB="280000006600030628bd7000fedbdf251800ce800c"], 0x28}], 0x1, 0x0, 0x0, 0x4000001}, 0x40) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES8, @ANYBLOB="8a4f8beed3ed67ea2821a6a1489f0afdcf781aadeeebebc6db0c7e8453bbc287edf5f19e38ac48ee279d15c71b3cef682ae2738e7f4bc6692a6626bf16d8c3ec5666f9b52a46772c21f8864a807bf1ce9b5f3c3dcd94323ffbe668c43db4003fb76101d7e20caaf586ee6c2f1d9750e7baf2f834c87b3ce85a39fe8a0c6d7a7128c7870116973850b19f53eb2fdcde2f085bbaea2da470070616bfe519763c7b8d851562fa30135c88e979dc8ce0b11125588c37de835367cc3ba1e7d50e327f1895d89633d5cc52b5b002eda89c29fdac46b7d1c144f5df779dbf72151653f90995ac42", @ANYRESHEX=r1], 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000bbdffc)=0x0) syz_usb_connect(0x4, 0x207, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0xc3, 0x41, 0xca, 0x8, 0x12d1, 0x278, 0x8069, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f5, 0x2, 0x38, 0x8, 0x0, 0x3, "", [{{0x9, 0x4, 0x14, 0x8, 0x5, 0xff, 0x4, 0x18, 0x5, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "d49ae0"}, {0x5, 0x24, 0x0, 0xf7d5}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x9, 0x4ee, 0x8}, {0x6, 0x24, 0x1a, 0xaa67, 0x13}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @mdlm_detail={0x5d, 0x24, 0x13, 0x6, "63b929c0e22d50612e8fcc7ea5b700f0331c6ab63459d0864753e1f0a34cb8e94c6dd49ba7f50eb9841513ecfee9ce741d92970970e0b0fa39e61809d9b998df9b071a7149f24e6418453a4ccf09707480f33164d40d8f008b"}]}], [{{0x9, 0x5, 0x0, 0xc, 0x8, 0xd, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe2, 0x4}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x0, 0x7, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x52b}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0xd, 0x50, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x7}]}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x0, 0xf3, 0xc0}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x0, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x5f82}]}}]}}, {{0x9, 0x4, 0x8c, 0x10, 0x5, 0x38, 0xd6, 0x77, 0x4, [@hid_hid={0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x3d4}}, @generic={0x3f, 0x4, "bc5666cfd435e3f61ab60bd6da8db1809a8f21eadc7d32ace70ddde7c87c52641abe39b561c087159d61456cae2373f872d87ec3f8c9bea271ade93e12"}], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x8, 0x7, 0x1d, [@uac_iso={0x7, 0x25, 0x1, 0x37fc1e61494b54c0, 0x9, 0xa6}, @generic={0x4b, 0xa, "fd81d3477d2576903f37a98bf13b55e0113df479c3dd4c5fcfe720ee5f3f28b7b4a85a0858e9f55ada1c60d64344ca567be93a36fd964d87339be05f8ae4849f35274fb6408218f283"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x7, 0x80, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xffff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x5, 0x6, 0x6, [@generic={0x41, 0x0, "78323efb679457759238e6d0ccff8cddae22b5268642d2a05844af295975a949a5fff06a3095b582fb7a6085c345cab8729c79c961ce3540e174c995bdebc0"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x0, 0x14, 0xf7, 0x7}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x9, 0x8, 0xd3}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0x40, 0x9, 0x1, 0xff, 0x6}, 0xed, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41c}}]}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) timer_delete(r3) recvfrom(r4, &(0x7f00000001c0)=""/112, 0x70, 0x40012000, 0x0, 0x0) read$char_usb(r5, &(0x7f0000000840)=""/188, 0xbc) read$char_usb(r5, &(0x7f0000000100)=""/67, 0x43) 5.591204922s ago: executing program 0 (id=767): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB, @ANYRES16=r0], 0x40c}}, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000180)={0xffff, 0x47a3, 0x2, 0xffec, 0x0, "f200"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) r7 = getpgid(0x0) prlimit64(r7, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=ANY=[], 0x2b, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)='\x87\x0fw\xd3\x10\xb8L\xc6\x99\x13v\x04\xff[?h6\xe0\xc4\xca\x87\vl\xb1(\x012\xbc,\x93\xdbv=\xda\x15L\xf5{\xc8=7G\xaas\'\xae;J\xaf[\xa9\xbc\x13\xe3ce\x16t\x19Pv\xf8K\v\f\xd1\x9c%\x9e\xc9\x18\f\x90\x87f9\xa3\xa8\xc2~1\x1f\xa9\xe6\xd5\xb1\x7f9') fchown(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb81000000080045000028000000000088907800000000ffffffff0d0090780800ffff00"/58], 0x0) 5.590584287s ago: executing program 3 (id=768): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1002, 0x7, 0x1, 0x3, 0x1, 0xfffffffa, 0x65, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x0, 0x40, 0xd, 0xe, 0x1, 0x55eabe05, 0x4, 0x1c00, 0x3, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x3, 0x0, 0x11003, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x101, 0x2, 0x180000, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0xfffffffe, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x200, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x2, 0x2, 0x84, 0xa, 0x6, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0xe4e, 0x1, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x3, 0x40, 0x8, 0x4, 0x6, 0x100, 0x66cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff]}}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x41, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4.797687095s ago: executing program 4 (id=769): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 4.463150464s ago: executing program 2 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000180)={0xdc, 0x0, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000004900)=[{{&(0x7f0000000240)=@x25, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/31, 0x1f}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/83, 0x53}], 0x3, &(0x7f0000000440)=""/181, 0xb5}, 0x1}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/223, 0xdf}, {&(0x7f0000000700)=""/181, 0xb5}, {&(0x7f00000007c0)=""/9, 0x9}, {&(0x7f0000000800)=""/174, 0xae}, {&(0x7f0000000900)=""/255, 0xff}, {&(0x7f0000000a00)=""/230, 0xe6}, {&(0x7f0000000b00)=""/21, 0x15}], 0x8, &(0x7f0000000bc0)=""/92, 0x5c}, 0x7}, {{&(0x7f0000000c40)=@l2, 0x80, &(0x7f0000001440)=[{&(0x7f0000000cc0)=""/84, 0x56}, {&(0x7f0000000d40)=""/134, 0x86}, {&(0x7f0000000e00)=""/204, 0xcc}, {&(0x7f0000000f00)=""/123, 0x7b}, {&(0x7f0000000f80)=""/166, 0xa6}, {&(0x7f0000001040)=""/144, 0x90}, {&(0x7f0000001100)=""/244, 0xf4}, {&(0x7f0000001200)=""/67, 0x43}, {&(0x7f0000001280)=""/134, 0x86}, {&(0x7f0000001380)=""/148, 0x94}], 0xa, &(0x7f0000001500)=""/178, 0xb2}, 0x8}, {{&(0x7f00000015c0)=@ieee802154, 0x80, &(0x7f0000002940)=[{&(0x7f0000001640)=""/248, 0xf8}, {&(0x7f0000001880)=""/4096, 0xfffffffffffffe05}, {&(0x7f0000001740)=""/250, 0xfa}, {&(0x7f0000002880)=""/139, 0x8b}], 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002980)=""/131, 0x83}, {&(0x7f0000002a40)=""/174, 0xae}, {&(0x7f0000002b00)=""/34, 0x22}, {&(0x7f0000002b40)=""/88, 0x58}, {&(0x7f0000002bc0)=""/78, 0x4e}, {&(0x7f0000002c40)=""/234, 0xea}, {&(0x7f0000002d40)=""/238, 0xee}, {&(0x7f0000002e40)=""/252, 0xfc}], 0x8}, 0x2}, {{&(0x7f0000002fc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003040)=""/38, 0x26}, {&(0x7f0000003080)=""/120, 0x78}, {&(0x7f0000003100)=""/119, 0x77}, {&(0x7f0000003180)=""/27, 0x1b}, {&(0x7f00000031c0)=""/79, 0x4f}], 0x5, &(0x7f00000032c0)=""/159, 0x9f}, 0x3}, {{&(0x7f0000003380)=@tipc=@name, 0x80, &(0x7f0000004880)=[{&(0x7f0000003400)=""/198, 0xc6}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/71, 0x47}, {&(0x7f0000004580)=""/210, 0xd2}, {&(0x7f0000004680)=""/147, 0x93}, {&(0x7f0000004740)=""/176, 0xb0}, {&(0x7f0000004800)=""/114, 0x72}], 0x7}, 0x80000000}], 0x7, 0x2000, &(0x7f0000004ac0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r5 = fsmount(r4, 0x0, 0x80) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x1a6, [{0x3, 0x4}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}, @float={0x6, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x61, 0x61, 0x5f, 0x5f, 0x0]}}, 0x0, 0x5b}, 0x28) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='net/softnet_stat\x00') preadv(r6, &(0x7f00000008c0)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1ef, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_emit_ethernet(0xae, &(0x7f0000000380)=ANY=[], 0x0) 4.461418258s ago: executing program 0 (id=771): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) fsopen(&(0x7f0000000180)='proc\x00', 0x1) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 4.441774709s ago: executing program 4 (id=772): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000600)="06ff03076844268cb89e14f0080040e0ffff00febabec41177fb860200080000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.218451671s ago: executing program 3 (id=773): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x1000) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 4.098602214s ago: executing program 4 (id=774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) close(0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)={0x2c, r2, 0x21, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x68f0c000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) sendmsg$nl_route(r5, 0x0, 0x8000002) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000"], 0x0, 0x26}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000bd92b8d2f4eaff5bc828a6163cfe0900000000000000020000009500000000000080"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r11 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x42}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000280)={0xb, 0x20c, 0x4, 0x9e9, r12}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r9, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x17, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5b3d, 0x0, 0x0, 0x0, 0x897}, [@call={0x85, 0x0, 0x0, 0x33}, @call={0x85, 0x0, 0x0, 0x34}, @jmp={0x5, 0x0, 0x0, 0x2, 0x5, 0x8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x97ec, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1000, 0x1000, &(0x7f0000000540)=""/4096, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x32, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x5, 0x80000000, 0x3}, 0x10, r10, r4, 0x6, &(0x7f0000000480)=[r0, r0, 0xffffffffffffffff, r3], &(0x7f0000001540)=[{0x0, 0x3, 0xa, 0x3}, {0x0, 0x2, 0x5, 0xc}, {0x1, 0x2, 0x5, 0x1}, {0x3, 0x5, 0x5}, {0x0, 0x3, 0x2, 0x9}, {0x1, 0x1, 0x3}], 0x10, 0x56}, 0x94) gettimeofday(0x0, &(0x7f0000006c40)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) 3.829815759s ago: executing program 0 (id=775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04", 0xd}], 0x1}, 0x0) (fail_nth: 4) 3.280086773s ago: executing program 0 (id=776): sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x5, 0x2, 0x5, 0x0, 0x769, 0x4000000000000000, 0x9, 0x2}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086a04270000000000000109022400010000000009040000010300000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a80)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200145000000450133ed42860410a804a83f83f226e6b33fafff0689fce2f335c61a248712cd81107f40e849bee5d5c2294fd5d33741c9000000000000000000000000000012776c27e4aebe624c4685fbcb47d5e8ae8b1c5070ad37aa8ee7dcd5b2f3353d268f4830e4d6463fd9e71481bfda01f68703e08ed32ccbd40d072930cab7b1f3aa8a1116b9391b30787265b9687d1adc1589c34169e2b0ff9527a7281bf1b0679a0adbe0cb5862a3342e35"], 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 3.002458562s ago: executing program 3 (id=777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) close(0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)={0x2c, r2, 0x21, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x68f0c000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) sendmsg$nl_route(r5, 0x0, 0x8000002) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000"], 0x0, 0x26}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r9, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x17, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5b3d, 0x0, 0x0, 0x0, 0x897}, [@call={0x85, 0x0, 0x0, 0x33}, @call={0x85, 0x0, 0x0, 0x34}, @jmp={0x5, 0x0, 0x0, 0x2, 0x5, 0x8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x97ec, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1000, 0x1000, &(0x7f0000000540)=""/4096, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x32, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x5, 0x80000000, 0x3}, 0x10, r10, r4, 0x6, &(0x7f0000000480)=[r0, r0, 0xffffffffffffffff, r3], &(0x7f0000001540)=[{0x0, 0x3, 0xa, 0x3}, {0x0, 0x2, 0x5, 0xc}, {0x1, 0x2, 0x5, 0x1}, {0x3, 0x5, 0x5}, {0x0, 0x3, 0x2, 0x9}, {0x1, 0x1, 0x3}], 0x10, 0x56}, 0x94) gettimeofday(0x0, &(0x7f0000006c40)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) 2.887109714s ago: executing program 4 (id=778): socket$kcm(0x29, 0x5, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000240)=ANY=[], 0xf, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000040), &(0x7f00000000c0)=@sha1={0x1, "90242ca14f590f440f7ae67927663a6f748d6a7e"}, 0x15, 0x2) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) uname(&(0x7f0000000080)=""/209) syz_usb_connect$uac2(0x3, 0x83, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x154e, 0x500e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x0, 0xd0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1ff, 0xb, 0x11}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x4, 0xfd, 0x38}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x228, 0x6, 0x2, 0x5, {0x8, 0x25, 0x1, 0x83, 0x18, 0xe2, 0xe3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x1, 0xea, {0x8, 0x25, 0x1, 0x0, 0x3f, 0x2, 0x6}}}}}}}}]}}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x104, 0x0, &(0x7f00000005c0)="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", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffff6}, 0xfffffffffffffee4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = memfd_create(&(0x7f00000003c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000b40)={{r1, &(0x7f0000000080)='\x00', 0x0, &(0x7f0000000180)={@_ha_fsid={[0x800, 0x8]}, {0x4, 0x2, 0x3, 0x7aa1739c}}, 0x1b76, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x9}, 0x7, &(0x7f0000000a40)=[{0x1, 0x6, &(0x7f00000002c0)='mptcp_pm\x00', &(0x7f0000000300)="b67f8daa697f96ba3fc8d49f61026f931551d1988f9f2e168f6963eb629313367c5c9295fb5ab274c35014c4d6b30fe7e7433f03c354a090f514584bab010ae6fa1c8134095769920090c0ca9ecae5dead2969cb4ba1ab69067f3d0b1023cd207c00ac8f7bab785ca1d1d9d5ccb48b2366c234e9fa2411", 0x77, 0x20}, {0x0, 0x80000000, &(0x7f0000000380)='mptcp_pm\x00', &(0x7f0000000400)="d95b8876a38b7184f87123eb4e753542b824ea2b131b5828e5dd3c1062fa4d9b8549bed59c354268b2f2f3d2542c7e365c0e6470845a9a563753622da74eb63838084cfaeb3bec12a3dd09f20379225cc9e558766a9708a7a9545bf7177ba336e097cb81a8d3eae5771d212a3f59434bb02f529182ebe29781d3d06429c860b411597abd7afc943c081a48e47c46299cbcbb42e164d2e19a5f9e83bfd5e2", 0x9e, 0x12}, {0x3, 0x1414, &(0x7f00000004c0)='mptcp_pm\x00', &(0x7f0000000500)="ae47f7eeb1a4f86ab2ee6ff55054e43043af74581bb1c7d5d57103f783b531b62909de66237d7f2829a74daec033248bff98b786b606fa818e92253448af565eef880ce0f726b76f9037434e023419c3b53984cacc3c0c1a71db0a024905e3420d58", 0x62, 0x38}, {0x3, 0x8, &(0x7f0000000580)='mptcp_pm\x00', &(0x7f00000005c0)="42ed690a556fa9f8c39b012cb1570f685af33bf9e7c4617fa6d3f46a9f5a8e1db812036d2a28832fc0652cabf2183fb4fba05023cdb1e837e3daeadb45ea26a38273373c6fac4ea21a3c1f669937eac0619d28147426685a0f7ba94a9da50c71937f78cf393bd0f9b8b630946ec21b9ff998113c3cbbf161714e58da4d99f6d04547f4b3e679fe4cbefa43eb8db52841575b18ea1815cb11335a81c5db75c745846b4f02c9a78158744b0b2b98ae181475c74c244626ca82558a672d637a44abdb57052ac6251cc06356519ce4a8abf85d70d6f4195cde2d941c03c547346f", 0xdf, 0x7a}, {0x0, 0xffffbeb4, &(0x7f00000006c0)=':&$\x00', &(0x7f0000000700)="559c2f3e2c6518ba05b4f4eddbd6d8b140322a8e67eb85f8a6ff91c33e34eaa62eb58fdeaf21f453abb3a2e034d0639e27b46b7cf696c573f33de428e16f706258106c7ed75e4096ed914be4cf93f824d22183aecb5dbbbd3c22f701d5dd15bd8e6bb4bb4bdead02aabaa9b7cb8b00f87003a845e36446bd6866d37d83798e9cc7efc79eccf01b6ee9399d2ed9655793e8de03ccb0979ee297844925908621bf41e54c97", 0xa4, 0x22}, {0x1, 0x2, &(0x7f0000000840)='\x00', &(0x7f0000000880)="3f603e43b501df50f0725467777119725c56c7a4d61b46c1fc30f923df331713deabd46a09e72a01452d35e5e09d48bb58114c66defcdfc3be15e5266a286f29437d94d9542dee008bbbf50538fded05f38d2eb572f8b22b6c637e121a27b4744bee43a06f4fc5e20cab34193eecf03498d1eb082a095106a30411b100dba39a1b65e5", 0x83, 0x28}, {0x3, 0xf, &(0x7f0000000940)='mptcp_pm\x00', &(0x7f0000000980)="f437edec60cb09470f4a048fb1a7c2528ff39627c1fc96dd3e7b9e132f56acc1f68087a14893d0592d1b4821a744abbda427fc02d3035e74ec6f0a588e4fd3d41999c7f4bcfc522a350ba61a8be221ee32021aa038101e8767fe6952d0ed36156fd4646c699368d9f742f8b75eeface39c785a6b14ad6ab85f8b02b044cbdea69a95bed389038b7121d9d7319c0b9c71f73fa74a821add862c2cdf55f35599f4454a5a", 0xa3, 0x28}]}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x5, [@enum={0x10, 0x6, 0x0, 0x6, 0x4, [{0x6}, {0x9, 0x6}, {0x0, 0x3}, {0x2, 0x3ff}, {0xc, 0xff}, {0xb, 0x8}]}, @type_tag={0x800, 0x0, 0x0, 0x12, 0x1}, @ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x1, 0x5}, @struct={0x10, 0x1, 0x0, 0x4, 0x1, 0x95, [{0x2, 0x5, 0x1}]}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x2, 0x7}]}, {0x0, [0x0, 0x61, 0x30]}}, &(0x7f0000000d80)=""/48, 0xa9, 0x30, 0x0, 0x4, 0x10000}, 0x28) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000e80), 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x11, &(0x7f0000000bc0)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc}, @jmp={0x5, 0x1, 0x1, 0x3, 0x4, 0x10, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @jmp={0x5, 0x1, 0xb, 0x7, 0xb, 0x1, 0xffffffffffffffff}], &(0x7f0000000c80)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2c, '\x00', r3, 0x25, r5, 0x8, &(0x7f0000000e00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x1, 0x3, 0xfffffffb, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000ec0)=[r6, r7], &(0x7f0000000f00)=[{0x2, 0x1, 0x4, 0x5}], 0x10, 0x5f}, 0x94) syz_usb_connect$cdc_ecm(0x5, 0x8b, &(0x7f0000001000)={{0x12, 0x1, 0x210, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x1, 0x1, 0x1, 0xb0, 0x6, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, '4SM+|N'}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0xee9, 0xc}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @dmm={0x7, 0x24, 0x14, 0x40, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x2b, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x8, 0xffff, 0x7, 0x1, 0x5436, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xa, 0x8, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xe1, 0x66, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x30, 0x4, 0x8, 0x4}}}}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x300, 0x38, 0x8, 0x4, 0x10, 0x3}, 0xc, &(0x7f0000001100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x2, 0x5}]}, 0x1, [{0xfb, &(0x7f0000001140)=@string={0xfb, 0x3, "6b7104620efbf0cf1e1a1fb986502a8e3df61512e072c024ea70a8952ae8c4382300918cf7948d7bfc428b7fce13da0e8e60e6a9e8e84ae4721b69eea63d71e4cf25aab993e43f8d8b7006151231da3b601ed41ea687bb17a52fbd910da93581428c9d409273efc5f8e31820bce8295a8b8fbb9e5a6236e0299f6d19d148217747604986e8f8753897f9c2234ded717372216199d50b098b5932021aaf93a2e3424c2c2a530edc3be622a8d98ca2603ed81c0cf9bed95588945c22bc8ebd6cae02b157e4c2f76ba4bc6e9cb917c68e79c742f5a822e1faff5bdebcc5ee952a7e09c92ec4eeff81d01d181e6749bbe169dc04fbe520d24c5f4f"}}]}) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="070000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.976219917s ago: executing program 3 (id=780): r0 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) fsetxattr$security_capability(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 1.507804438s ago: executing program 3 (id=781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa0500070084000000060004404e2000000c0002800800014040ff"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (fail_nth: 4) 1.501479172s ago: executing program 2 (id=782): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 807.100389ms ago: executing program 2 (id=783): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0881) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0xcf, 0xffff, 0x0, 'queue0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x160, {0xd34b, 0x7}, 0x10, 0x4}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000000bd40eb0302"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 805.879632ms ago: executing program 3 (id=784): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000040)=0x10000, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x1, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100008d1e502039102021a7020102030109021200f69dbfc0000904", @ANYRES64, @ANYRESOCT], 0x0) syz_usb_disconnect(r2) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)=ANY=[], 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r3) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xd000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r4, &(0x7f0000000300)='1\x00', 0x2) 191.867265ms ago: executing program 0 (id=785): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) fsopen(&(0x7f0000000180)='proc\x00', 0x1) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 0s ago: executing program 0 (id=786): r0 = open(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) flock(r0, 0x2) r5 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r5, 0x1) flock(r5, 0x1) r6 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f9}, [], {0x14, 0x3e8, 0x1, 0x0, 0x0, {0xa}}}, 0x28}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=@getae={0x1bc, 0x1f, 0x4, 0x70bd2a, 0x25dfdbfc, {{@in6=@mcast1, 0x4d4, 0x2, 0x2b}, @in6=@private2, 0x8, 0x3506}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @lastused={0xc, 0xf, 0x6}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_auth={0x108, 0x1, {{'streebog512-generic\x00'}, 0x600, "08d506c5309dfc89f62c4faed460eaf62ad89c15718641e737d8bdcc8ddb7712551ffdcc9bfa5053991474d48c592104423d2caab419789c2648875b44157177087de78c457bdc570df8e7c6444f8d672f05f516f9dc984a1f9d1a8e720a38f8cb5b8fff1adbc69504b050f45ae1948c0df7e9a1784e01e5773f3b728b720ccad903ce4075f8718e2d7db80e98e1b7a1ef7ddbc4f76414643c4ec333b292a800fb6430bedda255f33fdd0180c11ada838e15e980e5b1a3d5e105f371595b9e0d"}}, @mark={0xc, 0x15, {0x35075c, 0x8}}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x32}}, @lifetime_val={0x24, 0x9, {0xfffffffffffffffc, 0x3, 0x1, 0x1ff}}, @srcaddr={0x14, 0xd, @in=@local}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) kernel console output (not intermixed with test programs): usb 3-1: USB disconnect, device number 16 [ 370.598344][ T5881] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 370.598690][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 370.737695][ T5881] usb 1-1: device descriptor read/64, error -32 [ 370.949057][ T7912] zonefs (nullb0) ERROR: Not a zoned block device [ 370.949971][ T5910] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 371.027545][ T5881] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 371.577851][ T5874] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 371.747400][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 371.763722][ T5874] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 371.763755][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.763778][ T5874] usb 5-1: Product: syz [ 371.763793][ T5874] usb 5-1: Manufacturer: syz [ 371.763809][ T5874] usb 5-1: SerialNumber: syz [ 371.831850][ T5874] usb 5-1: config 0 descriptor?? [ 371.885587][ T5874] gspca_main: se401-2.14.0 probing 047d:5003 [ 372.791762][ T7925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.792339][ T7925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.827370][ T5881] usb 1-1: device not accepting address 32, error -71 [ 372.828927][ T5881] usb usb1-port1: attempt power cycle [ 373.000906][ T5874] usb 5-1: reset high-speed USB device number 31 using dummy_hcd [ 373.309480][ T5910] usb 2-1: USB disconnect, device number 16 [ 374.694864][ T7274] udevd[7274]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.775260][ T7943] netlink: 'syz.3.595': attribute type 11 has an invalid length. [ 375.087357][ T5874] usb 5-1: device descriptor read/64, error -71 [ 375.236869][ T7947] kvm: kvm [7946]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xae64 [ 375.299672][ T7953] netlink: 'syz.3.598': attribute type 10 has an invalid length. [ 375.350804][ T7954] FAULT_INJECTION: forcing a failure. [ 375.350804][ T7954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.350846][ T7954] CPU: 1 UID: 0 PID: 7954 Comm: syz.1.597 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 375.350877][ T7954] Tainted: [L]=SOFTLOCKUP [ 375.350885][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.350899][ T7954] Call Trace: [ 375.350908][ T7954] [ 375.350918][ T7954] dump_stack_lvl+0xe8/0x150 [ 375.350956][ T7954] should_fail_ex+0x46b/0x600 [ 375.351001][ T7954] _copy_from_iter+0x1d3/0x1670 [ 375.351025][ T7954] ? rcu_is_watching+0x15/0xb0 [ 375.351089][ T7954] ? trace_kmalloc+0x2a/0x110 [ 375.351126][ T7954] ? __kmalloc_node_track_caller_noprof+0x390/0x7e0 [ 375.351161][ T7954] ? __alloc_skb+0x1d0/0x7d0 [ 375.351189][ T7954] ? __pfx__copy_from_iter+0x10/0x10 [ 375.351218][ T7954] ? skb_set_owner_w+0x26c/0x3e0 [ 375.351252][ T7954] ? skb_put+0x11b/0x210 [ 375.351284][ T7954] pppol2tp_sendmsg+0x3cd/0x5f0 [ 375.351417][ T7954] sock_write_iter+0x509/0x550 [ 375.351442][ T7954] ? __pfx_sock_write_iter+0x10/0x10 [ 375.351485][ T7954] do_iter_readv_writev+0x62b/0x8d0 [ 375.351525][ T7954] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 375.351571][ T7954] ? rw_verify_area+0x25b/0x4e0 [ 375.351607][ T7954] vfs_writev+0x345/0x9a0 [ 375.351675][ T7954] ? __pfx_vfs_writev+0x10/0x10 [ 375.351716][ T7954] ? __fget_files+0x2a/0x420 [ 375.351748][ T7954] ? __fget_files+0x3a6/0x420 [ 375.351775][ T7954] ? __fget_files+0x2a/0x420 [ 375.351812][ T7954] do_writev+0x15a/0x2e0 [ 375.351839][ T7954] ? __pfx_do_writev+0x10/0x10 [ 375.351877][ T7954] do_syscall_64+0x14d/0xf80 [ 375.351907][ T7954] ? trace_irq_disable+0x3b/0x150 [ 375.351933][ T7954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.351958][ T7954] ? clear_bhb_loop+0x40/0x90 [ 375.351986][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.352008][ T7954] RIP: 0033:0x7f7b9556c799 [ 375.352037][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.352057][ T7954] RSP: 002b:00007f7b937c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 375.352082][ T7954] RAX: ffffffffffffffda RBX: 00007f7b957e5fa0 RCX: 00007f7b9556c799 [ 375.352098][ T7954] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 375.352112][ T7954] RBP: 00007f7b937c6090 R08: 0000000000000000 R09: 0000000000000000 [ 375.352126][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.352139][ T7954] R13: 00007f7b957e6038 R14: 00007f7b957e5fa0 R15: 00007ffd9e57a5a8 [ 375.352173][ T7954] [ 375.517331][ T5874] usb 5-1: reset high-speed USB device number 31 using dummy_hcd [ 375.529164][ T5874] usb 5-1: device reset changed ep0 maxpacket size! [ 375.532937][ T7953] geneve0: entered promiscuous mode [ 375.692816][ T5874] gspca_se401: read req failed req 0x06 error -19 [ 375.754026][ T7953] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 375.769587][ T5874] usb 5-1: USB disconnect, device number 31 [ 376.140593][ T5910] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 376.237905][ T5874] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 376.918283][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 376.926927][ T5910] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 376.926970][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.926994][ T5910] usb 3-1: Product: syz [ 376.927011][ T5910] usb 3-1: Manufacturer: syz [ 376.927027][ T5910] usb 3-1: SerialNumber: syz [ 376.950664][ T5910] usb 3-1: config 0 descriptor?? [ 377.056242][ T5910] gspca_main: se401-2.14.0 probing 047d:5003 [ 377.542974][ T7967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.543535][ T7967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.658597][ T5944] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 377.807375][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 377.869417][ T5944] usb 4-1: unable to get BOS descriptor or descriptor too short [ 377.919773][ T5944] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 377.980501][ T5944] usb 4-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 377.980640][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.980665][ T5944] usb 4-1: Product: syz [ 377.980682][ T5944] usb 4-1: Manufacturer: syz [ 377.982666][ T5944] usb 4-1: SerialNumber: syz [ 378.068912][ T5874] usb 5-1: device descriptor read/all, error -71 [ 378.147500][ T5882] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 378.177372][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 378.177642][ C0] raw-gadget.5 gadget.1: ignoring, device is not running [ 378.305015][ T5910] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 378.305128][ T5910] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 378.318414][ T10] usb 2-1: device descriptor read/64, error -32 [ 378.342802][ T5882] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.350688][ T5882] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 378.350785][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 378.350840][ T5882] usb 1-1: Product: syz [ 378.350876][ T5882] usb 1-1: Manufacturer: syz [ 378.350919][ T5882] usb 1-1: SerialNumber: syz [ 378.413109][ T5910] usb 3-1: USB disconnect, device number 17 [ 378.567906][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 378.698580][ T5882] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 378.704214][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.704369][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.749276][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 378.880900][ T5944] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.941823][ T10] usb 2-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 378.941857][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.941880][ T10] usb 2-1: Product: syz [ 378.941895][ T10] usb 2-1: Manufacturer: syz [ 378.941910][ T10] usb 2-1: SerialNumber: syz [ 379.014192][ T10] usb 2-1: config 0 descriptor?? [ 379.033361][ T5944] usb 4-1: USB disconnect, device number 24 [ 379.186044][ T10] safe_serial 2-1:0.0: safe_serial converter detected [ 379.234234][ T7275] udevd[7275]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.285744][ T7373] usb 1-1: USB disconnect, device number 34 [ 379.335694][ T10] usb 2-1: safe_serial converter now attached to ttyUSB0 [ 379.475620][ T7373] usblp0: removed [ 379.607355][ T5874] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 379.733386][ T7373] usb 2-1: USB disconnect, device number 18 [ 379.767507][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 379.772759][ T5874] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 379.772789][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.772804][ T5874] usb 3-1: Product: syz [ 379.772815][ T5874] usb 3-1: Manufacturer: syz [ 379.772826][ T5874] usb 3-1: SerialNumber: syz [ 379.825737][ T7373] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 379.839563][ T7373] safe_serial 2-1:0.0: device disconnected [ 379.871429][ T5874] usb 3-1: config 0 descriptor?? [ 379.896731][ T5874] gspca_main: se401-2.14.0 probing 047d:5003 [ 380.080452][ T7981] netlink: 'syz.3.606': attribute type 16 has an invalid length. [ 380.080478][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 380.438194][ T7985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.438771][ T7985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.591262][ T7988] input: syz0 as /devices/virtual/input/input18 [ 381.407469][ T5874] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 382.055325][ T7998] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 382.740698][ T5874] gspca_se401: read req failed req 0x06 error -19 [ 382.777591][ T5874] usb 3-1: USB disconnect, device number 18 [ 382.779344][ T37] kauditd_printk_skb: 44 callbacks suppressed [ 382.779363][ T37] audit: type=1326 audit(1772707193.423:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8004 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705beac799 code=0x7ffc0000 [ 382.779774][ T37] audit: type=1326 audit(1772707193.423:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8004 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f705beac799 code=0x7ffc0000 [ 382.779915][ T37] audit: type=1326 audit(1772707193.423:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8004 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705beac799 code=0x7ffc0000 [ 382.786137][ T37] audit: type=1326 audit(1772707193.423:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8004 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f705be6cfce code=0x7ffc0000 [ 382.786782][ T37] audit: type=1326 audit(1772707193.423:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8004 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f705be6cfce code=0x7ffc0000 [ 382.786793][ T8008] FAULT_INJECTION: forcing a failure. [ 382.786793][ T8008] name failslab, interval 1, probability 0, space 0, times 0 [ 382.786830][ T8008] CPU: 0 UID: 0 PID: 8008 Comm: syz.3.614 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 382.786867][ T8008] Tainted: [L]=SOFTLOCKUP [ 382.786873][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.786883][ T8008] Call Trace: [ 382.786889][ T8008] [ 382.786896][ T8008] dump_stack_lvl+0xe8/0x150 [ 382.786926][ T8008] should_fail_ex+0x46b/0x600 [ 382.786957][ T8008] should_failslab+0xa8/0x100 [ 382.787063][ T8008] kmem_cache_alloc_noprof+0x87/0x680 [ 382.787088][ T8008] ? audit_log_start+0x367/0xa40 [ 382.787117][ T8008] audit_log_start+0x367/0xa40 [ 382.787147][ T8008] ? __pfx_audit_log_start+0x10/0x10 [ 382.787175][ T8008] ? __lock_acquire+0x6b5/0x2cf0 [ 382.787232][ T8008] audit_seccomp+0x63/0x190 [ 382.787278][ T8008] __seccomp_filter+0xd48/0x1ef0 [ 382.787323][ T8008] ? __pfx___seccomp_filter+0x10/0x10 [ 382.787357][ T8008] ? lockdep_hardirqs_on+0x7a/0x110 [ 382.787425][ T8008] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 382.787489][ T8008] ? rt_mutex_slowunlock+0x1cb/0x300 [ 382.787514][ T8008] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 382.787548][ T8008] ? fput+0xa0/0xd0 [ 382.787583][ T8008] ? __pfx_ksys_write+0x10/0x10 [ 382.787623][ T8008] ? __secure_computing+0xe1/0x2a0 [ 382.787660][ T8008] do_syscall_64+0xf4/0xf80 [ 382.787690][ T8008] ? trace_irq_disable+0x3b/0x150 [ 382.787715][ T8008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.787738][ T8008] ? clear_bhb_loop+0x40/0x90 [ 382.787764][ T8008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.787788][ T8008] RIP: 0033:0x7f705beac799 [ 382.787811][ T8008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.787831][ T8008] RSP: 002b:00007f705a106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 382.787855][ T8008] RAX: ffffffffffffffda RBX: 00007f705c125fa0 RCX: 00007f705beac799 [ 382.787871][ T8008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.787885][ T8008] RBP: 00007f705a106090 R08: 0000000000000000 R09: 0000000000000000 [ 382.787899][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.787912][ T8008] R13: 00007f705c126038 R14: 00007f705c125fa0 R15: 00007ffc33280148 [ 382.787948][ T8008] [ 382.822523][ T8008] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 382.822603][ T8008] audit: out of memory in audit_log_start [ 382.847026][ T37] audit: type=1326 audit(1772707193.463:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8004 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f705be6cfce code=0x7ffc0000 [ 382.850892][ T37] audit: type=1326 audit(1772707193.463:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8004 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f705be6cfce code=0x7ffc0000 [ 382.851045][ T37] audit: type=1326 audit(1772707193.463:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8004 comm="syz.3.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f705be6cfce code=0x7ffc0000 [ 384.742736][ T8023] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 384.772010][ T7373] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 385.309271][ T7373] usb 3-1: Using ep0 maxpacket: 32 [ 385.392221][ T7373] usb 3-1: unable to get BOS descriptor or descriptor too short [ 385.393832][ T7373] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 385.393879][ T7373] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 90, changing to 7 [ 385.396613][ T7373] usb 3-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 385.396642][ T7373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.396661][ T7373] usb 3-1: Product: syz [ 385.396674][ T7373] usb 3-1: Manufacturer: syz [ 385.396687][ T7373] usb 3-1: SerialNumber: syz [ 385.519222][ T8028] FAULT_INJECTION: forcing a failure. [ 385.519222][ T8028] name failslab, interval 1, probability 0, space 0, times 0 [ 385.519265][ T8028] CPU: 0 UID: 0 PID: 8028 Comm: syz.1.617 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 385.519297][ T8028] Tainted: [L]=SOFTLOCKUP [ 385.519306][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.519320][ T8028] Call Trace: [ 385.519329][ T8028] [ 385.519339][ T8028] dump_stack_lvl+0xe8/0x150 [ 385.519382][ T8028] should_fail_ex+0x46b/0x600 [ 385.519429][ T8028] should_failslab+0xa8/0x100 [ 385.519470][ T8028] kmem_cache_alloc_noprof+0x87/0x680 [ 385.519505][ T8028] ? skb_clone+0x212/0x3a0 [ 385.519547][ T8028] skb_clone+0x212/0x3a0 [ 385.519579][ T8028] ? dev_queue_xmit_nit+0x268/0xad0 [ 385.519687][ T8028] dev_queue_xmit_nit+0x29a/0xad0 [ 385.519717][ T8028] ? skb_network_protocol+0x234/0x3f0 [ 385.519779][ T8028] ? dev_queue_xmit_nit+0x2d/0xad0 [ 385.519823][ T8028] dev_hard_start_xmit+0x1c5/0x8b0 [ 385.519877][ T8028] __dev_queue_xmit+0x172d/0x39d0 [ 385.519911][ T8028] ? netlink_unicast+0x805/0x9f0 [ 385.519984][ T8028] ? netlink_sendmsg+0x813/0xb40 [ 385.520009][ T8028] ? sock_sendmsg+0x4a4/0x500 [ 385.520044][ T8028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.520080][ T8028] ? __dev_queue_xmit+0x27d/0x39d0 [ 385.520137][ T8028] ? __pfx___dev_queue_xmit+0x10/0x10 [ 385.520186][ T8028] ? __copy_skb_header+0xa3/0x4a0 [ 385.520222][ T8028] ? __asan_memcpy+0x40/0x70 [ 385.520249][ T8028] ? __skb_clone+0x63/0x7a0 [ 385.520288][ T8028] ? __skb_clone+0x483/0x7a0 [ 385.520330][ T8028] ? skb_clone+0x246/0x3a0 [ 385.520370][ T8028] __netlink_deliver_tap+0x5ad/0x850 [ 385.520411][ T8028] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.520441][ T8028] netlink_deliver_tap+0x19c/0x1b0 [ 385.520471][ T8028] netlink_unicast+0x805/0x9f0 [ 385.520521][ T8028] ? __pfx_netlink_unicast+0x10/0x10 [ 385.520562][ T8028] ? netlink_sendmsg+0x650/0xb40 [ 385.520586][ T8028] ? skb_put+0x11b/0x210 [ 385.520620][ T8028] netlink_sendmsg+0x813/0xb40 [ 385.520648][ T8028] ? __lock_acquire+0x6b5/0x2cf0 [ 385.520680][ T8028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.520712][ T8028] ? __lock_acquire+0x6b5/0x2cf0 [ 385.520738][ T8028] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.520773][ T8028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.520801][ T8028] sock_sendmsg+0x4a4/0x500 [ 385.520832][ T8028] ? __pfx_sock_sendmsg+0x10/0x10 [ 385.520874][ T8028] ? __asan_memset+0x22/0x50 [ 385.520902][ T8028] ? iov_iter_bvec+0xb8/0x180 [ 385.520935][ T8028] splice_to_socket+0xae5/0x11f0 [ 385.521067][ T8028] ? __pfx_splice_to_socket+0x10/0x10 [ 385.521129][ T8028] ? get_pid_task+0x20/0x1f0 [ 385.521195][ T8028] ? rw_verify_area+0x25b/0x4e0 [ 385.521230][ T8028] ? __pfx_splice_to_socket+0x10/0x10 [ 385.521261][ T8028] do_splice+0xef8/0x1940 [ 385.521322][ T8028] ? __pfx_do_splice+0x10/0x10 [ 385.521366][ T8028] __se_sys_splice+0x353/0x490 [ 385.521404][ T8028] ? __pfx___se_sys_splice+0x10/0x10 [ 385.521442][ T8028] ? __x64_sys_splice+0x21/0xf0 [ 385.521477][ T8028] do_syscall_64+0x14d/0xf80 [ 385.521510][ T8028] ? trace_irq_disable+0x3b/0x150 [ 385.521538][ T8028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.521563][ T8028] ? clear_bhb_loop+0x40/0x90 [ 385.521593][ T8028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.521617][ T8028] RIP: 0033:0x7f7b9556c799 [ 385.521640][ T8028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.521660][ T8028] RSP: 002b:00007f7b937c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 385.521684][ T8028] RAX: ffffffffffffffda RBX: 00007f7b957e5fa0 RCX: 00007f7b9556c799 [ 385.521701][ T8028] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 385.521714][ T8028] RBP: 00007f7b937c6090 R08: 0000000000010d00 R09: 000000000000000f [ 385.521729][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.521742][ T8028] R13: 00007f7b957e6038 R14: 00007f7b957e5fa0 R15: 00007ffd9e57a5a8 [ 385.521782][ T8028] [ 385.524240][ T8031] netlink: 'syz.3.618': attribute type 10 has an invalid length. [ 385.947450][ T5882] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 386.023879][ T8023] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 386.107065][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 386.116467][ T5882] usb 5-1: unable to get BOS descriptor or descriptor too short [ 386.124265][ T5882] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 386.140233][ T5882] usb 5-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 386.140267][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.140289][ T5882] usb 5-1: Product: syz [ 386.140305][ T5882] usb 5-1: Manufacturer: syz [ 386.140321][ T5882] usb 5-1: SerialNumber: syz [ 386.427607][ T5882] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.820391][ T5882] usb 5-1: USB disconnect, device number 34 [ 387.261451][ T8042] input: syz0 as /devices/virtual/input/input19 [ 388.164433][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.412904][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 388.658371][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 388.710992][ T10] usb 2-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 388.711026][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.711049][ T10] usb 2-1: Product: syz [ 388.711065][ T10] usb 2-1: Manufacturer: syz [ 388.711081][ T10] usb 2-1: SerialNumber: syz [ 388.757916][ T10] usb 2-1: config 0 descriptor?? [ 388.775895][ T10] safe_serial 2-1:0.0: safe_serial converter detected [ 388.794656][ T10] usb 2-1: safe_serial converter now attached to ttyUSB0 [ 388.837502][ T5910] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 389.000260][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 389.067023][ T5910] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 389.067059][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.067139][ T5910] usb 5-1: Product: syz [ 389.067157][ T5910] usb 5-1: Manufacturer: syz [ 389.068153][ T5910] usb 5-1: SerialNumber: syz [ 389.821969][ T5910] usb 5-1: config 0 descriptor?? [ 389.907168][ T5910] gspca_main: se401-2.14.0 probing 047d:5003 [ 390.075826][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.089255][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.111859][ T8054] netlink: 120 bytes leftover after parsing attributes in process `syz.3.624'. [ 390.111885][ T8054] netlink: 'syz.3.624': attribute type 1 has an invalid length. [ 390.111899][ T8054] netlink: 64 bytes leftover after parsing attributes in process `syz.3.624'. [ 390.160460][ T5874] usb 2-1: USB disconnect, device number 19 [ 390.167141][ T5874] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 390.206002][ T5874] safe_serial 2-1:0.0: device disconnected [ 391.007523][ T7373] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 391.405523][ T5910] gspca_se401: read req failed req 0x06 error -19 [ 391.437741][ T5910] usb 5-1: USB disconnect, device number 35 [ 392.670213][ T5874] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 392.869899][ T5910] usb 3-1: USB disconnect, device number 19 [ 393.110260][ T5874] usb 4-1: config 8 has an invalid interface number: 193 but max is 0 [ 393.110295][ T5874] usb 4-1: config 8 has no interface number 0 [ 393.110332][ T5874] usb 4-1: config 8 interface 193 has no altsetting 0 [ 393.144901][ T5874] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 393.144941][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.144967][ T5874] usb 4-1: Product: syz [ 393.144984][ T5874] usb 4-1: Manufacturer: syz [ 393.145001][ T5874] usb 4-1: SerialNumber: syz [ 393.373684][ T8080] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 393.783885][ T8080] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 394.767355][ T5881] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 394.917678][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 395.022366][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 395.056873][ T5881] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 395.238307][ T5881] usb 2-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 395.238356][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.238379][ T5881] usb 2-1: Product: syz [ 395.238395][ T5881] usb 2-1: Manufacturer: syz [ 395.238412][ T5881] usb 2-1: SerialNumber: syz [ 396.364650][ T5874] usb 4-1: USB disconnect, device number 25 [ 396.467553][ T31] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 398.279331][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 398.286192][ T31] usb 1-1: config 8 has an invalid interface number: 152 but max is 2 [ 398.286227][ T31] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 398.286247][ T31] usb 1-1: config 8 has an invalid interface number: 248 but max is 2 [ 398.287050][ T31] usb 1-1: config 8 has an invalid interface number: 230 but max is 2 [ 398.287077][ T31] usb 1-1: config 8 has an invalid interface number: 14 but max is 2 [ 398.291079][ T31] usb 1-1: config 8 has 4 interfaces, different from the descriptor's value: 3 [ 398.292587][ T5944] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 398.293021][ T31] usb 1-1: config 8 has no interface number 0 [ 398.295811][ T31] usb 1-1: config 8 has no interface number 1 [ 398.297926][ T31] usb 1-1: config 8 has no interface number 2 [ 398.300441][ T31] usb 1-1: config 8 has no interface number 3 [ 398.302544][ T31] usb 1-1: config 8 interface 152 altsetting 64 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 398.304619][ T31] usb 1-1: config 8 interface 152 altsetting 64 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 398.305896][ T31] usb 1-1: config 8 interface 152 altsetting 64 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 398.306312][ T31] usb 1-1: config 8 interface 248 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 398.306340][ T31] usb 1-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0x6, skipping [ 398.306367][ T31] usb 1-1: config 8 interface 248 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 398.310344][ T31] usb 1-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0xF, skipping [ 398.314089][ T31] usb 1-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0xA, skipping [ 398.317731][ T31] usb 1-1: config 8 interface 248 altsetting 80 has 7 endpoint descriptors, different from the interface descriptor's value: 30 [ 398.325253][ T31] usb 1-1: config 8 interface 230 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 398.326979][ T31] usb 1-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 398.333857][ T31] usb 1-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 398.337265][ T31] usb 1-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 398.339830][ T31] usb 1-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 398.343055][ T31] usb 1-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 398.345447][ T31] usb 1-1: config 8 interface 14 altsetting 6 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 398.348189][ T31] usb 1-1: config 8 interface 14 altsetting 6 endpoint 0x8C has invalid maxpacket 51562, setting to 64 [ 398.349702][ T31] usb 1-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 398.354024][ T31] usb 1-1: config 8 interface 14 altsetting 6 has 7 endpoint descriptors, different from the interface descriptor's value: 5 [ 398.359511][ T31] usb 1-1: config 8 interface 152 has no altsetting 0 [ 398.361694][ T31] usb 1-1: config 8 interface 248 has no altsetting 0 [ 398.361754][ T31] usb 1-1: config 8 interface 230 has no altsetting 0 [ 398.368953][ T31] usb 1-1: config 8 interface 14 has no altsetting 0 [ 398.651009][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 398.667165][ T5944] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 398.668807][ T5944] usb 5-1: config 0 has no interface number 0 [ 398.708403][ T5944] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 398.708439][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.708461][ T5944] usb 5-1: Product: syz [ 398.708476][ T5944] usb 5-1: Manufacturer: syz [ 398.708492][ T5944] usb 5-1: SerialNumber: syz [ 398.905384][ T5944] usb 5-1: config 0 descriptor?? [ 399.217668][ T31] usb 1-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice=bb.1b [ 399.217704][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.217726][ T31] usb 1-1: Product: syz [ 399.218023][ T31] usb 1-1: Manufacturer: ఇ [ 399.684224][ T31] usb 1-1: can't set config #8, error -71 [ 400.475012][ T5881] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 400.483525][ T31] usb 1-1: USB disconnect, device number 35 [ 400.868893][ T5944] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 400.868927][ T5944] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 400.904569][ T5944] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 400.904913][ T5944] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 401.079508][ T5944] usb 5-1: USB disconnect, device number 36 [ 401.409495][ T5881] usb 2-1: USB disconnect, device number 20 [ 401.612429][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.717450][ T5882] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 401.868778][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 401.924429][ T5882] usb 4-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 401.924465][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.924487][ T5882] usb 4-1: Product: syz [ 401.924503][ T5882] usb 4-1: Manufacturer: syz [ 401.924519][ T5882] usb 4-1: SerialNumber: syz [ 401.989949][ T5882] usb 4-1: config 0 descriptor?? [ 402.009827][ T5882] safe_serial 4-1:0.0: safe_serial converter detected [ 402.048073][ T8120] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 402.049608][ T8120] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 402.082677][ T5882] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 402.262967][ T8126] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 402.658872][ T5881] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 402.665231][ T808] usb 4-1: USB disconnect, device number 26 [ 402.698787][ T808] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 402.699561][ T808] safe_serial 4-1:0.0: device disconnected [ 402.819192][ T5881] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 402.819231][ T5881] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 402.822452][ T5881] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.822485][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.822506][ T5881] usb 2-1: Product: syz [ 402.822521][ T5881] usb 2-1: Manufacturer: syz [ 402.822536][ T5881] usb 2-1: SerialNumber: syz [ 402.880357][ T5882] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 403.040382][ T5882] usb 5-1: not running at top speed; connect to a high speed hub [ 403.042320][ T5882] usb 5-1: config 8 has an invalid interface number: 152 but max is 2 [ 403.042350][ T5882] usb 5-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 403.042371][ T5882] usb 5-1: config 8 has an invalid interface number: 248 but max is 2 [ 403.042394][ T5882] usb 5-1: config 8 has an invalid interface number: 230 but max is 2 [ 403.042417][ T5882] usb 5-1: config 8 has an invalid interface number: 14 but max is 2 [ 403.042439][ T5882] usb 5-1: config 8 has 4 interfaces, different from the descriptor's value: 3 [ 403.042462][ T5882] usb 5-1: config 8 has no interface number 0 [ 403.042479][ T5882] usb 5-1: config 8 has no interface number 1 [ 403.042496][ T5882] usb 5-1: config 8 has no interface number 2 [ 403.042512][ T5882] usb 5-1: config 8 has no interface number 3 [ 403.042613][ T5882] usb 5-1: config 8 interface 152 altsetting 64 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 403.042648][ T5882] usb 5-1: config 8 interface 152 altsetting 64 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 403.042676][ T5882] usb 5-1: config 8 interface 152 altsetting 64 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 403.042740][ T5882] usb 5-1: config 8 interface 248 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 403.042766][ T5882] usb 5-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0x6, skipping [ 403.042791][ T5882] usb 5-1: config 8 interface 248 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 403.042815][ T5882] usb 5-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0xF, skipping [ 403.042838][ T5882] usb 5-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0xA, skipping [ 403.042861][ T5882] usb 5-1: config 8 interface 248 altsetting 80 has 7 endpoint descriptors, different from the interface descriptor's value: 30 [ 403.042905][ T5882] usb 5-1: config 8 interface 230 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 403.042945][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 403.042971][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 403.042995][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 403.043018][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 403.043042][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 403.043065][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 403.043093][ T5882] usb 5-1: config 8 interface 14 altsetting 6 endpoint 0x8C has invalid maxpacket 51562, setting to 64 [ 403.043123][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 403.043148][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has 7 endpoint descriptors, different from the interface descriptor's value: 5 [ 403.043176][ T5882] usb 5-1: config 8 interface 152 has no altsetting 0 [ 403.043210][ T5882] usb 5-1: config 8 interface 248 has no altsetting 0 [ 403.043231][ T5882] usb 5-1: config 8 interface 230 has no altsetting 0 [ 403.043251][ T5882] usb 5-1: config 8 interface 14 has no altsetting 0 [ 403.064147][ T5882] usb 5-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice=bb.1b [ 403.064183][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.064215][ T5882] usb 5-1: Product: syz [ 403.064231][ T5882] usb 5-1: Manufacturer: ఇ [ 403.064248][ T5882] usb 5-1: SerialNumber: syz [ 403.474018][ T5881] cdc_ncm 2-1:1.0: bind() failure [ 403.523304][ T5881] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 403.523356][ T5881] cdc_ncm 2-1:1.1: bind() failure [ 403.561442][ T5881] usb 2-1: USB disconnect, device number 21 [ 403.662379][ T8134] netlink: 'syz.0.651': attribute type 16 has an invalid length. [ 403.662402][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 406.005937][ T8154] Illegal XDP return value 4294967262 on prog (id 86) dev syz_tun, expect packet loss! [ 406.006024][ T8154] FAULT_INJECTION: forcing a failure. [ 406.006024][ T8154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.006124][ T8154] CPU: 0 UID: 0 PID: 8154 Comm: syz.1.656 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 406.006157][ T8154] Tainted: [L]=SOFTLOCKUP [ 406.006165][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 406.006179][ T8154] Call Trace: [ 406.006188][ T8154] [ 406.006199][ T8154] dump_stack_lvl+0xe8/0x150 [ 406.006244][ T8154] should_fail_ex+0x46b/0x600 [ 406.006291][ T8154] _copy_from_user+0x2d/0xb0 [ 406.006377][ T8154] kstrtouint_from_user+0xd6/0x180 [ 406.006444][ T8154] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 406.006476][ T8154] ? __lock_acquire+0x6b5/0x2cf0 [ 406.006510][ T8154] proc_fail_nth_write+0x8e/0x210 [ 406.006588][ T8154] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 406.006622][ T8154] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 406.006651][ T8154] vfs_write+0x2a3/0xba0 [ 406.006696][ T8154] ? __pfx_vfs_write+0x10/0x10 [ 406.006734][ T8154] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 406.006766][ T8154] ? lockdep_hardirqs_on+0x7a/0x110 [ 406.006797][ T8154] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 406.006830][ T8154] ? mutex_lock_nested+0x152/0x1d0 [ 406.006854][ T8154] ? fdget_pos+0x252/0x320 [ 406.006892][ T8154] ksys_write+0x156/0x270 [ 406.006930][ T8154] ? __pfx_ksys_write+0x10/0x10 [ 406.006977][ T8154] do_syscall_64+0x14d/0xf80 [ 406.007007][ T8154] ? trace_irq_disable+0x3b/0x150 [ 406.007032][ T8154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.007083][ T8154] ? clear_bhb_loop+0x40/0x90 [ 406.007113][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.007137][ T8154] RIP: 0033:0x7f7b9552cfce [ 406.007158][ T8154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 406.007178][ T8154] RSP: 002b:00007f7b937c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 406.007199][ T8154] RAX: ffffffffffffffda RBX: 00007f7b937c66c0 RCX: 00007f7b9552cfce [ 406.007214][ T8154] RDX: 0000000000000001 RSI: 00007f7b937c60a0 RDI: 0000000000000006 [ 406.007228][ T8154] RBP: 00007f7b937c6090 R08: 0000000000000000 R09: 0000000000000000 [ 406.007243][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.007256][ T8154] R13: 00007f7b957e6038 R14: 00007f7b957e5fa0 R15: 00007ffd9e57a5a8 [ 406.007294][ T8154] [ 407.298412][ T5882] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 407.298535][ T5882] dvb-usb: bulk message failed: -8 (3/0) [ 407.328149][ T5882] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 407.347101][ T5882] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 407.356279][ T5882] usb 5-1: media controller created [ 407.364842][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.560301][ T5882] dvb-usb: bulk message failed: -8 (6/0) [ 407.560392][ T5882] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 407.592916][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 407.616649][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 407.616677][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 407.660503][ T5882] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 407.660625][ T5882] dvb-usb: bulk message failed: -8 (3/0) [ 407.687583][ T5882] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 407.688773][ T5882] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 407.688846][ T5882] usb 5-1: media controller created [ 407.690979][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.768052][ T5882] dvb-usb: bulk message failed: -8 (6/0) [ 407.768144][ T5882] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 407.768516][ T5874] dvb-usb: bulk message failed: -8 (1/0) [ 407.768545][ T5874] dvb-usb: error while querying for an remote control event. [ 407.818994][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 407.822348][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 407.822374][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 407.904522][ T5882] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 407.904640][ T5882] dvb-usb: bulk message failed: -8 (3/0) [ 407.928167][ T5874] dvb-usb: bulk message failed: -8 (1/0) [ 407.928203][ T5874] dvb-usb: error while querying for an remote control event. [ 407.928582][ T5882] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 407.929533][ T5882] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 407.929608][ T5882] usb 5-1: media controller created [ 407.931679][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.992702][ T5882] dvb-usb: bulk message failed: -8 (6/0) [ 407.992788][ T5882] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 407.993010][ T5874] dvb-usb: bulk message failed: -8 (1/0) [ 407.993159][ T5874] dvb-usb: error while querying for an remote control event. [ 408.026881][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 408.042656][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 408.042681][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 408.066334][ T5882] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 408.066442][ T5882] dvb-usb: bulk message failed: -8 (3/0) [ 408.086038][ T5882] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 408.087063][ T5882] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 408.087122][ T5882] usb 5-1: media controller created [ 408.112055][ T5874] dvb-usb: bulk message failed: -8 (1/0) [ 408.112085][ T5874] dvb-usb: error while querying for an remote control event. [ 408.112981][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 408.147345][ T6913] dvb-usb: bulk message failed: -8 (1/0) [ 408.147380][ T6913] dvb-usb: error while querying for an remote control event. [ 408.197601][ T6913] dvb-usb: bulk message failed: -8 (1/0) [ 408.197634][ T6913] dvb-usb: error while querying for an remote control event. [ 408.268474][ T6913] dvb-usb: bulk message failed: -8 (1/0) [ 408.268511][ T6913] dvb-usb: error while querying for an remote control event. [ 408.281514][ T8171] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 408.307385][ T10] dvb-usb: bulk message failed: -8 (1/0) [ 408.307420][ T10] dvb-usb: error while querying for an remote control event. [ 408.314801][ T8171] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 408.370590][ T10] dvb-usb: bulk message failed: -8 (1/0) [ 408.370617][ T10] dvb-usb: error while querying for an remote control event. [ 408.391386][ T5882] dvb-usb: bulk message failed: -8 (6/0) [ 408.391477][ T5882] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 408.416763][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 408.428578][ T6913] dvb-usb: bulk message failed: -8 (1/0) [ 408.428612][ T6913] dvb-usb: error while querying for an remote control event. [ 408.432844][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 408.432869][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 408.492646][ T5882] usb 5-1: USB disconnect, device number 37 [ 408.537308][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 408.537343][ T10] dvb-usb: error while querying for an remote control event. [ 408.541031][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 408.541068][ T10] dvb-usb: error while querying for an remote control event. [ 408.587341][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 408.587377][ T10] dvb-usb: error while querying for an remote control event. [ 408.697411][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 408.697446][ T6913] dvb-usb: error while querying for an remote control event. [ 408.697503][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 408.697528][ T6913] dvb-usb: error while querying for an remote control event. [ 408.774298][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 408.774331][ T6913] dvb-usb: error while querying for an remote control event. [ 408.804998][ T8177] FAULT_INJECTION: forcing a failure. [ 408.804998][ T8177] name failslab, interval 1, probability 0, space 0, times 0 [ 408.805042][ T8177] CPU: 1 UID: 0 PID: 8177 Comm: syz.0.662 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 408.805072][ T8177] Tainted: [L]=SOFTLOCKUP [ 408.805081][ T8177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.805095][ T8177] Call Trace: [ 408.805104][ T8177] [ 408.805114][ T8177] dump_stack_lvl+0xe8/0x150 [ 408.805154][ T8177] should_fail_ex+0x46b/0x600 [ 408.805196][ T8177] ? __pfx_sock_alloc_inode+0x10/0x10 [ 408.805221][ T8177] should_failslab+0xa8/0x100 [ 408.805264][ T8177] ? __pfx_sock_alloc_inode+0x10/0x10 [ 408.805286][ T8177] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 408.805326][ T8177] ? sock_alloc_inode+0x28/0xc0 [ 408.805354][ T8177] ? __pfx_sock_alloc_inode+0x10/0x10 [ 408.805377][ T8177] sock_alloc_inode+0x28/0xc0 [ 408.805400][ T8177] alloc_inode+0x6a/0x1b0 [ 408.805506][ T8177] __sock_create+0x12d/0x9d0 [ 408.805531][ T8177] ? __kmalloc_noprof+0x408/0x7b0 [ 408.805579][ T8177] start_sync_thread+0xdf0/0x2920 [ 408.805779][ T8177] ? __pfx_sync_thread_backup+0x10/0x10 [ 408.805821][ T8177] ? __pfx_start_sync_thread+0x10/0x10 [ 408.805854][ T8177] ? __lock_acquire+0x6b5/0x2cf0 [ 408.805911][ T8177] do_ip_vs_set_ctl+0x49d/0xaf0 [ 408.805944][ T8177] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 408.805997][ T8177] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 408.806030][ T8177] ? rt_mutex_slowunlock+0x1cb/0x300 [ 408.806065][ T8177] ? nf_setsockopt+0x221/0x290 [ 408.806170][ T8177] nf_setsockopt+0x26f/0x290 [ 408.806205][ T8177] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 408.806234][ T8177] smc_setsockopt+0x249/0xac0 [ 408.806318][ T8177] ? __pfx_smc_setsockopt+0x10/0x10 [ 408.806349][ T8177] ? __fget_files+0x2a/0x420 [ 408.806376][ T8177] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 408.806408][ T8177] ? __pfx_smc_setsockopt+0x10/0x10 [ 408.806438][ T8177] do_sock_setsockopt+0x17c/0x1b0 [ 408.806474][ T8177] __x64_sys_setsockopt+0x143/0x1b0 [ 408.806511][ T8177] do_syscall_64+0x14d/0xf80 [ 408.806542][ T8177] ? trace_irq_disable+0x3b/0x150 [ 408.806569][ T8177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.806593][ T8177] ? clear_bhb_loop+0x40/0x90 [ 408.806622][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.806645][ T8177] RIP: 0033:0x7f7243adc799 [ 408.806677][ T8177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.806697][ T8177] RSP: 002b:00007f7241d36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.806721][ T8177] RAX: ffffffffffffffda RBX: 00007f7243d55fa0 RCX: 00007f7243adc799 [ 408.806738][ T8177] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 408.806751][ T8177] RBP: 00007f7241d36090 R08: 0000000000000018 R09: 0000000000000000 [ 408.806765][ T8177] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.806779][ T8177] R13: 00007f7243d56038 R14: 00007f7243d55fa0 R15: 00007fff2cecef58 [ 408.806815][ T8177] [ 408.806827][ T8177] socket: no more sockets [ 408.806835][ T8177] IPVS: Error during creation of socket; terminating [ 408.897479][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 408.897513][ T6913] dvb-usb: error while querying for an remote control event. [ 408.897591][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 408.897617][ T6913] dvb-usb: error while querying for an remote control event. [ 408.937335][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 408.937365][ T6913] dvb-usb: error while querying for an remote control event. [ 409.128509][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 409.128545][ T6913] dvb-usb: error while querying for an remote control event. [ 409.128606][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 409.128631][ T6913] dvb-usb: error while querying for an remote control event. [ 409.128694][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 409.128718][ T6913] dvb-usb: error while querying for an remote control event. [ 409.245856][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 409.287397][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 409.287430][ T6913] dvb-usb: error while querying for an remote control event. [ 409.287488][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 409.287512][ T6913] dvb-usb: error while querying for an remote control event. [ 409.675740][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 409.675776][ T6913] dvb-usb: error while querying for an remote control event. [ 409.675834][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 409.675859][ T6913] dvb-usb: error while querying for an remote control event. [ 409.828060][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 409.828202][ T6913] dvb-usb: error while querying for an remote control event. [ 409.830849][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 409.830997][ T6913] dvb-usb: error while querying for an remote control event. [ 410.297069][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 410.305204][ T6913] dvb-usb: error while querying for an remote control event. [ 410.346147][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 410.346391][ T6913] dvb-usb: error while querying for an remote control event. [ 410.955625][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 410.955661][ T6913] dvb-usb: error while querying for an remote control event. [ 410.955719][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 410.955744][ T6913] dvb-usb: error while querying for an remote control event. [ 411.100936][ T8192] netlink: 'syz.3.666': attribute type 1 has an invalid length. [ 411.109276][ T5874] dvb-usb: bulk message failed: -19 (1/0) [ 411.109402][ T5874] dvb-usb: error while querying for an remote control event. [ 411.109565][ T5874] dvb-usb: bulk message failed: -19 (1/0) [ 411.109636][ T5874] dvb-usb: error while querying for an remote control event. [ 411.186165][ T8194] FAULT_INJECTION: forcing a failure. [ 411.186165][ T8194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.186206][ T8194] CPU: 0 UID: 0 PID: 8194 Comm: syz.3.666 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 411.186238][ T8194] Tainted: [L]=SOFTLOCKUP [ 411.186246][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.186260][ T8194] Call Trace: [ 411.186269][ T8194] [ 411.186278][ T8194] dump_stack_lvl+0xe8/0x150 [ 411.186331][ T8194] should_fail_ex+0x46b/0x600 [ 411.186377][ T8194] _copy_from_iter+0x1d3/0x1670 [ 411.186412][ T8194] ? trace_kmem_cache_alloc+0x29/0xf0 [ 411.186445][ T8194] ? __alloc_skb+0x27d/0x7d0 [ 411.186474][ T8194] ? __pfx__copy_from_iter+0x10/0x10 [ 411.186498][ T8194] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 411.186532][ T8194] ? __alloc_skb+0x27d/0x7d0 [ 411.186565][ T8194] ? netlink_sendmsg+0x650/0xb40 [ 411.186590][ T8194] ? skb_put+0x11b/0x210 [ 411.186623][ T8194] netlink_sendmsg+0x6c0/0xb40 [ 411.186659][ T8194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.186693][ T8194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.186731][ T8194] ____sys_sendmsg+0xa4e/0xac0 [ 411.186772][ T8194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.186815][ T8194] ? import_iovec+0x73/0xa0 [ 411.186847][ T8194] ___sys_sendmsg+0x2a5/0x360 [ 411.186885][ T8194] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.186956][ T8194] ? __fget_files+0x2a/0x420 [ 411.186983][ T8194] ? __fget_files+0x3a6/0x420 [ 411.187022][ T8194] __x64_sys_sendmsg+0x1c3/0x2a0 [ 411.187058][ T8194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.187107][ T8194] ? __pfx_ksys_write+0x10/0x10 [ 411.187153][ T8194] do_syscall_64+0x14d/0xf80 [ 411.187182][ T8194] ? trace_irq_disable+0x3b/0x150 [ 411.187206][ T8194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.187230][ T8194] ? clear_bhb_loop+0x40/0x90 [ 411.187257][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.187280][ T8194] RIP: 0033:0x7f705beac799 [ 411.187301][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.187330][ T8194] RSP: 002b:00007f705a0e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.187353][ T8194] RAX: ffffffffffffffda RBX: 00007f705c126090 RCX: 00007f705beac799 [ 411.187370][ T8194] RDX: 0000000000000042 RSI: 0000200000000c80 RDI: 0000000000000003 [ 411.187384][ T8194] RBP: 00007f705a0e5090 R08: 0000000000000000 R09: 0000000000000000 [ 411.187399][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.187412][ T8194] R13: 00007f705c126128 R14: 00007f705c126090 R15: 00007ffc33280148 [ 411.187446][ T8194] [ 411.267632][ T930] dvb-usb: bulk message failed: -19 (1/0) [ 411.267757][ T930] dvb-usb: error while querying for an remote control event. [ 411.267925][ T930] dvb-usb: bulk message failed: -19 (1/0) [ 411.267989][ T930] dvb-usb: error while querying for an remote control event. [ 411.277548][ T6913] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 411.278084][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 411.392518][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 411.407575][ T6913] usb 3-1: device descriptor read/64, error -32 [ 411.427420][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 411.427457][ T10] dvb-usb: error while querying for an remote control event. [ 411.534914][ T8192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.587385][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 411.587423][ T10] dvb-usb: error while querying for an remote control event. [ 412.074016][ T8200] input: syz0 as /devices/virtual/input/input24 [ 412.920118][ T6913] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 412.920487][ T5874] dvb-usb: bulk message failed: -19 (1/0) [ 412.920519][ T5874] dvb-usb: error while querying for an remote control event. [ 413.017366][ T5881] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 413.080653][ T5874] dvb-usb: bulk message failed: -19 (1/0) [ 413.080690][ T5874] dvb-usb: error while querying for an remote control event. [ 413.087375][ T6913] usb 3-1: Using ep0 maxpacket: 16 [ 413.116153][ T6913] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 413.116186][ T6913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.116211][ T6913] usb 3-1: Product: syz [ 413.116241][ T6913] usb 3-1: Manufacturer: syz [ 413.116258][ T6913] usb 3-1: SerialNumber: syz [ 413.179791][ T6913] usb 3-1: config 0 descriptor?? [ 413.191408][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 413.202530][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 413.204301][ T5881] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 413.228530][ T5881] usb 2-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 413.228564][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.228586][ T5881] usb 2-1: Product: syz [ 413.228602][ T5881] usb 2-1: Manufacturer: syz [ 413.228617][ T5881] usb 2-1: SerialNumber: syz [ 413.248696][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 413.248790][ T10] dvb-usb: error while querying for an remote control event. [ 413.570897][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 413.570931][ T10] dvb-usb: error while querying for an remote control event. [ 413.944732][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 414.161301][ T6913] safe_serial 3-1:0.0: safe_serial converter detected [ 414.189500][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 414.189535][ T10] dvb-usb: error while querying for an remote control event. [ 414.361080][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 414.361118][ T10] dvb-usb: error while querying for an remote control event. [ 414.519744][ T5874] dvb-usb: bulk message failed: -19 (1/0) [ 414.519779][ T5874] dvb-usb: error while querying for an remote control event. [ 414.570303][ T6913] usb 3-1: safe_serial converter now attached to ttyUSB0 [ 414.594143][ T6913] usb 3-1: USB disconnect, device number 21 [ 414.631396][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 414.661114][ T6913] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 414.661894][ T6913] safe_serial 3-1:0.0: device disconnected [ 415.000583][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 415.102789][ T8218] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 415.116768][ T8217] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 415.206918][ T5881] usb 2-1: can't set config #1, error -71 [ 415.269437][ T5881] usb 2-1: USB disconnect, device number 22 [ 419.237764][ T36] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 421.002011][ T36] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 421.002044][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.002067][ T36] usb 4-1: Product: syz [ 421.002081][ T36] usb 4-1: Manufacturer: syz [ 421.002097][ T36] usb 4-1: SerialNumber: syz [ 421.030780][ T36] usb 4-1: config 0 descriptor?? [ 421.079337][ T36] hub 4-1:0.0: bad descriptor, ignoring hub [ 421.079379][ T36] hub 4-1:0.0: probe with driver hub failed with error -5 [ 421.108444][ T8266] netlink: 136 bytes leftover after parsing attributes in process `syz.0.686'. [ 421.109656][ T36] f81232 4-1:0.0: f81534a converter detected [ 421.786929][ T5944] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 421.836210][ T36] usb 4-1: f81534a converter now attached to ttyUSB0 [ 421.977412][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 421.982510][ T5944] usb 5-1: unable to get BOS descriptor or descriptor too short [ 421.985731][ T5944] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 422.033720][ T5944] usb 5-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 422.033746][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.033761][ T5944] usb 5-1: Product: syz [ 422.033772][ T5944] usb 5-1: Manufacturer: syz [ 422.033783][ T5944] usb 5-1: SerialNumber: syz [ 422.207759][ T36] usb 4-1: USB disconnect, device number 27 [ 422.253672][ T36] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 422.342072][ T36] f81232 4-1:0.0: device disconnected [ 422.450632][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 422.847489][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 423.053212][ T10] usb 2-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 423.053238][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.053272][ T10] usb 2-1: Product: syz [ 423.053288][ T10] usb 2-1: Manufacturer: syz [ 423.053304][ T10] usb 2-1: SerialNumber: syz [ 423.226686][ T10] usb 2-1: config 0 descriptor?? [ 423.252441][ T10] safe_serial 2-1:0.0: safe_serial converter detected [ 423.302072][ T5944] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 423.347623][ T8279] zonefs (nullb0) ERROR: Not a zoned block device [ 423.403816][ T10] usb 2-1: safe_serial converter now attached to ttyUSB0 [ 423.440462][ T1363] Bluetooth: hci5: Frame reassembly failed (-84) [ 423.468756][ T10] usb 2-1: USB disconnect, device number 23 [ 423.518770][ T10] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 423.540699][ T10] safe_serial 2-1:0.0: device disconnected [ 423.791199][ T5944] usb 5-1: USB disconnect, device number 38 [ 423.989948][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.252304][ T8284] FAULT_INJECTION: forcing a failure. [ 424.252304][ T8284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.252348][ T8284] CPU: 1 UID: 0 PID: 8284 Comm: syz.2.691 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 424.252379][ T8284] Tainted: [L]=SOFTLOCKUP [ 424.252387][ T8284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 424.252401][ T8284] Call Trace: [ 424.252410][ T8284] [ 424.252420][ T8284] dump_stack_lvl+0xe8/0x150 [ 424.252459][ T8284] should_fail_ex+0x46b/0x600 [ 424.252503][ T8284] _copy_from_iter+0x1d3/0x1670 [ 424.252536][ T8284] ? trace_kmem_cache_alloc+0x29/0xf0 [ 424.252568][ T8284] ? __alloc_skb+0x27d/0x7d0 [ 424.252596][ T8284] ? __pfx__copy_from_iter+0x10/0x10 [ 424.252618][ T8284] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 424.252650][ T8284] ? __alloc_skb+0x27d/0x7d0 [ 424.252678][ T8284] ? netlink_sendmsg+0x650/0xb40 [ 424.252697][ T8284] ? skb_put+0x11b/0x210 [ 424.252724][ T8284] netlink_sendmsg+0x6c0/0xb40 [ 424.252752][ T8284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.252779][ T8284] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.252809][ T8284] ____sys_sendmsg+0xa4e/0xac0 [ 424.252842][ T8284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.252875][ T8284] ? import_iovec+0x73/0xa0 [ 424.252901][ T8284] ___sys_sendmsg+0x2a5/0x360 [ 424.252931][ T8284] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.252985][ T8284] ? __fget_files+0x2a/0x420 [ 424.253007][ T8284] ? __fget_files+0x3a6/0x420 [ 424.253037][ T8284] __x64_sys_sendmsg+0x1c3/0x2a0 [ 424.253065][ T8284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.253098][ T8284] ? __pfx_ksys_write+0x10/0x10 [ 424.253134][ T8284] do_syscall_64+0x14d/0xf80 [ 424.253160][ T8284] ? trace_irq_disable+0x3b/0x150 [ 424.253181][ T8284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.253200][ T8284] ? clear_bhb_loop+0x40/0x90 [ 424.253232][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.253250][ T8284] RIP: 0033:0x7f4ba885c799 [ 424.253268][ T8284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.253284][ T8284] RSP: 002b:00007f4ba6ab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.253303][ T8284] RAX: ffffffffffffffda RBX: 00007f4ba8ad5fa0 RCX: 00007f4ba885c799 [ 424.253316][ T8284] RDX: 0000000020008000 RSI: 0000200000000180 RDI: 0000000000000003 [ 424.253328][ T8284] RBP: 00007f4ba6ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 424.253339][ T8284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.253350][ T8284] R13: 00007f4ba8ad6038 R14: 00007f4ba8ad5fa0 R15: 00007ffccdaead28 [ 424.253377][ T8284] [ 424.257394][ T5944] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 424.456853][ T5944] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.488103][ T5944] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 424.488193][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 424.488265][ T5944] usb 5-1: Product: syz [ 424.488307][ T5944] usb 5-1: Manufacturer: syz [ 424.488350][ T5944] usb 5-1: SerialNumber: syz [ 425.083774][ T5944] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 425.497921][ T5114] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 425.603997][ T8299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.694'. [ 426.080675][ T808] usb 5-1: USB disconnect, device number 39 [ 426.101647][ T808] usblp0: removed [ 427.295189][ T8321] netlink: 52 bytes leftover after parsing attributes in process `syz.0.701'. [ 427.341983][ T8324] zonefs (nullb0) ERROR: Not a zoned block device [ 427.487361][ T7373] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 427.607310][ T5944] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 427.647333][ T7373] usb 4-1: Using ep0 maxpacket: 16 [ 427.652583][ T7373] usb 4-1: unable to get BOS descriptor or descriptor too short [ 427.655853][ T7373] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 427.663150][ T7373] usb 4-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 427.663190][ T7373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.663211][ T7373] usb 4-1: Product: syz [ 427.663227][ T7373] usb 4-1: Manufacturer: syz [ 427.663243][ T7373] usb 4-1: SerialNumber: syz [ 427.797654][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 427.812891][ T5944] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.812928][ T5944] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.812953][ T5944] usb 3-1: config 0 interface 0 has no altsetting 0 [ 427.813044][ T5944] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 427.813069][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.946471][ T5944] usb 3-1: config 0 descriptor?? [ 428.052016][ T7373] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 428.127861][ T5882] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 428.156627][ T8316] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 428.156776][ T8318] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 428.728077][ T7373] usb 4-1: USB disconnect, device number 28 [ 428.807923][ T5944] usbhid 3-1:0.0: can't add hid device: -71 [ 428.808060][ T5944] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 428.821489][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 428.861957][ T5944] usb 3-1: USB disconnect, device number 22 [ 428.862494][ T5882] usb 2-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 428.862521][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.862542][ T5882] usb 2-1: Product: syz [ 428.862558][ T5882] usb 2-1: Manufacturer: syz [ 428.862573][ T5882] usb 2-1: SerialNumber: syz [ 429.050687][ T5882] usb 2-1: config 0 descriptor?? [ 429.109393][ T5882] safe_serial 2-1:0.0: safe_serial converter detected [ 429.149439][ T5882] usb 2-1: safe_serial converter now attached to ttyUSB0 [ 429.239834][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.079515][ T8352] netlink: 52 bytes leftover after parsing attributes in process `syz.3.712'. [ 430.129963][ T8352] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.145301][ T8352] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.234828][ T5944] usb 2-1: USB disconnect, device number 24 [ 430.284315][ T5944] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 430.285084][ T5944] safe_serial 2-1:0.0: device disconnected [ 430.477367][ T808] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 430.630793][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 430.633288][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 430.633322][ T808] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 430.633351][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 430.636318][ T808] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 430.636351][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.636383][ T808] usb 5-1: Product: syz [ 430.636399][ T808] usb 5-1: Manufacturer: syz [ 430.636416][ T808] usb 5-1: SerialNumber: syz [ 430.747442][ T808] usb 5-1: config 0 descriptor?? [ 430.777494][ T808] radioshark 5-1:0.0: Invalid radioSHARK device [ 430.777535][ T808] radioshark 5-1:0.0: probe with driver radioshark failed with error -22 [ 430.778143][ T808] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 430.918051][ T36] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 431.091053][ T36] usb 1-1: not running at top speed; connect to a high speed hub [ 431.093279][ T36] usb 1-1: config 8 has an invalid interface number: 152 but max is 2 [ 431.093311][ T36] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 431.093332][ T36] usb 1-1: config 8 has an invalid interface number: 248 but max is 2 [ 431.093356][ T36] usb 1-1: config 8 has an invalid interface number: 230 but max is 2 [ 431.093377][ T36] usb 1-1: config 8 has an invalid interface number: 14 but max is 2 [ 431.093401][ T36] usb 1-1: config 8 has 4 interfaces, different from the descriptor's value: 3 [ 431.093424][ T36] usb 1-1: config 8 has no interface number 0 [ 431.093442][ T36] usb 1-1: config 8 has no interface number 1 [ 431.093470][ T36] usb 1-1: config 8 has no interface number 2 [ 431.093488][ T36] usb 1-1: config 8 has no interface number 3 [ 431.093573][ T36] usb 1-1: config 8 interface 152 altsetting 64 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 431.093608][ T36] usb 1-1: config 8 interface 152 altsetting 64 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 431.093638][ T36] usb 1-1: config 8 interface 152 altsetting 64 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 431.093682][ T36] usb 1-1: config 8 interface 248 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 431.093707][ T36] usb 1-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0x6, skipping [ 431.093732][ T36] usb 1-1: config 8 interface 248 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 431.093757][ T36] usb 1-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0xF, skipping [ 431.093782][ T36] usb 1-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0xA, skipping [ 431.093805][ T36] usb 1-1: config 8 interface 248 altsetting 80 has 7 endpoint descriptors, different from the interface descriptor's value: 30 [ 431.093850][ T36] usb 1-1: config 8 interface 230 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 431.093889][ T36] usb 1-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 431.093914][ T36] usb 1-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 431.093938][ T36] usb 1-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 431.093963][ T36] usb 1-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 431.093988][ T36] usb 1-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 431.094012][ T36] usb 1-1: config 8 interface 14 altsetting 6 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 431.094040][ T36] usb 1-1: config 8 interface 14 altsetting 6 endpoint 0x8C has invalid maxpacket 51562, setting to 64 [ 431.094068][ T36] usb 1-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 431.094092][ T36] usb 1-1: config 8 interface 14 altsetting 6 has 7 endpoint descriptors, different from the interface descriptor's value: 5 [ 431.094121][ T36] usb 1-1: config 8 interface 152 has no altsetting 0 [ 431.094141][ T36] usb 1-1: config 8 interface 248 has no altsetting 0 [ 431.094160][ T36] usb 1-1: config 8 interface 230 has no altsetting 0 [ 431.094180][ T36] usb 1-1: config 8 interface 14 has no altsetting 0 [ 431.399611][ T36] usb 1-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice=bb.1b [ 431.399647][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.399670][ T36] usb 1-1: Product: syz [ 431.399686][ T36] usb 1-1: Manufacturer: ఇ [ 431.399702][ T36] usb 1-1: SerialNumber: syz [ 431.821494][ T5874] usb 5-1: USB disconnect, device number 40 [ 432.308378][ T8372] zonefs (nullb0) ERROR: Not a zoned block device [ 432.330089][ T36] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 432.330219][ T36] dvb-usb: bulk message failed: -8 (3/0) [ 432.366190][ T36] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 432.378745][ T36] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 432.378826][ T36] usb 1-1: media controller created [ 432.380974][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 432.567804][ T36] dvb-usb: bulk message failed: -8 (6/0) [ 432.567896][ T36] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 432.602874][ T36] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 432.629832][ T36] dvb-usb: schedule remote query interval to 150 msecs. [ 432.629857][ T36] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 432.642192][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.718'. [ 432.676877][ T36] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 432.676989][ T36] dvb-usb: bulk message failed: -8 (3/0) [ 432.696472][ T36] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 432.706991][ T36] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 432.707068][ T36] usb 1-1: media controller created [ 432.723945][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 432.742860][ T36] dvb-usb: bulk message failed: -8 (6/0) [ 432.742951][ T36] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 432.762356][ T36] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 432.764960][ T36] dvb-usb: schedule remote query interval to 150 msecs. [ 432.764984][ T36] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 432.806484][ T31] dvb-usb: bulk message failed: -8 (1/0) [ 432.806641][ T31] dvb-usb: error while querying for an remote control event. [ 432.842870][ T8378] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 432.921497][ T808] dvb-usb: bulk message failed: -8 (1/0) [ 432.921648][ T808] dvb-usb: error while querying for an remote control event. [ 432.955968][ T8378] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 432.977851][ T808] dvb-usb: bulk message failed: -8 (1/0) [ 432.977882][ T808] dvb-usb: error while querying for an remote control event. [ 433.135492][ T808] dvb-usb: bulk message failed: -8 (1/0) [ 433.135635][ T808] dvb-usb: error while querying for an remote control event. [ 433.153348][ T31] dvb-usb: bulk message failed: -8 (1/0) [ 433.153506][ T31] dvb-usb: error while querying for an remote control event. [ 433.178102][ T36] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 433.226537][ T8374] netlink: 'syz.1.718': attribute type 83 has an invalid length. [ 433.254338][ T36] dvb-usb: bulk message failed: -8 (3/0) [ 433.288659][ T36] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 433.288920][ T31] dvb-usb: bulk message failed: -8 (1/0) [ 433.289062][ T31] dvb-usb: error while querying for an remote control event. [ 433.294800][ T36] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 433.294906][ T36] usb 1-1: media controller created [ 433.306274][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.327384][ T31] dvb-usb: bulk message failed: -8 (1/0) [ 433.327417][ T31] dvb-usb: error while querying for an remote control event. [ 433.364142][ T36] dvb-usb: bulk message failed: -8 (6/0) [ 433.364240][ T36] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 433.385860][ T36] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28 [ 433.400165][ T36] dvb-usb: schedule remote query interval to 150 msecs. [ 433.400191][ T36] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 433.424523][ T36] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 433.424646][ T36] dvb-usb: bulk message failed: -8 (3/0) [ 433.446866][ T36] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 433.449403][ T31] dvb-usb: bulk message failed: -8 (1/0) [ 433.449434][ T31] dvb-usb: error while querying for an remote control event. [ 433.450900][ T36] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 433.450958][ T36] usb 1-1: media controller created [ 433.453103][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.503244][ T36] dvb-usb: bulk message failed: -8 (6/0) [ 433.503335][ T36] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 433.503563][ T31] dvb-usb: bulk message failed: -8 (1/0) [ 433.503708][ T31] dvb-usb: error while querying for an remote control event. [ 433.536914][ T36] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 433.551421][ T36] dvb-usb: schedule remote query interval to 150 msecs. [ 433.551446][ T36] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 433.581241][ T31] dvb-usb: bulk message failed: -8 (1/0) [ 433.581276][ T31] dvb-usb: error while querying for an remote control event. [ 433.581727][ T36] usb 1-1: USB disconnect, device number 36 [ 433.608378][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 433.608412][ T31] dvb-usb: error while querying for an remote control event. [ 433.707374][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 433.707409][ T31] dvb-usb: error while querying for an remote control event. [ 433.737405][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 433.737439][ T31] dvb-usb: error while querying for an remote control event. [ 433.767415][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 433.767451][ T31] dvb-usb: error while querying for an remote control event. [ 434.123074][ T808] dvb-usb: bulk message failed: -19 (1/0) [ 434.123108][ T808] dvb-usb: error while querying for an remote control event. [ 434.123356][ T7373] dvb-usb: bulk message failed: -19 (1/0) [ 434.123381][ T7373] dvb-usb: error while querying for an remote control event. [ 434.123433][ T7373] dvb-usb: bulk message failed: -19 (1/0) [ 434.123456][ T7373] dvb-usb: error while querying for an remote control event. [ 434.706501][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 434.706546][ T31] dvb-usb: error while querying for an remote control event. [ 434.706605][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 434.706631][ T31] dvb-usb: error while querying for an remote control event. [ 434.706687][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 434.706712][ T31] dvb-usb: error while querying for an remote control event. [ 434.813188][ T36] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 434.858187][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 434.858223][ T31] dvb-usb: error while querying for an remote control event. [ 434.858280][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 434.858306][ T31] dvb-usb: error while querying for an remote control event. [ 435.017363][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 435.017401][ T31] dvb-usb: error while querying for an remote control event. [ 435.017469][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 435.017495][ T31] dvb-usb: error while querying for an remote control event. [ 435.177406][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 435.177455][ T31] dvb-usb: error while querying for an remote control event. [ 435.177515][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 435.177541][ T31] dvb-usb: error while querying for an remote control event. [ 435.276667][ T8397] FAULT_INJECTION: forcing a failure. [ 435.276667][ T8397] name failslab, interval 1, probability 0, space 0, times 0 [ 435.276723][ T8397] CPU: 1 UID: 0 PID: 8397 Comm: syz.1.725 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 435.276755][ T8397] Tainted: [L]=SOFTLOCKUP [ 435.276763][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.276783][ T8397] Call Trace: [ 435.276796][ T8397] [ 435.276806][ T8397] dump_stack_lvl+0xe8/0x150 [ 435.276847][ T8397] should_fail_ex+0x46b/0x600 [ 435.276907][ T8397] should_failslab+0xa8/0x100 [ 435.276946][ T8397] kmem_cache_alloc_noprof+0x87/0x680 [ 435.276981][ T8397] ? skb_clone+0x212/0x3a0 [ 435.277021][ T8397] skb_clone+0x212/0x3a0 [ 435.277091][ T8397] __netlink_deliver_tap+0x404/0x850 [ 435.277132][ T8397] ? netlink_deliver_tap+0x2e/0x1b0 [ 435.277163][ T8397] netlink_deliver_tap+0x19c/0x1b0 [ 435.277189][ T8397] netlink_unicast+0x805/0x9f0 [ 435.277236][ T8397] ? __pfx_netlink_unicast+0x10/0x10 [ 435.277277][ T8397] ? netlink_sendmsg+0x650/0xb40 [ 435.277300][ T8397] ? skb_put+0x11b/0x210 [ 435.277334][ T8397] netlink_sendmsg+0x813/0xb40 [ 435.277371][ T8397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.277407][ T8397] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.277445][ T8397] ____sys_sendmsg+0xa4e/0xac0 [ 435.277487][ T8397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.277532][ T8397] ? import_iovec+0x73/0xa0 [ 435.277566][ T8397] ___sys_sendmsg+0x2a5/0x360 [ 435.277605][ T8397] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.277678][ T8397] ? __fget_files+0x2a/0x420 [ 435.277707][ T8397] ? __fget_files+0x3a6/0x420 [ 435.277746][ T8397] __x64_sys_sendmsg+0x1c3/0x2a0 [ 435.277783][ T8397] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.277827][ T8397] ? __pfx_ksys_write+0x10/0x10 [ 435.277873][ T8397] do_syscall_64+0x14d/0xf80 [ 435.277905][ T8397] ? trace_irq_disable+0x3b/0x150 [ 435.277933][ T8397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.277957][ T8397] ? clear_bhb_loop+0x40/0x90 [ 435.277986][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.278009][ T8397] RIP: 0033:0x7f7b9556c799 [ 435.278031][ T8397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.278058][ T8397] RSP: 002b:00007f7b937c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.278082][ T8397] RAX: ffffffffffffffda RBX: 00007f7b957e5fa0 RCX: 00007f7b9556c799 [ 435.278099][ T8397] RDX: 0000000000008800 RSI: 0000200000000140 RDI: 0000000000000003 [ 435.278113][ T8397] RBP: 00007f7b937c6090 R08: 0000000000000000 R09: 0000000000000000 [ 435.278127][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.278140][ T8397] R13: 00007f7b957e6038 R14: 00007f7b957e5fa0 R15: 00007ffd9e57a5a8 [ 435.278177][ T8397] [ 435.337414][ T808] dvb-usb: bulk message failed: -19 (1/0) [ 435.337451][ T808] dvb-usb: error while querying for an remote control event. [ 435.337512][ T808] dvb-usb: bulk message failed: -19 (1/0) [ 435.337539][ T808] dvb-usb: error while querying for an remote control event. [ 435.497456][ T808] dvb-usb: bulk message failed: -19 (1/0) [ 435.497490][ T808] dvb-usb: error while querying for an remote control event. [ 435.497552][ T808] dvb-usb: bulk message failed: -19 (1/0) [ 435.497578][ T808] dvb-usb: error while querying for an remote control event. [ 435.659035][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 435.659072][ T31] dvb-usb: error while querying for an remote control event. [ 435.659131][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 435.659157][ T31] dvb-usb: error while querying for an remote control event. [ 436.283510][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 436.283712][ T31] dvb-usb: error while querying for an remote control event. [ 436.284275][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 436.284417][ T31] dvb-usb: error while querying for an remote control event. [ 437.022679][ T36] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 437.027405][ T31] dvb-usb: bulk message failed: -19 (1/0) [ 437.027440][ T31] dvb-usb: error while querying for an remote control event. [ 437.187477][ T808] dvb-usb: bulk message failed: -19 (1/0) [ 437.187516][ T808] dvb-usb: error while querying for an remote control event. [ 437.397453][ T5882] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 437.416013][ T808] dvb-usb: bulk message failed: -19 (1/0) [ 437.416050][ T808] dvb-usb: error while querying for an remote control event. [ 437.469921][ T36] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 437.917399][ T808] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 438.067741][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 438.090796][ T808] usb 4-1: not running at top speed; connect to a high speed hub [ 438.092495][ T808] usb 4-1: config 8 has an invalid interface number: 152 but max is 2 [ 438.092527][ T808] usb 4-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 438.092548][ T808] usb 4-1: config 8 has an invalid interface number: 248 but max is 2 [ 438.092572][ T808] usb 4-1: config 8 has an invalid interface number: 230 but max is 2 [ 438.092594][ T808] usb 4-1: config 8 has an invalid interface number: 14 but max is 2 [ 438.092617][ T808] usb 4-1: config 8 has 4 interfaces, different from the descriptor's value: 3 [ 438.092640][ T808] usb 4-1: config 8 has no interface number 0 [ 438.092657][ T808] usb 4-1: config 8 has no interface number 1 [ 438.092674][ T808] usb 4-1: config 8 has no interface number 2 [ 438.092690][ T808] usb 4-1: config 8 has no interface number 3 [ 438.092776][ T808] usb 4-1: config 8 interface 152 altsetting 64 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 438.092811][ T808] usb 4-1: config 8 interface 152 altsetting 64 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 438.092840][ T808] usb 4-1: config 8 interface 152 altsetting 64 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 438.092886][ T808] usb 4-1: config 8 interface 248 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 438.092910][ T808] usb 4-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0x6, skipping [ 438.092935][ T808] usb 4-1: config 8 interface 248 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 438.092960][ T808] usb 4-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0xF, skipping [ 438.092985][ T808] usb 4-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0xA, skipping [ 438.093009][ T808] usb 4-1: config 8 interface 248 altsetting 80 has 7 endpoint descriptors, different from the interface descriptor's value: 30 [ 438.093054][ T808] usb 4-1: config 8 interface 230 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 438.093093][ T808] usb 4-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 438.093128][ T808] usb 4-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 438.093152][ T808] usb 4-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 438.093177][ T808] usb 4-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 438.093202][ T808] usb 4-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 438.093226][ T808] usb 4-1: config 8 interface 14 altsetting 6 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 438.093254][ T808] usb 4-1: config 8 interface 14 altsetting 6 endpoint 0x8C has invalid maxpacket 51562, setting to 64 [ 438.093284][ T808] usb 4-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 438.093309][ T808] usb 4-1: config 8 interface 14 altsetting 6 has 7 endpoint descriptors, different from the interface descriptor's value: 5 [ 438.093339][ T808] usb 4-1: config 8 interface 152 has no altsetting 0 [ 438.093359][ T808] usb 4-1: config 8 interface 248 has no altsetting 0 [ 438.093378][ T808] usb 4-1: config 8 interface 230 has no altsetting 0 [ 438.093398][ T808] usb 4-1: config 8 interface 14 has no altsetting 0 [ 438.258153][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 438.294218][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 438.296642][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 438.296677][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 438.372621][ T31] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 438.374364][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.374390][ T31] usb 2-1: Product: syz [ 438.374406][ T31] usb 2-1: Manufacturer: syz [ 438.374423][ T31] usb 2-1: SerialNumber: syz [ 438.564085][ T31] usb 2-1: config 0 descriptor?? [ 438.648990][ T31] radioshark 2-1:0.0: Invalid radioSHARK device [ 438.649031][ T31] radioshark 2-1:0.0: probe with driver radioshark failed with error -22 [ 438.695206][ T31] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 439.247007][ T808] usb 4-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice=bb.1b [ 439.247044][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.247066][ T808] usb 4-1: Product: syz [ 439.247082][ T808] usb 4-1: Manufacturer: ఇ [ 439.247097][ T808] usb 4-1: SerialNumber: syz [ 439.302251][ T31] usb 2-1: USB disconnect, device number 25 [ 439.317363][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 439.390556][ T5882] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 439.390592][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.390615][ T5882] usb 3-1: Product: syz [ 439.390631][ T5882] usb 3-1: Manufacturer: syz [ 439.390646][ T5882] usb 3-1: SerialNumber: syz [ 439.410636][ T5882] usb 3-1: config 0 descriptor?? [ 439.546100][ T5882] safe_serial 3-1:0.0: safe_serial converter detected [ 439.632316][ T5882] usb 3-1: safe_serial converter now attached to ttyUSB0 [ 439.962366][ T5882] usb 3-1: USB disconnect, device number 23 [ 440.017399][ T36] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 440.045651][ T8420] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 440.065118][ T31] IPVS: starting estimator thread 0... [ 440.126630][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.126716][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.159650][ T5882] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 440.160640][ T5882] safe_serial 3-1:0.0: device disconnected [ 440.167660][ T8425] IPVS: using max 8 ests per chain, 19200 per kthread [ 440.749077][ T8427] zonefs (nullb0) ERROR: Not a zoned block device [ 441.106437][ T8431] netlink: 'syz.4.736': attribute type 29 has an invalid length. [ 441.120230][ T8431] netlink: 'syz.4.736': attribute type 29 has an invalid length. [ 441.152487][ T8431] netlink: 500 bytes leftover after parsing attributes in process `syz.4.736'. [ 441.188082][ T8431] unsupported nla_type 58 [ 441.328362][ T808] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 441.328485][ T808] dvb-usb: bulk message failed: -8 (3/0) [ 441.335833][ T808] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 441.336908][ T808] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 441.336981][ T808] usb 4-1: media controller created [ 441.379287][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.401403][ T808] dvb-usb: bulk message failed: -8 (6/0) [ 441.401493][ T808] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 441.426257][ T808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 441.447124][ T808] dvb-usb: schedule remote query interval to 150 msecs. [ 441.447151][ T808] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 441.485157][ T808] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 441.485275][ T808] dvb-usb: bulk message failed: -8 (3/0) [ 441.508398][ T808] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 441.509494][ T808] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 441.509566][ T808] usb 4-1: media controller created [ 441.511835][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.556797][ T808] dvb-usb: bulk message failed: -8 (6/0) [ 441.556898][ T808] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 441.577990][ T808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 441.580635][ T808] dvb-usb: schedule remote query interval to 150 msecs. [ 441.580661][ T808] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 441.617364][ T808] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 441.617473][ T808] dvb-usb: bulk message failed: -8 (3/0) [ 441.617769][ T7373] dvb-usb: bulk message failed: -8 (1/0) [ 441.617796][ T7373] dvb-usb: error while querying for an remote control event. [ 441.625099][ T808] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 441.626106][ T808] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 441.626167][ T808] usb 4-1: media controller created [ 441.681409][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.696672][ T808] dvb-usb: bulk message failed: -8 (6/0) [ 441.696770][ T808] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 441.716681][ T808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 441.731234][ T808] dvb-usb: schedule remote query interval to 150 msecs. [ 441.731261][ T808] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 441.754369][ T36] dvb-usb: bulk message failed: -8 (1/0) [ 441.754404][ T36] dvb-usb: error while querying for an remote control event. [ 441.777415][ T36] dvb-usb: bulk message failed: -8 (1/0) [ 441.777450][ T36] dvb-usb: error while querying for an remote control event. [ 441.847896][ T808] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 441.848019][ T808] dvb-usb: bulk message failed: -8 (3/0) [ 441.852751][ T808] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 441.853647][ T808] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 441.853705][ T808] usb 4-1: media controller created [ 441.855787][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.915969][ T36] dvb-usb: bulk message failed: -8 (1/0) [ 441.916002][ T36] dvb-usb: error while querying for an remote control event. [ 441.916056][ T36] dvb-usb: bulk message failed: -8 (1/0) [ 441.916081][ T36] dvb-usb: error while querying for an remote control event. [ 441.943870][ T7373] dvb-usb: bulk message failed: -8 (1/0) [ 441.943903][ T7373] dvb-usb: error while querying for an remote control event. [ 441.956086][ T808] dvb-usb: bulk message failed: -8 (6/0) [ 441.956192][ T808] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 442.010758][ T808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 442.030258][ T808] dvb-usb: schedule remote query interval to 150 msecs. [ 442.030284][ T808] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 442.063228][ T808] usb 4-1: USB disconnect, device number 29 [ 442.073582][ T7373] dvb-usb: bulk message failed: -19 (1/0) [ 442.073620][ T7373] dvb-usb: error while querying for an remote control event. [ 442.073681][ T7373] dvb-usb: bulk message failed: -19 (1/0) [ 442.073705][ T7373] dvb-usb: error while querying for an remote control event. [ 442.097427][ T7373] dvb-usb: bulk message failed: -19 (1/0) [ 442.097459][ T7373] dvb-usb: error while querying for an remote control event. [ 442.187438][ T7373] dvb-usb: bulk message failed: -19 (1/0) [ 442.187478][ T7373] dvb-usb: error while querying for an remote control event. [ 442.227374][ T7373] dvb-usb: bulk message failed: -19 (1/0) [ 442.227409][ T7373] dvb-usb: error while querying for an remote control event. [ 442.227470][ T7373] dvb-usb: bulk message failed: -19 (1/0) [ 442.227495][ T7373] dvb-usb: error while querying for an remote control event. [ 442.323306][ T808] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 442.347341][ T7373] dvb-usb: bulk message failed: -19 (1/0) [ 442.347377][ T7373] dvb-usb: error while querying for an remote control event. [ 442.387390][ T7373] dvb-usb: bulk message failed: -19 (1/0) [ 442.387425][ T7373] dvb-usb: error while querying for an remote control event. [ 442.474101][ T808] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 442.507367][ T7373] dvb-usb: bulk message failed: -19 (1/0) [ 442.507407][ T7373] dvb-usb: error while querying for an remote control event. [ 442.540035][ T8446] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.741'. [ 442.637279][ T930] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 442.694259][ T808] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 443.254313][ T930] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.272225][ T930] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 443.272259][ T930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 443.272281][ T930] usb 1-1: Product: syz [ 443.272295][ T930] usb 1-1: Manufacturer: syz [ 443.272311][ T930] usb 1-1: SerialNumber: syz [ 443.453698][ T808] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 444.905712][ T930] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 444.987445][ T808] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 445.090011][ T31] usb 1-1: USB disconnect, device number 37 [ 445.107356][ T5874] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 445.211958][ T31] usblp0: removed [ 445.267519][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 445.269639][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 445.269675][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 445.269695][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 445.272106][ T5874] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 445.272141][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.272157][ T5874] usb 5-1: Product: syz [ 445.272168][ T5874] usb 5-1: Manufacturer: syz [ 445.272178][ T5874] usb 5-1: SerialNumber: syz [ 445.442422][ T5874] usb 5-1: config 0 descriptor?? [ 445.482474][ T5874] radioshark 5-1:0.0: Invalid radioSHARK device [ 445.482500][ T5874] radioshark 5-1:0.0: probe with driver radioshark failed with error -22 [ 445.482893][ T5874] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 445.497489][ T5882] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 445.652692][ T36] usb 5-1: USB disconnect, device number 41 [ 445.657580][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 445.715747][ T5882] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 445.715780][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.715823][ T5882] usb 3-1: Product: syz [ 445.715839][ T5882] usb 3-1: Manufacturer: syz [ 445.715854][ T5882] usb 3-1: SerialNumber: syz [ 445.757105][ T5882] usb 3-1: config 0 descriptor?? [ 445.809020][ T5882] gspca_main: se401-2.14.0 probing 047d:5003 [ 445.995491][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.733'. [ 446.013859][ T8462] netlink: 'syz.1.733': attribute type 83 has an invalid length. [ 446.038243][ T808] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 446.127061][ T8464] netlink: 'syz.1.748': attribute type 29 has an invalid length. [ 446.136398][ T8464] netlink: 'syz.1.748': attribute type 29 has an invalid length. [ 446.146597][ T8464] netlink: 500 bytes leftover after parsing attributes in process `syz.1.748'. [ 446.190283][ T808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 446.191229][ T808] usb 4-1: not running at top speed; connect to a high speed hub [ 446.195437][ T808] usb 4-1: config 250 has an invalid interface number: 222 but max is 1 [ 446.195466][ T808] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 446.195489][ T808] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 446.195512][ T808] usb 4-1: config 250 has no interface number 0 [ 446.195559][ T808] usb 4-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 446.195585][ T808] usb 4-1: config 250 interface 222 altsetting 22 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 446.195616][ T808] usb 4-1: config 250 interface 222 altsetting 22 endpoint 0x8 has invalid maxpacket 983, setting to 64 [ 446.195646][ T808] usb 4-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 446.195670][ T808] usb 4-1: config 250 interface 222 altsetting 22 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 446.195700][ T808] usb 4-1: config 250 interface 222 has no altsetting 0 [ 446.418508][ T808] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 446.418543][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.418563][ T808] usb 4-1: Product: syz [ 446.418578][ T808] usb 4-1: Manufacturer: syz [ 446.418595][ T808] usb 4-1: SerialNumber: syz [ 446.531138][ T5882] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 447.190434][ T8457] overlayfs: missing 'lowerdir' [ 448.362787][ T5882] gspca_se401: read req failed req 0x06 error -19 [ 448.390291][ T5882] usb 3-1: USB disconnect, device number 24 [ 448.706456][ T808] usb 4-1: USB disconnect, device number 31 [ 450.927340][ T36] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 451.077474][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 451.087810][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.087847][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.087888][ T36] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 451.087913][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.124865][ T36] usb 2-1: config 0 descriptor?? [ 451.194507][ T8496] netlink: 'syz.3.758': attribute type 83 has an invalid length. [ 451.551556][ T36] hid_parser_main: 53 callbacks suppressed [ 451.551616][ T36] cherry 0003:046A:0027.000B: unknown main item tag 0x3 [ 451.551652][ T36] cherry 0003:046A:0027.000B: unknown main item tag 0x1 [ 451.551702][ T36] cherry 0003:046A:0027.000B: bogus close delimiter [ 451.551719][ T36] cherry 0003:046A:0027.000B: item 0 0 2 10 parsing failed [ 451.552597][ T36] cherry 0003:046A:0027.000B: probe with driver cherry failed with error -22 [ 451.688888][ T8500] netlink: 'syz.0.760': attribute type 29 has an invalid length. [ 451.699977][ T8500] netlink: 'syz.0.760': attribute type 29 has an invalid length. [ 451.703026][ T8500] netlink: 500 bytes leftover after parsing attributes in process `syz.0.760'. [ 451.840146][ T930] usb 2-1: USB disconnect, device number 26 [ 452.367034][ T8511] MINIX-fs: unable to read superblock [ 452.537401][ T5882] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 452.730445][ T5882] usb 5-1: not running at top speed; connect to a high speed hub [ 452.732190][ T5882] usb 5-1: config 8 has an invalid interface number: 152 but max is 2 [ 452.732231][ T5882] usb 5-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 452.732253][ T5882] usb 5-1: config 8 has an invalid interface number: 248 but max is 2 [ 452.732276][ T5882] usb 5-1: config 8 has an invalid interface number: 230 but max is 2 [ 452.732297][ T5882] usb 5-1: config 8 has an invalid interface number: 14 but max is 2 [ 452.732318][ T5882] usb 5-1: config 8 has 4 interfaces, different from the descriptor's value: 3 [ 452.732340][ T5882] usb 5-1: config 8 has no interface number 0 [ 452.732358][ T5882] usb 5-1: config 8 has no interface number 1 [ 452.732375][ T5882] usb 5-1: config 8 has no interface number 2 [ 452.732392][ T5882] usb 5-1: config 8 has no interface number 3 [ 452.732478][ T5882] usb 5-1: config 8 interface 152 altsetting 64 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 452.732512][ T5882] usb 5-1: config 8 interface 152 altsetting 64 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 452.732540][ T5882] usb 5-1: config 8 interface 152 altsetting 64 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 452.732585][ T5882] usb 5-1: config 8 interface 248 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 452.732610][ T5882] usb 5-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0x6, skipping [ 452.732634][ T5882] usb 5-1: config 8 interface 248 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 452.732659][ T5882] usb 5-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0xF, skipping [ 452.732684][ T5882] usb 5-1: config 8 interface 248 altsetting 80 has a duplicate endpoint with address 0xA, skipping [ 452.732708][ T5882] usb 5-1: config 8 interface 248 altsetting 80 has 7 endpoint descriptors, different from the interface descriptor's value: 30 [ 452.732752][ T5882] usb 5-1: config 8 interface 230 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 452.732790][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 452.732813][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 452.732837][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 452.732861][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 452.732885][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 452.732908][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 452.732936][ T5882] usb 5-1: config 8 interface 14 altsetting 6 endpoint 0x8C has invalid maxpacket 51562, setting to 64 [ 452.732964][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 452.732987][ T5882] usb 5-1: config 8 interface 14 altsetting 6 has 7 endpoint descriptors, different from the interface descriptor's value: 5 [ 452.733015][ T5882] usb 5-1: config 8 interface 152 has no altsetting 0 [ 452.733035][ T5882] usb 5-1: config 8 interface 248 has no altsetting 0 [ 452.733055][ T5882] usb 5-1: config 8 interface 230 has no altsetting 0 [ 452.733074][ T5882] usb 5-1: config 8 interface 14 has no altsetting 0 [ 452.745486][ T5882] usb 5-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice=bb.1b [ 452.745571][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.745638][ T5882] usb 5-1: Product: syz [ 452.745661][ T5882] usb 5-1: Manufacturer: ఇ [ 452.745677][ T5882] usb 5-1: SerialNumber: syz [ 453.345032][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 453.517410][ T31] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 453.604494][ T5882] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 453.604629][ T5882] dvb-usb: bulk message failed: -8 (3/0) [ 453.647302][ T31] usb 2-1: device descriptor read/64, error -71 [ 453.648807][ T5882] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 453.659837][ T5882] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 453.659913][ T5882] usb 5-1: media controller created [ 453.664939][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 453.740878][ T8527] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.767'. [ 453.756655][ T5882] dvb-usb: bulk message failed: -8 (6/0) [ 453.756741][ T5882] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 453.778579][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 453.804019][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 453.804045][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 453.898112][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 454.044520][ T5874] dvb-usb: bulk message failed: -8 (1/0) [ 454.044580][ T5874] dvb-usb: error while querying for an remote control event. [ 454.088260][ T31] usb 2-1: device descriptor read/64, error -71 [ 454.289044][ T31] usb usb2-port1: attempt power cycle [ 454.303087][ T930] dvb-usb: bulk message failed: -8 (1/0) [ 454.303224][ T930] dvb-usb: error while querying for an remote control event. [ 454.356083][ T5882] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 454.356205][ T5882] dvb-usb: bulk message failed: -8 (3/0) [ 454.399777][ T5882] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 454.403177][ T5882] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 454.403239][ T5882] usb 5-1: media controller created [ 454.405397][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 454.518443][ T5882] dvb-usb: bulk message failed: -8 (6/0) [ 454.518532][ T5882] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 454.546771][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36 [ 454.587857][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 454.587884][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 454.597525][ T930] dvb-usb: bulk message failed: -8 (1/0) [ 454.597575][ T930] dvb-usb: error while querying for an remote control event. [ 454.647360][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 454.668043][ T31] usb 2-1: device descriptor read/8, error -71 [ 454.699775][ T5882] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 454.699904][ T5882] dvb-usb: bulk message failed: -8 (3/0) [ 454.734097][ T5882] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 454.735124][ T5882] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 454.735200][ T5882] usb 5-1: media controller created [ 454.787530][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 454.789782][ T8535] netlink: 'syz.4.769': attribute type 83 has an invalid length. [ 454.906206][ T5882] dvb-usb: bulk message failed: -8 (6/0) [ 454.906303][ T5882] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 454.907591][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 454.938839][ T31] usb 2-1: device descriptor read/8, error -71 [ 454.984767][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input37 [ 455.007922][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 455.007948][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 455.012643][ T5874] dvb-usb: bulk message failed: -8 (1/0) [ 455.012675][ T5874] dvb-usb: error while querying for an remote control event. [ 455.012732][ T5874] dvb-usb: bulk message failed: -8 (1/0) [ 455.012757][ T5874] dvb-usb: error while querying for an remote control event. [ 455.065148][ T31] usb usb2-port1: unable to enumerate USB device [ 455.098395][ T5882] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state. [ 455.098515][ T5882] dvb-usb: bulk message failed: -8 (3/0) [ 455.142197][ T5882] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 455.149569][ T5882] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0) [ 455.149758][ T5882] usb 5-1: media controller created [ 455.154880][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.236814][ T5114] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 455.260591][ T930] dvb-usb: bulk message failed: -8 (1/0) [ 455.260625][ T930] dvb-usb: error while querying for an remote control event. [ 455.260683][ T930] dvb-usb: bulk message failed: -8 (1/0) [ 455.260708][ T930] dvb-usb: error while querying for an remote control event. [ 455.260763][ T930] dvb-usb: bulk message failed: -8 (1/0) [ 455.260789][ T930] dvb-usb: error while querying for an remote control event. [ 455.323078][ T5882] dvb-usb: bulk message failed: -8 (6/0) [ 455.323168][ T5882] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0' [ 455.379258][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 455.499805][ T5882] dvb-usb: schedule remote query interval to 150 msecs. [ 455.499831][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected. [ 455.597388][ T10] dvb-usb: bulk message failed: -8 (1/0) [ 455.597421][ T10] dvb-usb: error while querying for an remote control event. [ 455.597501][ T10] dvb-usb: bulk message failed: -8 (1/0) [ 455.597527][ T10] dvb-usb: error while querying for an remote control event. [ 455.597581][ T10] dvb-usb: bulk message failed: -8 (1/0) [ 455.597605][ T10] dvb-usb: error while querying for an remote control event. [ 455.650048][ T5882] usb 5-1: USB disconnect, device number 42 [ 455.669627][ T8551] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 455.679719][ T930] dvb-usb: bulk message failed: -19 (1/0) [ 455.679751][ T930] dvb-usb: error while querying for an remote control event. [ 455.770235][ T930] dvb-usb: bulk message failed: -19 (1/0) [ 455.770270][ T930] dvb-usb: error while querying for an remote control event. [ 455.770340][ T930] dvb-usb: bulk message failed: -19 (1/0) [ 455.770367][ T930] dvb-usb: error while querying for an remote control event. [ 455.770424][ T930] dvb-usb: bulk message failed: -19 (1/0) [ 455.770450][ T930] dvb-usb: error while querying for an remote control event. [ 455.957705][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 455.957739][ T10] dvb-usb: error while querying for an remote control event. [ 456.081947][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 456.081982][ T10] dvb-usb: error while querying for an remote control event. [ 456.082042][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 456.082065][ T10] dvb-usb: error while querying for an remote control event. [ 456.125562][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 456.125598][ T10] dvb-usb: error while querying for an remote control event. [ 456.262001][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 456.325776][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 456.325812][ T10] dvb-usb: error while querying for an remote control event. [ 456.325994][ T10] dvb-usb: bulk message failed: -19 (1/0) [ 456.326021][ T10] dvb-usb: error while querying for an remote control event. [ 456.651145][ T5874] dvb-usb: bulk message failed: -19 (1/0) [ 456.651182][ T5874] dvb-usb: error while querying for an remote control event. [ 456.651243][ T5874] dvb-usb: bulk message failed: -19 (1/0) [ 456.651270][ T5874] dvb-usb: error while querying for an remote control event. [ 456.827341][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 456.861948][ T5874] dvb-usb: bulk message failed: -19 (1/0) [ 456.861987][ T5874] dvb-usb: error while querying for an remote control event. [ 456.862122][ T5874] dvb-usb: bulk message failed: -19 (1/0) [ 456.862152][ T5874] dvb-usb: error while querying for an remote control event. [ 457.004982][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 457.058508][ T930] dvb-usb: bulk message failed: -19 (1/0) [ 457.059771][ T930] dvb-usb: error while querying for an remote control event. [ 457.060482][ T930] dvb-usb: bulk message failed: -19 (1/0) [ 457.060515][ T930] dvb-usb: error while querying for an remote control event. [ 457.239444][ T8562] process 'syz.4.778' launched '/dev/fd/4' with NULL argv: empty string added [ 457.280562][ T6913] dvb-usb: bulk message failed: -19 (1/0) [ 457.280595][ T6913] dvb-usb: error while querying for an remote control event. [ 457.347331][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 457.352994][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.353032][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.353072][ T10] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 457.353096][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.353190][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.779'. [ 457.448183][ T930] dvb-usb: bulk message failed: -19 (1/0) [ 457.448219][ T930] dvb-usb: error while querying for an remote control event. [ 457.500688][ T10] usb 1-1: config 0 descriptor?? [ 457.504469][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 457.617274][ T930] dvb-usb: bulk message failed: -19 (1/0) [ 457.617309][ T930] dvb-usb: error while querying for an remote control event. [ 457.797324][ T36] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 457.912448][ T10] cherry 0003:046A:0027.000C: unknown main item tag 0x3 [ 457.912489][ T10] cherry 0003:046A:0027.000C: unknown main item tag 0x1 [ 457.912517][ T10] cherry 0003:046A:0027.000C: bogus close delimiter [ 457.912534][ T10] cherry 0003:046A:0027.000C: item 0 0 2 10 parsing failed [ 457.913410][ T10] cherry 0003:046A:0027.000C: probe with driver cherry failed with error -22 [ 457.979673][ T36] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 457.979719][ T36] usb 2-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 457.979749][ T36] usb 2-1: config 1 interface 0 has no altsetting 0 [ 458.022936][ T36] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.022970][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.022993][ T36] usb 2-1: Product: syz [ 458.023009][ T36] usb 2-1: Manufacturer: syz [ 458.023025][ T36] usb 2-1: SerialNumber: syz [ 458.086149][ T8570] netlink: 'syz.2.782': attribute type 83 has an invalid length. [ 458.127779][ T8571] FAULT_INJECTION: forcing a failure. [ 458.127779][ T8571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.127820][ T8571] CPU: 1 UID: 0 PID: 8571 Comm: syz.3.781 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 458.127851][ T8571] Tainted: [L]=SOFTLOCKUP [ 458.127859][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.127873][ T8571] Call Trace: [ 458.127881][ T8571] [ 458.127891][ T8571] dump_stack_lvl+0xe8/0x150 [ 458.127931][ T8571] should_fail_ex+0x46b/0x600 [ 458.127975][ T8571] _copy_from_iter+0x1d3/0x1670 [ 458.128009][ T8571] ? trace_kmem_cache_alloc+0x29/0xf0 [ 458.128043][ T8571] ? __alloc_skb+0x27d/0x7d0 [ 458.128071][ T8571] ? __pfx__copy_from_iter+0x10/0x10 [ 458.128095][ T8571] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 458.128127][ T8571] ? __alloc_skb+0x27d/0x7d0 [ 458.128161][ T8571] ? netlink_sendmsg+0x650/0xb40 [ 458.128196][ T8571] ? skb_put+0x11b/0x210 [ 458.128229][ T8571] netlink_sendmsg+0x6c0/0xb40 [ 458.128266][ T8571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.128301][ T8571] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 458.128340][ T8571] ____sys_sendmsg+0xa4e/0xac0 [ 458.128383][ T8571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.128426][ T8571] ? import_iovec+0x73/0xa0 [ 458.128458][ T8571] ___sys_sendmsg+0x2a5/0x360 [ 458.128495][ T8571] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.128573][ T8571] ? __fget_files+0x2a/0x420 [ 458.128600][ T8571] ? __fget_files+0x3a6/0x420 [ 458.128639][ T8571] __x64_sys_sendmsg+0x1c3/0x2a0 [ 458.128676][ T8571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 458.128725][ T8571] ? __pfx_ksys_write+0x10/0x10 [ 458.128773][ T8571] do_syscall_64+0x14d/0xf80 [ 458.128804][ T8571] ? trace_irq_disable+0x3b/0x150 [ 458.128831][ T8571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.128855][ T8571] ? clear_bhb_loop+0x40/0x90 [ 458.128884][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.128908][ T8571] RIP: 0033:0x7f705beac799 [ 458.128929][ T8571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.128950][ T8571] RSP: 002b:00007f705a106028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.128974][ T8571] RAX: ffffffffffffffda RBX: 00007f705c125fa0 RCX: 00007f705beac799 [ 458.128991][ T8571] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 458.129005][ T8571] RBP: 00007f705a106090 R08: 0000000000000000 R09: 0000000000000000 [ 458.129019][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.129032][ T8571] R13: 00007f705c126038 R14: 00007f705c125fa0 R15: 00007ffc33280148 [ 458.129067][ T8571] [ 458.176674][ T31] usb 1-1: USB disconnect, device number 38 [ 458.314642][ T5882] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected. [ 458.431922][ T8565] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 458.432194][ T8565] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 458.817306][ T5882] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 458.967381][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 458.973216][ T5882] usb 5-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 458.973250][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.973580][ T5882] usb 5-1: Product: syz [ 458.973599][ T5882] usb 5-1: Manufacturer: syz [ 458.973615][ T5882] usb 5-1: SerialNumber: syz [ 458.991002][ T36] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 459.062568][ T36] usb 2-1: USB disconnect, device number 31 [ 459.147368][ T5886] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 459.184368][ T31] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 459.300878][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 459.314481][ T5886] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 459.314736][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.314761][ T5886] usb 3-1: Product: syz [ 459.314777][ T5886] usb 3-1: Manufacturer: syz [ 459.314792][ T5886] usb 3-1: SerialNumber: syz [ 459.334839][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 459.340588][ T31] usb 4-1: config 157 has too many interfaces: 246, using maximum allowed: 32 [ 459.340653][ T31] usb 4-1: config 157 has an invalid interface number: 255 but max is 245 [ 459.340678][ T31] usb 4-1: config 157 has 1 interface, different from the descriptor's value: 246 [ 459.340736][ T31] usb 4-1: config 157 has no interface number 0 [ 459.340816][ T31] usb 4-1: too many endpoints for config 157 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 459.340875][ T31] usb 4-1: config 157 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 459.340952][ T31] usb 4-1: config 157 interface 255 has no altsetting 0 [ 459.353335][ T31] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 459.353369][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.353419][ T31] usb 4-1: Product: syz [ 459.353470][ T31] usb 4-1: Manufacturer: syz [ 459.353494][ T31] usb 4-1: SerialNumber: syz [ 459.481141][ T5886] usb 3-1: config 0 descriptor?? [ 459.500286][ T5886] gspca_main: se401-2.14.0 probing 047d:5003 [ 459.604141][ T134] ------------[ cut here ]------------ [ 459.604158][ T134] in_task() && kcov_mode_enabled(mode) [ 459.604171][ T134] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#1: kworker/u8:5/134 [ 459.604225][ T134] Modules linked in: [ 459.604250][ T134] CPU: 1 UID: 0 PID: 134 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 459.604282][ T134] Tainted: [L]=SOFTLOCKUP [ 459.604292][ T134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.604308][ T134] Workqueue: events_unbound cfg80211_wiphy_work [ 459.604411][ T134] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 459.604441][ T134] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 92 12 d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 da bc 5d 09 89 c0 48 c7 c7 20 94 4e [ 459.604463][ T134] RSP: 0018:ffffc900039af9f8 EFLAGS: 00010202 [ 459.604484][ T134] RAX: 0000000000000002 RBX: ffff88801fb73d00 RCX: 0000000000000000 [ 459.604501][ T134] RDX: 0000000000000000 RSI: ffffffff8ba64a60 RDI: ffffffff8ba64a20 [ 459.604519][ T134] RBP: ffff88805e5cf000 R08: ffffffff8b2451d0 R09: ffffffff8ddcd780 [ 459.604538][ T134] R10: dffffc0000000000 R11: fffffbfff1ed46b7 R12: ffff888061c29d08 [ 459.604556][ T134] R13: ffff888061c407c0 R14: 0000000000000000 R15: ffff888061c29d20 [ 459.604573][ T134] FS: 0000000000000000(0000) GS:ffff888126440000(0000) knlGS:0000000000000000 [ 459.604593][ T134] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.604609][ T134] CR2: 0000001b2d920000 CR3: 000000003f8ae000 CR4: 00000000003526f0 [ 459.604631][ T134] Call Trace: [ 459.604641][ T134] [ 459.604657][ T134] ieee80211_iface_work+0x211/0x1340 [ 459.604741][ T134] cfg80211_wiphy_work+0x2ab/0x4a0 [ 459.604769][ T134] ? process_scheduled_works+0xa25/0x1830 [ 459.604807][ T134] process_scheduled_works+0xb02/0x1830 [ 459.604877][ T134] ? __pfx_process_scheduled_works+0x10/0x10 [ 459.604921][ T134] ? assign_work+0x3d5/0x5e0 [ 459.604961][ T134] worker_thread+0xa50/0xfc0 [ 459.605040][ T134] kthread+0x388/0x470 [ 459.605067][ T134] ? __pfx_worker_thread+0x10/0x10 [ 459.605111][ T134] ? __pfx_kthread+0x10/0x10 [ 459.605139][ T134] ret_from_fork+0x51e/0xb90 [ 459.605194][ T134] ? __pfx_ret_from_fork+0x10/0x10 [ 459.605227][ T134] ? __switch_to+0xc7d/0x1450 [ 459.605273][ T134] ? __pfx_kthread+0x10/0x10 [ 459.605329][ T134] ret_from_fork_asm+0x1a/0x30 [ 459.605374][ T134] [ 459.605393][ T134] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 459.605414][ T134] CPU: 1 UID: 0 PID: 134 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 459.605451][ T134] Tainted: [L]=SOFTLOCKUP [ 459.605458][ T134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.605468][ T134] Workqueue: events_unbound cfg80211_wiphy_work [ 459.605507][ T134] Call Trace: [ 459.605517][ T134] [ 459.605527][ T134] vpanic+0x56c/0xa60 [ 459.605579][ T134] ? __pfx__printk+0x10/0x10 [ 459.605604][ T134] ? __pfx_vpanic+0x10/0x10 [ 459.605640][ T134] ? is_bpf_text_address+0x292/0x2b0 [ 459.605690][ T134] ? is_bpf_text_address+0x26/0x2b0 [ 459.605735][ T134] panic+0xc5/0xd0 [ 459.605770][ T134] ? __pfx_panic+0x10/0x10 [ 459.605817][ T134] ? ret_from_fork_asm+0x1a/0x30 [ 459.605838][ T134] __warn+0x315/0x4f0 [ 459.605887][ T134] ? kcov_remote_start+0x5d8/0x710 [ 459.605918][ T134] ? kcov_remote_start+0x5d8/0x710 [ 459.605948][ T134] __report_bug+0x29a/0x540 [ 459.606034][ T134] ? kcov_remote_start+0x5d8/0x710 [ 459.606064][ T134] ? __pfx___report_bug+0x10/0x10 [ 459.606107][ T134] ? do_raw_spin_lock+0x12b/0x2f0 [ 459.606139][ T134] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 459.606173][ T134] ? do_raw_spin_lock+0x12b/0x2f0 [ 459.606219][ T134] ? kcov_remote_start+0x5d8/0x710 [ 459.606248][ T134] report_bug+0x16a/0x220 [ 459.606282][ T134] ? kcov_remote_start+0x5d8/0x710 [ 459.606307][ T134] ? kcov_remote_start+0x5da/0x710 [ 459.606342][ T134] handle_bug+0x9c/0x200 [ 459.606370][ T134] exc_invalid_op+0x1a/0x50 [ 459.606426][ T134] asm_exc_invalid_op+0x1a/0x20 [ 459.606451][ T134] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 459.606481][ T134] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 92 12 d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 da bc 5d 09 89 c0 48 c7 c7 20 94 4e [ 459.606501][ T134] RSP: 0018:ffffc900039af9f8 EFLAGS: 00010202 [ 459.606521][ T134] RAX: 0000000000000002 RBX: ffff88801fb73d00 RCX: 0000000000000000 [ 459.606536][ T134] RDX: 0000000000000000 RSI: ffffffff8ba64a60 RDI: ffffffff8ba64a20 [ 459.606552][ T134] RBP: ffff88805e5cf000 R08: ffffffff8b2451d0 R09: ffffffff8ddcd780 [ 459.606570][ T134] R10: dffffc0000000000 R11: fffffbfff1ed46b7 R12: ffff888061c29d08 [ 459.606588][ T134] R13: ffff888061c407c0 R14: 0000000000000000 R15: ffff888061c29d20 [ 459.606615][ T134] ? rt_spin_lock+0x1e0/0x400 [ 459.606648][ T134] ? kcov_remote_start+0xe0/0x710 [ 459.606679][ T134] ieee80211_iface_work+0x211/0x1340 [ 459.606715][ T134] cfg80211_wiphy_work+0x2ab/0x4a0 [ 459.606742][ T134] ? process_scheduled_works+0xa25/0x1830 [ 459.606780][ T134] process_scheduled_works+0xb02/0x1830 [ 459.606849][ T134] ? __pfx_process_scheduled_works+0x10/0x10 [ 459.606900][ T134] ? assign_work+0x3d5/0x5e0 [ 459.606942][ T134] worker_thread+0xa50/0xfc0 [ 459.607007][ T134] kthread+0x388/0x470 [ 459.607034][ T134] ? __pfx_worker_thread+0x10/0x10 [ 459.607075][ T134] ? __pfx_kthread+0x10/0x10 [ 459.607110][ T134] ret_from_fork+0x51e/0xb90 [ 459.607152][ T134] ? __pfx_ret_from_fork+0x10/0x10 [ 459.607183][ T134] ? __switch_to+0xc7d/0x1450 [ 459.607242][ T134] ? __pfx_kthread+0x10/0x10 [ 459.607268][ T134] ret_from_fork_asm+0x1a/0x30 [ 459.607309][ T134] [ 459.607916][ T134] Kernel Offset: disabled