last executing test programs: 9.760158773s ago: executing program 2 (id=335): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r3 = gettid() quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000200)=@nullb, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000280)=0x8, 0x4) sendmsg$nl_route(r0, 0x0, 0x40040) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008", @ANYRES32=r3], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x38}], 0x4, 0x40000120, 0x0) 8.413656542s ago: executing program 0 (id=337): unshare(0x26020480) unshare(0x22020400) r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "00017555d000", '\x00', "b500", '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", "000000fb0000000000000020", "00000000008ca000001000"]}) r1 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000180)='rw\x00', &(0x7f0000000200)='/', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 8.133893766s ago: executing program 0 (id=338): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001e8, 0x12) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500000000000d000300686173"], 0x5c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008085) (async) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}], 0x20}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}, {&(0x7f0000000400)="ca4f4ebd421261de37a446e55561d4b557a842a9c85615e81a452d78f8c5039bb5ef12dc51eac2a8517a54deded9ae04211612f2ca283dbd2fb08873fa677a5502d14e04a0dd08b33bc2f3da6f9a75eb5e663d51d8a9b23ea5856316cb610b8f86688cf2861830916280dca10145dfcaca9e043a148d896833668a33c0ace1533d8c06841f1f02e06a00b61c418ab4ab9a95a148fa0974861aa5a4cf9959a75622c37f102bff385f5fb42179d5364ca1c7b50df640f0ef2cdec303ca7f86201f2891f4a9230cefe36616d618a5cc4b6b6e37af393ef03beec3548b7e491ddb69e11eebd69891e718f9fb9969a1e689d6d3d6d8f50f75f108", 0xf8}, {&(0x7f0000000200)="4ca303e7d516648d9663db45c5e80552b0060b3ba8d23c97ec73bd4b0d2f3f8aab1bb9a3b0fcea240d369247da7ca3194596", 0x32}, {&(0x7f0000000240)="edb420f5caf579486a4581622c727c3e727f1b4522fd65ca1ef95210f313c3", 0x1f}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000000500)="86a16022a78f5e9e357fcaacbf6b661ff3a2ccd2cce396aa46e59b761c64537eba6fcf942260e185db2ca2706b2555536bbe2af6aa09c4776ca969c0e45ab0dc6c08b3ed5aeb0446fe80c309eda5cb91f75961055f14575f2ad7fa49f9200ba58b8c219d003d5a09ad03fcac99cb1e05b4b7660d35f7f34fa3112d4099c02cf3e0f7339b408331f44a245f0a0c4c0c61526659c47fab9af5715394bba20366922f3f81ce99a9a84943e48029", 0xac}], 0x6) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaff1c006000400a019078ac1e0001ac1e010112009078000000de0001000000"], 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) 8.02350069s ago: executing program 1 (id=339): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x1, 0x18100, 0x4003}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x204008, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f00000004c0)="92f0ac0d687fc3c3101f67fb0a6eaf81f2fc72ec5a03074a7357c6308114ad5b64ecac1c82887cbbab130113598f51c6ae646ab300f7b80000007463a4c2a17a6e551026af00036507ee92ca", 0x1d}], 0x1}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000440)="b87a12bfe84b8a61e5973e77ad8d2e880d8f77f82bf7f31fb63b3441e4bd657a7248543451a8181b88c0dc4dce63c0d0d89477b6bd6d95ad92ceb4d43e2b720b1235e17c7c744db03b18adbb47804f9e3368cdbeb4b2f75a1989e642b9c9dd84a6f7259615e76ff56a83bdd40f", 0x6d}, {&(0x7f0000003300)="f188f01c5ab1b2d6648a42cff6dd5157a23b61b77e", 0x15}, {&(0x7f0000003340)="eb5331c5b894d975ea5885fc377d68d205d92f42d9b93add8855ef779d06d083a9dad9c74b3e24b3a0ce61dafab620c9c59458f3260a67d355a91c1e59b128964786827aa7262b754b7b72523d0807c6a8e5af2ab370e141c4f8be05ad03e335caf45e25cde29308249c4be6363cc4356dab7c2cfc", 0x75}, {&(0x7f00000033c0)="9e707f06cead4fd09abb88942ed84a458f77ebfeab04150c94f8e8e49793c2cc98d4f83bbf62920ea2dd", 0x2a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000340), 0x5}}], 0x3, 0x24008804) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f00000005c0)=""/227, 0xe3}], 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0x0, 0x0, 0x0, 0x7}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r9, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r9, &(0x7f0000000000)={0xa, 0xfffc, 0x1, @empty, 0x200}, 0x1c) setsockopt(r9, 0x1, 0x9, &(0x7f0000000040), 0x29) connect$can_bcm(r5, &(0x7f0000000380)={0x1d, r8}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1f8, 0x2, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_NAT={0x1d4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xec, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xad}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0xbc, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x31}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x24000800}, 0x90) getsockopt(r0, 0x111, 0x3, 0x0, 0x0) 7.753919951s ago: executing program 1 (id=340): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12015002efa38a08cd061b01914f0102030109021b0001040340030904"], &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c005162408749abe7f2d51a8f5c471ba7c11a4fe98d41472ab92c38111a77a5cc362f35e160aec01ec0da0d5a9673bc40733e07e8fdca240600aab81e575fe243bc050c5488deb1993586ec95c663fb64d51ec9b7a254eaf5cc4f8f1eea66d0f8f00527c7756d50dfbffa6040077bbff30aacceb0ba243067f4c11dca1fe9ccb8d4e826752857"], 0x3, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x9, &(0x7f00000006c0), 0x4) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r6, 0x4, 0x2000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x88) vmsplice(r7, 0x0, 0x0, 0x7) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40020, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00276243740501720624347,user_id=', @ANYRES32=r1, @ANYBLOB="2cff010000705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',ro,\x00']) r8 = syz_io_uring_setup(0x10f, &(0x7f0000000400)={0x0, 0x211a, 0x40, 0x404, 0xe7}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r2, 0x0}) io_uring_enter(r8, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 7.2934768s ago: executing program 0 (id=341): openat$kvm(0xffffffffffffff9c, 0x0, 0x401, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2000000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000005c0)={0x6, {{0xa, 0x4e20, 0xfffffffe, @mcast1={0xff, 0x7}, 0xf}}, {{0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4000}}}, 0x108) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r6, &(0x7f00000009c0)=[{&(0x7f00000008c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfda67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb63836556c63de020000000000000013af3a1e6f786088b31c35be117ee540dc4560aa500269b81a0bbc00000000000000000200"/250, 0xfa}, {&(0x7f00000006c0)="1d4ac370cf8c47025bd7a6546c8bd229bbf8fa504cc3774c0f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f50aa794861c0296ca92cb6c2ef9", 0x47}, {&(0x7f0000000800)}, {&(0x7f0000000b40)}, {&(0x7f0000004480)="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", 0xae6}], 0x5) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r6, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001780)={0x0, 0x1}, &(0x7f00000017c0)=0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x1b, 0x6, 0x70, "d32cea1e7a8ce9d81d663ff8292479a2ef60756097d2494aeccd061645140512fe731c3c0d274be66a042caabe71f4be07424f789cd1feaa38f8d0953940c2ba38f112fda3c4ee2447c4a9b71ae67e672e2f05916437a0c5546fe05de6a8d07c4b6920be317222f47df0b95cfce27bfd"}}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0x80000007, 0x2, 0x1, 0x5, 0x6, 0x4, 0x2}, {0xb, 0x8, 0x0, 0x10001, 0x7ffffdff, 0x8015, 0xffff}, {0x80000019, 0xe5f, 0x3, 0x7, 0xdf1, 0x6, 0x80000001}, {0x80000000, 0x802bb, 0x1, 0xd, 0x66, 0x7ff, 0x400}, {0x80000001, 0x7ff, 0x0, 0x6, 0x7, 0x9}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) 7.275608192s ago: executing program 3 (id=342): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}], 0x1) 6.557852481s ago: executing program 3 (id=344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="200a00e2c40001000000000060f2ac3fc113c810116e00"/32], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x80) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x4) r4 = memfd_create(&(0x7f0000000400)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x11, r4, 0xe7e47000) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x1c4, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @local, 0x4}, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002400)={0xffffffffffffffde, 0x0, r5, {0x7, 0x2d, 0x3, 0x60040100, 0x9, 0x1ff, 0x6, 0x4, 0x0, 0x0, 0x10, 0xee2}}, 0xfd92) getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = dup2(r6, r9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f00000022c0)=ANY=[@ANYRESDEC=r1], 0x9) r11 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x608141) syz_usb_disconnect(r11) r12 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r11, 0x550c, 0x0) io_setup(0x2, &(0x7f00000023c0)) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r10, &(0x7f0000002380)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r12, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000002200)=ANY=[@ANYBLOB="0008f850f7c9f1e5374f55f8fb0fd5bb690e95345c4bf5194da305f22be6fe39292ff72a7b8c5e6f03200b99e812f6cad09f5450c6be85483d015900bc5197d2bc1ba258d13a487241bfc4ed68b6d0fc4a542c3d15dd4abc2f52035548"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000140)={r8, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000002180)={r8, 0x2}, &(0x7f0000002280)=0x8) 6.314607662s ago: executing program 2 (id=345): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, r2, 0xb09, 0x70bd29, 0x25dfdbfd, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) semget$private(0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000280), 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4) 5.444791784s ago: executing program 2 (id=347): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, 0xffffffffffffffff, 0x9a974000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.296708833s ago: executing program 0 (id=348): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x10012, r2, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (fail_nth: 2) 5.214926205s ago: executing program 4 (id=349): unshare(0x28060000) unshare(0x20060200) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x1e, 0x5, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000000000010000100000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="0200000001bfef2d605f09bdddbea4d10000000000000002000000"], 0x2c, 0x1) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/254, 0x145) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.506955397s ago: executing program 2 (id=350): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$packet(0x11, 0x3, 0x300) clock_gettime(0x0, &(0x7f0000000000)) clock_nanosleep(0x6, 0x0, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x4) io_setup(0x3f, 0x0) timerfd_create(0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0x3, 0x6, 0x7, 0x7}, {0xe, 0x1, 0x20, 0x78}, {0x0, 0x40, 0x8, 0x8}, {0x1, 0x47, 0xb}]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x13, r0, 0x0) 4.430534435s ago: executing program 1 (id=351): socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000002c0)=0xfffffffc) r5 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000fdff7fad0f00000000000019c60000000000000095", @ANYRESDEC=r5], 0x0, 0x204, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @sk_skb=0x5}, 0x94) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9b}) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f0000000480)=0x1000) syz_clone3(&(0x7f0000000500)={0x1000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$pppoe(r5, &(0x7f0000000340)={0x18, 0x0, {0x2, @multicast, 'tunl0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4a200, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) 4.426456883s ago: executing program 3 (id=352): bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) truncate(&(0x7f0000000440)='./file0\x00', 0x1) r0 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @loopback, 0xf0}, 0x79) memfd_create(0x0, 0x2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89, 0x40040}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x1ff}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040880}, 0x200080c0) read$FUSE(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r3) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) sendmsg$inet(r4, &(0x7f0000002840)={&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4040840) recvmmsg(r4, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}, 0xbd8a}], 0x1, 0x20, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, 0x0) r5 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x7c, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x1, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "44f4ac165b21"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x7, 0x80}, {0x6, 0x24, 0x1a, 0x9091, 0x1a}, [@mbim_extended={0x8, 0x24, 0x1c, 0xe7, 0x40, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x3, 0xfd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x79, 0xa2}}, {{0x9, 0x5, 0x3, 0x2, 0x7ae, 0x7, 0x7, 0x7f}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x1, 0x0, 0x6, 0x8, 0x10}, 0x121, &(0x7f00000004c0)={0x5, 0xf, 0x121, 0x3, [@ptm_cap={0x3}, @generic={0x92, 0x10, 0xb, "7215978772aef172ff1ec8f55c7b09ab3312911b999581f3290fab5c3c760bb0c88df4530f8ab51e0845f860241f6136c7ca07171a821cd31177b305b86a19e4f01f843df7ed3e86d67673b1ae4d679c3017d9eb65410adfda1919b045977586ec8c82503037196ba964b0b091b8548de552fd187d7012297b4348a9cc1b5b25f4563e2fd8deb50cdf1c246e0944c7"}, @generic={0x87, 0x10, 0x1, "343ffa70900efe466a59bd0cdbf5229b9dde002ff5bb4f86b17cf5f4ebb4430aac769be78a5a1f836184c59f313a0d9f5d943155706164a809d8874d4898293612f0a4d9d545747e8db2ba75c043f425fc82a895a122ccc8e42914097d6625cc30123452ad79072ae77b849eb1003fd172ab517bab38b13ee5058e27da6f9d461e601ec8"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3409}}]}) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x2, 0x8411, 0x22, &(0x7f0000000240)="0203204bdcc36cda8907f4863d018f8d5b34f5551c000bce0f6bc605000000000000"}, {0x7fb, 0x8811, 0x0, 0x0}, {0xf, 0x201, 0x0, 0x0}], 0x3}) 4.182099074s ago: executing program 0 (id=353): syz_usb_connect$hid(0x2, 0x3f, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x77, &(0x7f0000000100)=@string={0x77, 0x3, "bfa7ecbda811f09b2aaad087451cd6e65ff0f03e41cc920b70b037f89029fa760e20d27e4cae47855cfdb17388ed0c3533813051bdd5ef71d8e69c7943896bfe9f54fd41f252d51f26eb42a2c00f3d89245db217fd490122077eef931336d1d2eb1e956d49ecea2136c056b4f5c5250e9d839b0ed6"}}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd070010f5ff004200000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 3.516442018s ago: executing program 4 (id=354): syz_io_uring_setup(0x214e, 0x0, &(0x7f0000000100), &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x400) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f00000003c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000080)=r5, 0x12) socket$alg(0x26, 0x5, 0x0) openat$ppp(0xffffff9c, &(0x7f0000000080), 0x3a9000, 0x0) 3.273639445s ago: executing program 2 (id=355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32001400003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x20000880) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x800, 0x19}, 0x18) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x78}}, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000280)=@in6={0xa, 0x4e22, 0xfffffffe, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x30}], 0x1, 0x0) recvfrom$rxrpc(r5, 0x0, 0x14, 0x10100, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 2.865942834s ago: executing program 0 (id=356): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r3 = gettid() quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000200)=@nullb, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000280)=0x8, 0x4) sendmsg$nl_route(r0, 0x0, 0x40040) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008", @ANYRES32=r3], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x38}], 0x4, 0x40000120, 0x0) 2.804800348s ago: executing program 1 (id=357): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, r2, 0xb09, 0x70bd29, 0x25dfdbfd, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) semget$private(0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000140), &(0x7f0000000280), 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4) 2.58738181s ago: executing program 1 (id=358): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f0000000240)={0x0, 0x89b8, 0x8, 0x0, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x6800, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) io_cancel(0x0, 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r10, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4205, r9, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r9, 0x2, &(0x7f0000000740)={0x0}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r11, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) readv(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000ffff25bd", @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRES16, @ANYBLOB="597da55c3ba733f0a61604a395c79dd2c417723e2a4d68124e282a217a08f4dd511f04f5af95540cefa9852855cf876850b01040056ab18fe9f033fd16689d200d5d20c4ba2457d4081ddae6e062bb40968827d043a3c00946da822c4fc72c68e8095f8fb3c62fffe2f0f8a4112710c1c4a1c1421d20527c7e3c4429b8fe1c74c154e12e85c909e54d5c5815525be4549e9bed98cbc45fbd9df7b0d92f2155762e0d7240ec604c32634e52911079451040edbbb5e25b13"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x48044) 1.754885794s ago: executing program 4 (id=359): unshare(0x400) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) poll(&(0x7f00000001c0)=[{r0, 0x1000, 0xffff}], 0x1, 0x4) 1.416765512s ago: executing program 4 (id=360): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, 0xffffffffffffffff, 0x9a974000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.262660027s ago: executing program 3 (id=361): r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x44000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1a, 0x8, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4008840}, 0x20048814) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)=0x10000) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000001c0)=0x6, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000200)=[{{0x4, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}], 0x8) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, '.'}, {0x20, '/'}, {0x20, '/sys/kernel/debug/sync/info\x00'}, {0x20, '^'}, {0x20, '/%'}, {}, {}, {0x20, 'udp:syz0\x00'}], 0xa, "52f5dd9389c926bb06c436ebf443739c0f71326fa45508e5e5ae2346b4ced6dda90683e74d7892ff3d244a7b469bb5880534f169019689a37b1b798994007142cdc7654cfc4f028579b1d93cd94a40d6a90d1590dc1651b2db284b46e7d41c6fcb053b2d250bfb11c52fd506b6256b44"}, 0xad) timer_create(0x6, &(0x7f00000004c0)={0x0, 0x3a, 0x1, @thr={&(0x7f0000000300)="fc33426f17d89e5c0aedde9070991d19056aa1cf80befee73e9615486c299ddb1f60b7a196a5d7ffbd94e6ca5d8a179fecb932e8407cc7dedac0bd2db44427ffc2092a21cd5dbe801d329b39702175f6a1ada2bea27c182f26bd26701622c0f92855e2d30daf45b33738c4f188ef7d35a6b3ed4e1981bb7364849f6ad2793b5ddf010d", &(0x7f00000003c0)="c5e5be6e71a6df38c1fa4d8120eb13a2b4696e6a8fe074adee44f31003037acd23722b25d0ec6d5797892bf4e05c2c4068290d35319aa13e9db322240566e3a91c7e5533c36b2dbb2f81d51143ef60bbb6d6ea248cbad820b5ca71a7f540adbf62de0553f6f0aeaa5e2afc556887585ba2ba2832c7ae791fc67c4832012602e2ee43922d7e76ef2581ee9ad598fb10294f6e2dbdb955438040301aaf72b855a86df09b43ede35fe2ef87f483f2629910e794b49a0cc504295b243cf66224cf64f0ac561ea0bd61320d12d27520d5d7e93888f96439114da755d00d01b3f88907840b890f1be168d3a84951dd66490398732d2073f85f"}}, &(0x7f0000000500)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000580)={@loopback, @rand_addr=0x64010100}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x13}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x4c}}, 0x40) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000740)=@arm64) r4 = openat$tun(0xffffff9c, &(0x7f0000000780), 0x80, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000007c0)={'ip_vti0\x00', 0x800}) write$vhost_msg(r0, &(0x7f0000000900)={0x1, {&(0x7f0000000800)=""/181, 0xb5, &(0x7f00000008c0)=""/20, 0x3, 0x4}}, 0x44) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa0, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xffffff81}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00)={0x0}, &(0x7f0000000b40)=0xc) r6 = syz_open_dev$evdev(&(0x7f0000000b80), 0x9, 0x8000) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) kcmp(r5, 0x0, 0x0, r6, r7) clock_gettime(0x0, &(0x7f0000000c80)={0x0, 0x0}) utimensat(r0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000cc0)={{r8, r9/1000+60000}}, 0x0) r10 = add_key$user(&(0x7f0000000d00), &(0x7f0000000d40)={'syz', 0x1}, &(0x7f0000000d80)="2e3d25a8870350e6a67ce631bea136c5a3ff3de66bd83d969b5306e8a1488269349aae91a10e6af9d9702645cb4984e75fda05dfbbe9cbd92548ab276a31dd3c2c1833584a8ebb20635a9c5e8ff1bde70a99d83236d02ef3f75fd824b9b344aa1a644d8cec5bfa7872455a65c056049b94340fe2b7ff5f478896fe64675047dfd68d294acbfd1359c07c7ed1e36b66645aaddaf14fb8923c57e5265cfd64d468432a", 0xa2, 0xfffffffffffffff8) r11 = add_key$user(&(0x7f0000000e40), &(0x7f0000000e80)={'syz', 0x2}, &(0x7f0000000ec0)="740574785f109f0e7a1a8b922b2ec01e40782d4112cea5db7621172b595b7e7d0b9ccf9ce3920b8c301e3f7b1a13daadd7136c7d3a18cd555f103f500d9afa3042138b66aab2548f2588ba0a35edcdbc3e596d978b6a0601145c9a0deb74d077082aa1da4c3387872348489a2d2b8b7c64a3825956662dc4c28b8bf72008ef534d6dfa99ad363256fad3e2cd2950b861d868bcc3f764cffea09e784543e2bb60a6b0731ff2c054f552b0a74abb808ff17bd1b2ccc758aed99f52b5d32bb5674f7e369f3541f9db6febaf45c8b5570768e8c77fdd8a3048478c00eb4225279d0988e073a2af", 0xe5, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000fc0)={0x0, r10, r11}, &(0x7f0000001000)=""/236, 0xec, 0x0) syz_io_uring_setup(0x8b9, &(0x7f0000001100)={0x0, 0xc46c, 0x8, 0x1, 0x3e}, &(0x7f0000001180), &(0x7f00000011c0)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000001200)={0xae8, [[0x7, 0x6, 0x9, 0x8, 0x1, 0x6, 0x7ff, 0x5], [0x4a73, 0x5, 0x7f, 0x1, 0x1000, 0x5, 0x7, 0xffffffff], [0x0, 0x8, 0x10001, 0x333, 0x7f, 0x3e44, 0x4, 0x101]], '\x00', [{0x401, 0x9, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x631, 0x401}, {0x7, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x8001, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x7}, {0x8, 0xffff, 0x0, 0x1, 0x1, 0x1}, {0x54, 0x2}, {0x0, 0x9, 0x0, 0x1}, {0x200, 0x22b8, 0x0, 0x0, 0x1}], '\x00', 0x8}) 1.179376721s ago: executing program 2 (id=362): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2398, 0x101a83) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a00000107241400efffff08058103"], 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc01c586a, &(0x7f0000000340)={r0, &(0x7f0000000200)='/dev/sequencer\x00', 0x10000, &(0x7f0000000280)={@_ha_fsid={[0x7fffffff, 0x1040]}, {0x400, 0x3, 0xb, 0x7fffffff}}, 0x7fffffff, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x8}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x1e, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5a660c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x107734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000080), 0x400400, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0xfffffffe) 1.017760931s ago: executing program 3 (id=363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffe6, 0xb}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) close(r8) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 722.830523ms ago: executing program 1 (id=364): unshare(0x28060000) unshare(0x20060200) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x1e, 0x5, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000000000010000100000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="0200000001bfef2d605f09bdddbea4d10000000000000002000000"], 0x2c, 0x1) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/254, 0x145) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 655.493079ms ago: executing program 3 (id=365): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$packet(0x11, 0x3, 0x300) clock_gettime(0x0, &(0x7f0000000000)) clock_nanosleep(0x6, 0x0, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x4) io_setup(0x3f, 0x0) timerfd_create(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000004c0)) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0x3, 0x6, 0x7, 0x7}, {0xe, 0x1, 0x20, 0x78}, {0x0, 0x40, 0x8, 0x8}, {0x1, 0x47, 0xb}]}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x13, r0, 0x0) 532.541µs ago: executing program 4 (id=366): unshare(0x2c020400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x44}, 0x1, 0x2}, 0x40000) r3 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f000000b4c0)) 0s ago: executing program 4 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r1 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x92, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x6b, 0x2, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0xff, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xc, 0x9e}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x7, 0x1, 0x3, 0x8, 0xf3}, 0x2e, &(0x7f0000000100)={0x5, 0xf, 0x2e, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "64c873750ecf5b164d7000df7d7234f4"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x80, 0x66, 0x101, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xfa, 0x4, 0x1000}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1007}}]}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000340)={0xc, &(0x7f0000000200)={0x40, 0x22, 0xc7, {0xc7, 0x78, "8db38b3558cc3df7ab3585ccd41a6c919d9248aabe6e27c810a4778fee3bf4efde0c3f090a95a63e7c158e0d608c21d793637e16eac79897607d642194151a0bbd9d85757c0471596bb353333da7c9fb4d63f57d7d0587894ea06f9d968ab0f19fd19b0a5e6a2311c2b4cf19662fee510ff39b322b61bb5190e575488a1e02b63a815b6c3b5b44d3c46a1349c4f578696825785ff37a82c1b5f4f42fb53ca175e17f5133244eff10a58f55e1d108cf149db2c1f88ff26b71f0847327e78f2fda34928f2989"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}}, &(0x7f0000000640)={0x1c, &(0x7f0000000400)={0x0, 0x14, 0x11, "ed0204d48d40e0a75bf7f84ff9d731d6df"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6e}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000004c0)={0x20, 0x0, 0xe3, {0xe1, "69eb412e95f6f28027d895b1cf34967a6d2992169d5f2b2e37f2a16ebd51be6ceb4b75eafa50dbb78b8a480de9eafd1e6533dedeba4f2d4ad4f471a3f8084e811e82f9cebd877afc11519ce4945ba21a22e4f907e19ff58ae9a2057574b9b526e2873a550311af621bd68d171a171e40c9039ad2d9a4319c3bbbe6fa511382bfe3307bf5cba426e870f23e0f4301a360b3887dd93de0a6aedf4f18bebccdb42e4c25f93e0273e53b05ba308c944b8b929c6f0cd165fa26c43b9f950979331b3b459ef18978662636065f4d81bf618552a55ac324e3d908864d0ad81ef0313c7118"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0x7f}}) kernel console output (not intermixed with test programs): ve_1 [ 92.021192][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.068328][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.076704][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.126709][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.135857][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.146886][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.185290][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.193174][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.226383][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.243803][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.339035][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.354378][ T5835] Bluetooth: hci0: command tx timeout [ 92.359948][ T5830] Bluetooth: hci1: command tx timeout [ 92.366009][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.393587][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.427986][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.437216][ T5830] Bluetooth: hci4: command tx timeout [ 92.442663][ T5830] Bluetooth: hci2: command tx timeout [ 92.448229][ T5835] Bluetooth: hci3: command tx timeout [ 92.464431][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.475054][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.584966][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.593791][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.672979][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.698138][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.723897][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.734692][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.742653][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.840267][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.855313][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.885034][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.892920][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.922021][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.942910][ T5922] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.969441][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.001925][ T5922] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 93.015201][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.390699][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 93.404746][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 93.422125][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.442466][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.608549][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.632455][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.719802][ T5931] FAULT_INJECTION: forcing a failure. [ 93.719802][ T5931] name failslab, interval 1, probability 0, space 0, times 1 [ 93.733925][ T5931] CPU: 0 UID: 0 PID: 5931 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(full) [ 93.733959][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 93.733979][ T5931] Call Trace: [ 93.733988][ T5931] [ 93.733997][ T5931] dump_stack_lvl+0xe8/0x150 [ 93.734040][ T5931] should_fail_ex+0x412/0x560 [ 93.734073][ T5931] should_failslab+0xa8/0x100 [ 93.734111][ T5931] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 93.734139][ T5931] ? __alloc_skb+0x1d7/0x390 [ 93.734166][ T5931] ? __local_bh_enable_ip+0xd0/0x130 [ 93.734191][ T5931] ? __alloc_skb+0x193/0x390 [ 93.734222][ T5931] __alloc_skb+0x1d7/0x390 [ 93.734256][ T5931] alloc_skb_with_frags+0xca/0x890 [ 93.734291][ T5931] ? ipv6_addr_label+0x2f/0x240 [ 93.734314][ T5931] sock_alloc_send_pskb+0x878/0x990 [ 93.734347][ T5931] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 93.734367][ T5931] ? ipv6_dev_get_saddr+0x160/0xbb0 [ 93.734394][ T5931] __ip6_append_data+0x2b54/0x3f50 [ 93.734438][ T5931] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 93.734475][ T5931] ? ip6_mtu+0x7d/0x490 [ 93.734501][ T5931] ? __pfx___ip6_append_data+0x10/0x10 [ 93.734525][ T5931] ? __pfx_ip6_mtu+0x10/0x10 [ 93.734556][ T5931] ip6_append_data+0x1c0/0x380 [ 93.734586][ T5931] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 93.734613][ T5931] udpv6_sendmsg+0xbbe/0x25a0 [ 93.734645][ T5931] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 93.734672][ T5931] ? __lock_acquire+0x6b5/0x2cf0 [ 93.734693][ T5931] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 93.734724][ T5931] ? ip6_datagram_release_cb+0x7c/0x550 [ 93.734770][ T5931] ? lockdep_hardirqs_on+0x7a/0x110 [ 93.734792][ T5931] ? inet_send_prepare+0x1b9/0x270 [ 93.734807][ T5931] ? __local_bh_enable_ip+0xd0/0x130 [ 93.734826][ T5931] ? inet_send_prepare+0x1b9/0x270 [ 93.734852][ T5931] ? inet6_sendmsg+0xe4/0x120 [ 93.734874][ T5931] __sys_sendto+0x4a7/0x7a0 [ 93.734902][ T5931] ? __pfx___sys_sendto+0x10/0x10 [ 93.734947][ T5931] ? fput+0xa0/0xd0 [ 93.734963][ T5931] ? ksys_write+0x242/0x270 [ 93.734988][ T5931] __ia32_sys_sendto+0xdd/0x100 [ 93.735017][ T5931] __do_fast_syscall_32+0x20d/0x640 [ 93.735043][ T5931] ? do_fast_syscall_32+0x33/0x70 [ 93.735066][ T5931] ? asm_int80_emulation+0x1a/0x20 [ 93.735082][ T5931] ? do_int80_emulation+0x274/0x4d0 [ 93.735111][ T5931] do_fast_syscall_32+0x33/0x70 [ 93.735136][ T5931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.735156][ T5931] RIP: 0023:0xf7fa5539 [ 93.735179][ T5931] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 93.735193][ T5931] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 93.735211][ T5931] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 93.735222][ T5931] RDX: 0000000000000000 RSI: 000000002004c081 RDI: 0000000080000300 [ 93.735233][ T5931] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 93.735242][ T5931] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 93.735252][ T5931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.735275][ T5931] [ 93.846039][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 94.061914][ T5882] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.294170][ T5882] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.314571][ T5934] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.362914][ T5882] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 94.396620][ T5882] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.434473][ T5830] Bluetooth: hci1: command tx timeout [ 94.440432][ T5835] Bluetooth: hci0: command tx timeout [ 94.450868][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.514118][ T5835] Bluetooth: hci2: command tx timeout [ 94.519594][ T5835] Bluetooth: hci3: command tx timeout [ 94.525259][ T5830] Bluetooth: hci4: command tx timeout [ 94.563846][ T5929] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.614078][ T5905] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.619151][ T5882] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.643722][ T5942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'. [ 94.810173][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 94.890845][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 162, changing to 11 [ 94.935874][ T5944] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 94.942578][ T5944] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 94.960677][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 41244, setting to 1024 [ 94.972024][ T5905] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 94.985268][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.028783][ T5905] usb 4-1: config 0 descriptor?? [ 95.179092][ T5916] usb 5-1: USB disconnect, device number 2 [ 95.314807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.324209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 95.332529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 95.396151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.404807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 95.472895][ T5954] openvswitch: netlink: Flow key attr not present in new flow. [ 95.537234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.579784][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'. [ 95.634638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.674043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.895143][ T5914] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.064841][ T5914] usb 2-1: device descriptor read/64, error -71 [ 96.143558][ T5905] ath6kl: Failed to submit usb control message: -110 [ 96.235171][ T5905] ath6kl: unable to send the bmi data to the device: -110 [ 96.242450][ T5905] ath6kl: Unable to send get target info: -110 [ 96.264282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.278106][ T5905] ath6kl: Failed to init ath6kl core: -110 [ 96.297807][ T5905] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 96.449324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.467799][ T5914] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.744337][ T5914] usb 2-1: device descriptor read/64, error -71 [ 96.798559][ T5955] Zero length message leads to an empty skb [ 96.970783][ T5914] usb usb2-port1: attempt power cycle [ 97.168082][ T10] cfg80211: failed to load regulatory.db [ 97.287530][ T5898] usb 4-1: USB disconnect, device number 2 [ 97.375844][ T5914] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.395722][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 97.424848][ T5914] usb 2-1: device descriptor read/8, error -71 [ 97.684103][ T5914] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.708118][ T5914] usb 2-1: device descriptor read/8, error -71 [ 97.762438][ T5971] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 97.826643][ T5914] usb usb2-port1: unable to enumerate USB device [ 98.094466][ T5976] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 98.821664][ T5985] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 98.841373][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.849881][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.974057][ T5898] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.138692][ T5898] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 99.177929][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.211241][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.228783][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 99.244867][ T5898] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 99.254371][ T5898] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 99.262641][ T5898] usb 1-1: Manufacturer: syz [ 99.308637][ T5898] usb 1-1: config 0 descriptor?? [ 99.527080][ T6001] netlink: 'syz.3.24': attribute type 10 has an invalid length. [ 99.547380][ T6001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.570375][ T6001] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 99.598657][ T6001] netlink: 'syz.3.24': attribute type 10 has an invalid length. [ 99.606520][ T6001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24'. [ 99.615700][ T6001] batadv0: entered promiscuous mode [ 99.620985][ T6001] batadv0: entered allmulticast mode [ 99.636857][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 99.711336][ T6001] bond0: (slave batadv0): Releasing backup interface [ 99.814845][ T6001] bridge0: port 3(batadv0) entered blocking state [ 99.836858][ T6001] bridge0: port 3(batadv0) entered disabled state [ 99.962660][ T5939] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.002910][ T5898] appleir 0003:05AC:8243.0001: item fetching failed at offset 0/1 [ 100.039406][ T5898] appleir 0003:05AC:8243.0001: parse failed [ 100.053458][ T5898] appleir 0003:05AC:8243.0001: probe with driver appleir failed with error -22 [ 100.127311][ T5939] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.167769][ T5939] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.186092][ T6008] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 100.199254][ T5882] usb 1-1: USB disconnect, device number 2 [ 100.225129][ T5939] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.266167][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.301443][ T6003] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 100.309951][ T13] batman_adv: batadv0: IGMP Querier appeared [ 100.316305][ T13] batman_adv: batadv0: MLD Querier appeared [ 100.355219][ T5939] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.680705][ T6015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.27'. [ 100.850409][ T5905] usb 5-1: USB disconnect, device number 3 [ 101.571385][ T30] audit: type=1326 audit(1770808164.756:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.2.29" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x0 [ 101.817782][ T30] audit: type=1326 audit(1770808164.986:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.0.30" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x0 [ 101.907259][ T6029] FAULT_INJECTION: forcing a failure. [ 101.907259][ T6029] name failslab, interval 1, probability 0, space 0, times 0 [ 101.936044][ T6029] CPU: 0 UID: 0 PID: 6029 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT(full) [ 101.936075][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 101.936088][ T6029] Call Trace: [ 101.936096][ T6029] [ 101.936105][ T6029] dump_stack_lvl+0xe8/0x150 [ 101.936138][ T6029] should_fail_ex+0x412/0x560 [ 101.936171][ T6029] should_failslab+0xa8/0x100 [ 101.936203][ T6029] __kmalloc_cache_noprof+0x83/0x6e0 [ 101.936230][ T6029] ? alloc_pipe_info+0xe8/0x4d0 [ 101.936262][ T6029] alloc_pipe_info+0xe8/0x4d0 [ 101.936291][ T6029] splice_direct_to_actor+0xa08/0xc70 [ 101.936322][ T6029] ? __pfx_direct_splice_actor+0x10/0x10 [ 101.936344][ T6029] ? __pfx_aa_file_perm+0x10/0x10 [ 101.936374][ T6029] ? get_pid_task+0x20/0x1f0 [ 101.936403][ T6029] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 101.936434][ T6029] do_splice_direct+0x195/0x290 [ 101.936456][ T6029] ? __pfx_do_splice_direct+0x10/0x10 [ 101.936484][ T6029] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 101.936512][ T6029] ? rw_verify_area+0x255/0x4d0 [ 101.936540][ T6029] do_sendfile+0x535/0x7d0 [ 101.936580][ T6029] ? __pfx_do_sendfile+0x10/0x10 [ 101.936618][ T6029] ? __might_fault+0xaf/0x130 [ 101.936645][ T6029] __ia32_compat_sys_sendfile+0x120/0x1d0 [ 101.936681][ T6029] __do_fast_syscall_32+0x20d/0x640 [ 101.936713][ T6029] ? do_fast_syscall_32+0x33/0x70 [ 101.936741][ T6029] ? asm_int80_emulation+0x1a/0x20 [ 101.936760][ T6029] ? do_int80_emulation+0x274/0x4d0 [ 101.936793][ T6029] do_fast_syscall_32+0x33/0x70 [ 101.936823][ T6029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.936848][ T6029] RIP: 0023:0xf7fa5539 [ 101.936866][ T6029] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 101.936883][ T6029] RSP: 002b:00000000f544550c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 101.936905][ T6029] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000002 [ 101.936918][ T6029] RDX: 0000000080000080 RSI: 0000000000000008 RDI: 0000000000000000 [ 101.936931][ T6029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.936943][ T6029] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 101.936954][ T6029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.936984][ T6029] [ 102.373518][ T6031] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 102.440851][ T6032] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 102.765971][ T6043] syzkaller0: entered promiscuous mode [ 102.771917][ T6043] syzkaller0: entered allmulticast mode [ 103.564689][ T6064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.38'. [ 103.664731][ T30] audit: type=1326 audit(1770808166.826:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.37" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x0 [ 104.079318][ T6073] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.094927][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 104.278603][ T24] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.351342][ T24] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.432145][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.503345][ T24] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 104.714378][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.828744][ T24] usb 5-1: config 0 descriptor?? [ 105.141093][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.149330][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.257189][ T24] uclogic 0003:5543:0042.0002: unbalanced delimiter at end of report description [ 105.286920][ T24] uclogic 0003:5543:0042.0002: parse failed [ 105.302438][ T24] uclogic 0003:5543:0042.0002: probe with driver uclogic failed with error -22 [ 105.479218][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 105.786939][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.818264][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.148739][ T6089] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 106.168168][ T5939] usb 5-1: USB disconnect, device number 4 [ 106.195848][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.203425][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.247699][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.266999][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.284588][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.314193][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.437983][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.496407][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 106.509536][ T10] usb 4-1: config 1 has no interface number 1 [ 106.519672][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.538470][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.552623][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.571028][ T10] usb 4-1: Product: syz [ 106.595427][ T10] usb 4-1: Manufacturer: syz [ 106.600104][ T10] usb 4-1: SerialNumber: syz [ 106.657636][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.911572][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.931728][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.964087][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 106.982264][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 106.991390][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 107.007756][ T24] usb 2-1: can't read configurations, error -71 [ 107.033721][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 107.142106][ T10] usb 4-1: USB disconnect, device number 3 [ 107.198666][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.434826][ T5898] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.831032][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.858401][ T5898] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.894036][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.944565][ T5898] usb 1-1: config 0 descriptor?? [ 107.972477][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.55'. [ 108.235927][ T5898] usbhid 1-1:0.0: can't add hid device: -71 [ 108.249825][ T5898] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 108.291133][ T5898] usb 1-1: USB disconnect, device number 3 [ 108.688688][ T30] audit: type=1400 audit(1770808171.866:5): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26F81648AA2A pid=6127 comm="syz.2.57" [ 108.924965][ T5898] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.094343][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 109.166389][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.183263][ T5898] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 109.403793][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.464549][ T5898] usb 1-1: config 0 descriptor?? [ 109.479056][ T5898] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 109.509981][ T5898] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 110.048686][ T5905] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 110.112855][ T5939] usb 1-1: USB disconnect, device number 4 [ 110.144585][ T5939] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 110.236068][ T5905] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 110.354578][ T5905] usb 5-1: config 5 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.456186][ T5905] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 110.456220][ T5905] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 110.456236][ T5905] usb 5-1: Manufacturer: syz [ 110.456247][ T5905] usb 5-1: SerialNumber: syz [ 110.526564][ T6147] FAULT_INJECTION: forcing a failure. [ 110.526564][ T6147] name failslab, interval 1, probability 0, space 0, times 0 [ 110.526630][ T6147] CPU: 1 UID: 0 PID: 6147 Comm: syz.1.62 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.526657][ T6147] Tainted: [L]=SOFTLOCKUP [ 110.526678][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 110.526687][ T6147] Call Trace: [ 110.526693][ T6147] [ 110.526699][ T6147] dump_stack_lvl+0xe8/0x150 [ 110.526741][ T6147] should_fail_ex+0x412/0x560 [ 110.526776][ T6147] should_failslab+0xa8/0x100 [ 110.526807][ T6147] __kmalloc_cache_noprof+0x83/0x6e0 [ 110.526840][ T6147] ? nf_flow_offload_xdp_setup+0x7e/0x690 [ 110.526862][ T6147] ? kasan_save_track+0x3e/0x80 [ 110.526879][ T6147] ? __kasan_kmalloc+0x93/0xb0 [ 110.526922][ T6147] nf_flow_offload_xdp_setup+0x7e/0x690 [ 110.526959][ T6147] nf_flow_table_offload_setup+0x122/0x690 [ 110.526998][ T6147] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 110.527029][ T6147] ? nft_pernet+0x23/0x240 [ 110.527044][ T6147] ? nft_pernet+0x23/0x240 [ 110.527083][ T6147] ? nft_pernet+0x23/0x240 [ 110.527103][ T6147] ? nft_pernet+0x23/0x240 [ 110.527119][ T6147] ? nft_pernet+0x23/0x240 [ 110.527138][ T6147] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 110.527170][ T6147] nft_register_flowtable_net_hooks+0x351/0x800 [ 110.527192][ T6147] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 110.527236][ T6147] nf_tables_newflowtable+0x1b44/0x23d0 [ 110.527274][ T6147] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 110.527295][ T6147] ? nfnl_pernet+0x23/0x240 [ 110.527329][ T6147] ? __nla_parse+0x40/0x60 [ 110.527356][ T6147] nfnetlink_rcv+0x1240/0x27b0 [ 110.527426][ T6147] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 110.527489][ T6147] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.527511][ T6147] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.527568][ T6147] netlink_unicast+0x80f/0x9b0 [ 110.527600][ T6147] ? __pfx_netlink_unicast+0x10/0x10 [ 110.527627][ T6147] ? __alloc_skb+0x193/0x390 [ 110.527665][ T6147] ? netlink_sendmsg+0x650/0xb40 [ 110.527716][ T6147] ? skb_put+0x11b/0x210 [ 110.527751][ T6147] netlink_sendmsg+0x813/0xb40 [ 110.527791][ T6147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.527814][ T6147] ? aa_sock_msg_perm+0xf1/0x1b0 [ 110.527837][ T6147] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.527882][ T6147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.527908][ T6147] ____sys_sendmsg+0xa68/0xad0 [ 110.527942][ T6147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.527960][ T6147] ? kstrtoull+0x12f/0x1d0 [ 110.527985][ T6147] ___sys_sendmsg+0x2a5/0x360 [ 110.528013][ T6147] ? __lock_acquire+0x6b5/0x2cf0 [ 110.528041][ T6147] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.528062][ T6147] ? get_pid_task+0x20/0x1f0 [ 110.528089][ T6147] ? get_pid_task+0x20/0x1f0 [ 110.528114][ T6147] ? get_pid_task+0x20/0x1f0 [ 110.528167][ T6147] ? __fget_files+0x2a/0x420 [ 110.528187][ T6147] ? __fget_files+0x3a0/0x420 [ 110.528217][ T6147] __sys_sendmsg+0x183/0x260 [ 110.528239][ T6147] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.528271][ T6147] ? __pfx_ksys_write+0x10/0x10 [ 110.528293][ T6147] __do_fast_syscall_32+0x20d/0x640 [ 110.528335][ T6147] ? do_fast_syscall_32+0x33/0x70 [ 110.528364][ T6147] ? asm_int80_emulation+0x1a/0x20 [ 110.528383][ T6147] ? do_int80_emulation+0x274/0x4d0 [ 110.528418][ T6147] do_fast_syscall_32+0x33/0x70 [ 110.528440][ T6147] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.528458][ T6147] RIP: 0023:0xf7fa1539 [ 110.528489][ T6147] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 110.528507][ T6147] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 110.528527][ T6147] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 110.528541][ T6147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.528552][ T6147] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.528568][ T6147] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 110.528577][ T6147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.528599][ T6147] [ 110.759495][ T6149] syzkaller0: entered promiscuous mode [ 110.759554][ T6149] syzkaller0: entered allmulticast mode [ 111.787089][ T5905] usbhid 5-1:5.0: couldn't find an input interrupt endpoint [ 111.954451][ T5905] usb 5-1: USB disconnect, device number 5 [ 112.216563][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.248910][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.566339][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.746679][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.785623][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.798845][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 112.808662][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 112.850476][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.859752][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 112.914885][ T9] usb 3-1: config 0 has no interface number 0 [ 112.921064][ T9] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.931679][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.134423][ T9] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 113.153151][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.185161][ T9] usb 3-1: Product: syz [ 113.189649][ T9] usb 3-1: Manufacturer: syz [ 113.224042][ T9] usb 3-1: SerialNumber: syz [ 113.251787][ T9] usb 3-1: config 0 descriptor?? [ 113.265607][ T6191] netlink: 'syz.4.69': attribute type 12 has an invalid length. [ 113.291945][ T9] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 113.299107][ T6191] netlink: 'syz.4.69': attribute type 29 has an invalid length. [ 113.336552][ T9] em28xx 3-1:0.132: Video interface 132 found: [ 113.347324][ T6191] netlink: 148 bytes leftover after parsing attributes in process `syz.4.69'. [ 113.368656][ T6191] netlink: 59 bytes leftover after parsing attributes in process `syz.4.69'. [ 113.380619][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 113.449774][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72'. [ 113.468688][ T6198] hsr0: entered promiscuous mode [ 113.539439][ T5831] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 113.539463][ T6198] macvlan2: entered allmulticast mode [ 113.563559][ T6198] hsr0: entered allmulticast mode [ 113.583849][ T6198] hsr_slave_0: entered allmulticast mode [ 113.590073][ T6198] hsr_slave_1: entered allmulticast mode [ 113.716279][ T5831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.728625][ T5831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.780452][ T9] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 113.987943][ T5831] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.038185][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.087858][ T5831] usb 4-1: Product: syz [ 114.103110][ T5831] usb 4-1: Manufacturer: syz [ 114.118648][ T5831] usb 4-1: SerialNumber: syz [ 114.766427][ T5831] usb 4-1: 0:2 : does not exist [ 114.988353][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 115.018075][ T9] em28xx 3-1:0.132: board has no eeprom [ 115.120951][ T9] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 115.221769][ T9] em28xx 3-1:0.132: analog set to bulk mode. [ 115.240988][ T6173] em28xx 3-1:0.132: Registering V4L2 extension [ 115.292540][ T9] usb 3-1: USB disconnect, device number 2 [ 115.320774][ T9] em28xx 3-1:0.132: Disconnecting em28xx [ 115.381817][ T6210] syzkaller0: entered promiscuous mode [ 115.404742][ T6210] syzkaller0: entered allmulticast mode [ 115.578134][ T5831] usb 4-1: USB disconnect, device number 4 [ 115.698014][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.734078][ T6172] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.747871][ T6173] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 115.763808][ T6173] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 115.774699][ T6173] em28xx 3-1:0.132: No AC97 audio processor [ 115.805623][ T6173] usb 3-1: Decoder not found [ 115.810696][ T6173] em28xx 3-1:0.132: failed to create media graph [ 115.817642][ T6173] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 115.838288][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 115.855828][ T6173] em28xx 3-1:0.132: Remote control support is not available for this card. [ 115.875629][ T9] em28xx 3-1:0.132: Closing input extension [ 115.935833][ T9] em28xx 3-1:0.132: Freeing device [ 115.957552][ T6172] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 115.981833][ T6172] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 116.000050][ T6172] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.014649][ T6172] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 116.025147][ T6172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.033340][ T6172] usb 1-1: Product: syz [ 116.035976][ T6227] program syz.3.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.048635][ T6172] usb 1-1: Manufacturer: syz [ 116.063535][ T6172] usb 1-1: SerialNumber: syz [ 116.091616][ T6172] usb 1-1: config 0 descriptor?? [ 116.118609][ T6172] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 116.137619][ T6172] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 116.151563][ T6172] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 116.182150][ T6172] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 116.191468][ T6172] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 116.201946][ T6172] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 116.226997][ T6172] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 116.254690][ T6172] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 116.276127][ T6172] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 116.284362][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.296006][ T6172] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 116.308235][ T6172] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 116.333720][ T6172] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 116.342378][ T6172] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 116.364073][ T5939] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.375741][ T6172] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 116.422824][ T6172] usb 1-1: USB disconnect, device number 5 [ 116.446282][ T6172] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 116.456153][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 116.471901][ T9] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 116.488596][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 116.509113][ T6172] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 116.524498][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 116.534808][ T9] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 116.552034][ T6172] keyspan 1-1:0.0: device disconnected [ 116.570927][ T5939] usb 4-1: config 0 has an invalid interface number: 233 but max is 0 [ 116.581663][ T9] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 116.604127][ T5939] usb 4-1: config 0 has no interface number 0 [ 116.618584][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.635021][ T5939] usb 4-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=d3.4f [ 116.645731][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 116.658844][ T9] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 116.677882][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.682363][ T9] usb 3-1: Product: syz [ 116.706155][ T9] usb 3-1: Manufacturer: syz [ 116.718807][ T9] usb 3-1: SerialNumber: syz [ 116.737502][ T9] usb 3-1: config 0 descriptor?? [ 116.770824][ T9] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 116.823042][ T9] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 116.864047][ T5939] usb 4-1: Product: syz [ 116.868294][ T5939] usb 4-1: Manufacturer: syz [ 116.872969][ T5939] usb 4-1: SerialNumber: syz [ 116.897851][ T5939] usb 4-1: config 0 descriptor?? [ 116.915908][ T5939] io_ti 4-1:0.233: required endpoints missing [ 117.063425][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.082142][ T6172] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 117.091810][ T6235] UHID_CREATE from different security context by process 55 (syz.4.82), this is not allowed. [ 117.102655][ T6172] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 117.112165][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.120493][ T6172] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 117.128546][ T6172] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 117.139306][ T6172] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 117.173414][ T6172] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 117.187975][ T6172] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 117.197101][ T6172] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 117.206070][ T6172] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 117.213720][ T6172] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 117.228312][ T6172] hid-generic 0000:0000:0004.0003: hidraw0: HID v0.03 Device [syz1] on syz0 [ 117.283505][ T6172] usb 3-1: USB disconnect, device number 3 [ 117.303924][ T6172] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 117.460752][ T6237] fido_id[6237]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.584064][ T6243] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 118.019055][ T6250] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.204412][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'. [ 118.218212][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.86'. [ 118.347336][ T30] audit: type=1326 audit(1770808181.506:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.87" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f75539 code=0x0 [ 118.956817][ T5939] usb 4-1: USB disconnect, device number 5 [ 119.964067][ T6172] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.136989][ T6172] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 120.154325][ T6172] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 120.164383][ T6172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.299969][ T6172] usb 3-1: Product: syz [ 120.342463][ T6172] usb 3-1: Manufacturer: syz [ 120.348806][ T6172] usb 3-1: SerialNumber: syz [ 120.375691][ T5939] hid-generic 0000:0000:0004.0004: hidraw0: HID v0.03 Device [syz1] on syz0 [ 120.400547][ T6172] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 120.455524][ T6173] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 120.617279][ T6278] fido_id[6278]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.798988][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.844545][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 120.938145][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.011424][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.064692][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.082181][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.96'. [ 121.107365][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.207541][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.268858][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.302932][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.568065][ T6173] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 121.588703][ T6173] ath9k_htc: Failed to initialize the device [ 121.649343][ T6173] usb 3-1: ath9k_htc: USB layer deinitialized [ 121.679857][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.724628][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.891998][ T6301] FAULT_INJECTION: forcing a failure. [ 121.891998][ T6301] name failslab, interval 1, probability 0, space 0, times 0 [ 121.966089][ T6301] CPU: 0 UID: 0 PID: 6301 Comm: syz.0.100 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.966128][ T6301] Tainted: [L]=SOFTLOCKUP [ 121.966134][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 121.966143][ T6301] Call Trace: [ 121.966149][ T6301] [ 121.966156][ T6301] dump_stack_lvl+0xe8/0x150 [ 121.966188][ T6301] should_fail_ex+0x412/0x560 [ 121.966219][ T6301] should_failslab+0xa8/0x100 [ 121.966243][ T6301] __kmalloc_noprof+0xde/0x7e0 [ 121.966262][ T6301] ? do_sys_poll+0x313/0x1120 [ 121.966288][ T6301] do_sys_poll+0x313/0x1120 [ 121.966321][ T6301] ? __pfx_do_sys_poll+0x10/0x10 [ 121.966342][ T6301] ? __lock_acquire+0x6b5/0x2cf0 [ 121.966405][ T6301] ? get_pid_task+0x20/0x1f0 [ 121.966423][ T6301] ? get_pid_task+0x20/0x1f0 [ 121.966464][ T6301] ? __pfx_vfs_write+0x10/0x10 [ 121.966480][ T6301] ? set_compat_user_sigmask+0xc7/0x1c0 [ 121.966497][ T6301] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 121.966516][ T6301] ? kmem_cache_free+0x195/0x610 [ 121.966539][ T6301] __ia32_compat_sys_ppoll_time32+0x2aa/0x320 [ 121.966568][ T6301] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 121.966590][ T6301] ? ksys_write+0x1fc/0x270 [ 121.966609][ T6301] ? __pfx_ksys_write+0x10/0x10 [ 121.966631][ T6301] __do_fast_syscall_32+0x20d/0x640 [ 121.966655][ T6301] ? do_fast_syscall_32+0x33/0x70 [ 121.966675][ T6301] ? asm_int80_emulation+0x1a/0x20 [ 121.966721][ T6301] ? do_int80_emulation+0x274/0x4d0 [ 121.966754][ T6301] do_fast_syscall_32+0x33/0x70 [ 121.966788][ T6301] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.966806][ T6301] RIP: 0023:0xf7fa5539 [ 121.966825][ T6301] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 121.966838][ T6301] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 121.966859][ T6301] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 121.966870][ T6301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.966878][ T6301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.966902][ T6301] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 121.966911][ T6301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.966953][ T6301] [ 122.583258][ T6314] sctp: [Deprecated]: syz.4.104 (pid 6314) Use of int in maxseg socket option. [ 122.583258][ T6314] Use struct sctp_assoc_value instead [ 122.783495][ T6172] usb 3-1: USB disconnect, device number 4 [ 123.149987][ T6325] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 123.160504][ T6327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.105'. [ 123.446909][ T6172] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.784182][ T6172] usb 3-1: Using ep0 maxpacket: 16 [ 123.793607][ T6172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.859316][ T6172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.898779][ T6172] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.927432][ T6172] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.939503][ T6172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.952978][ T6172] usb 3-1: config 0 descriptor?? [ 124.402276][ T6172] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input5 [ 124.448514][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.551728][ T6172] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 124.613657][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 124.619568][ T6172] usb 3-1: USB disconnect, device number 5 [ 124.639882][ T9] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 124.640331][ T6350] Cannot find add_set index 46338 as target [ 124.672783][ T6347] fido_id[6347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 124.700271][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.715530][ T9] usb 2-1: Product: syz [ 124.720168][ T9] usb 2-1: Manufacturer: syz [ 124.725315][ T9] usb 2-1: SerialNumber: syz [ 124.746017][ T9] usb 2-1: config 0 descriptor?? [ 125.188142][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 125.223521][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.251885][ T6365] FAULT_INJECTION: forcing a failure. [ 125.251885][ T6365] name failslab, interval 1, probability 0, space 0, times 0 [ 125.279947][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 125.304634][ T9] usb 2-1: media controller created [ 125.313825][ T6365] CPU: 1 UID: 0 PID: 6365 Comm: syz.4.120 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.313863][ T6365] Tainted: [L]=SOFTLOCKUP [ 125.313871][ T6365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 125.313882][ T6365] Call Trace: [ 125.313890][ T6365] [ 125.313899][ T6365] dump_stack_lvl+0xe8/0x150 [ 125.313932][ T6365] should_fail_ex+0x412/0x560 [ 125.313996][ T6365] should_failslab+0xa8/0x100 [ 125.314029][ T6365] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 125.314055][ T6365] ? __alloc_skb+0x193/0x390 [ 125.314084][ T6365] ? __alloc_skb+0x1d7/0x390 [ 125.314111][ T6365] ? __local_bh_enable_ip+0xd0/0x130 [ 125.314135][ T6365] ? __alloc_skb+0x193/0x390 [ 125.314163][ T6365] __alloc_skb+0x1d7/0x390 [ 125.314196][ T6365] netlink_sendmsg+0x5d4/0xb40 [ 125.314231][ T6365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.314260][ T6365] ? aa_sock_msg_perm+0xf1/0x1b0 [ 125.314290][ T6365] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 125.314319][ T6365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.314345][ T6365] ____sys_sendmsg+0xa68/0xad0 [ 125.314374][ T6365] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.314399][ T6365] ? kstrtoull+0x12f/0x1d0 [ 125.314434][ T6365] ___sys_sendmsg+0x2a5/0x360 [ 125.314453][ T6365] ? __lock_acquire+0x6b5/0x2cf0 [ 125.314479][ T6365] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.314500][ T6365] ? get_pid_task+0x20/0x1f0 [ 125.314527][ T6365] ? get_pid_task+0x20/0x1f0 [ 125.314550][ T6365] ? get_pid_task+0x20/0x1f0 [ 125.314604][ T6365] ? __fget_files+0x2a/0x420 [ 125.314623][ T6365] ? __fget_files+0x3a0/0x420 [ 125.314652][ T6365] __sys_sendmsg+0x183/0x260 [ 125.314675][ T6365] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.314707][ T6365] ? __pfx_ksys_write+0x10/0x10 [ 125.314738][ T6365] __do_fast_syscall_32+0x20d/0x640 [ 125.314771][ T6365] ? do_fast_syscall_32+0x33/0x70 [ 125.314799][ T6365] ? asm_int80_emulation+0x1a/0x20 [ 125.314818][ T6365] ? do_int80_emulation+0x274/0x4d0 [ 125.314852][ T6365] do_fast_syscall_32+0x33/0x70 [ 125.314881][ T6365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.314906][ T6365] RIP: 0023:0xf701d539 [ 125.314924][ T6365] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 125.314941][ T6365] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 125.314970][ T6365] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 125.314984][ T6365] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.314996][ T6365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.315007][ T6365] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 125.315019][ T6365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.315048][ T6365] [ 125.420293][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.840079][ T6373] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 125.935442][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 125.998079][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 126.016802][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 126.065452][ T9] usb 2-1: USB disconnect, device number 8 [ 126.230153][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 126.334727][ T6383] ALSA: mixer_oss: invalid OSS volume '' [ 126.725964][ T6391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.126'. [ 126.893472][ T6397] netlink: 'syz.2.124': attribute type 2 has an invalid length. [ 126.929237][ T6397] !: entered promiscuous mode [ 126.949741][ T6394] netlink: 'syz.2.124': attribute type 2 has an invalid length. [ 126.959668][ T6394] !: left promiscuous mode [ 127.188546][ T6181] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.291170][ T6398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.127'. [ 127.374485][ T6181] usb 1-1: Using ep0 maxpacket: 32 [ 127.382341][ T6181] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 127.397836][ T6181] usb 1-1: config 0 has no interface number 0 [ 127.417517][ T6181] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.511734][ T6181] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 127.533294][ T6181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.566679][ T6181] usb 1-1: Product: syz [ 127.576799][ T6181] usb 1-1: Manufacturer: syz [ 127.583042][ T6181] usb 1-1: SerialNumber: syz [ 127.715040][ T6181] usb 1-1: config 0 descriptor?? [ 127.755961][ T6181] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 127.766858][ T6181] em28xx 1-1:0.132: Video interface 132 found: [ 128.231490][ T6181] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 128.664266][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 128.827226][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.889214][ T6415] hfs: unable to load iocharset "io#harset" [ 128.942638][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.989858][ T6422] netlink: 48 bytes leftover after parsing attributes in process `syz.3.133'. [ 129.076070][ T6423] netlink: 'syz.1.134': attribute type 3 has an invalid length. [ 129.087516][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.119220][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.142912][ T6411] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 129.156553][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.176104][ T6425] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 129.400801][ T6181] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 129.413072][ T9] usb 5-1: USB disconnect, device number 6 [ 129.435352][ T6181] em28xx 1-1:0.132: board has no eeprom [ 129.450217][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.534286][ T6181] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 129.542333][ T6181] em28xx 1-1:0.132: analog set to bulk mode. [ 129.557009][ T5939] em28xx 1-1:0.132: Registering V4L2 extension [ 129.715803][ T5939] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 129.783691][ T5939] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 129.944199][ T5939] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 130.056621][ T5939] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 130.154368][ T6181] usb 1-1: USB disconnect, device number 6 [ 130.169897][ T6181] em28xx 1-1:0.132: Disconnecting em28xx [ 130.497640][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 130.958798][ T6442] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 130.980890][ T5939] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 131.010272][ T5939] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 131.032717][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.040253][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.092405][ T5939] em28xx 1-1:0.132: No AC97 audio processor [ 131.139751][ T5939] usb 1-1: Decoder not found [ 131.211852][ T5939] em28xx 1-1:0.132: failed to create media graph [ 131.260303][ T5939] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 131.290642][ T5939] em28xx 1-1:0.132: Remote control support is not available for this card. [ 131.373253][ T6181] em28xx 1-1:0.132: Closing input extension [ 131.583099][ T6181] em28xx 1-1:0.132: Freeing device [ 131.841992][ T6473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.144'. [ 131.864075][ T5939] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.071166][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 132.090498][ T5939] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 132.113114][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.168401][ T5939] usb 3-1: Product: syz [ 132.211397][ T5939] usb 3-1: Manufacturer: syz [ 132.239958][ T5939] usb 3-1: SerialNumber: syz [ 132.353615][ T5939] usb 3-1: config 0 descriptor?? [ 132.666597][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.749252][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.006956][ T5939] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 133.039723][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.068838][ T5939] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 133.103595][ T5939] usb 3-1: media controller created [ 133.131339][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.283330][ T6518] netlink: 280 bytes leftover after parsing attributes in process `syz.4.147'. [ 133.754538][ T5939] zl10353_read_register: readreg error (reg=127, ret==0) [ 133.765845][ T6525] openvswitch: netlink: Flow key attr not present in new flow. [ 133.774955][ T5939] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 133.783147][ T5939] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 133.944088][ T6175] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 134.094121][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 134.104047][ T6175] usb 2-1: Using ep0 maxpacket: 32 [ 134.123583][ T6175] usb 2-1: config 3 has an invalid interface number: 171 but max is 0 [ 134.144081][ T6175] usb 2-1: config 3 has no interface number 0 [ 134.160173][ T6175] usb 2-1: config 3 interface 171 has no altsetting 0 [ 134.185225][ T6175] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 134.205205][ T6175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.230097][ T6175] usb 2-1: Product: syz [ 134.243293][ T6175] usb 2-1: Manufacturer: syz [ 134.248925][ T9] usb 5-1: device descriptor read/64, error -71 [ 134.259022][ T6175] usb 2-1: SerialNumber: syz [ 134.405531][ T5882] usb 3-1: USB disconnect, device number 6 [ 134.509028][ T6175] as10x_usb: device has been detected [ 134.520240][ T6175] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 134.543263][ T6175] usb 2-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 134.558235][ T5882] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 134.574209][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.598141][ T6175] as10x_usb: error during firmware upload part1 [ 134.608786][ T6175] Registered device Sky IT Digital Key (green led) [ 134.617890][ T6175] usb 2-1: USB disconnect, device number 9 [ 134.721804][ T6175] Unregistered device Sky IT Digital Key (green led) [ 134.734210][ T9] usb 5-1: device descriptor read/64, error -71 [ 134.751635][ T6175] as10x_usb: device has been disconnected [ 134.890069][ T9] usb usb5-port1: attempt power cycle [ 135.067449][ T6536] netlink: 68 bytes leftover after parsing attributes in process `syz.3.154'. [ 135.128092][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 135.234520][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 135.274864][ T9] usb 5-1: device descriptor read/8, error -71 [ 135.315471][ T6546] ALSA: mixer_oss: invalid OSS volume '' [ 135.524079][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 135.584120][ T9] usb 5-1: device descriptor read/8, error -71 [ 135.697925][ T6550] syzkaller0: entered promiscuous mode [ 135.717931][ T9] usb usb5-port1: unable to enumerate USB device [ 135.727301][ T6550] syzkaller0: entered allmulticast mode [ 135.784094][ T6175] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 136.014730][ T6175] usb 2-1: Using ep0 maxpacket: 16 [ 136.036850][ T6175] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 136.062427][ T6175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.094234][ T6175] usb 2-1: Product: syz [ 136.098656][ T6175] usb 2-1: Manufacturer: syz [ 136.103387][ T6175] usb 2-1: SerialNumber: syz [ 136.149209][ T6175] usb 2-1: config 0 descriptor?? [ 136.388517][ T6551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.400636][ T6551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.483731][ T6564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.165'. [ 136.615123][ T6175] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 136.676092][ T6175] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.041771][ T6175] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 137.113581][ T6175] usb 2-1: media controller created [ 137.212456][ T6175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.705449][ T6172] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.798323][ T6175] zl10353_read_register: readreg error (reg=127, ret==0) [ 137.815507][ T6175] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 137.831303][ T6175] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 137.916092][ T6172] usb 3-1: Using ep0 maxpacket: 16 [ 137.951246][ T6172] usb 3-1: config 0 has no interfaces? [ 137.958894][ T6172] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 137.969407][ T6172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.998292][ T6172] usb 3-1: config 0 descriptor?? [ 138.036675][ T6579] kvm: pic: non byte read [ 138.049062][ T6579] kvm: pic: non byte read [ 138.065746][ T6579] kvm: pic: non byte read [ 138.076822][ T6579] kvm: pic: non byte read [ 138.088767][ T6579] kvm: pic: non byte read [ 138.109385][ T6579] kvm: pic: non byte read [ 138.119857][ T6579] kvm: pic: non byte read [ 138.131173][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.131280][ T6579] kvm: pic: non byte read [ 138.142521][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.143686][ T6579] kvm: pic: non byte read [ 138.172692][ T6579] kvm: pic: non byte read [ 138.547194][ T6180] usb 2-1: USB disconnect, device number 10 [ 138.641586][ T6180] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 138.744123][ T6172] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 138.776674][ T6593] openvswitch: netlink: Flow key attr not present in new flow. [ 138.904312][ T6172] usb 5-1: Using ep0 maxpacket: 16 [ 138.927578][ T6172] usb 5-1: unable to get BOS descriptor or descriptor too short [ 138.943304][ T6172] usb 5-1: config 1 has an invalid interface number: 27 but max is 0 [ 138.953644][ T6172] usb 5-1: config 1 has no interface number 0 [ 138.969677][ T6172] usb 5-1: config 1 interface 27 has no altsetting 0 [ 139.000784][ T6172] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=45.9f [ 139.024858][ T6172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.041864][ T6172] usb 5-1: Product: syz [ 139.046761][ T6172] usb 5-1: Manufacturer: syz [ 139.063130][ T6172] usb 5-1: SerialNumber: syz [ 139.164677][ T6180] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 139.344180][ T6180] usb 2-1: device descriptor read/64, error -71 [ 139.614066][ T6180] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 139.754142][ T6180] usb 2-1: device descriptor read/64, error -71 [ 139.825899][ T6587] : renamed from vlan0 (while UP) [ 139.874170][ T6180] usb usb2-port1: attempt power cycle [ 140.225593][ T6180] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 140.256160][ T6180] usb 2-1: device descriptor read/8, error -71 [ 140.355359][ T6172] qmi_wwan 5-1:1.27: bogus CDC Union: master=0, slave=0 [ 140.376916][ T6172] qmi_wwan 5-1:1.27: probe with driver qmi_wwan failed with error -22 [ 140.413424][ T6172] usb 5-1: USB disconnect, device number 11 [ 140.449078][ T6175] usb 3-1: USB disconnect, device number 7 [ 140.524050][ T6180] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 140.576262][ T6180] usb 2-1: device descriptor read/8, error -71 [ 140.740332][ T6180] usb usb2-port1: unable to enumerate USB device [ 140.802437][ T6608] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 140.815969][ T6609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 141.110897][ T6596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.404056][ T6180] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 141.586416][ T6180] usb 1-1: unable to get BOS descriptor or descriptor too short [ 141.594816][ T5939] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 141.604077][ T6180] usb 1-1: not running at top speed; connect to a high speed hub [ 141.616088][ T6180] usb 1-1: config 1 has an invalid interface descriptor of length 5, skipping [ 141.625648][ T5882] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 141.633276][ T6180] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.649892][ T6180] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 141.659154][ T6180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 141.670244][ T6180] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 141.687515][ T6180] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.698405][ T6180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.706609][ T6180] usb 1-1: Product: syz [ 141.712944][ T6180] usb 1-1: Manufacturer: syz [ 141.722958][ T6180] usb 1-1: SerialNumber: syz [ 141.765796][ T5939] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 141.776022][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.785037][ T5939] usb 5-1: Product: syz [ 141.789283][ T5939] usb 5-1: Manufacturer: syz [ 141.794208][ T5939] usb 5-1: SerialNumber: syz [ 141.804384][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 141.818704][ T5882] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 141.831465][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.840333][ T5882] usb 4-1: Product: syz [ 141.845574][ T5882] usb 4-1: Manufacturer: syz [ 141.850346][ T5882] usb 4-1: SerialNumber: syz [ 141.860704][ T5882] usb 4-1: config 0 descriptor?? [ 141.951450][ T6180] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 142.008290][ T6180] usb 1-1: USB disconnect, device number 7 [ 142.070605][ T6623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.109421][ T6623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.114500][ T6315] udevd[6315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.263505][ T5939] rtl8150 5-1:1.0: couldn't reset the device [ 142.274834][ T5939] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 142.284254][ T6175] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 142.311941][ T5939] usb 5-1: USB disconnect, device number 12 [ 142.338439][ T5882] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 142.365742][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.379265][ T5882] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 142.387650][ T5882] usb 4-1: media controller created [ 142.389714][ T6633] syzkaller0: entered promiscuous mode [ 142.401970][ T6633] syzkaller0: entered allmulticast mode [ 142.414800][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.464800][ T6175] usb 2-1: Using ep0 maxpacket: 16 [ 142.472417][ T6175] usb 2-1: config 0 has no interfaces? [ 142.479039][ T6175] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 142.500877][ T6175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.523888][ T6175] usb 2-1: config 0 descriptor?? [ 142.620903][ T6637] FAULT_INJECTION: forcing a failure. [ 142.620903][ T6637] name failslab, interval 1, probability 0, space 0, times 0 [ 142.635662][ T6637] CPU: 1 UID: 0 PID: 6637 Comm: syz.2.192 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.635700][ T6637] Tainted: [L]=SOFTLOCKUP [ 142.635708][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 142.635720][ T6637] Call Trace: [ 142.635733][ T6637] [ 142.635751][ T6637] dump_stack_lvl+0xe8/0x150 [ 142.635785][ T6637] should_fail_ex+0x412/0x560 [ 142.635818][ T6637] should_failslab+0xa8/0x100 [ 142.635859][ T6637] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 142.635885][ T6637] ? __alloc_skb+0x193/0x390 [ 142.635914][ T6637] ? __alloc_skb+0x1d7/0x390 [ 142.635941][ T6637] ? __local_bh_enable_ip+0xd0/0x130 [ 142.635965][ T6637] ? __alloc_skb+0x193/0x390 [ 142.635996][ T6637] __alloc_skb+0x1d7/0x390 [ 142.636029][ T6637] netlink_sendmsg+0x5d4/0xb40 [ 142.636068][ T6637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.636100][ T6637] ? aa_sock_msg_perm+0xf1/0x1b0 [ 142.636131][ T6637] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.636161][ T6637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.636188][ T6637] ____sys_sendmsg+0xa68/0xad0 [ 142.636216][ T6637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.636241][ T6637] ? kstrtoull+0x12f/0x1d0 [ 142.636276][ T6637] ___sys_sendmsg+0x2a5/0x360 [ 142.636295][ T6637] ? __lock_acquire+0x6b5/0x2cf0 [ 142.636321][ T6637] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.636343][ T6637] ? get_pid_task+0x20/0x1f0 [ 142.636370][ T6637] ? get_pid_task+0x20/0x1f0 [ 142.636395][ T6637] ? get_pid_task+0x20/0x1f0 [ 142.636448][ T6637] ? __fget_files+0x2a/0x420 [ 142.636467][ T6637] ? __fget_files+0x3a0/0x420 [ 142.636496][ T6637] __sys_sendmsg+0x183/0x260 [ 142.636517][ T6637] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.636549][ T6637] ? __pfx_ksys_write+0x10/0x10 [ 142.636576][ T6637] __do_fast_syscall_32+0x20d/0x640 [ 142.636604][ T6637] ? do_fast_syscall_32+0x33/0x70 [ 142.636627][ T6637] ? asm_int80_emulation+0x1a/0x20 [ 142.636643][ T6637] ? do_int80_emulation+0x274/0x4d0 [ 142.636675][ T6637] do_fast_syscall_32+0x33/0x70 [ 142.636709][ T6637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.636730][ T6637] RIP: 0023:0xf7f75539 [ 142.636746][ T6637] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 142.636760][ T6637] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 142.636779][ T6637] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 142.636798][ T6637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.636808][ T6637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.636817][ T6637] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 142.636827][ T6637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.636860][ T6637] [ 142.965067][ T5882] zl10353_read_register: readreg error (reg=127, ret==0) [ 142.972351][ T5882] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 142.981404][ T5882] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 143.115024][ T6642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.194'. [ 143.175017][ T6175] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 143.325962][ T6175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.337983][ T6175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.356474][ T6175] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 143.370829][ T6175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.390379][ T6175] usb 1-1: config 0 descriptor?? [ 143.829794][ T6175] semitek 0003:1EA7:0907.0006: item fetching failed at offset 0/2 [ 143.843328][ T6175] semitek 0003:1EA7:0907.0006: probe with driver semitek failed with error -22 [ 144.025037][ T5882] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 144.042033][ T5939] usb 1-1: USB disconnect, device number 8 [ 144.151924][ T6655] openvswitch: netlink: Flow key attr not present in new flow. [ 144.184277][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 144.195975][ T5882] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 144.208692][ T5882] usb 5-1: can't read configurations, error -22 [ 144.331886][ T6180] usb 4-1: USB disconnect, device number 6 [ 144.344612][ T5882] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 144.432904][ T6180] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 144.454587][ T5939] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 144.534341][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 144.554836][ T5882] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 144.563700][ T5882] usb 5-1: can't read configurations, error -22 [ 144.571964][ T5882] usb usb5-port1: attempt power cycle [ 144.604210][ T5939] usb 3-1: device descriptor read/64, error -71 [ 144.634847][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.198'. [ 144.860635][ T5939] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 144.944177][ T5882] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 144.970895][ T6180] usb 2-1: USB disconnect, device number 15 [ 144.980543][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 145.004947][ T5882] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 145.015485][ T5939] usb 3-1: device descriptor read/64, error -71 [ 145.032973][ T5882] usb 5-1: can't read configurations, error -22 [ 145.145883][ T5939] usb usb3-port1: attempt power cycle [ 145.264325][ T5882] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 145.294845][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 145.303582][ T5882] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 145.312987][ T5882] usb 5-1: can't read configurations, error -22 [ 145.320053][ T5882] usb usb5-port1: unable to enumerate USB device [ 145.509675][ T5939] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 145.538090][ T5939] usb 3-1: device descriptor read/8, error -71 [ 145.814076][ T5882] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 145.822407][ T5939] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 145.901831][ T5939] usb 3-1: device descriptor read/8, error -71 [ 146.014540][ T5939] usb usb3-port1: unable to enumerate USB device [ 146.057526][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.069674][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.090543][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.123703][ T5882] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.149941][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.184955][ T5882] usb 2-1: config 0 descriptor?? [ 146.659332][ T5882] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 147.137626][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'. [ 147.213472][ T6692] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 147.934567][ C0] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 147.948677][ T6172] usb 2-1: USB disconnect, device number 16 [ 148.928147][ T6175] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 149.134662][ T6175] usb 1-1: Using ep0 maxpacket: 16 [ 149.165460][ T6175] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 149.244397][ T6175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.252654][ T6175] usb 1-1: Product: syz [ 149.273996][ T6175] usb 1-1: Manufacturer: syz [ 149.294023][ T6175] usb 1-1: SerialNumber: syz [ 149.305240][ T6175] usb 1-1: config 0 descriptor?? [ 149.336723][ T6716] tipc: Started in network mode [ 149.417409][ T6716] tipc: Node identity -, cluster identity 4711 [ 149.578474][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.595421][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.651347][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 149.860453][ T6175] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 150.599784][ T6728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.215'. [ 151.235074][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 151.426881][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 151.437984][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.455682][ T9] usb 3-1: config 11 has an invalid interface number: 244 but max is 0 [ 151.474062][ T9] usb 3-1: config 11 has no interface number 0 [ 151.480560][ T9] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 151.493343][ T9] usb 3-1: config 11 interface 244 has no altsetting 0 [ 151.512296][ T9] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 151.521894][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.530359][ T9] usb 3-1: Product: syz [ 151.535118][ T9] usb 3-1: Manufacturer: syz [ 151.540427][ T9] usb 3-1: SerialNumber: syz [ 151.637008][ T6747] FAULT_INJECTION: forcing a failure. [ 151.637008][ T6747] name failslab, interval 1, probability 0, space 0, times 0 [ 151.652486][ T6747] CPU: 0 UID: 0 PID: 6747 Comm: syz.1.221 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.652523][ T6747] Tainted: [L]=SOFTLOCKUP [ 151.652531][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 151.652543][ T6747] Call Trace: [ 151.652551][ T6747] [ 151.652560][ T6747] dump_stack_lvl+0xe8/0x150 [ 151.652593][ T6747] should_fail_ex+0x412/0x560 [ 151.652627][ T6747] should_failslab+0xa8/0x100 [ 151.652660][ T6747] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 151.652686][ T6747] ? __alloc_skb+0x193/0x390 [ 151.652715][ T6747] ? __alloc_skb+0x1d7/0x390 [ 151.652742][ T6747] ? __local_bh_enable_ip+0xd0/0x130 [ 151.652766][ T6747] ? __alloc_skb+0x193/0x390 [ 151.652797][ T6747] __alloc_skb+0x1d7/0x390 [ 151.652830][ T6747] netlink_sendmsg+0x5d4/0xb40 [ 151.652869][ T6747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.652900][ T6747] ? aa_sock_msg_perm+0xf1/0x1b0 [ 151.652931][ T6747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.652962][ T6747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.652990][ T6747] ____sys_sendmsg+0xa68/0xad0 [ 151.653020][ T6747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.653045][ T6747] ? kstrtoull+0x12f/0x1d0 [ 151.653079][ T6747] ___sys_sendmsg+0x2a5/0x360 [ 151.653098][ T6747] ? __lock_acquire+0x6b5/0x2cf0 [ 151.653124][ T6747] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.653146][ T6747] ? get_pid_task+0x20/0x1f0 [ 151.653180][ T6747] ? get_pid_task+0x20/0x1f0 [ 151.653206][ T6747] ? get_pid_task+0x20/0x1f0 [ 151.653260][ T6747] ? __fget_files+0x2a/0x420 [ 151.653280][ T6747] ? __fget_files+0x3a0/0x420 [ 151.653309][ T6747] __sys_sendmsg+0x183/0x260 [ 151.653332][ T6747] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.653365][ T6747] ? __pfx_ksys_write+0x10/0x10 [ 151.653397][ T6747] __do_fast_syscall_32+0x20d/0x640 [ 151.653445][ T6747] ? do_fast_syscall_32+0x33/0x70 [ 151.653474][ T6747] ? asm_int80_emulation+0x1a/0x20 [ 151.653493][ T6747] ? do_int80_emulation+0x274/0x4d0 [ 151.653526][ T6747] do_fast_syscall_32+0x33/0x70 [ 151.653555][ T6747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.653580][ T6747] RIP: 0023:0xf7fa1539 [ 151.653599][ T6747] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 151.653616][ T6747] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 151.653638][ T6747] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000800000c0 [ 151.653652][ T6747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.653664][ T6747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.653675][ T6747] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 151.653687][ T6747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.653717][ T6747] [ 151.989254][ T6173] usb 1-1: USB disconnect, device number 9 [ 152.027993][ T9] usb 3-1: USB disconnect, device number 13 [ 152.240537][ T6756] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 152.394093][ T6173] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 152.410906][ T6762] syz_tun: entered allmulticast mode [ 152.534201][ T6173] usb 1-1: device descriptor read/64, error -71 [ 152.710159][ T5882] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 152.732853][ T6777] fuse: Unknown parameter 'E̓]K'$Q^;<դs! ol0x0000000000000005' [ 152.928687][ T6173] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 152.946916][ T5882] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 152.956168][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.982261][ T5882] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 153.020835][ T5882] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 153.032764][ T5882] usb 5-1: Manufacturer: syz [ 153.061379][ T5882] usb 5-1: config 0 descriptor?? [ 153.084095][ T6173] usb 1-1: device descriptor read/64, error -71 [ 153.198548][ T6173] usb usb1-port1: attempt power cycle [ 153.222185][ T5882] rc_core: IR keymap rc-hauppauge not found [ 153.228504][ T5882] Registered IR keymap rc-empty [ 153.235377][ T5882] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 153.445207][ T5882] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 153.706497][ T6173] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 153.746852][ T6173] usb 1-1: device descriptor read/8, error -71 [ 154.004294][ T6173] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 154.057029][ T6173] usb 1-1: device descriptor read/8, error -71 [ 154.173703][ T6173] usb usb1-port1: unable to enumerate USB device [ 154.333721][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.384676][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.397545][ T6180] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 154.439783][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 154.496184][ T6762] syz_tun (unregistering): left allmulticast mode [ 154.604189][ T6180] usb 2-1: Using ep0 maxpacket: 16 [ 154.635134][ T6789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.656572][ T6180] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 154.666506][ T6180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.679817][ T6789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.694042][ T6180] usb 2-1: Product: syz [ 154.698355][ T6180] usb 2-1: Manufacturer: syz [ 154.703042][ T6180] usb 2-1: SerialNumber: syz [ 154.735305][ T6180] usb 2-1: config 0 descriptor?? [ 154.742394][ T5882] usb 5-1: USB disconnect, device number 17 [ 154.949747][ T6787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.960587][ T6787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.221621][ T6180] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 155.251633][ T6180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.277129][ T6803] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 155.309197][ T6180] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 155.328912][ T6180] usb 2-1: media controller created [ 155.349737][ T6180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.839230][ T6808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.238'. [ 156.144632][ T6180] zl10353_read_register: readreg error (reg=127, ret==0) [ 156.172609][ T6180] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 156.200824][ T6180] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 156.268256][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.239'. [ 156.887707][ T6818] netlink: 'syz.3.241': attribute type 21 has an invalid length. [ 156.896168][ T6818] netlink: 132 bytes leftover after parsing attributes in process `syz.3.241'. [ 157.048415][ T6180] usb 2-1: USB disconnect, device number 17 [ 157.208549][ T6180] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 157.447011][ T6830] delete_channel: no stack [ 157.784074][ T5882] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 157.959132][ T5882] usb 3-1: config 0 has no interfaces? [ 157.967470][ T5882] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 157.981356][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.118168][ T6835] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 158.149591][ T5882] usb 3-1: Product: syz [ 158.153842][ T5882] usb 3-1: Manufacturer: syz [ 158.180587][ T5882] usb 3-1: SerialNumber: syz [ 158.202219][ T5882] usb 3-1: config 0 descriptor?? [ 158.235019][ T6838] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 158.428549][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 158.542440][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 158.974981][ T6856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.252'. [ 159.044128][ T5882] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 159.216478][ T5882] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 159.227666][ T5882] usb 4-1: config 0 has no interface number 0 [ 159.233862][ T5882] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 159.253063][ T5882] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 159.265092][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.273306][ T5882] usb 4-1: Product: syz [ 159.289446][ T5882] usb 4-1: Manufacturer: syz [ 159.296398][ T5882] usb 4-1: SerialNumber: syz [ 159.306509][ T5882] usb 4-1: config 0 descriptor?? [ 159.324894][ T6846] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 159.344284][ T6183] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 159.355159][ T5882] ums-karma 4-1:0.46: USB Mass Storage device detected [ 159.414449][ T6180] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 159.437029][ T5882] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5 [ 159.524784][ T6183] usb 5-1: config 0 has no interfaces? [ 159.554308][ T6183] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 159.563432][ T6183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.571842][ T6183] usb 5-1: Product: syz [ 159.584186][ T6183] usb 5-1: Manufacturer: syz [ 159.585128][ T6173] usb 4-1: USB disconnect, device number 7 [ 159.588857][ T6183] usb 5-1: SerialNumber: syz [ 159.604059][ T6180] usb 1-1: Using ep0 maxpacket: 16 [ 159.624892][ T6183] usb 5-1: config 0 descriptor?? [ 159.651713][ T6180] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 159.664316][ T6180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.680375][ T6180] usb 1-1: Product: syz [ 159.695327][ T6180] usb 1-1: Manufacturer: syz [ 159.700115][ T6180] usb 1-1: SerialNumber: syz [ 159.712234][ T6180] usb 1-1: config 0 descriptor?? [ 159.929005][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.939647][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.150883][ T6180] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 160.173383][ T6180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.185436][ T6180] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 160.193513][ T6180] usb 1-1: media controller created [ 160.195207][ T6864] xt_l2tp: missing protocol rule (udp|l2tpip) [ 160.216835][ T6180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.268826][ T6865] process 'syz.3.256' launched '/dev/fd/8' with NULL argv: empty string added [ 160.459003][ T6173] usb 3-1: USB disconnect, device number 14 [ 160.631481][ T9] usb 5-1: USB disconnect, device number 18 [ 160.769071][ T6180] zl10353_read_register: readreg error (reg=127, ret==0) [ 160.798730][ T6180] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 160.824166][ T6183] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 160.842430][ T6180] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 160.894270][ T6180] usb 1-1: USB disconnect, device number 14 [ 160.935996][ T6872] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 160.986375][ T6180] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 161.029120][ T6183] usb 2-1: config 0 has no interfaces? [ 161.066525][ T6183] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 161.088730][ T6183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.119990][ T6183] usb 2-1: Product: syz [ 161.130385][ T6183] usb 2-1: Manufacturer: syz [ 161.157844][ T6183] usb 2-1: SerialNumber: syz [ 161.195608][ T6183] usb 2-1: config 0 descriptor?? [ 161.299358][ T6880] syzkaller0: entered promiscuous mode [ 161.309987][ T6880] syzkaller0: entered allmulticast mode [ 161.565251][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 161.903613][ T6888] netlink: 'syz.3.265': attribute type 10 has an invalid length. [ 161.920704][ T6888] team0: Port device bridge0 added [ 162.214221][ T6510] batman_adv: batadv0: MLD Querier disappeared - multicast optimizations disabled [ 162.334747][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 162.863114][ T6180] hid_parser_main: 192 callbacks suppressed [ 162.863139][ T6180] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.917830][ T6180] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.935296][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 163.127723][ T9] usb 1-1: config 0 has no interfaces? [ 163.145273][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 163.162173][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.171188][ T9] usb 1-1: Product: syz [ 163.175525][ T9] usb 1-1: Manufacturer: syz [ 163.180166][ T9] usb 1-1: SerialNumber: syz [ 163.197560][ T9] usb 1-1: config 0 descriptor?? [ 163.304049][ T6172] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 163.379702][ T6912] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 163.393416][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.401122][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.420254][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 163.464396][ T6172] usb 3-1: Using ep0 maxpacket: 32 [ 163.471609][ T6172] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 163.480011][ T6172] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.492346][ T6172] usb 3-1: config 0 has no interface number 0 [ 163.499642][ T6172] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 163.515961][ T6172] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 163.557340][ T9] usb 2-1: USB disconnect, device number 18 [ 163.605133][ T6172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.620773][ T6172] usb 3-1: Product: syz [ 163.633635][ T6172] usb 3-1: Manufacturer: syz [ 163.654977][ T6172] usb 3-1: SerialNumber: syz [ 163.729595][ T6172] usb 3-1: config 0 descriptor?? [ 163.750601][ T6172] hub 3-1:0.89: bad descriptor, ignoring hub [ 163.782227][ T6172] hub 3-1:0.89: probe with driver hub failed with error -5 [ 163.823157][ T6172] option 3-1:0.89: GSM modem (1-port) converter detected [ 164.134424][ T6172] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 164.156773][ T5882] usb 3-1: USB disconnect, device number 15 [ 164.168282][ T5882] option 3-1:0.89: device disconnected [ 164.314127][ T6172] usb 5-1: Using ep0 maxpacket: 16 [ 164.329087][ T6172] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 164.341243][ T6172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.356532][ T6172] usb 5-1: Product: syz [ 164.361517][ T6172] usb 5-1: Manufacturer: syz [ 164.369865][ T6172] usb 5-1: SerialNumber: syz [ 164.389009][ T6172] usb 5-1: config 0 descriptor?? [ 164.609101][ T6918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.625183][ T6918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.843775][ T6172] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 164.871545][ T6172] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.899494][ T6172] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 164.918180][ T6172] usb 5-1: media controller created [ 164.954882][ T6172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.434308][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 165.473077][ T6932] FAULT_INJECTION: forcing a failure. [ 165.473077][ T6932] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 165.486538][ T6932] CPU: 1 UID: 0 PID: 6932 Comm: syz.1.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.486571][ T6932] Tainted: [L]=SOFTLOCKUP [ 165.486578][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 165.486591][ T6932] Call Trace: [ 165.486599][ T6932] [ 165.486608][ T6932] dump_stack_lvl+0xe8/0x150 [ 165.486642][ T6932] should_fail_ex+0x412/0x560 [ 165.486676][ T6932] strncpy_from_user+0x36/0x2b0 [ 165.486709][ T6932] do_getname+0x77/0x250 [ 165.486742][ T6932] __se_sys_move_mount+0x1ca/0x4f0 [ 165.486765][ T6932] ? __pfx___se_sys_move_mount+0x10/0x10 [ 165.486784][ T6932] ? ksys_write+0x242/0x270 [ 165.486810][ T6932] ? __pfx_ksys_write+0x10/0x10 [ 165.486836][ T6932] ? __ia32_sys_move_mount+0x20/0xc0 [ 165.486859][ T6932] __do_fast_syscall_32+0x20d/0x640 [ 165.486890][ T6932] ? do_fast_syscall_32+0x33/0x70 [ 165.486917][ T6932] ? asm_int80_emulation+0x1a/0x20 [ 165.486935][ T6932] ? do_int80_emulation+0x274/0x4d0 [ 165.486970][ T6932] do_fast_syscall_32+0x33/0x70 [ 165.486999][ T6932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.487024][ T6932] RIP: 0023:0xf7fa1539 [ 165.487052][ T6932] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 165.487069][ T6932] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 00000000000001ad [ 165.487091][ T6932] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000000 [ 165.487105][ T6932] RDX: 00000000ffffff9c RSI: 0000000080000a00 RDI: 0000000000000000 [ 165.487119][ T6932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.487130][ T6932] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 165.487142][ T6932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.487172][ T6932] [ 165.556603][ T6172] zl10353_read_register: readreg error (reg=127, ret==0) [ 165.703869][ T6180] usb 1-1: USB disconnect, device number 15 [ 165.797412][ T6937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.280'. [ 165.816651][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 165.842978][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 165.852418][ T9] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 165.873075][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.893893][ T6172] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 165.903459][ T6172] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 165.933993][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.962065][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 165.995036][ T6172] usb 5-1: USB disconnect, device number 19 [ 166.031866][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 166.076691][ T6172] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 166.097076][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.184352][ T9] usbtmc 3-1:16.0: bulk endpoints not found [ 166.250900][ T6173] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 166.414024][ T6173] usb 2-1: device descriptor read/64, error -71 [ 166.741463][ T6173] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 166.976410][ T6173] usb 2-1: device descriptor read/64, error -71 [ 167.084316][ T6173] usb usb2-port1: attempt power cycle [ 167.454048][ T6173] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 167.549003][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 167.589018][ T6173] usb 2-1: device descriptor read/8, error -71 [ 167.878749][ T6173] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 167.905023][ T6173] usb 2-1: device descriptor read/8, error -71 [ 168.017235][ T6173] usb usb2-port1: unable to enumerate USB device [ 168.158638][ T6173] usb 3-1: USB disconnect, device number 16 [ 168.331900][ T6959] fuse: Unknown parameter '184467440737095516150x0000000000000005' [ 168.383552][ T6959] Cannot find add_set index 2 as target [ 168.653801][ T30] audit: type=1326 audit(1770808231.836:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 168.871292][ T30] audit: type=1326 audit(1770808231.836:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 168.915022][ T30] audit: type=1326 audit(1770808231.866:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 168.944463][ T30] audit: type=1326 audit(1770808231.866:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 168.968710][ T30] audit: type=1326 audit(1770808231.866:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 168.991831][ T30] audit: type=1326 audit(1770808231.866:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 169.014225][ T6173] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 169.025845][ T30] audit: type=1326 audit(1770808231.866:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 169.184153][ T6173] usb 1-1: Using ep0 maxpacket: 16 [ 169.187333][ T30] audit: type=1326 audit(1770808231.866:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 169.211217][ T6173] usb 1-1: config 0 interface 0 has no altsetting 0 [ 169.211755][ T30] audit: type=1326 audit(1770808231.866:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 169.240236][ T6173] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 169.240269][ T6173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.286963][ T30] audit: type=1326 audit(1770808231.866:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 169.376717][ T6173] usb 1-1: config 0 descriptor?? [ 169.565154][ T6967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'. [ 169.574371][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 169.597458][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 169.806390][ T6173] hid (null): report_id 4171247249 is invalid [ 169.833778][ T6173] vrc2 0003:07C0:1125.0009: fixing up VRC-2 report descriptor [ 169.880925][ T6173] input: HID 07c0:1125 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:07C0:1125.0009/input/input7 [ 169.994012][ T6173] vrc2 0003:07C0:1125.0009: input,hidraw0: USB HID v1.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.0-1/input0 [ 170.214047][ T6173] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 170.374934][ T6172] usb 1-1: USB disconnect, device number 16 [ 170.418977][ T6173] usb 2-1: config 0 has no interfaces? [ 170.452232][ T6173] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 170.472618][ T6173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.508445][ T6173] usb 2-1: Product: syz [ 170.516015][ T6173] usb 2-1: Manufacturer: syz [ 170.520678][ T6173] usb 2-1: SerialNumber: syz [ 170.532266][ T6173] usb 2-1: config 0 descriptor?? [ 170.755145][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 170.844487][ T6173] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 171.074692][ T6173] usb 5-1: Using ep0 maxpacket: 16 [ 171.089875][ T6173] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 171.102148][ T6173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.112296][ T6173] usb 5-1: Product: syz [ 171.121798][ T6173] usb 5-1: Manufacturer: syz [ 171.131962][ T6173] usb 5-1: SerialNumber: syz [ 171.146986][ T6173] usb 5-1: config 0 descriptor?? [ 171.378250][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.403437][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.663300][ T6173] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 171.738589][ T6173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 171.782323][ T6173] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 171.806037][ T6173] usb 5-1: media controller created [ 171.835199][ T6173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.924467][ T6173] zl10353_read_register: readreg error (reg=127, ret==0) [ 171.946278][ T6173] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 171.970152][ T6173] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 172.002977][ T6173] usb 5-1: USB disconnect, device number 20 [ 172.069139][ T6173] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 172.721837][ T6988] syz.0.296 (6988): drop_caches: 2 [ 172.804083][ T6180] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 173.134076][ T6180] usb 5-1: Using ep0 maxpacket: 16 [ 173.163109][ T6181] usb 2-1: USB disconnect, device number 23 [ 173.186195][ T6180] usb 5-1: config 4 has an invalid interface number: 218 but max is 2 [ 173.218017][ T6180] usb 5-1: config 4 has an invalid interface number: 63 but max is 2 [ 173.246940][ T6180] usb 5-1: config 4 has an invalid interface number: 103 but max is 2 [ 173.269846][ T6180] usb 5-1: config 4 has no interface number 0 [ 173.310236][ T6180] usb 5-1: config 4 has no interface number 1 [ 173.340665][ T6180] usb 5-1: config 4 has no interface number 2 [ 173.374166][ T6180] usb 5-1: config 4 interface 63 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 173.389049][ T6180] usb 5-1: config 4 interface 63 altsetting 13 endpoint 0x4 has invalid maxpacket 27056, setting to 64 [ 173.401972][ T6180] usb 5-1: config 4 interface 63 altsetting 13 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.412321][ T6180] usb 5-1: config 4 interface 63 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 173.423578][ T6180] usb 5-1: config 4 interface 63 has no altsetting 0 [ 173.430742][ T6180] usb 5-1: config 4 interface 103 has no altsetting 0 [ 173.450101][ T6180] usb 5-1: New USB device found, idVendor=106c, idProduct=e33d, bcdDevice=33.80 [ 173.462034][ T6180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.470608][ T6180] usb 5-1: Product: ⮱ཋሊ⁼㋏⃲呦ၸ貵 [ 173.484620][ T6180] usb 5-1: Manufacturer:   [ 173.494438][ T6180] usb 5-1: SerialNumber: syz [ 173.496140][ T7005] FAULT_INJECTION: forcing a failure. [ 173.496140][ T7005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.546523][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: syz.1.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.546557][ T7005] Tainted: [L]=SOFTLOCKUP [ 173.546565][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 173.546580][ T7005] Call Trace: [ 173.546588][ T7005] [ 173.546598][ T7005] dump_stack_lvl+0xe8/0x150 [ 173.546633][ T7005] should_fail_ex+0x412/0x560 [ 173.546667][ T7005] _copy_from_user+0x2d/0xb0 [ 173.546690][ T7005] fb_sys_write+0x25f/0x380 [ 173.546725][ T7005] drm_fbdev_shmem_defio_write+0x51/0x90 [ 173.546752][ T7005] vfs_writev+0x4bd/0x990 [ 173.546787][ T7005] ? __pfx_fb_write+0x10/0x10 [ 173.546818][ T7005] ? __pfx_vfs_writev+0x10/0x10 [ 173.546864][ T7005] ? __fget_files+0x2a/0x420 [ 173.546887][ T7005] ? __fget_files+0x3a0/0x420 [ 173.546906][ T7005] ? __fget_files+0x2a/0x420 [ 173.546934][ T7005] __ia32_compat_sys_pwritev+0x1c6/0x2c0 [ 173.546965][ T7005] ? __pfx___ia32_compat_sys_pwritev+0x10/0x10 [ 173.546994][ T7005] ? __pfx_ksys_write+0x10/0x10 [ 173.547025][ T7005] __do_fast_syscall_32+0x20d/0x640 [ 173.547058][ T7005] ? do_fast_syscall_32+0x33/0x70 [ 173.547086][ T7005] ? asm_int80_emulation+0x1a/0x20 [ 173.547106][ T7005] ? do_int80_emulation+0x274/0x4d0 [ 173.547138][ T7005] do_fast_syscall_32+0x33/0x70 [ 173.547168][ T7005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.547192][ T7005] RIP: 0023:0xf7fa1539 [ 173.547211][ T7005] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 173.547229][ T7005] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 000000000000014e [ 173.547251][ T7005] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 173.547266][ T7005] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.547278][ T7005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.547290][ T7005] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 173.547302][ T7005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.547332][ T7005] [ 173.842355][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 173.842376][ T30] audit: type=1326 audit(1770808237.026:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7006 comm="syz.3.303" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x0 [ 174.659287][ T6180] qmi_wwan 5-1:4.218: bogus CDC Union: master=0, slave=1 [ 174.677412][ T6180] qmi_wwan 5-1:4.218: probe with driver qmi_wwan failed with error -22 [ 174.871867][ T6180] usb 5-1: USB disconnect, device number 21 [ 175.202836][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 175.483399][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 175.515701][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 175.527230][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.570358][ T9] usb 3-1: Product: syz [ 175.579915][ T7040] netlink: 'syz.3.310': attribute type 10 has an invalid length. [ 175.607867][ T9] usb 3-1: Manufacturer: syz [ 175.651516][ T9] usb 3-1: SerialNumber: syz [ 175.676189][ T9] usb 3-1: config 0 descriptor?? [ 175.697868][ T7040] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 175.798449][ T7037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.907292][ T7033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.941694][ T7033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.187833][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 176.210416][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.234962][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 176.247005][ T9] usb 3-1: media controller created [ 176.282752][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.404065][ T6180] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 176.456058][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'. [ 176.506887][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 176.566764][ T6180] usb 2-1: config 0 has no interfaces? [ 176.575943][ T6180] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 176.590937][ T6180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.628854][ T6180] usb 2-1: Product: syz [ 176.643701][ T6180] usb 2-1: Manufacturer: syz [ 176.648696][ T6180] usb 2-1: SerialNumber: syz [ 176.659110][ T6180] usb 2-1: config 0 descriptor?? [ 176.884404][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 176.963677][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 176.972186][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 176.998569][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 177.528098][ T7066] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 177.882791][ T7072] syzkaller0: entered promiscuous mode [ 177.888704][ T7072] syzkaller0: entered allmulticast mode [ 177.956253][ T9] usb 3-1: USB disconnect, device number 17 [ 178.100813][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 178.815594][ T30] audit: type=1800 audit(1770808242.006:101): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.322" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 179.111350][ T6180] usb 2-1: USB disconnect, device number 24 [ 179.276351][ T7094] netlink: 36 bytes leftover after parsing attributes in process `syz.1.325'. [ 179.411203][ T7096] netlink: 'syz.3.326': attribute type 21 has an invalid length. [ 179.420538][ T7096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.326'. [ 179.649019][ T9] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 179.666180][ T9] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 179.687430][ T9] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 179.706716][ T9] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 179.724778][ T9] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 179.768620][ T9] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 179.792066][ T9] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 179.819143][ T9] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 179.851887][ T9] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 179.885447][ T9] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 179.923747][ T9] hid-generic 0000:0000:0004.000A: hidraw0: HID v0.03 Device [syz1] on syz0 [ 180.110001][ T7106] fido_id[7106]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 180.133394][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.262600][ T7114] netlink: 'syz.2.334': attribute type 21 has an invalid length. [ 180.292168][ T7114] netlink: 132 bytes leftover after parsing attributes in process `syz.2.334'. [ 180.304182][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 180.333190][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 180.354409][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.424040][ T6180] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 180.504574][ T9] usb 4-1: Product: syz [ 180.512761][ T9] usb 4-1: Manufacturer: syz [ 180.518735][ T9] usb 4-1: SerialNumber: syz [ 180.536087][ T9] usb 4-1: config 0 descriptor?? [ 180.586090][ T6180] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.629237][ T6180] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 180.657226][ T6180] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 180.678795][ T6180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.764230][ T6181] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 180.801701][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.812257][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.948842][ T6181] usb 3-1: config 0 has no interfaces? [ 180.975214][ T6181] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 181.033183][ T6181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.045600][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 181.063769][ T6181] usb 3-1: Product: syz [ 181.070431][ T6181] usb 3-1: Manufacturer: syz [ 181.078831][ T6181] usb 3-1: SerialNumber: syz [ 181.094320][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.105234][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 181.113621][ T9] usb 4-1: media controller created [ 181.119919][ T6181] usb 3-1: config 0 descriptor?? [ 181.174430][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.345689][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 181.747925][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 181.772289][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 181.801499][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 182.812378][ T6172] usb 4-1: USB disconnect, device number 8 [ 182.835252][ T6181] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 182.952675][ T6172] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 183.006752][ T6180] usb 5-1: string descriptor 0 read error: -71 [ 183.024249][ T6181] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.043646][ T6181] usb 2-1: not running at top speed; connect to a high speed hub [ 183.072841][ T6181] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 183.097756][ T6181] usb 2-1: New USB device found, idVendor=06cd, idProduct=011b, bcdDevice=4f.91 [ 183.107610][ T6181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.121385][ T6181] usb 2-1: Product: syz [ 183.130107][ T6181] usb 2-1: Manufacturer: syz [ 183.135548][ T6180] usb 5-1: USB disconnect, device number 22 [ 183.197859][ T6181] usb 2-1: SerialNumber: syz [ 183.342552][ T5939] hid-generic 0000:0000:0004.000B: hidraw0: HID v0.03 Device [syz1] on syz0 [ 183.782114][ T6172] usb 3-1: USB disconnect, device number 18 [ 184.078379][ T7153] fido_id[7153]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.354201][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.346'. [ 184.479498][ T7160] netlink: 'syz.2.345': attribute type 21 has an invalid length. [ 184.580293][ T7160] netlink: 132 bytes leftover after parsing attributes in process `syz.2.345'. [ 185.052909][ T7170] FAULT_INJECTION: forcing a failure. [ 185.052909][ T7170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.067343][ T7170] CPU: 0 UID: 0 PID: 7170 Comm: syz.0.348 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.067378][ T7170] Tainted: [L]=SOFTLOCKUP [ 185.067386][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 185.067405][ T7170] Call Trace: [ 185.067414][ T7170] [ 185.067422][ T7170] dump_stack_lvl+0xe8/0x150 [ 185.067457][ T7170] should_fail_ex+0x412/0x560 [ 185.067491][ T7170] _copy_from_user+0x2d/0xb0 [ 185.067515][ T7170] get_compat_msghdr+0xb3/0x4c0 [ 185.067553][ T7170] ? __pfx_get_compat_msghdr+0x10/0x10 [ 185.067587][ T7170] ? rcu_is_watching+0x15/0xb0 [ 185.067610][ T7170] ? ___sys_recvmsg+0x224/0x590 [ 185.067640][ T7170] ___sys_recvmsg+0x1dd/0x590 [ 185.067661][ T7170] ? __lock_acquire+0x6b5/0x2cf0 [ 185.067688][ T7170] ? __pfx____sys_recvmsg+0x10/0x10 [ 185.067714][ T7170] ? __fget_files+0x2a/0x420 [ 185.067772][ T7170] do_recvmmsg+0x3a5/0x800 [ 185.067803][ T7170] ? __pfx_do_recvmmsg+0x10/0x10 [ 185.067839][ T7170] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 185.067875][ T7170] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.067913][ T7170] __sys_recvmmsg+0x1a5/0x290 [ 185.067938][ T7170] ? __pfx___sys_recvmmsg+0x10/0x10 [ 185.067961][ T7170] ? ksys_write+0x242/0x270 [ 185.067993][ T7170] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 185.068034][ T7170] __do_fast_syscall_32+0x20d/0x640 [ 185.068067][ T7170] ? do_fast_syscall_32+0x33/0x70 [ 185.068095][ T7170] ? asm_int80_emulation+0x1a/0x20 [ 185.068114][ T7170] ? do_int80_emulation+0x274/0x4d0 [ 185.068148][ T7170] do_fast_syscall_32+0x33/0x70 [ 185.068179][ T7170] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.068205][ T7170] RIP: 0023:0xf7fa5539 [ 185.068224][ T7170] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 185.068243][ T7170] RSP: 002b:00000000f544550c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 185.068266][ T7170] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 185.068281][ T7170] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 185.068294][ T7170] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.068306][ T7170] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 185.068318][ T7170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.068349][ T7170] [ 185.672893][ T6181] keyspan 2-1:4.0: Keyspan - (without firmware) converter detected [ 185.753591][ T6181] usb 2-1: USB disconnect, device number 25 [ 185.764524][ T6181] keyspan 2-1:4.0: device disconnected [ 186.344017][ T6181] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.494071][ T6181] usb 4-1: Using ep0 maxpacket: 16 [ 186.509573][ T6181] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 186.532377][ T6181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.554877][ T6181] usb 4-1: Product: syz [ 186.567750][ T6181] usb 4-1: Manufacturer: syz [ 186.580186][ T6181] usb 4-1: SerialNumber: syz [ 186.596775][ T6181] usb 4-1: config 0 descriptor?? [ 186.846693][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.890377][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.052017][ T7197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.355'. [ 187.134019][ T6181] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 187.157827][ T6181] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.171039][ T6181] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 187.189796][ T6181] usb 4-1: media controller created [ 187.271916][ T6181] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.434542][ T7204] netlink: 'syz.1.357': attribute type 21 has an invalid length. [ 187.442973][ T7204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.357'. [ 187.761362][ T7192] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.768998][ T7192] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 187.837504][ T7192] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 187.904361][ T6181] zl10353_read_register: readreg error (reg=127, ret==0) [ 187.911717][ T6181] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 187.920121][ T6181] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 188.076512][ T7192] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.116439][ T7192] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 188.170407][ T7192] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 188.205436][ T7192] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.214367][ T7192] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 188.231524][ T7192] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 188.239816][ T7192] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.247477][ T7192] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 188.256566][ T7192] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 188.269148][ T7192] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.276501][ T7192] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 188.288904][ T7192] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 188.584058][ T6175] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 188.777814][ T6175] usb 1-1: config 0 has no interfaces? [ 188.793305][ T6175] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 188.821365][ T6175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.831096][ T6175] usb 1-1: Product: syz [ 188.837323][ T6175] usb 1-1: Manufacturer: syz [ 188.842148][ T6175] usb 1-1: SerialNumber: syz [ 188.864460][ T6181] usb 4-1: USB disconnect, device number 9 [ 188.927016][ T6175] usb 1-1: config 0 descriptor?? [ 189.074269][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.124121][ T6181] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 189.163862][ T7224] syzkaller0: entered promiscuous mode [ 189.191710][ T7224] syzkaller0: entered allmulticast mode [ 189.241319][ T7224] tipc: Enabled bearer , priority 0 [ 189.272259][ T7224] tipc: Resetting bearer [ 189.289596][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.298192][ T7224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.342309][ T7223] tipc: Resetting bearer [ 189.364521][ T7223] tipc: Disabling bearer [ 189.394125][ T6175] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 189.546595][ T6175] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 189.575964][ T6175] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.589841][ T6175] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.601089][ T6175] usb 3-1: config 1 has no interface number 0 [ 189.609636][ T6175] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.719145][ T6175] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.737937][ T6175] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.748016][ T6175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.766880][ T6175] usb 3-1: Product: syz [ 189.857375][ T6175] usb 3-1: Manufacturer: syz [ 189.862154][ T6175] usb 3-1: SerialNumber: syz [ 189.916366][ T6175] cdc_wdm 3-1:1.128: skipping garbage [ 189.944621][ T6175] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device [ 189.951978][ T6175] cdc_wdm 3-1:1.128: Unknown control protocol [ 190.114375][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.125037][ T7222] [ 190.127435][ T7222] ====================================================== [ 190.134471][ T7222] WARNING: possible circular locking dependency detected [ 190.141519][ T7222] syzkaller #0 Tainted: G L [ 190.147512][ T7222] ------------------------------------------------------ [ 190.154573][ T7222] syz.2.362/7222 is trying to acquire lock: [ 190.160509][ T7222] ffff88801cab8220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 190.170908][ T7222] [ 190.170908][ T7222] but task is already holding lock: [ 190.178292][ T7222] ffff8880244edfb0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 190.188126][ T7222] [ 190.188126][ T7222] which lock already depends on the new lock. [ 190.188126][ T7222] [ 190.198665][ T7222] [ 190.198665][ T7222] the existing dependency chain (in reverse order) is: [ 190.207989][ T7222] [ 190.207989][ T7222] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 190.216676][ T7222] blk_alloc_queue+0x546/0x680 [ 190.222187][ T7222] __blk_mq_alloc_disk+0x197/0x390 [ 190.227882][ T7222] loop_add+0x482/0xb40 [ 190.232640][ T7222] loop_init+0xd9/0x170 [ 190.237380][ T7222] do_one_initcall+0x250/0x840 [ 190.242716][ T7222] do_initcall_level+0x104/0x190 [ 190.248225][ T7222] do_initcalls+0x59/0xa0 [ 190.253123][ T7222] kernel_init_freeable+0x2a6/0x3d0 [ 190.259498][ T7222] kernel_init+0x1d/0x1d0 [ 190.264396][ T7222] ret_from_fork+0x51e/0xb90 [ 190.269586][ T7222] ret_from_fork_asm+0x1a/0x30 [ 190.274920][ T7222] [ 190.274920][ T7222] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 190.282280][ T7222] fs_reclaim_acquire+0x71/0x100 [ 190.287816][ T7222] kmem_cache_alloc_noprof+0x45/0x6e0 [ 190.293760][ T7222] __kernfs_iattrs+0xdf/0x340 [ 190.299042][ T7222] kernfs_iop_setattr+0xea/0x3f0 [ 190.304558][ T7222] notify_change+0xc1a/0xf40 [ 190.309715][ T7222] do_truncate+0x1c2/0x250 [ 190.314696][ T7222] path_openat+0x2f89/0x3860 [ 190.319845][ T7222] do_file_open+0x23e/0x4a0 [ 190.325002][ T7222] do_sys_openat2+0x113/0x200 [ 190.330246][ T7222] __x64_sys_openat+0x138/0x170 [ 190.335658][ T7222] do_syscall_64+0x14d/0xf80 [ 190.340898][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.347372][ T7222] [ 190.347372][ T7222] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 190.356421][ T7222] __lock_acquire+0x15a5/0x2cf0 [ 190.361933][ T7222] lock_acquire+0x106/0x330 [ 190.367080][ T7222] down_read+0x47/0x2e0 [ 190.371810][ T7222] kernfs_iop_getattr+0x9e/0x450 [ 190.377313][ T7222] vfs_getattr_nosec+0x2e1/0x430 [ 190.382816][ T7222] loop_assign_backing_file+0x27a/0x4b0 [ 190.388946][ T7222] lo_ioctl+0x1acb/0x1fb0 [ 190.393846][ T7222] lo_compat_ioctl+0x324/0x3f0 [ 190.399172][ T7222] compat_blkdev_ioctl+0x5ea/0x7c0 [ 190.404846][ T7222] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 190.411041][ T7222] __do_fast_syscall_32+0x20d/0x640 [ 190.416811][ T7222] do_fast_syscall_32+0x33/0x70 [ 190.422231][ T7222] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.429318][ T7222] [ 190.429318][ T7222] other info that might help us debug this: [ 190.429318][ T7222] [ 190.439609][ T7222] Chain exists of: [ 190.439609][ T7222] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 190.439609][ T7222] [ 190.454125][ T7222] Possible unsafe locking scenario: [ 190.454125][ T7222] [ 190.461782][ T7222] CPU0 CPU1 [ 190.467197][ T7222] ---- ---- [ 190.472703][ T7222] lock(&q->q_usage_counter(io)#24); [ 190.478134][ T7222] lock(fs_reclaim); [ 190.484753][ T7222] lock(&q->q_usage_counter(io)#24); [ 190.492761][ T7222] rlock(&root->kernfs_iattr_rwsem); [ 190.498155][ T7222] [ 190.498155][ T7222] *** DEADLOCK *** [ 190.498155][ T7222] [ 190.506314][ T7222] 3 locks held by syz.2.362/7222: [ 190.511446][ T7222] #0: ffff888024584448 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0 [ 190.520543][ T7222] #1: ffff8880244edfb0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 190.530775][ T7222] #2: ffff8880244edfe8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 190.541210][ T7222] [ 190.541210][ T7222] stack backtrace: [ 190.547163][ T7222] CPU: 0 UID: 0 PID: 7222 Comm: syz.2.362 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.547194][ T7222] Tainted: [L]=SOFTLOCKUP [ 190.547200][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 190.547212][ T7222] Call Trace: [ 190.547221][ T7222] [ 190.547229][ T7222] dump_stack_lvl+0xe8/0x150 [ 190.547259][ T7222] print_circular_bug+0x2e1/0x300 [ 190.547284][ T7222] check_noncircular+0x12e/0x150 [ 190.547309][ T7222] __lock_acquire+0x15a5/0x2cf0 [ 190.547336][ T7222] ? kernfs_iop_getattr+0x9e/0x450 [ 190.547357][ T7222] lock_acquire+0x106/0x330 [ 190.547374][ T7222] ? kernfs_iop_getattr+0x9e/0x450 [ 190.547401][ T7222] down_read+0x47/0x2e0 [ 190.547426][ T7222] ? kernfs_iop_getattr+0x9e/0x450 [ 190.547449][ T7222] kernfs_iop_getattr+0x9e/0x450 [ 190.547472][ T7222] vfs_getattr_nosec+0x2e1/0x430 [ 190.547500][ T7222] loop_assign_backing_file+0x27a/0x4b0 [ 190.547528][ T7222] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 190.547567][ T7222] lo_ioctl+0x1acb/0x1fb0 [ 190.547594][ T7222] ? __pfx_lo_ioctl+0x10/0x10 [ 190.547620][ T7222] ? __lock_acquire+0x6b5/0x2cf0 [ 190.547643][ T7222] ? __lock_acquire+0x6b5/0x2cf0 [ 190.547662][ T7222] ? __lock_acquire+0x6b5/0x2cf0 [ 190.547679][ T7222] ? __lock_acquire+0x6b5/0x2cf0 [ 190.547699][ T7222] ? unwind_next_frame+0xa5/0x23c0 [ 190.547725][ T7222] ? unwind_next_frame+0xa5/0x23c0 [ 190.547748][ T7222] ? is_bpf_text_address+0x26/0x2b0 [ 190.547775][ T7222] ? __lock_acquire+0x6b5/0x2cf0 [ 190.547792][ T7222] ? is_bpf_text_address+0x292/0x2b0 [ 190.547814][ T7222] ? is_bpf_text_address+0x26/0x2b0 [ 190.547837][ T7222] ? kernel_text_address+0xa5/0xe0 [ 190.547862][ T7222] ? __kernel_text_address+0xd/0x30 [ 190.547887][ T7222] ? unwind_get_return_address+0x4d/0x90 [ 190.547910][ T7222] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 190.547934][ T7222] ? arch_stack_walk+0xfb/0x150 [ 190.547958][ T7222] ? __lock_acquire+0x6b5/0x2cf0 [ 190.547977][ T7222] ? __lock_acquire+0x6b5/0x2cf0 [ 190.547996][ T7222] ? __lock_acquire+0x6b5/0x2cf0 [ 190.548013][ T7222] ? __lock_acquire+0x6b5/0x2cf0 [ 190.548032][ T7222] ? __lock_acquire+0x6b5/0x2cf0 [ 190.548049][ T7222] ? __lock_acquire+0x6b5/0x2cf0 [ 190.548069][ T7222] ? unwind_next_frame+0xa5/0x23c0 [ 190.548093][ T7222] ? unwind_next_frame+0xa5/0x23c0 [ 190.548117][ T7222] ? is_bpf_text_address+0x26/0x2b0 [ 190.548143][ T7222] ? is_bpf_text_address+0x26/0x2b0 [ 190.548167][ T7222] ? is_bpf_text_address+0x292/0x2b0 [ 190.548188][ T7222] ? is_bpf_text_address+0x26/0x2b0 [ 190.548211][ T7222] ? kernel_text_address+0xa5/0xe0 [ 190.548237][ T7222] ? __kernel_text_address+0xd/0x30 [ 190.548262][ T7222] ? unwind_get_return_address+0x4d/0x90 [ 190.548284][ T7222] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 190.548309][ T7222] ? arch_stack_walk+0xfb/0x150 [ 190.548335][ T7222] ? stack_trace_save+0xa9/0x100 [ 190.548358][ T7222] ? __pfx_stack_trace_save+0x10/0x10 [ 190.548384][ T7222] ? stack_depot_save_flags+0x33/0x810 [ 190.548412][ T7222] ? kasan_save_track+0x4f/0x80 [ 190.548431][ T7222] ? kasan_save_track+0x3e/0x80 [ 190.548451][ T7222] ? kasan_save_free_info+0x46/0x50 [ 190.548467][ T7222] ? __kasan_slab_free+0x5c/0x80 [ 190.548488][ T7222] ? kfree+0x1be/0x650 [ 190.548505][ T7222] ? tomoyo_path_number_perm+0x501/0x630 [ 190.548527][ T7222] ? __asan_memset+0x22/0x50 [ 190.548545][ T7222] ? blk_get_meta_cap+0x16d/0x7a0 [ 190.548565][ T7222] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 190.548586][ T7222] ? blkdev_common_ioctl+0x14b7/0x3250 [ 190.548609][ T7222] lo_compat_ioctl+0x324/0x3f0 [ 190.548641][ T7222] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 190.548665][ T7222] ? kasan_quarantine_put+0xbb/0x1f0 [ 190.548688][ T7222] ? tomoyo_path_number_perm+0x219/0x630 [ 190.548709][ T7222] ? tomoyo_path_number_perm+0x219/0x630 [ 190.548731][ T7222] ? do_vfs_ioctl+0x1166/0x1530 [ 190.548754][ T7222] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 190.548787][ T7222] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 190.548812][ T7222] compat_blkdev_ioctl+0x5ea/0x7c0 [ 190.548834][ T7222] ? __fget_files+0x2a/0x420 [ 190.548851][ T7222] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 190.548872][ T7222] ? __fget_files+0x2a/0x420 [ 190.548889][ T7222] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 190.548917][ T7222] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 190.548941][ T7222] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 190.548966][ T7222] ? __se_sys_futex_time32+0x3ab/0x440 [ 190.548987][ T7222] ? rcu_is_watching+0x15/0xb0 [ 190.549010][ T7222] __do_fast_syscall_32+0x20d/0x640 [ 190.549037][ T7222] ? do_fast_syscall_32+0x33/0x70 [ 190.549061][ T7222] ? asm_int80_emulation+0x1a/0x20 [ 190.549077][ T7222] ? do_int80_emulation+0x274/0x4d0 [ 190.549102][ T7222] do_fast_syscall_32+0x33/0x70 [ 190.549127][ T7222] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.549148][ T7222] RIP: 0023:0xf7f75539 [ 190.549166][ T7222] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 190.549182][ T7222] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 190.549202][ T7222] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c06 [ 190.549215][ T7222] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.549225][ T7222] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.549236][ T7222] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 190.549246][ T7222] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.549264][ T7222] [ 191.208606][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout [ 191.214998][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.221254][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.227516][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.675164][ T9] usb 1-1: USB disconnect, device number 17 [ 192.194170][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.194663][ T9] usb 3-1: USB disconnect, device number 19 [ 193.234287][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.240416][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.244551][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.246610][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout [ 194.274250][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.314242][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.317976][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.324242][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout [ 199.567067][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.573407][ T1299] ieee802154 phy1 wpan1: encryption failed: -22