last executing test programs: 6m2.172841667s ago: executing program 4 (id=884): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x3) ioctl$TCSETS(r0, 0x5434, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x5dee, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r4 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000100)=""/189) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x6, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_loaded', 0x103080, 0x103) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000280)={r5, 0x1, r3, 0x1, 0x80000}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f04, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) 5m58.961151931s ago: executing program 4 (id=899): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000406d0404ca0000000000010902240001000020000904d565010300000009210000000122070009058103000000"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x90, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xa, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0xee01) r7 = getuid() sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x38, 0x20, 0xf4db158ec847dc81, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10012}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, r7}}, @FRA_FLOW={0x8, 0xb, 0x10001}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x337}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x8, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) 5m56.92389089s ago: executing program 4 (id=910): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=0x0}}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 5m55.218808671s ago: executing program 4 (id=915): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff00000000480000000000000029000000040000000405000000000000801309e12e5f0b6bdcf72f2ec7008a15fa88b025e000010005020bf4c910fc0200000000000000000100000000000000140000000000000029000000340000000000000000000000400000000000000029000000360000005e05000000000000ff1950d650847249ad288702ebd0d654b985e8908defb7ec6c5ff10001000708000000030000ff0f1800000000000000290000003900"/232], 0xe8}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mount$fuseblk(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x46, &(0x7f0000000b40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,max_read=0x0000000000000005,default_permissions,blksize=0x0000000000000200,default_permissions,blksize=0x0000000000000000,max_read=0x0000000000000007,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c001d129f0e6bf3a2a24925f27e1be528f4678c483972d30aa16d070000005a9a98a22740e497d69051061f050877088a7277ab8fcc1afeea9f773651366d1a38ba41f0df5c99c1a121302a40edad0202ba9db12bda792961f010ba71d283e9663ca1f260292dadd338b66d211e9d3e6deaab2b5d"]) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x7}, 0xfffffffffffffe26) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000880)="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", 0x13d}, {&(0x7f0000002840)="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", 0x800}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5m54.982038766s ago: executing program 4 (id=917): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x4}}, 0x48) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x7, 0x6, 0x6, 0x4}, 0x26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x404889d}, 0xc0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)='%', 0x1}], 0x1}, 0xc0) alarm(0x16) 5m54.531121576s ago: executing program 4 (id=918): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x8a106, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f0000000040)={0x23b, 0x5}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x0, r3}, 0x10) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, r4, 0x0, '\x00', r3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r5, &(0x7f0000000700)="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", &(0x7f0000000400)=""/194}, 0x67) 5m54.014344175s ago: executing program 32 (id=918): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x8a106, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f0000000040)={0x23b, 0x5}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x0, r3}, 0x10) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, r4, 0x0, '\x00', r3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r5, &(0x7f0000000700)="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", &(0x7f0000000400)=""/194}, 0x67) 5.227184535s ago: executing program 5 (id=2408): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x3, 0x3, 0xfffffffe, 0x0, 0x3}) 5.03160427s ago: executing program 5 (id=2410): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a5", 0x1) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)=0x4) r2 = dup2(r0, r0) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) 4.401819574s ago: executing program 0 (id=2414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r2, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400}) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00b6a8681ce200000100640001000000064f04000000"], 0xc) getsockopt(0xffffffffffffffff, 0xb, 0x609, 0x0, 0x0) 3.755050253s ago: executing program 5 (id=2416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket(0xa, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 3.482837256s ago: executing program 0 (id=2420): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x2000000000000) 3.320734195s ago: executing program 0 (id=2423): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e24, @empty}], 0x10) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f616400240002800800034000000092080002400100000008000440000000e9080001400000000b080003400000000208000240000000840800014000000000090002007379"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4804) 2.64684059s ago: executing program 2 (id=2428): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000380)={0x1, 0x1, @start={0x775b4acb, 0x1}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.330584175s ago: executing program 2 (id=2429): r0 = syz_open_dev$radio(&(0x7f0000000580), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000700)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x1, 0x1182, 0x3, 0x6, 0x2, 0x4, 0x4, 0x4}) 2.138720932s ago: executing program 2 (id=2430): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240), 0x59, 0x0, &(0x7f00000006c0)="84a9e3192d523b299d3e7af61ff20d055055af53271f848b0a178f24a89b734994be452a45782699a80ae87b49f35ed837b1e82dc920980803936b40607edc435fbcde0f1dd55eae9d9201d0e178b1f3a0cb15ae0434db48bc"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 1.918781128s ago: executing program 5 (id=2431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r2, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400}) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00b6a8681ce200000100640001000000064f04000000"], 0xc) getsockopt(0xffffffffffffffff, 0xb, 0x609, 0x0, 0x0) 1.59172508s ago: executing program 0 (id=2434): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 1.5312155s ago: executing program 3 (id=2436): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000001009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xfffd}, 0x90) 1.494097789s ago: executing program 3 (id=2437): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a4, 0x8481, 0x20000008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.406900507s ago: executing program 1 (id=2438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x4}, 0x38) 1.406412083s ago: executing program 1 (id=2439): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@loopback, 0x4e21, 0x2, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2b}, {0x1, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffe03, 0x0, 0x6, 0x1000000000}, 0x0, 0x1002, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x0, 0x0, 0x8004}}, 0xe8) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000540), 0x1) 1.36479304s ago: executing program 1 (id=2440): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000700)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x1, 0x1182, 0x3, 0x6, 0x2, 0x4, 0x4, 0x4}) 1.323090655s ago: executing program 1 (id=2441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x1000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x105, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf9, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.185572465s ago: executing program 2 (id=2442): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.002914749s ago: executing program 5 (id=2443): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$TCSETS(r0, 0x545c, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 959.306119ms ago: executing program 1 (id=2444): r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 881.148251ms ago: executing program 1 (id=2445): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 687.046725ms ago: executing program 2 (id=2446): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 686.802686ms ago: executing program 0 (id=2447): lsm_get_self_attr(0x67, 0x0, &(0x7f00000002c0)=0x39, 0x1) 664.247954ms ago: executing program 0 (id=2448): syz_usb_connect(0x3, 0x41, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x71, 0x9e, 0xc1, 0x40, 0x4dd, 0x8005, 0xdd83, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x3, 0xfe, 0x0, 0x1, "", [{{0x9, 0x4, 0x6e, 0x7, 0x0, 0x2, 0x6, 0x0, 0x8, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xda3f, 0x5c01, 0x4}, {0x6, 0x24, 0x1a, 0x7fff}}]}}]}}]}}, 0x0) 587.125725ms ago: executing program 3 (id=2449): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x2, 0x1, 0xa20, 0x9, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) 479.435331ms ago: executing program 2 (id=2450): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) 479.160328ms ago: executing program 3 (id=2451): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000700)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x1, 0x1182, 0x3, 0x6, 0x2, 0x4, 0x4, 0x4}) 418.976804ms ago: executing program 3 (id=2452): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x176e}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1a, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0x2, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 209.33377ms ago: executing program 3 (id=2453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r2, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r2, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400}) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00b6a8681ce200000100640001000000064f04000000"], 0xc) getsockopt(0xffffffffffffffff, 0xb, 0x609, 0x0, 0x0) 0s ago: executing program 5 (id=2454): syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406104724e00000000000109022d0001000000830904000001030001000921fcff0001220b00090581"], 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x82122000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) timer_create(0x7, 0x0, &(0x7f00000001c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r3, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500000000e4000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 5925] Registered IR keymap rc-empty [ 479.808804][ T5925] dvb-usb: could not initialize remote control. [ 479.843868][ T5925] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 480.503275][T11921] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 480.536329][T11921] PKCS7: Only support pkcs7_signedData type [ 481.008166][ T5925] usb 2-1: USB disconnect, device number 56 [ 481.096672][ T5925] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 481.425662][ T5925] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 481.469569][ T5903] usb 6-1: USB disconnect, device number 16 [ 481.563558][ T5903] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 481.573773][ T935] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 481.600663][ T5925] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 481.620557][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.650651][ T5925] usb 2-1: Product: syz [ 481.664356][ T5925] usb 2-1: Manufacturer: syz [ 481.686498][ T5925] usb 2-1: SerialNumber: syz [ 481.755118][ T935] usb 4-1: Using ep0 maxpacket: 16 [ 481.769045][ T935] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 481.789091][ T935] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.815010][ T935] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.824846][ T935] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 481.840990][ T935] usb 4-1: config 7 interface 0 has no altsetting 0 [ 481.855033][ T935] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 481.870354][ T935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.127074][ T5925] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 482.161950][ T5925] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 482.182566][ T5925] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 482.241198][ T5925] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 482.291010][ T5925] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 482.356385][T11910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.370175][T11910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.446079][ T5925] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 482.461187][ T935] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0009/input/input36 [ 482.611209][ T935] kye 0003:0458:5010.0009: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 482.770962][ T935] usb 4-1: USB disconnect, device number 61 [ 483.705730][T11959] FAULT_INJECTION: forcing a failure. [ 483.705730][T11959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.749818][T11959] CPU: 1 UID: 0 PID: 11959 Comm: syz.5.1629 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.749848][T11959] Tainted: [L]=SOFTLOCKUP [ 483.749855][T11959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 483.749866][T11959] Call Trace: [ 483.749873][T11959] [ 483.749881][T11959] dump_stack_lvl+0xe8/0x150 [ 483.749914][T11959] should_fail_ex+0x412/0x560 [ 483.749940][T11959] _copy_to_user+0x31/0xb0 [ 483.749966][T11959] simple_read_from_buffer+0xe1/0x170 [ 483.749995][T11959] proc_fail_nth_read+0x1bb/0x230 [ 483.750033][T11959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.750061][T11959] ? rw_verify_area+0x2a6/0x4d0 [ 483.750078][T11959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.750104][T11959] vfs_read+0x20c/0xa70 [ 483.750131][T11959] ? __pfx___mutex_lock+0x10/0x10 [ 483.750152][T11959] ? __pfx_vfs_read+0x10/0x10 [ 483.750171][T11959] ? __fget_files+0x2a/0x420 [ 483.750198][T11959] ? __fget_files+0x3a0/0x420 [ 483.750221][T11959] ? __fget_files+0x2a/0x420 [ 483.750253][T11959] ksys_read+0x150/0x270 [ 483.750272][T11959] ? __pfx_ksys_read+0x10/0x10 [ 483.750289][T11959] ? __pfx_evdev_ioctl+0x10/0x10 [ 483.750312][T11959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.750331][T11959] do_syscall_64+0x15f/0xf80 [ 483.750349][T11959] ? trace_irq_disable+0x3b/0x140 [ 483.750371][T11959] ? clear_bhb_loop+0x40/0x90 [ 483.750393][T11959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.750411][T11959] RIP: 0033:0x7f8f0035d04e [ 483.750427][T11959] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 483.750441][T11959] RSP: 002b:00007f8f01243fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 483.750460][T11959] RAX: ffffffffffffffda RBX: 00007f8f012446c0 RCX: 00007f8f0035d04e [ 483.750473][T11959] RDX: 000000000000000f RSI: 00007f8f012440a0 RDI: 0000000000000004 [ 483.750484][T11959] RBP: 00007f8f01244090 R08: 0000000000000000 R09: 0000000000000000 [ 483.750494][T11959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.750505][T11959] R13: 00007f8f00616038 R14: 00007f8f00615fa0 R15: 00007f8f0073fa48 [ 483.750534][T11959] [ 484.227486][ T5890] usb 2-1: USB disconnect, device number 57 [ 485.145408][ T5890] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 485.325069][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 485.344190][ T5890] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 485.376450][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 485.376468][ T29] audit: type=1326 audit(1776455272.813:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb759c819 code=0x7ffc0000 [ 485.408874][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.427432][ T29] audit: type=1326 audit(1776455272.813:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb759c819 code=0x7ffc0000 [ 485.461322][ T5890] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 485.471200][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 485.481485][ T5890] usb 2-1: Product: syz [ 485.488569][ T5890] usb 2-1: Manufacturer: syz [ 485.497040][ T29] audit: type=1326 audit(1776455272.823:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effb755d04e code=0x7ffc0000 [ 485.522743][ T5890] usb 2-1: SerialNumber: syz [ 485.546877][ T5890] usb 2-1: config 0 descriptor?? [ 485.570060][ T29] audit: type=1326 audit(1776455272.823:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effb759c4ab code=0x7ffc0000 [ 485.620996][ T29] audit: type=1326 audit(1776455272.823:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effb759c4ab code=0x7ffc0000 [ 485.693918][ T29] audit: type=1326 audit(1776455272.823:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effb759c4ab code=0x7ffc0000 [ 485.775619][ T5890] usb 2-1: USB disconnect, device number 58 [ 485.787939][ T29] audit: type=1326 audit(1776455272.823:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effb759c4ab code=0x7ffc0000 [ 486.865117][ T5925] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 487.029736][ T5925] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 487.045127][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.057757][ T5925] usb 4-1: Product: syz [ 487.071455][ T5925] usb 4-1: Manufacturer: syz [ 487.082070][ T5925] usb 4-1: SerialNumber: syz [ 487.414171][T12012] netlink: 'syz.5.1644': attribute type 4 has an invalid length. [ 487.425643][ T29] audit: type=1326 audit(1776455274.883:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.5.1644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f0039c819 code=0x0 [ 487.567409][ T5925] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 487.588265][ T5925] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 487.603906][ T5925] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 487.630364][ T5925] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 487.651728][ T5925] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 487.664559][ T5925] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 488.285212][ T5890] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 488.445070][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 488.484039][ T5890] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.521696][ T5890] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.559160][ T5890] usb 3-1: config 0 interface 0 has no altsetting 0 [ 488.584048][ T29] audit: type=1326 audit(1776455276.033:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.0.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb759c819 code=0x7ffc0000 [ 488.612518][ T5890] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 488.632473][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.643519][ T29] audit: type=1326 audit(1776455276.063:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.0.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb759c819 code=0x7ffc0000 [ 488.717192][ T5890] usb 3-1: config 0 descriptor?? [ 489.070257][T12029] netlink: 324 bytes leftover after parsing attributes in process `syz.5.1647'. [ 489.253762][ T5890] nzxt-smart2 0003:1E71:2009.000A: collection stack underflow [ 489.282017][ T5890] nzxt-smart2 0003:1E71:2009.000A: item 0 4 0 12 parsing failed [ 489.311819][ T5890] nzxt-smart2 0003:1E71:2009.000A: probe with driver nzxt-smart2 failed with error -22 [ 489.441556][T12033] fuse: Bad value for 'fd' [ 489.618591][ T5903] usb 3-1: USB disconnect, device number 48 [ 489.693689][ T5911] usb 4-1: USB disconnect, device number 62 [ 489.805095][ T5925] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 489.989941][ T5925] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 490.019260][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.052527][ T5925] usb 6-1: Product: syz [ 490.073655][ T5925] usb 6-1: Manufacturer: syz [ 490.090561][ T5925] usb 6-1: SerialNumber: syz [ 490.121551][ T5925] usb 6-1: config 0 descriptor?? [ 490.171954][ T5925] hub 6-1:0.0: bad descriptor, ignoring hub [ 490.194582][ T5925] hub 6-1:0.0: probe with driver hub failed with error -5 [ 490.435151][ T5925] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 490.504697][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 490.533227][ T5925] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 490.557948][ T5925] usb 6-1: media controller created [ 490.613740][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 490.784184][ T5925] DVB: Unable to find symbol dib7000p_attach() [ 490.816162][ T5925] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 491.010063][ T5925] rc_core: IR keymap rc-dib0700-rc5 not found [ 491.026432][ T5925] Registered IR keymap rc-empty [ 491.047943][ T5925] dvb-usb: could not initialize remote control. [ 491.080531][ T5925] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 491.160133][T12053] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 492.922472][ T5890] usb 6-1: USB disconnect, device number 17 [ 492.992406][ T5890] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 493.366656][ T5890] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 493.531794][ T5890] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 493.560306][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.603499][ T5890] usb 6-1: Product: syz [ 493.626940][ T5890] usb 6-1: Manufacturer: syz [ 493.637551][ T5890] usb 6-1: SerialNumber: syz [ 494.086047][ T5890] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 494.130654][ T5890] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 494.174757][ T5890] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 494.210147][ T5890] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 494.240411][ T5890] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 494.268790][ T5890] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 495.768774][T12121] netlink: 'syz.3.1670': attribute type 3 has an invalid length. [ 496.060689][ T5911] usb 6-1: USB disconnect, device number 18 [ 496.255308][ T5925] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 496.347631][T12131] fuse: Bad value for 'fd' [ 496.457535][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 496.499416][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 496.559375][ T5925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.588689][ T5925] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 496.680967][ T5925] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 496.717889][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.766906][ T5925] usb 4-1: Product: syz [ 496.795285][ T5911] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 496.809220][ T5925] usb 4-1: Manufacturer: syz [ 496.830822][ T5925] usb 4-1: SerialNumber: syz [ 496.985007][ T5911] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 497.039788][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.067818][ T5911] usb 2-1: Product: syz [ 497.080038][ T5925] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.102449][ T5911] usb 2-1: Manufacturer: syz [ 497.117148][ T5911] usb 2-1: SerialNumber: syz [ 497.132025][ T5925] usb 4-1: MIDIStreaming interface descriptor not found [ 497.132823][ T5911] usb 2-1: config 0 descriptor?? [ 497.217003][ T5911] hub 2-1:0.0: bad descriptor, ignoring hub [ 497.243838][ T5911] hub 2-1:0.0: probe with driver hub failed with error -5 [ 497.420653][ T5925] usb 4-1: USB disconnect, device number 63 [ 497.456505][ T5911] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 497.539105][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 497.592824][ T5911] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 497.641778][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.708422][ T5911] usb 2-1: media controller created [ 497.799098][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.081416][ T5911] DVB: Unable to find symbol dib7000p_attach() [ 498.109531][ T5911] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 498.146958][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1678'. [ 498.166018][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1678'. [ 498.192985][T12147] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 498.379918][ T5911] rc_core: IR keymap rc-dib0700-rc5 not found [ 498.426690][ T5911] Registered IR keymap rc-empty [ 498.467104][ T5911] dvb-usb: could not initialize remote control. [ 498.487953][ T5911] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 499.052744][T12167] xt_hashlimit: size too large, truncated to 1048576 [ 499.605078][ T5890] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 499.778660][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 499.801711][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.859874][ T5890] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 499.898897][ T5890] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 499.941491][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.977722][ T5890] usb 6-1: Product: syz [ 499.995920][ T5890] usb 6-1: Manufacturer: syz [ 500.016856][ T5890] usb 6-1: SerialNumber: syz [ 500.038937][ T5911] usb 2-1: USB disconnect, device number 59 [ 500.053520][ T5890] usb 6-1: config 0 descriptor?? [ 500.135819][ T5911] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 500.289540][T12182] fuse: Bad value for 'fd' [ 500.367194][T12174] loop2: detected capacity change from 0 to 7 [ 500.416680][T12174] Dev loop2: unable to read RDB block 7 [ 500.440954][T12174] loop2: unable to read partition table [ 500.469639][T12174] loop2: partition table beyond EOD, truncated [ 500.495873][T12174] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 500.576457][ T5198] Dev loop2: unable to read RDB block 7 [ 500.584841][ T5198] loop2: unable to read partition table [ 500.620068][ T5198] loop2: partition table beyond EOD, truncated [ 500.745078][ T5911] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 500.845266][ T5890] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 500.930791][ T5911] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 500.957682][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.980678][ T5911] usb 2-1: Product: syz [ 500.990604][ T5911] usb 2-1: Manufacturer: syz [ 501.000404][ T5911] usb 2-1: SerialNumber: syz [ 501.016282][ T5911] usb 2-1: config 0 descriptor?? [ 501.031949][ T5890] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 501.059772][ T5890] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 501.093878][ T5890] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 501.104753][ T5911] hub 2-1:0.0: bad descriptor, ignoring hub [ 501.121985][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.130161][ T5911] hub 2-1:0.0: probe with driver hub failed with error -5 [ 501.150349][ T5890] usb 3-1: Product: syz [ 501.158863][ T5890] usb 3-1: Manufacturer: syz [ 501.167143][ T5890] usb 3-1: SerialNumber: syz [ 501.219315][ T5890] rtl8150 3-1:1.0: couldn't find required endpoints [ 501.246453][ T5890] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 501.303840][ T5911] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 501.341705][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 501.368975][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.375457][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.401163][ T5911] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 501.430646][ T5911] usb 2-1: media controller created [ 501.484902][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.653041][ T5911] DVB: Unable to find symbol dib7000p_attach() [ 501.680650][ T5911] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 501.838241][ T5911] rc_core: IR keymap rc-dib0700-rc5 not found [ 501.851405][T12199] FAULT_INJECTION: forcing a failure. [ 501.851405][T12199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.875100][ T5911] Registered IR keymap rc-empty [ 501.895348][T12199] CPU: 0 UID: 0 PID: 12199 Comm: syz.0.1690 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.895376][T12199] Tainted: [L]=SOFTLOCKUP [ 501.895383][T12199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 501.895394][T12199] Call Trace: [ 501.895402][T12199] [ 501.895409][T12199] dump_stack_lvl+0xe8/0x150 [ 501.895442][T12199] should_fail_ex+0x412/0x560 [ 501.895463][T12199] _copy_from_iter+0x1d3/0x1670 [ 501.895478][T12199] ? rcu_is_watching+0x15/0xb0 [ 501.895491][T12199] ? __pfx__copy_from_iter+0x10/0x10 [ 501.895507][T12199] ? netlink_sendmsg+0x650/0xb40 [ 501.895522][T12199] ? skb_put+0x11b/0x210 [ 501.895547][T12199] netlink_sendmsg+0x6c0/0xb40 [ 501.895585][T12199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.895612][T12199] ? aa_sock_msg_perm+0xf1/0x1b0 [ 501.895636][T12199] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.895652][T12199] ____sys_sendmsg+0x972/0x9f0 [ 501.895666][T12199] ? __might_fault+0xaf/0x130 [ 501.895685][T12199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.895702][T12199] ? import_iovec+0x73/0xa0 [ 501.895716][T12199] ___sys_sendmsg+0x2a5/0x360 [ 501.895728][T12199] ? __lock_acquire+0x6b5/0x2cf0 [ 501.895745][T12199] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.895773][T12199] ? __fget_files+0x2a/0x420 [ 501.895787][T12199] ? __fget_files+0x3a0/0x420 [ 501.895805][T12199] __x64_sys_sendmsg+0x1bd/0x2a0 [ 501.895819][T12199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.895837][T12199] ? __pfx_ksys_write+0x10/0x10 [ 501.895851][T12199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.895861][T12199] do_syscall_64+0x15f/0xf80 [ 501.895872][T12199] ? trace_irq_disable+0x3b/0x140 [ 501.895884][T12199] ? clear_bhb_loop+0x40/0x90 [ 501.895902][T12199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.895912][T12199] RIP: 0033:0x7effb759c819 [ 501.895922][T12199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.895931][T12199] RSP: 002b:00007effb851c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.895942][T12199] RAX: ffffffffffffffda RBX: 00007effb7815fa0 RCX: 00007effb759c819 [ 501.895949][T12199] RDX: 0000000024008040 RSI: 0000200000000300 RDI: 0000000000000003 [ 501.895955][T12199] RBP: 00007effb851c090 R08: 0000000000000000 R09: 0000000000000000 [ 501.895961][T12199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.895967][T12199] R13: 00007effb7816038 R14: 00007effb7815fa0 R15: 00007effb793fa48 [ 501.895982][T12199] [ 501.899842][ T5911] dvb-usb: could not initialize remote control. [ 502.221167][ T5911] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 502.535187][ T5825] usb 6-1: USB disconnect, device number 19 [ 503.623596][ T5890] usb 3-1: USB disconnect, device number 49 [ 503.892606][T12217] netlink: 'syz.2.1696': attribute type 25 has an invalid length. [ 503.927613][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'. [ 503.968598][T12217] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 504.232082][T12223] fuse: Bad value for 'fd' [ 504.347410][ T5903] usb 2-1: USB disconnect, device number 60 [ 504.436194][T12231] fuse: Bad value for 'fd' [ 504.663515][ T5903] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 504.815156][ T5825] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 504.995071][ T5890] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 505.013008][ T5825] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 505.053016][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.078674][ T5825] usb 6-1: Product: syz [ 505.089030][ T5825] usb 6-1: Manufacturer: syz [ 505.099434][ T5825] usb 6-1: SerialNumber: syz [ 505.127771][T12245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'. [ 505.161239][ T5825] usb 6-1: config 0 descriptor?? [ 505.210175][ T5825] hub 6-1:0.0: bad descriptor, ignoring hub [ 505.219976][ T5825] hub 6-1:0.0: probe with driver hub failed with error -5 [ 505.254180][ T5890] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 505.293520][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.305233][ T5903] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 505.349580][ T5890] usb 3-1: Product: syz [ 505.375155][ T5890] usb 3-1: Manufacturer: syz [ 505.403631][ T5890] usb 3-1: SerialNumber: syz [ 505.441643][ T5890] usb 3-1: config 0 descriptor?? [ 505.457728][ T5825] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 505.485463][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 505.502355][ T5890] hub 3-1:0.0: bad descriptor, ignoring hub [ 505.513244][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 505.523552][ T5890] hub 3-1:0.0: probe with driver hub failed with error -5 [ 505.538601][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.578526][ T5825] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 505.592437][ T5903] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 505.625245][ T5825] usb 6-1: media controller created [ 505.643054][ T5903] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 505.663439][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.686357][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.710613][ T5903] usb 4-1: Product: syz [ 505.727980][ T5903] usb 4-1: Manufacturer: syz [ 505.745450][ T5903] usb 4-1: SerialNumber: syz [ 505.753634][ T5890] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 505.791939][ T5903] usb 4-1: config 0 descriptor?? [ 505.813571][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 505.838818][ T5890] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 505.880383][ T5890] usb 3-1: media controller created [ 505.908224][ T5825] DVB: Unable to find symbol dib7000p_attach() [ 505.933077][ T5825] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 505.958943][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.126640][ T5825] rc_core: IR keymap rc-dib0700-rc5 not found [ 506.148603][ T5825] Registered IR keymap rc-empty [ 506.159143][T12243] loop2: detected capacity change from 0 to 7 [ 506.168565][ T5825] dvb-usb: could not initialize remote control. [ 506.178455][ T5890] DVB: Unable to find symbol dib7000p_attach() [ 506.201198][ T5825] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 506.202385][ T5890] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 506.240013][T12243] Dev loop2: unable to read RDB block 7 [ 506.264882][T12243] loop2: unable to read partition table [ 506.325126][T12243] loop2: partition table beyond EOD, truncated [ 506.383103][T12243] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 506.445907][ T5890] rc_core: IR keymap rc-dib0700-rc5 not found [ 506.474571][ T5890] Registered IR keymap rc-empty [ 506.506049][ T5890] dvb-usb: could not initialize remote control. [ 506.531922][ T5890] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 506.807619][T12259] bridge0: entered promiscuous mode [ 506.850676][T12259] bridge0: entered allmulticast mode [ 507.590289][ T5890] usb 6-1: USB disconnect, device number 20 [ 507.712819][ T5890] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 508.276463][ T5890] usb 3-1: USB disconnect, device number 50 [ 508.317605][ T5198] Dev loop2: unable to read RDB block 7 [ 508.335129][ T5198] loop2: unable to read partition table [ 508.355718][ T5198] loop2: partition table beyond EOD, truncated [ 508.364659][ T5890] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 508.382383][ T5825] usb 4-1: USB disconnect, device number 64 [ 508.493740][T12277] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 509.739473][T12306] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1722'. [ 509.807175][T12306] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1722'. [ 510.315409][ T5890] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 510.526575][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 510.572891][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.585672][ T5890] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.645510][ T5890] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 510.656801][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.673002][ T5890] usb 2-1: Product: syz [ 510.690176][ T5890] usb 2-1: Manufacturer: syz [ 510.704340][ T5890] usb 2-1: SerialNumber: syz [ 510.747709][ T5890] usb 2-1: config 0 descriptor?? [ 511.057726][T12312] loop2: detected capacity change from 0 to 7 [ 511.093739][T12312] Dev loop2: unable to read RDB block 7 [ 511.100257][T12312] loop2: unable to read partition table [ 511.129392][T12312] loop2: partition table beyond EOD, truncated [ 511.147320][T12312] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 511.573270][T12332] netlink: 'syz.0.1729': attribute type 4 has an invalid length. [ 511.624266][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 511.624294][ T29] audit: type=1326 audit(1776455299.063:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12329 comm="syz.0.1729" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effb759c819 code=0x0 [ 512.566601][T12339] fuse: Bad value for 'fd' [ 512.975134][ T5890] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 513.152435][ T5890] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 513.184646][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.214185][ T5890] usb 4-1: Product: syz [ 513.224332][ T5890] usb 4-1: Manufacturer: syz [ 513.252951][ T5890] usb 4-1: SerialNumber: syz [ 513.289651][ T5890] usb 4-1: config 0 descriptor?? [ 513.324049][ T5890] hub 4-1:0.0: bad descriptor, ignoring hub [ 513.346474][ T5890] hub 4-1:0.0: probe with driver hub failed with error -5 [ 513.371646][ T5911] usb 2-1: USB disconnect, device number 61 [ 513.617769][ T5890] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 513.667791][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 513.718922][ T5890] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 513.754551][ T5890] usb 4-1: media controller created [ 513.833480][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 514.027848][ T5890] DVB: Unable to find symbol dib7000p_attach() [ 514.057903][ T5890] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 514.165375][ T5890] rc_core: IR keymap rc-dib0700-rc5 not found [ 514.183931][ T5890] Registered IR keymap rc-empty [ 514.210649][ T5890] dvb-usb: could not initialize remote control. [ 514.240463][ T5890] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 514.755102][ T5890] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 514.915240][ T5890] usb 6-1: Using ep0 maxpacket: 8 [ 514.927524][ T5890] usb 6-1: unable to get BOS descriptor or descriptor too short [ 514.942772][ T5890] usb 6-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 514.968042][ T5890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.992392][ T5890] usb 6-1: New USB device found, idVendor=0499, idProduct=0001, bcdDevice= 0.00 [ 515.008318][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.024696][ T5890] usb 6-1: Product: syz [ 515.033597][ T5890] usb 6-1: Manufacturer: syz [ 515.042255][ T5890] usb 6-1: SerialNumber: syz [ 515.350234][ T5890] usb 6-1: BAAD MICROPHONE c_chmask mismatch [ 515.459104][ T5890] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 515.472199][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.491825][ T5890] usb 6-1: USB disconnect, device number 21 [ 515.656182][ T5825] usb 4-1: USB disconnect, device number 65 [ 515.748023][ T5825] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 515.932094][T12370] fuse: Bad value for 'fd' [ 516.265094][ T5911] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 516.449015][ T5911] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 516.471666][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.514867][ T5911] usb 4-1: Product: syz [ 516.527079][ T5911] usb 4-1: Manufacturer: syz [ 516.542118][ T5911] usb 4-1: SerialNumber: syz [ 516.575077][ T5911] usb 4-1: config 0 descriptor?? [ 516.611471][ T5911] hub 4-1:0.0: bad descriptor, ignoring hub [ 516.624212][ T5911] hub 4-1:0.0: probe with driver hub failed with error -5 [ 516.724823][T12383] fuse: Bad value for 'fd' [ 516.889226][ T5911] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 516.927228][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 516.980292][ T5911] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 517.027386][ T5911] usb 4-1: media controller created [ 517.093852][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.235484][ T5825] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 517.276767][ T5911] DVB: Unable to find symbol dib7000p_attach() [ 517.312311][ T5911] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 517.456465][ T5825] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 517.467987][ T5911] rc_core: IR keymap rc-dib0700-rc5 not found [ 517.492777][ T5911] Registered IR keymap rc-empty [ 517.493666][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.532236][ T5911] dvb-usb: could not initialize remote control. [ 517.545444][ T5825] usb 2-1: Product: syz [ 517.558920][ T5825] usb 2-1: Manufacturer: syz [ 517.569270][ T5911] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 517.582525][ T5825] usb 2-1: SerialNumber: syz [ 517.605902][ T5825] usb 2-1: config 0 descriptor?? [ 517.630153][ T5825] hub 2-1:0.0: bad descriptor, ignoring hub [ 517.658218][ T5825] hub 2-1:0.0: probe with driver hub failed with error -5 [ 517.683070][T12402] fuse: Bad value for 'fd' [ 517.868730][ T5825] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 517.896359][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.950072][ T5825] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 517.973904][ T5825] usb 2-1: media controller created [ 518.025971][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 518.205123][ T5903] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 518.217671][ T5825] DVB: Unable to find symbol dib7000p_attach() [ 518.241515][ T5825] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 518.405106][ T5825] rc_core: IR keymap rc-dib0700-rc5 not found [ 518.423202][ T5825] Registered IR keymap rc-empty [ 518.445087][ T5825] dvb-usb: could not initialize remote control. [ 518.468801][ T5825] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 518.633009][ T5903] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 518.664005][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.697496][ T5903] usb 3-1: Product: syz [ 518.714348][ T5903] usb 3-1: Manufacturer: syz [ 518.732529][ T5903] usb 3-1: SerialNumber: syz [ 518.759022][ T5903] usb 3-1: config 0 descriptor?? [ 518.792452][ T5903] hub 3-1:0.0: bad descriptor, ignoring hub [ 518.815023][ T5903] hub 3-1:0.0: probe with driver hub failed with error -5 [ 519.020776][ T5903] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 519.075308][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 519.114303][ T5903] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 519.148843][ T5903] usb 3-1: media controller created [ 519.222896][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.371421][ T5925] usb 4-1: USB disconnect, device number 66 [ 519.471609][ T5925] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 519.513103][ T5903] DVB: Unable to find symbol dib7000p_attach() [ 519.553593][ T5903] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 519.695130][ T5903] rc_core: IR keymap rc-dib0700-rc5 not found [ 519.714551][ T5903] Registered IR keymap rc-empty [ 519.739296][ T5903] dvb-usb: could not initialize remote control. [ 519.764420][ T5903] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 520.338726][ T5890] usb 2-1: USB disconnect, device number 62 [ 520.481390][ T5890] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 520.631766][T12416] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 520.681421][T12416] PKCS7: Only support pkcs7_signedData type [ 521.699929][ T9] usb 3-1: USB disconnect, device number 51 [ 521.901796][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 523.314615][T12471] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 523.370091][T12471] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 523.456474][T12470] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 524.078945][T12486] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 524.095239][T12486] PKCS7: Only support pkcs7_signedData type [ 524.755098][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 524.950155][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 524.950176][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 524.950190][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 524.950202][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.950225][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.950243][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.952339][ T9] usb 2-1: config 0 descriptor?? [ 525.155858][ T5903] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 525.306386][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 525.317391][ T5903] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.337316][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0 [ 525.354298][ T5903] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 525.359423][ T9] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 525.384046][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.423391][ T5903] usb 6-1: config 0 descriptor?? [ 525.470333][ T9] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 525.687377][T12506] FAULT_INJECTION: forcing a failure. [ 525.687377][T12506] name failslab, interval 1, probability 0, space 0, times 0 [ 525.728395][T12506] CPU: 0 UID: 0 PID: 12506 Comm: syz.1.1774 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.728424][T12506] Tainted: [L]=SOFTLOCKUP [ 525.728431][T12506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 525.728442][T12506] Call Trace: [ 525.728449][T12506] [ 525.728458][T12506] dump_stack_lvl+0xe8/0x150 [ 525.728491][T12506] should_fail_ex+0x412/0x560 [ 525.728518][T12506] should_failslab+0xa8/0x100 [ 525.728542][T12506] __kmalloc_noprof+0xe8/0x760 [ 525.728561][T12506] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 525.728591][T12506] tomoyo_realpath_from_path+0xe3/0x5d0 [ 525.728617][T12506] ? tomoyo_domain+0xd7/0x130 [ 525.728646][T12506] ? tomoyo_path_number_perm+0x219/0x630 [ 525.728666][T12506] tomoyo_path_number_perm+0x246/0x630 [ 525.728689][T12506] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 525.728709][T12506] ? __lock_acquire+0x6b5/0x2cf0 [ 525.728747][T12506] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 525.728788][T12506] ? __fget_files+0x2a/0x420 [ 525.728815][T12506] ? __fget_files+0x2a/0x420 [ 525.728838][T12506] ? __fget_files+0x3a0/0x420 [ 525.728861][T12506] ? __fget_files+0x2a/0x420 [ 525.728888][T12506] security_file_ioctl+0xc3/0x2a0 [ 525.728910][T12506] __se_sys_ioctl+0x47/0x170 [ 525.728930][T12506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.728950][T12506] do_syscall_64+0x15f/0xf80 [ 525.728975][T12506] ? trace_irq_disable+0x3b/0x140 [ 525.728997][T12506] ? clear_bhb_loop+0x40/0x90 [ 525.729018][T12506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.729036][T12506] RIP: 0033:0x7fe3fd79c819 [ 525.729054][T12506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.729068][T12506] RSP: 002b:00007fe3fe6c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.729088][T12506] RAX: ffffffffffffffda RBX: 00007fe3fda16090 RCX: 00007fe3fd79c819 [ 525.729101][T12506] RDX: 0000200000000f00 RSI: 0000000081044804 RDI: 0000000000000005 [ 525.729113][T12506] RBP: 00007fe3fe6c9090 R08: 0000000000000000 R09: 0000000000000000 [ 525.729124][T12506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.729135][T12506] R13: 00007fe3fda16128 R14: 00007fe3fda16090 R15: 00007fe3fdb3fa48 [ 525.729163][T12506] [ 525.729191][T12506] ERROR: Out of memory at tomoyo_realpath_from_path. [ 525.742127][ T5903] usbhid 6-1:0.0: can't add hid device: -71 [ 526.112639][ T5903] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 526.168970][ T5903] usb 6-1: USB disconnect, device number 22 [ 526.612825][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1779'. [ 526.634849][T12513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1779'. [ 526.686935][T12506] usb 2-1: string descriptor 0 read error: -71 [ 526.985392][ T5838] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 526.993546][T12527] fuse: Bad value for 'fd' [ 527.155166][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 527.166727][ T5838] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 527.179941][ T5838] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 527.205229][ T5838] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 527.242639][ T5838] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.283615][ T5838] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 527.306578][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.325032][ T5903] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 527.466456][ T9] usb 2-1: USB disconnect, device number 63 [ 527.537000][ T5903] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 527.572409][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.582902][ T5838] usb 3-1: GET_CAPABILITIES returned 0 [ 527.593446][ T5838] usbtmc 3-1:16.0: can't read capabilities [ 527.601120][T12537] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 527.617127][ T5903] usb 4-1: Product: syz [ 527.633723][ T5903] usb 4-1: Manufacturer: syz [ 527.639232][T12537] PKCS7: Only support pkcs7_signedData type [ 527.647027][ T5903] usb 4-1: SerialNumber: syz [ 527.684782][ T5903] usb 4-1: config 0 descriptor?? [ 527.712256][ T5903] hub 4-1:0.0: bad descriptor, ignoring hub [ 527.727808][ T5903] hub 4-1:0.0: probe with driver hub failed with error -5 [ 527.853550][T12517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.878604][T12517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.962039][ T5903] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 527.984078][ T9] usb 3-1: USB disconnect, device number 52 [ 527.993173][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 528.016923][ T5903] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 528.035989][ T5903] usb 4-1: media controller created [ 528.072977][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.168344][ T5903] DVB: Unable to find symbol dib7000p_attach() [ 528.180194][ T5903] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 528.257857][ T5903] rc_core: IR keymap rc-dib0700-rc5 not found [ 528.272283][ T5903] Registered IR keymap rc-empty [ 528.284066][ T5903] dvb-usb: could not initialize remote control. [ 528.296610][ T5903] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 529.007778][ T29] audit: type=1326 audit(1776455316.463:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e759c819 code=0x7ffc0000 [ 529.076192][ T29] audit: type=1326 audit(1776455316.463:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e759c819 code=0x7ffc0000 [ 529.137457][ T29] audit: type=1326 audit(1776455316.493:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f27e759c819 code=0x7ffc0000 [ 529.185507][ T5911] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 529.204375][ T29] audit: type=1326 audit(1776455316.493:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e759c819 code=0x7ffc0000 [ 529.278762][ T29] audit: type=1326 audit(1776455316.493:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f27e759c819 code=0x7ffc0000 [ 529.345490][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 529.363504][ T5911] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 529.378548][ T5911] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 529.391941][ T5911] usb 2-1: config 0 has no interface number 0 [ 529.404672][ T5911] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 529.419096][ T5911] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 529.437798][ T5911] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 529.458938][ T5911] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 529.469532][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 529.477916][ T5911] usb 2-1: Product: syz [ 529.509314][ T5911] usb 2-1: config 0 descriptor?? [ 529.515339][T12563] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 529.892948][T12567] FAULT_INJECTION: forcing a failure. [ 529.892948][T12567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.919114][T12567] CPU: 0 UID: 0 PID: 12567 Comm: syz.2.1796 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.919143][T12567] Tainted: [L]=SOFTLOCKUP [ 529.919150][T12567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 529.919160][T12567] Call Trace: [ 529.919167][T12567] [ 529.919175][T12567] dump_stack_lvl+0xe8/0x150 [ 529.919204][T12567] should_fail_ex+0x412/0x560 [ 529.919230][T12567] _copy_from_user+0x2d/0xb0 [ 529.919253][T12567] packet_setsockopt+0x9d1/0x1510 [ 529.919273][T12567] ? __pfx_packet_setsockopt+0x10/0x10 [ 529.919298][T12567] ? aa_sk_perm+0x6d5/0x900 [ 529.919316][T12567] ? __fget_files+0x2a/0x420 [ 529.919344][T12567] ? __pfx_aa_sk_perm+0x10/0x10 [ 529.919366][T12567] ? __fget_files+0x2a/0x420 [ 529.919385][T12567] ? aa_sock_opt_perm+0xff/0x1a0 [ 529.919407][T12567] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 529.919426][T12567] ? __pfx_packet_setsockopt+0x10/0x10 [ 529.919443][T12567] do_sock_setsockopt+0x17c/0x1b0 [ 529.919468][T12567] __x64_sys_setsockopt+0x13d/0x1b0 [ 529.919493][T12567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.919512][T12567] do_syscall_64+0x15f/0xf80 [ 529.919528][T12567] ? trace_irq_disable+0x3b/0x140 [ 529.919547][T12567] ? clear_bhb_loop+0x40/0x90 [ 529.919568][T12567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.919583][T12567] RIP: 0033:0x7f27e759c819 [ 529.919599][T12567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.919613][T12567] RSP: 002b:00007f27e84b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 529.919631][T12567] RAX: ffffffffffffffda RBX: 00007f27e7815fa0 RCX: 00007f27e759c819 [ 529.919643][T12567] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000004 [ 529.919653][T12567] RBP: 00007f27e84b1090 R08: 0000000000000010 R09: 0000000000000000 [ 529.919664][T12567] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 529.919675][T12567] R13: 00007f27e7816038 R14: 00007f27e7815fa0 R15: 00007f27e793fa48 [ 529.919703][T12567] [ 530.270800][T12571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.327701][T12571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.394353][T12576] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 530.455216][T12576] PKCS7: Only support pkcs7_signedData type [ 530.582073][ T5925] usb 4-1: USB disconnect, device number 67 [ 530.702361][ T5925] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 531.776927][ T5911] usb 2-1: USB disconnect, device number 64 [ 532.830212][ T935] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 533.055122][ T935] usb 2-1: Using ep0 maxpacket: 8 [ 533.066435][ T935] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 533.076619][ T935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.091004][ T935] usb 2-1: Product: syz [ 533.098243][ T935] usb 2-1: Manufacturer: syz [ 533.106204][ T935] usb 2-1: SerialNumber: syz [ 533.151560][ T935] usb 2-1: config 0 descriptor?? [ 533.372352][ T935] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 533.800680][T12626] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 533.845088][T12626] PKCS7: Only support pkcs7_signedData type [ 534.793473][ T935] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 534.850142][ T935] usb 2-1: USB disconnect, device number 65 [ 535.545960][ T935] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 535.725357][ T935] usb 6-1: Using ep0 maxpacket: 16 [ 535.750220][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.773342][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.802744][ T935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 535.850363][ T935] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 535.874262][ T935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.911298][ T935] usb 6-1: config 0 descriptor?? [ 536.477332][ T935] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 536.492039][ T935] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 536.557994][ T935] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 536.593909][ T935] microsoft 0003:045E:07DA.000C: no inputs found [ 536.615305][ T935] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 536.784468][ T935] usb 6-1: USB disconnect, device number 23 [ 536.925171][T12659] vlan0: entered promiscuous mode [ 537.534429][T12671] program syz.5.1825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.991904][T12677] FAULT_INJECTION: forcing a failure. [ 537.991904][T12677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.066510][T12677] CPU: 1 UID: 0 PID: 12677 Comm: syz.5.1827 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.066529][T12677] Tainted: [L]=SOFTLOCKUP [ 538.066534][T12677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 538.066540][T12677] Call Trace: [ 538.066544][T12677] [ 538.066550][T12677] dump_stack_lvl+0xe8/0x150 [ 538.066570][T12677] should_fail_ex+0x412/0x560 [ 538.066585][T12677] _copy_to_user+0x31/0xb0 [ 538.066601][T12677] simple_read_from_buffer+0xe1/0x170 [ 538.066618][T12677] proc_fail_nth_read+0x1bb/0x230 [ 538.066634][T12677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 538.066650][T12677] ? rw_verify_area+0x2a6/0x4d0 [ 538.066660][T12677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 538.066675][T12677] vfs_read+0x20c/0xa70 [ 538.066687][T12677] ? __pfx___mutex_lock+0x10/0x10 [ 538.066698][T12677] ? __pfx_vfs_read+0x10/0x10 [ 538.066708][T12677] ? __fget_files+0x2a/0x420 [ 538.066724][T12677] ? __fget_files+0x3a0/0x420 [ 538.066737][T12677] ? __fget_files+0x2a/0x420 [ 538.066754][T12677] ksys_read+0x150/0x270 [ 538.066765][T12677] ? __pfx_ksys_read+0x10/0x10 [ 538.066785][T12677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.066804][T12677] do_syscall_64+0x15f/0xf80 [ 538.066821][T12677] ? trace_irq_disable+0x3b/0x140 [ 538.066834][T12677] ? clear_bhb_loop+0x40/0x90 [ 538.066846][T12677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.066856][T12677] RIP: 0033:0x7f8f0035d04e [ 538.066866][T12677] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 538.066875][T12677] RSP: 002b:00007f8f01243fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 538.066887][T12677] RAX: ffffffffffffffda RBX: 00007f8f012446c0 RCX: 00007f8f0035d04e [ 538.066894][T12677] RDX: 000000000000000f RSI: 00007f8f012440a0 RDI: 0000000000000005 [ 538.066901][T12677] RBP: 00007f8f01244090 R08: 0000000000000000 R09: 0000000000000000 [ 538.066907][T12677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.066912][T12677] R13: 00007f8f00616038 R14: 00007f8f00615fa0 R15: 00007f8f0073fa48 [ 538.066927][T12677] [ 538.844153][T12683] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 538.906751][T12683] PKCS7: Only support pkcs7_signedData type [ 539.417388][T12695] netlink: 'syz.3.1831': attribute type 4 has an invalid length. [ 539.502550][ T29] audit: type=1326 audit(1776455326.943:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12689 comm="syz.3.1831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b1259c819 code=0x0 [ 539.683231][T12702] FAULT_INJECTION: forcing a failure. [ 539.683231][T12702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.763682][T12702] CPU: 0 UID: 0 PID: 12702 Comm: syz.5.1834 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.763716][T12702] Tainted: [L]=SOFTLOCKUP [ 539.763723][T12702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 539.763733][T12702] Call Trace: [ 539.763741][T12702] [ 539.763749][T12702] dump_stack_lvl+0xe8/0x150 [ 539.763771][T12702] should_fail_ex+0x412/0x560 [ 539.763786][T12702] _copy_from_user+0x2d/0xb0 [ 539.763800][T12702] ucma_write+0x15d/0x2f0 [ 539.763820][T12702] ? __pfx_ucma_write+0x10/0x10 [ 539.763834][T12702] ? security_file_permission+0x75/0x260 [ 539.763846][T12702] ? rw_verify_area+0x255/0x4d0 [ 539.763858][T12702] vfs_writev+0x4bd/0x990 [ 539.763871][T12702] ? __pfx_ucma_write+0x10/0x10 [ 539.763887][T12702] ? __pfx_vfs_writev+0x10/0x10 [ 539.763906][T12702] ? __fget_files+0x2a/0x420 [ 539.763922][T12702] ? __fget_files+0x3a0/0x420 [ 539.763935][T12702] ? __fget_files+0x2a/0x420 [ 539.763952][T12702] do_writev+0x154/0x2e0 [ 539.763965][T12702] ? __pfx_do_writev+0x10/0x10 [ 539.763980][T12702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.763991][T12702] do_syscall_64+0x15f/0xf80 [ 539.764002][T12702] ? trace_irq_disable+0x3b/0x140 [ 539.764015][T12702] ? clear_bhb_loop+0x40/0x90 [ 539.764028][T12702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.764037][T12702] RIP: 0033:0x7f8f0039c819 [ 539.764047][T12702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.764056][T12702] RSP: 002b:00007f8f01244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 539.764067][T12702] RAX: ffffffffffffffda RBX: 00007f8f00615fa0 RCX: 00007f8f0039c819 [ 539.764074][T12702] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000e [ 539.764081][T12702] RBP: 00007f8f01244090 R08: 0000000000000000 R09: 0000000000000000 [ 539.764087][T12702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.764093][T12702] R13: 00007f8f00616038 R14: 00007f8f00615fa0 R15: 00007f8f0073fa48 [ 539.764107][T12702] [ 540.595088][ T935] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 540.776461][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 540.809032][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.834921][ T935] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 540.878267][ T935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.955443][ T935] usb 6-1: config 0 descriptor?? [ 541.402862][ T935] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 541.431270][ T935] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 541.455334][ T935] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 541.480460][ T935] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 541.492750][ T935] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 541.512428][ T935] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 541.533835][ T935] isku 0003:1E7D:319C.000D: unknown main item tag 0x0 [ 541.540832][ T5925] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 541.589350][ T935] isku 0003:1E7D:319C.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 541.627904][ T935] isku 0003:1E7D:319C.000D: couldn't init struct isku_device [ 541.652908][ T935] isku 0003:1E7D:319C.000D: couldn't install keyboard [ 541.715076][ T5903] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 541.734929][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 541.741523][ T935] isku 0003:1E7D:319C.000D: probe with driver isku failed with error -32 [ 541.780918][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.795967][ T5911] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 541.826505][ T5925] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 541.853194][ T5925] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 541.867267][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.876533][ T5925] usb 3-1: Product: syz [ 541.881575][ T5925] usb 3-1: Manufacturer: syz [ 541.903339][ T5925] usb 3-1: SerialNumber: syz [ 541.909308][ T5903] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 541.921994][ T5925] usb 3-1: config 0 descriptor?? [ 541.929488][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 541.955003][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 541.973547][ T5903] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 541.975167][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 541.988718][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.005166][ T5903] usb 4-1: Product: syz [ 542.015948][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.016248][ T5903] usb 4-1: Manufacturer: syz [ 542.050670][ T5903] usb 4-1: SerialNumber: syz [ 542.063627][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 542.100372][ T5903] usb 4-1: config 0 descriptor?? [ 542.111780][T12716] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 542.127057][ T5903] usb 4-1: ucan: probing device on interface #0 [ 542.140474][ T5903] usb 4-1: ucan: invalid endpoint configuration [ 542.156114][ T5911] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 542.174081][ T5903] usb 4-1: ucan: probe failed; try to update the device firmware [ 542.191226][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.203158][T12711] loop2: detected capacity change from 0 to 7 [ 542.209463][ T5911] usb 2-1: Product: syz [ 542.213835][ T5911] usb 2-1: Manufacturer: syz [ 542.231585][ T5911] usb 2-1: SerialNumber: syz [ 542.246397][T12711] Dev loop2: unable to read RDB block 7 [ 542.265831][ T5911] usb 2-1: config 0 descriptor?? [ 542.273781][T12711] loop2: unable to read partition table [ 542.309697][T12711] loop2: partition table beyond EOD, truncated [ 542.343740][ T5903] usb 4-1: USB disconnect, device number 68 [ 542.356254][T12711] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 543.365289][ T935] usb 6-1: USB disconnect, device number 24 [ 543.455515][ T5903] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 543.684882][ T5903] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 543.715112][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.746024][ T5903] usb 4-1: Product: syz [ 543.764365][ T5903] usb 4-1: Manufacturer: syz [ 543.787037][ T5903] usb 4-1: SerialNumber: syz [ 543.812213][ T5903] usb 4-1: config 0 descriptor?? [ 543.837498][T12734] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 543.858432][T12734] PKCS7: Only support pkcs7_signedData type [ 543.874818][ T5903] hub 4-1:0.0: bad descriptor, ignoring hub [ 543.891337][ T5903] hub 4-1:0.0: probe with driver hub failed with error -5 [ 544.156533][ T5903] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 544.194003][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 544.233904][ T5903] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 544.277249][ T5903] usb 4-1: media controller created [ 544.338027][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 544.542310][ T5903] DVB: Unable to find symbol dib7000p_attach() [ 544.571766][ T5903] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 544.795487][ T5903] rc_core: IR keymap rc-dib0700-rc5 not found [ 544.824248][ T5903] Registered IR keymap rc-empty [ 544.841682][ T5911] usb 2-1: USB disconnect, device number 66 [ 544.863474][ T5903] dvb-usb: could not initialize remote control. [ 544.906322][ T5903] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 544.935249][ T5838] usb 3-1: USB disconnect, device number 53 [ 545.674166][ T29] audit: type=1326 audit(1776455333.123:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12753 comm="syz.0.1849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effb759c819 code=0x0 [ 546.423693][T12764] syzkaller0: entered promiscuous mode [ 546.453307][T12764] syzkaller0: entered allmulticast mode [ 546.681699][ T5838] usb 4-1: USB disconnect, device number 69 [ 546.823723][T12768] FAULT_INJECTION: forcing a failure. [ 546.823723][T12768] name failslab, interval 1, probability 0, space 0, times 0 [ 546.843152][ T5838] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 546.908379][T12768] CPU: 1 UID: 0 PID: 12768 Comm: syz.3.1852 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.908406][T12768] Tainted: [L]=SOFTLOCKUP [ 546.908414][T12768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 546.908424][T12768] Call Trace: [ 546.908432][T12768] [ 546.908439][T12768] dump_stack_lvl+0xe8/0x150 [ 546.908470][T12768] should_fail_ex+0x412/0x560 [ 546.908497][T12768] should_failslab+0xa8/0x100 [ 546.908517][T12768] ? skb_clone+0x212/0x3a0 [ 546.908538][T12768] kmem_cache_alloc_noprof+0x87/0x650 [ 546.908564][T12768] ? __netlink_lookup+0xc6/0x8b0 [ 546.908591][T12768] skb_clone+0x212/0x3a0 [ 546.908616][T12768] __netlink_deliver_tap+0x404/0x850 [ 546.908645][T12768] ? netlink_deliver_tap+0x2e/0x1b0 [ 546.908666][T12768] netlink_deliver_tap+0x19c/0x1b0 [ 546.908682][T12768] netlink_unicast+0x730/0x8e0 [ 546.908699][T12768] netlink_sendmsg+0x813/0xb40 [ 546.908715][T12768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.908730][T12768] ? aa_sock_msg_perm+0xf1/0x1b0 [ 546.908747][T12768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 546.908760][T12768] ____sys_sendmsg+0x972/0x9f0 [ 546.908774][T12768] ? __might_fault+0xaf/0x130 [ 546.908792][T12768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.908810][T12768] ? import_iovec+0x73/0xa0 [ 546.908825][T12768] ___sys_sendmsg+0x2a5/0x360 [ 546.908838][T12768] ? __lock_acquire+0x6b5/0x2cf0 [ 546.908854][T12768] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.908884][T12768] ? __fget_files+0x2a/0x420 [ 546.908898][T12768] ? __fget_files+0x3a0/0x420 [ 546.908919][T12768] __x64_sys_sendmsg+0x1bd/0x2a0 [ 546.908934][T12768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.908952][T12768] ? __pfx_ksys_write+0x10/0x10 [ 546.908966][T12768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.908976][T12768] do_syscall_64+0x15f/0xf80 [ 546.908987][T12768] ? trace_irq_disable+0x3b/0x140 [ 546.909000][T12768] ? clear_bhb_loop+0x40/0x90 [ 546.909012][T12768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.909021][T12768] RIP: 0033:0x7f6b1259c819 [ 546.909032][T12768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.909040][T12768] RSP: 002b:00007f6b13385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.909052][T12768] RAX: ffffffffffffffda RBX: 00007f6b12815fa0 RCX: 00007f6b1259c819 [ 546.909059][T12768] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 546.909066][T12768] RBP: 00007f6b13385090 R08: 0000000000000000 R09: 0000000000000000 [ 546.909072][T12768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.909078][T12768] R13: 00007f6b12816038 R14: 00007f6b12815fa0 R15: 00007f6b1293fa48 [ 546.909093][T12768] [ 547.755107][ T5838] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 547.925328][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 547.941499][ T5838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.974770][ T5838] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 548.009563][ T5838] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 548.035924][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.062825][ T5838] usb 4-1: Product: syz [ 548.085204][ T5838] usb 4-1: Manufacturer: syz [ 548.102836][ T5838] usb 4-1: SerialNumber: syz [ 548.109114][ T5838] usb 4-1: config 0 descriptor?? [ 548.354297][T12781] loop2: detected capacity change from 0 to 7 [ 548.394889][T12781] Dev loop2: unable to read RDB block 7 [ 548.416302][T12781] loop2: unable to read partition table [ 548.435880][T12781] loop2: partition table beyond EOD, truncated [ 548.442808][T12781] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 548.649893][ T5198] Dev loop2: unable to read RDB block 7 [ 548.660026][ T5198] loop2: unable to read partition table [ 548.676553][ T5198] loop2: partition table beyond EOD, truncated [ 548.881372][T12795] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 548.892808][T12795] PKCS7: Only support pkcs7_signedData type [ 550.490912][ T5198] Dev loop2: unable to read RDB block 7 [ 550.503331][ T5198] loop2: unable to read partition table [ 550.547462][ T5198] loop2: partition table beyond EOD, truncated [ 550.781471][ T9] usb 4-1: USB disconnect, device number 70 [ 551.400346][T12819] netlink: 'syz.0.1863': attribute type 10 has an invalid length. [ 551.433502][T12818] bridge_slave_0: left allmulticast mode [ 551.450563][T12819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1863'. [ 551.472307][T12818] bridge_slave_0: left promiscuous mode [ 551.489822][T12818] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.528797][T12818] bridge_slave_1: left allmulticast mode [ 551.548959][T12818] bridge_slave_1: left promiscuous mode [ 551.571528][T12818] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.602157][T12818] bond0: (slave bond_slave_0): Releasing backup interface [ 551.629331][T12818] bond0: (slave bond_slave_1): Releasing backup interface [ 551.659065][T12818] team0: Port device team_slave_0 removed [ 551.682769][T12818] team0: Port device team_slave_1 removed [ 551.705897][T12818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 551.755312][T12819] dummy0: entered promiscuous mode [ 551.812627][T12819] bridge0: port 1(dummy0) entered blocking state [ 551.858926][T12819] bridge0: port 1(dummy0) entered disabled state [ 551.876339][T12819] dummy0: entered allmulticast mode [ 551.909978][T12819] bridge0: port 1(dummy0) entered blocking state [ 551.917788][T12819] bridge0: port 1(dummy0) entered forwarding state [ 552.903044][ T29] audit: type=1326 audit(1776455340.353:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12829 comm="syz.1.1867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3fd79c819 code=0x0 [ 553.005123][ T5925] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 553.177325][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 553.199201][ T5925] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 553.227109][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.252945][T12839] netlink: 'syz.3.1869': attribute type 4 has an invalid length. [ 553.262625][ T5925] usb 6-1: Product: syz [ 553.280702][ T5925] usb 6-1: Manufacturer: syz [ 553.296155][ T5925] usb 6-1: SerialNumber: syz [ 553.316331][ T29] audit: type=1326 audit(1776455340.753:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.3.1869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b1259c819 code=0x0 [ 553.559771][ T5925] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 553.693623][ T5925] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 553.753720][ T5925] usb 6-1: USB disconnect, device number 25 [ 553.767124][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.505759][ T5911] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 554.675221][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 554.693926][ T5911] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 554.717193][ T5911] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 554.747287][ T5911] usb 6-1: config 0 has no interface number 0 [ 554.753759][T12855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1873'. [ 554.785691][T12855] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 554.796147][ T5911] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 554.796186][ T5911] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 554.828319][ T5911] usb 6-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 554.894085][ T5911] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 554.905109][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.913352][ T5911] usb 6-1: Product: syz [ 554.918990][ T5911] usb 6-1: Manufacturer: syz [ 554.926581][ T5911] usb 6-1: SerialNumber: syz [ 554.984735][ T5911] usb 6-1: config 0 descriptor?? [ 554.994419][T12846] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 555.015810][T12848] netlink: 'syz.2.1872': attribute type 34 has an invalid length. [ 555.217449][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1871'. [ 555.310657][ T5911] usb 6-1: NFC: intf ffff8880289fe000 id ffffffff8f3e0600 [ 555.364463][ T5911] usb 6-1: USB disconnect, device number 26 [ 556.457030][T12884] FAULT_INJECTION: forcing a failure. [ 556.457030][T12884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.503691][T12884] CPU: 0 UID: 0 PID: 12884 Comm: syz.5.1881 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.503709][T12884] Tainted: [L]=SOFTLOCKUP [ 556.503712][T12884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 556.503719][T12884] Call Trace: [ 556.503724][T12884] [ 556.503729][T12884] dump_stack_lvl+0xe8/0x150 [ 556.503751][T12884] should_fail_ex+0x412/0x560 [ 556.503781][T12884] _copy_from_iter+0x1d3/0x1670 [ 556.503804][T12884] ? rcu_is_watching+0x15/0xb0 [ 556.503818][T12884] ? __pfx__copy_from_iter+0x10/0x10 [ 556.503833][T12884] ? netlink_sendmsg+0x650/0xb40 [ 556.503846][T12884] ? skb_put+0x11b/0x210 [ 556.503860][T12884] netlink_sendmsg+0x6c0/0xb40 [ 556.503877][T12884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.503890][T12884] ? aa_sock_msg_perm+0xf1/0x1b0 [ 556.503904][T12884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 556.503917][T12884] ____sys_sendmsg+0x972/0x9f0 [ 556.503930][T12884] ? __might_fault+0xaf/0x130 [ 556.503954][T12884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.503972][T12884] ? import_iovec+0x73/0xa0 [ 556.503986][T12884] ___sys_sendmsg+0x2a5/0x360 [ 556.503999][T12884] ? __lock_acquire+0x6b5/0x2cf0 [ 556.504016][T12884] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.504044][T12884] ? __fget_files+0x2a/0x420 [ 556.504058][T12884] ? __fget_files+0x3a0/0x420 [ 556.504076][T12884] __x64_sys_sendmsg+0x1bd/0x2a0 [ 556.504090][T12884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 556.504108][T12884] ? __pfx_ksys_write+0x10/0x10 [ 556.504122][T12884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.504133][T12884] do_syscall_64+0x15f/0xf80 [ 556.504143][T12884] ? trace_irq_disable+0x3b/0x140 [ 556.504157][T12884] ? clear_bhb_loop+0x40/0x90 [ 556.504168][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.504178][T12884] RIP: 0033:0x7f8f0039c819 [ 556.504188][T12884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.504197][T12884] RSP: 002b:00007f8f01244028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.504211][T12884] RAX: ffffffffffffffda RBX: 00007f8f00615fa0 RCX: 00007f8f0039c819 [ 556.504218][T12884] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 556.504224][T12884] RBP: 00007f8f01244090 R08: 0000000000000000 R09: 0000000000000000 [ 556.504230][T12884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.504236][T12884] R13: 00007f8f00616038 R14: 00007f8f00615fa0 R15: 00007f8f0073fa48 [ 556.504251][T12884] [ 557.575176][ T9] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 557.772443][ T9] usb 4-1: config 0 has an invalid interface number: 176 but max is 0 [ 557.796428][ T9] usb 4-1: config 0 has no interface number 0 [ 557.810649][ T9] usb 4-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 557.833979][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 557.853602][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.866723][ T9] usb 4-1: Product: syz [ 557.874055][ T9] usb 4-1: Manufacturer: syz [ 557.880649][ T9] usb 4-1: SerialNumber: syz [ 557.898763][ T9] usb 4-1: config 0 descriptor?? [ 557.914414][T12894] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 557.930639][T12894] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 557.944101][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.160101][T12894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1883'. [ 558.200883][T12894] bond1: entered promiscuous mode [ 558.217946][T12894] bond1: entered allmulticast mode [ 558.241766][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1883'. [ 558.282600][T12894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.343246][T12899] macsec1: entered promiscuous mode [ 558.368121][T12899] macsec1: entered allmulticast mode [ 558.388616][T12899] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 558.541610][ T9] usb 4-1: USB disconnect, device number 71 [ 558.949250][ T29] audit: type=1326 audit(1776455346.393:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12900 comm="syz.1.1884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3fd79c819 code=0x0 [ 559.168193][T12913] fuse: Bad value for 'fd' [ 559.176113][T12912] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 559.575085][ T935] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 559.766998][ T935] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 559.805083][ T935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.830131][ T935] usb 6-1: Product: syz [ 559.839973][ T935] usb 6-1: Manufacturer: syz [ 559.852655][ T935] usb 6-1: SerialNumber: syz [ 559.881667][ T935] usb 6-1: config 0 descriptor?? [ 559.910065][ T935] hub 6-1:0.0: bad descriptor, ignoring hub [ 559.928505][ T935] hub 6-1:0.0: probe with driver hub failed with error -5 [ 560.205491][ T935] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 560.281778][ T935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 560.314163][ T935] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 560.335473][ T935] usb 6-1: media controller created [ 560.388511][ T935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.549452][ T935] DVB: Unable to find symbol dib7000p_attach() [ 560.573991][ T935] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 560.712245][T12933] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 560.741338][ T935] rc_core: IR keymap rc-dib0700-rc5 not found [ 560.755278][T12933] PKCS7: Only support pkcs7_signedData type [ 560.767829][ T935] Registered IR keymap rc-empty [ 560.788621][ T935] dvb-usb: could not initialize remote control. [ 560.814114][ T935] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 562.476605][ T5925] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 562.626721][ T5925] usb 3-1: device descriptor read/64, error -71 [ 562.789378][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.795839][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.875225][ T5925] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 562.960347][ T9] usb 6-1: USB disconnect, device number 27 [ 563.057252][ T5925] usb 3-1: device descriptor read/64, error -71 [ 563.069943][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 563.128495][T12961] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 563.195852][ T5925] usb usb3-port1: attempt power cycle [ 563.409043][ T29] audit: type=1326 audit(1776455350.853:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12966 comm="syz.5.1901" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f0039c819 code=0x0 [ 563.571024][ T5925] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 563.632814][ T5925] usb 3-1: device descriptor read/8, error -71 [ 563.745376][ T5903] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 563.875088][ T5925] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 563.927043][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 563.936285][ T5925] usb 3-1: device descriptor read/8, error -71 [ 563.944072][ T5903] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 563.961046][ T5903] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 563.973623][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.988295][ T5903] usb 4-1: Product: syz [ 563.999138][ T5903] usb 4-1: Manufacturer: syz [ 564.007443][ T5903] usb 4-1: SerialNumber: syz [ 564.021868][ T5903] r8152-cfgselector 4-1: Unknown version 0x0000 [ 564.037768][ T5903] r8152-cfgselector 4-1: config 0 descriptor?? [ 564.055532][ T5925] usb usb3-port1: unable to enumerate USB device [ 564.915175][ T5903] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 565.089896][ T5903] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 565.113948][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.133220][ T5903] usb 6-1: Product: syz [ 565.144915][ T5903] usb 6-1: Manufacturer: syz [ 565.161812][ T5903] usb 6-1: SerialNumber: syz [ 565.454299][T12982] fuse: Bad value for 'fd' [ 565.599791][ T5903] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 565.649795][ T5903] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 565.995749][ T935] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 566.177913][ T935] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 566.223553][ T935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.265623][ T935] usb 3-1: Product: syz [ 566.289271][ T935] usb 3-1: Manufacturer: syz [ 566.300209][ T5903] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 566.313500][ T935] usb 3-1: SerialNumber: syz [ 566.333482][ T935] usb 3-1: config 0 descriptor?? [ 566.362868][ T5903] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 566.387183][ T935] hub 3-1:0.0: bad descriptor, ignoring hub [ 566.412927][ T9] r8152-cfgselector 4-1: USB disconnect, device number 72 [ 566.416436][ T5903] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 566.429246][ T935] hub 3-1:0.0: probe with driver hub failed with error -5 [ 566.523955][ T5903] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 566.674558][ T935] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 566.732685][ T935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 566.776498][ T935] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 566.813359][ T935] usb 3-1: media controller created [ 566.921339][ T935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 567.100651][ T935] DVB: Unable to find symbol dib7000p_attach() [ 567.114529][ T935] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 567.236512][ T935] rc_core: IR keymap rc-dib0700-rc5 not found [ 567.259743][ T935] Registered IR keymap rc-empty [ 567.281741][ T935] dvb-usb: could not initialize remote control. [ 567.297262][ T935] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 567.735490][ T10] usb 6-1: USB disconnect, device number 28 [ 568.157886][T13041] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 568.205068][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 568.377747][ T10] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 568.407199][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 568.431618][ T10] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.461250][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 568.487899][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.525312][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 568.548579][ T10] usb 2-1: invalid MIDI out EP 0 [ 568.876080][T13048] netlink: 'syz.0.1931': attribute type 10 has an invalid length. [ 568.993595][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 569.022869][ T5824] Bluetooth: hci0: unexpected event for opcode 0x0c0d [ 569.154381][ T935] usb 3-1: USB disconnect, device number 58 [ 569.287264][ T935] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 569.525045][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 569.690893][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 569.712084][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.734751][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 569.758917][ T10] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 569.786733][ T10] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 569.821505][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 569.846946][ T10] usb 4-1: config 1 interface 1 has no altsetting 0 [ 569.865893][ T10] usb 4-1: string descriptor 0 read error: -22 [ 569.879937][ T10] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 569.911086][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.151813][ T10] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 570.977623][ T10] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 571.108260][ T10] usb 4-1: USB disconnect, device number 73 [ 571.457298][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1945'. [ 571.565105][ T935] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 571.637726][ T5903] usb 2-1: USB disconnect, device number 67 [ 571.726061][ T935] usb 3-1: no configurations [ 571.742528][ T935] usb 3-1: can't read configurations, error -22 [ 571.895155][ T935] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 572.057713][ T935] usb 3-1: no configurations [ 572.065303][ T935] usb 3-1: can't read configurations, error -22 [ 572.076854][ T935] usb usb3-port1: attempt power cycle [ 572.425385][ T935] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 572.478335][ T935] usb 3-1: no configurations [ 572.492151][ T935] usb 3-1: can't read configurations, error -22 [ 572.522374][T13104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1950'. [ 572.655116][ T935] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 572.687518][ T935] usb 3-1: no configurations [ 572.693121][ T935] usb 3-1: can't read configurations, error -22 [ 572.714080][ T935] usb usb3-port1: unable to enumerate USB device [ 572.771419][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1950'. [ 573.703462][T13114] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1953'. [ 573.736669][T13104] --map-set only usable from mangle table [ 574.704322][T13137] Debayer A: ================= START STATUS ================= [ 574.746128][T13137] Debayer A: Debayer Mean Window Size: 3 [ 574.770787][T13137] Debayer A: ================== END STATUS ================== [ 574.995190][ T935] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 575.185092][ T935] usb 3-1: Using ep0 maxpacket: 16 [ 575.203716][ T935] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 575.238519][ T935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.289350][ T935] usb 3-1: Product: syz [ 575.308410][ T935] usb 3-1: Manufacturer: syz [ 575.326186][ T935] usb 3-1: SerialNumber: syz [ 575.350193][ T935] usb 3-1: config 0 descriptor?? [ 575.616059][T13154] bridge0: left promiscuous mode [ 575.745568][T13154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.773222][ T935] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 575.804784][ T935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 575.844213][ T935] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 575.870732][ T935] usb 3-1: media controller created [ 575.885799][T13158] loop6: detected capacity change from 0 to 2640 [ 575.909876][T13158] buffer_io_error: 6 callbacks suppressed [ 575.909891][T13158] Buffer I/O error on dev loop6, logical block 0, async page read [ 575.926989][ T935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 575.969568][T13140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.993723][T13158] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.002143][T13140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.032533][T13158] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.059182][T13158] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.081899][T13158] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.106393][T13158] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.131801][T13158] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.167341][ T935] zl10353_read_register: readreg error (reg=127, ret==0) [ 576.186514][T13158] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.197719][ T935] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 576.229063][ T935] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 576.244445][T13158] ldm_validate_partition_table(): Disk read failed. [ 576.269351][ T935] usb 3-1: USB disconnect, device number 63 [ 576.276590][T13158] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.314596][T13158] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.352847][ T935] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 576.371774][T13158] Dev loop6: unable to read RDB block 0 [ 576.386627][T13158] loop6: unable to read partition table [ 576.416482][T13158] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 576.521975][ T5198] ldm_validate_partition_table(): Disk read failed. [ 576.548840][ T5198] Dev loop6: unable to read RDB block 0 [ 576.563655][ T5198] loop6: unable to read partition table [ 576.712551][T13167] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 577.205841][T13185] loop2: detected capacity change from 0 to 7 [ 577.231351][T13185] Dev loop2: unable to read RDB block 7 [ 577.242603][T13185] loop2: unable to read partition table [ 577.266504][T13185] loop2: partition table beyond EOD, truncated [ 577.299860][T13185] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 577.310733][T13193] fuse: Bad value for 'fd' [ 577.703066][ T5838] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 577.914303][ T5838] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 577.939752][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.969241][ T5838] usb 6-1: Product: syz [ 577.986850][ T5838] usb 6-1: Manufacturer: syz [ 577.997131][ T5838] usb 6-1: SerialNumber: syz [ 578.015123][ T5838] usb 6-1: config 0 descriptor?? [ 578.033222][ T5838] hub 6-1:0.0: bad descriptor, ignoring hub [ 578.046651][ T5838] hub 6-1:0.0: probe with driver hub failed with error -5 [ 578.289997][T13203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 578.299457][T13203] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 578.317764][ T5838] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 578.347684][ T5838] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 578.370036][T13203] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 578.377949][ T5838] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 578.388513][T13203] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 578.402600][ T5838] usb 6-1: media controller created [ 578.430920][T13203] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 578.455353][T13203] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 578.461411][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.475639][T13203] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 578.500335][T13203] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 578.541192][T13203] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 578.563252][T13203] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 578.580702][ T5838] DVB: Unable to find symbol dib7000p_attach() [ 578.598174][ T5838] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 578.755070][ T5838] rc_core: IR keymap rc-dib0700-rc5 not found [ 578.784906][ T5838] Registered IR keymap rc-empty [ 578.815276][ T5838] dvb-usb: could not initialize remote control. [ 578.843188][ T5838] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 579.564775][T13223] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 579.580616][T13223] syzkaller1: Linktype set failed because interface is up [ 579.590739][ T935] syzkaller1: tun_net_xmit 90 [ 580.315168][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 580.385107][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 580.465124][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 580.555163][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 580.561217][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 580.754372][ T5838] usb 6-1: USB disconnect, device number 29 [ 580.855829][ T5838] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 580.867802][T13243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.386961][ T5838] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 581.400725][T13263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1995'. [ 581.557090][ T5838] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 581.570165][ T5838] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 581.604880][ T5838] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 581.621207][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.638669][ T5838] usb 6-1: Product: syz [ 581.647553][ T5838] usb 6-1: Manufacturer: syz [ 581.663261][ T5838] usb 6-1: SerialNumber: syz [ 581.674306][ T5838] usb 6-1: config 0 descriptor?? [ 582.385173][T13234] Bluetooth: hci3: command 0x0406 tx timeout [ 582.424751][T13273] No such timeout policy "syz0" [ 582.465156][T13234] Bluetooth: hci4: command 0x0406 tx timeout [ 582.545377][T13234] Bluetooth: hci0: command 0x0406 tx timeout [ 582.614062][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2007'. [ 582.625556][T13234] Bluetooth: hci1: command 0x0406 tx timeout [ 582.633216][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 583.141476][T13287] binder: 13286:13287 ioctl c018620c 200000000340 returned -1 [ 584.705076][ T5825] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 584.867030][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.889896][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.915719][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 584.936817][ T5825] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 584.956363][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.989881][ T5825] usb 4-1: config 0 descriptor?? [ 585.011900][ T5838] mos7840 6-1:0.0: required endpoints missing [ 585.071672][ T5838] usb 6-1: USB disconnect, device number 30 [ 585.479310][ T5825] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 585.557261][T13320] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 585.647776][ T5825] usb 4-1: USB disconnect, device number 74 [ 585.693379][T13321] fido_id[13321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 585.994733][T13331] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2030'. [ 586.018629][T13331] netlink: 'syz.5.2030': attribute type 6 has an invalid length. [ 586.046423][T13331] netlink: 'syz.5.2030': attribute type 5 has an invalid length. [ 586.073316][T13331] netlink: 'syz.5.2030': attribute type 4 has an invalid length. [ 588.948522][T13382] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 588.987661][T13382] syzkaller1: linktype set to 772 [ 589.272607][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2049'. [ 589.514793][ T935] IPVS: starting estimator thread 0... [ 589.615318][T13395] IPVS: using max 36 ests per chain, 86400 per kthread [ 590.249544][T13407] netlink: 'syz.3.2057': attribute type 1 has an invalid length. [ 590.434489][T13409] bond2: (slave bridge1): making interface the new active one [ 590.443343][T13409] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 590.510422][T13418] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2052'. [ 590.521824][T13407] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 590.713256][T13420] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 590.727199][T13420] syzkaller1: linktype set to 772 [ 591.197488][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 591.357021][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 591.374599][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 591.391704][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.410260][ T9] usb 3-1: Product: syz [ 591.423102][ T9] usb 3-1: Manufacturer: syz [ 591.441702][ T9] usb 3-1: SerialNumber: syz [ 591.667615][T13425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.695510][T13425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.786189][T13438] random: crng reseeded on system resumption [ 592.619216][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 592.641824][ T9] usb 3-1: USB disconnect, device number 64 [ 593.415244][ T5903] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 593.605028][ T5903] usb 6-1: Using ep0 maxpacket: 8 [ 593.619941][ T5903] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 593.641330][ T5903] usb 6-1: config 0 has no interface number 0 [ 593.687248][ T5903] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 593.716680][ T5903] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 593.747944][ T5903] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 593.784041][ T5903] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 593.815062][ T5903] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 593.834417][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.864374][ T5903] usb 6-1: config 0 descriptor?? [ 593.889476][ T5903] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 594.615229][T13468] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 594.635086][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 594.837062][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 594.850210][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.870537][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.900230][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 594.924438][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.956629][ T10] usb 2-1: Product: syz [ 594.968610][ T10] usb 2-1: Manufacturer: syz [ 594.979419][ T10] usb 2-1: SerialNumber: syz [ 595.006517][ T10] usb 2-1: 0:1 : does not exist [ 595.212349][ T10] usb 2-1: USB disconnect, device number 68 [ 596.153150][ T935] usb 6-1: USB disconnect, device number 31 [ 596.188752][ T935] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 596.392063][T13497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.714411][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2083'. [ 596.865164][T13503] team0: Port device team_slave_0 removed [ 598.316407][T13511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.610639][T13521] netlink: 'syz.3.2090': attribute type 25 has an invalid length. [ 598.680949][T13521] netlink: 'syz.3.2090': attribute type 28 has an invalid length. [ 598.954671][ T5825] hid-generic 0000:0000:0002.000F: unknown main item tag 0x0 [ 598.983019][ T5825] hid-generic 0000:0000:0002.000F: unknown main item tag 0x0 [ 599.097870][ T5825] hid-generic 0000:0000:0002.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 599.301162][T13531] fido_id[13531]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 600.733363][T13559] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2106'. [ 601.266492][ T5825] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 601.446475][ T5825] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 601.481108][T13579] tipc: Cannot configure node identity twice [ 601.487250][ T5825] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 601.487280][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 601.487300][ T5825] usb 4-1: Product: syz [ 601.487315][ T5825] usb 4-1: Manufacturer: syz [ 601.487330][ T5825] usb 4-1: SerialNumber: syz [ 601.700595][ T5825] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 601.952022][ C1] usblp0: nonzero write bulk status received: -71 [ 601.952423][ T10] usb 4-1: USB disconnect, device number 75 [ 602.006215][ T10] usblp0: removed [ 602.619274][T13597] netlink: 2220 bytes leftover after parsing attributes in process `syz.3.2117'. [ 603.987152][T13638] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2131'. [ 605.752072][T13666] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2142'. [ 606.046221][T13670] kAFS: unable to lookup cell 'ÿ' [ 606.090626][T13673] kAFS: unable to lookup cell '(,c¾Ì' [ 606.931290][T13685] program syz.3.2148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.739447][T13699] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2154'. [ 608.011143][T13710] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 609.595057][ T935] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 609.788085][ T935] usb 6-1: Using ep0 maxpacket: 16 [ 609.817778][ T935] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.829343][ T935] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 609.855735][ T935] usb 6-1: config 0 interface 0 has no altsetting 0 [ 609.862759][ T935] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 609.872297][ T935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.884847][ T935] usb 6-1: config 0 descriptor?? [ 610.548407][T13749] mac80211_hwsim hwsim16 syzkaller0: left promiscuous mode [ 612.386316][ T935] usbhid 6-1:0.0: can't add hid device: -71 [ 612.406695][ T935] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 612.450151][ T935] usb 6-1: USB disconnect, device number 32 [ 612.639152][T13779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.919203][T13786] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2185'. [ 613.415484][T13795] bond1: option lacp_rate: invalid value (4) [ 613.448060][T13795] bond1 (unregistering): Released all slaves [ 614.416853][T13830] netlink: 'syz.1.2201': attribute type 39 has an invalid length. [ 614.495975][T13834] netlink: zone id is out of range [ 614.504131][T13834] netlink: zone id is out of range [ 614.509965][T13834] netlink: zone id is out of range [ 614.534079][T13834] netlink: zone id is out of range [ 614.565285][T13834] netlink: zone id is out of range [ 614.583048][T13837] loop5: detected capacity change from 0 to 7 [ 614.594410][T13834] netlink: zone id is out of range [ 614.613835][T13834] netlink: zone id is out of range [ 614.627171][T13837] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 614.632887][T13834] netlink: zone id is out of range [ 614.644367][T13837] loop5: partition table partially beyond EOD, truncated [ 614.649808][T13834] netlink: zone id is out of range [ 614.659650][T13837] loop5: p1 size 487441168 extends beyond EOD, truncated [ 614.730246][T13838] binder: 13829:13838 ioctl c0285840 200000000000 returned -22 [ 614.925602][T13844] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2205'. [ 615.377832][ T29] audit: type=1326 audit(1776455402.833:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1259c819 code=0x7ffc0000 [ 615.454795][ T29] audit: type=1326 audit(1776455402.863:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1259c819 code=0x7ffc0000 [ 615.490442][ T29] audit: type=1326 audit(1776455402.883:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6b1259c819 code=0x7ffc0000 [ 615.619299][ T29] audit: type=1326 audit(1776455403.073:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1259c819 code=0x7ffc0000 [ 615.703024][ T29] audit: type=1326 audit(1776455403.103:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f6b1259c819 code=0x7ffc0000 [ 615.760973][ T29] audit: type=1326 audit(1776455403.103:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1259c819 code=0x7ffc0000 [ 615.820877][ T29] audit: type=1326 audit(1776455403.103:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1259c819 code=0x7ffc0000 [ 616.098516][T13880] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2219'. [ 616.455273][T13886] io-wq is not configured for unbound workers [ 617.645285][T13912] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2231'. [ 618.728845][T13925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2234'. [ 619.643798][T13948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.940904][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2247'. [ 619.962041][T13954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2247'. [ 620.008327][ T137] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 620.016743][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2247'. [ 620.035346][ T137] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.045519][T13954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2247'. [ 620.053216][ T137] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.070647][ T137] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.894746][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 620.922833][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2262'. [ 620.936827][T13991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2260'. [ 620.954005][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2262'. [ 620.991554][ T137] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.003639][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 621.028534][ T137] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.064568][ T137] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.097756][ T137] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.232719][T14000] netlink: 'syz.3.2265': attribute type 25 has an invalid length. [ 621.271257][T14000] netlink: 'syz.3.2265': attribute type 28 has an invalid length. [ 622.048369][ T5825] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 622.161696][T14021] bridge0: left promiscuous mode [ 622.235475][ T5825] usb 2-1: Using ep0 maxpacket: 32 [ 622.243466][ T5825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.262969][ T5825] usb 2-1: config 0 has no interfaces? [ 622.276151][ T5825] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 622.286273][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.294717][ T5825] usb 2-1: Product: syz [ 622.302597][ T5825] usb 2-1: Manufacturer: syz [ 622.314268][ T5825] usb 2-1: SerialNumber: syz [ 622.320719][T14021] ipvlan2: left promiscuous mode [ 622.343988][ T5825] usb 2-1: config 0 descriptor?? [ 622.355750][T14021] bond1: left promiscuous mode [ 622.519273][T14015] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 622.574927][ T935] usb 2-1: USB disconnect, device number 69 [ 622.598171][T14032] bridge0: left promiscuous mode [ 622.648807][T14032] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.688466][T14032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 623.096562][ T935] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 623.318623][ T935] usb 2-1: config index 0 descriptor too short (expected 45, got 27) [ 623.343125][ T935] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 623.388747][ T935] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 623.418234][ T935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.439331][ T935] usb 2-1: Product: syz [ 623.460717][ T935] usb 2-1: Manufacturer: syz [ 623.481633][ T935] usb 2-1: SerialNumber: syz [ 623.521109][ T935] rtl8150 2-1:1.0: couldn't find required endpoints [ 623.533390][ T935] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 623.722694][ T935] usb 2-1: USB disconnect, device number 70 [ 623.817473][T14062] __nla_validate_parse: 182 callbacks suppressed [ 623.817493][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2287'. [ 623.850859][T14057] "syz.5.2286" (14057) uses obsolete ecb(arc4) skcipher [ 624.227782][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.234603][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.356193][T14069] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2289'. [ 624.983970][T14082] bridge0: left promiscuous mode [ 625.017193][T14082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.196516][ T935] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 625.306055][T14097] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2301'. [ 625.367236][ T935] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 625.400859][ T935] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 625.442216][ T935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.480859][ T935] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 625.815074][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 625.975649][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 625.986753][ T9] usb 2-1: config 0 has no interfaces? [ 625.996363][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 626.009523][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.018160][ T9] usb 2-1: Product: syz [ 626.024682][ T9] usb 2-1: Manufacturer: syz [ 626.030075][ T9] usb 2-1: SerialNumber: syz [ 626.045170][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 626.057830][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 626.285180][ T9] r8152-cfgselector 2-1: USB disconnect, device number 71 [ 626.546021][ T935] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 626.562662][ T935] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 626.578275][ T935] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 626.785885][ T9] usb 6-1: USB disconnect, device number 33 [ 627.321760][T14129] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2313'. [ 628.852358][T14167] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2327'. [ 629.319170][T14181] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.366225][T14181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.795192][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 629.927306][T14197] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 629.956409][T14197] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 629.991640][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.030034][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 630.088910][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 630.133514][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 630.164664][ T9] usb 6-1: SerialNumber: syz [ 630.544702][ T9] usb 6-1: 0:2 : does not exist [ 630.655627][ T9] usb 6-1: USB disconnect, device number 34 [ 630.773768][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.142822][T14218] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2348'. [ 631.859160][T14243] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2357'. [ 632.227235][ T5837] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 632.234374][ T5837] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 633.270162][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'. [ 633.282293][T14255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2363'. [ 633.292659][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'. [ 633.302034][T14255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2363'. [ 633.643900][T14272] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2369'. [ 634.073054][T14281] netlink: 'syz.3.2372': attribute type 1 has an invalid length. [ 634.097278][T14281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 634.115984][T14281] bond3: (slave geneve2): making interface the new active one [ 634.127083][T14281] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 634.165292][ T5838] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 634.357943][ T5838] usb 6-1: unable to get BOS descriptor or descriptor too short [ 634.369082][ T5838] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.380828][ T5838] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 634.390053][ T5838] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 634.400970][ T5838] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 634.414142][ T5838] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 634.425885][ T5838] usb 6-1: config 1 interface 1 has no altsetting 0 [ 634.437029][ T5838] usb 6-1: string descriptor 0 read error: -22 [ 634.443277][ T5838] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 634.452402][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.685634][ T5838] usb 6-1: 2:0: failed to get current value for ch 0 (-32) [ 634.877952][T14300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 635.311637][ T5838] usb 6-1: 2:0: failed to get current value for ch 1 (-71) [ 635.505151][ T5838] usb 6-1: USB disconnect, device number 35 [ 635.839275][T14292] delete_channel: no stack [ 635.882497][ T5837] Bluetooth: hci3: unexpected event for opcode 0x200a [ 636.178448][T14325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2387'. [ 636.938078][T14355] program syz.1.2399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.972856][T14357] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 636.985617][T14357] syzkaller1: linktype set to 772 [ 637.855285][ T935] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 638.049847][ T935] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.084091][ T935] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.107962][ T935] usb 3-1: New USB device found, idVendor=0e41, idProduct=4642, bcdDevice= 0.40 [ 638.146421][ T935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.209804][ T935] usb 3-1: Product: syz [ 638.222642][ T935] usb 3-1: Manufacturer: syz [ 638.251771][ T935] usb 3-1: SerialNumber: syz [ 638.512604][ T935] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 638.583326][ T935] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 638.597246][ T935] snd_usb_pod 3-1:1.0: Line 6 BassPODxt Live found [ 638.604081][ T935] usb 3-1: selecting invalid altsetting 1 [ 638.612125][ T935] snd_usb_pod 3-1:1.0: set_interface failed [ 638.622140][ T935] snd_usb_pod 3-1:1.0: Line 6 BassPODxt Live now disconnected [ 638.644164][ T935] snd_usb_pod 3-1:1.0: probe with driver snd_usb_pod failed with error -22 [ 638.683627][ T935] usb 3-1: USB disconnect, device number 65 [ 638.713394][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.844486][T14398] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 638.862450][T14398] syzkaller1: linktype set to 772 [ 639.805077][ T935] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 639.979867][ T935] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 640.013727][ T935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.039967][ T935] usb 2-1: Product: syz [ 640.054458][ T935] usb 2-1: Manufacturer: syz [ 640.067075][ T935] usb 2-1: SerialNumber: syz [ 640.090678][ T935] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 640.236972][ T5825] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 640.666655][ T5903] usb 2-1: USB disconnect, device number 72 [ 640.944739][T14442] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.954905][T14442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 641.092537][ T5838] IPVS: starting estimator thread 0... [ 641.098241][T14448] IPVS: fo: FWM 3 0x00000003 - no destination available [ 641.199341][T14449] IPVS: using max 32 ests per chain, 76800 per kthread [ 641.345141][ T5825] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 641.357901][ T5825] ath9k_htc: Failed to initialize the device [ 641.372930][ T5903] usb 2-1: ath9k_htc: USB layer deinitialized [ 641.389002][T14463] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 641.410811][T14463] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 641.419005][T14463] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 641.426885][T14463] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 641.439664][T14463] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 641.452253][T14463] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 641.463715][T14463] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 641.472335][T14463] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 641.481457][T14463] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 641.489944][T14463] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 642.075086][ T5825] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 642.247205][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 642.263615][ T5825] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.281047][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 642.292457][ T5825] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 642.305122][T14490] netlink: 'syz.3.2452': attribute type 14 has an invalid length. [ 642.317592][T14490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2452'. [ 642.320478][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 642.346159][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 642.347991][ T5825] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 642.365360][T14490] netlink: 'syz.3.2452': attribute type 14 has an invalid length. [ 642.376654][T14490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2452'. [ 642.382497][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.416317][ T5825] usb 2-1: config 0 descriptor?? [ 642.719630][T14498] [ 642.722004][T14498] ============================================ [ 642.728159][T14498] WARNING: possible recursive locking detected [ 642.734322][T14498] syzkaller #0 Tainted: G L [ 642.740299][T14498] -------------------------------------------- [ 642.746443][T14498] syz.1.2445/14498 is trying to acquire lock: [ 642.752505][T14498] ffffffff8f3ce290 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 642.762719][T14498] [ 642.762719][T14498] but task is already holding lock: [ 642.770081][T14498] ffffffff8f3ce290 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 642.780291][T14498] [ 642.780291][T14498] other info that might help us debug this: [ 642.788348][T14498] Possible unsafe locking scenario: [ 642.788348][T14498] [ 642.795788][T14498] CPU0 [ 642.799061][T14498] ---- [ 642.802326][T14498] lock(qp_broker_list.mutex); [ 642.807260][T14498] lock(qp_broker_list.mutex); [ 642.812118][T14498] [ 642.812118][T14498] *** DEADLOCK *** [ 642.812118][T14498] [ 642.820245][T14498] May be due to missing lock nesting notation [ 642.820245][T14498] [ 642.828553][T14498] 1 lock held by syz.1.2445/14498: [ 642.833657][T14498] #0: ffffffff8f3ce290 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 642.844288][T14498] [ 642.844288][T14498] stack backtrace: [ 642.850172][T14498] CPU: 1 UID: 0 PID: 14498 Comm: syz.1.2445 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.850196][T14498] Tainted: [L]=SOFTLOCKUP [ 642.850203][T14498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 642.850214][T14498] Call Trace: [ 642.850221][T14498] [ 642.850229][T14498] dump_stack_lvl+0xe8/0x150 [ 642.850256][T14498] print_deadlock_bug+0x279/0x290 [ 642.850275][T14498] __lock_acquire+0x253f/0x2cf0 [ 642.850300][T14498] ? is_bpf_text_address+0x292/0x2b0 [ 642.850322][T14498] ? is_bpf_text_address+0x26/0x2b0 [ 642.850344][T14498] ? kernel_text_address+0xa5/0xe0 [ 642.850363][T14498] ? __kernel_text_address+0xd/0x30 [ 642.850382][T14498] ? vmci_qp_broker_detach+0x117/0xf20 [ 642.850406][T14498] lock_acquire+0x106/0x350 [ 642.850427][T14498] ? vmci_qp_broker_detach+0x117/0xf20 [ 642.850454][T14498] __mutex_lock+0x1a3/0x1550 [ 642.850471][T14498] ? vmci_qp_broker_detach+0x117/0xf20 [ 642.850495][T14498] ? kasan_save_track+0x4f/0x80 [ 642.850511][T14498] ? kasan_save_track+0x3e/0x80 [ 642.850524][T14498] ? kasan_save_free_info+0x46/0x50 [ 642.850545][T14498] ? __kasan_slab_free+0x5c/0x80 [ 642.850560][T14498] ? kfree+0x1c5/0x640 [ 642.850582][T14498] ? vmci_ctx_put+0x5ef/0xc40 [ 642.850597][T14498] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 642.850615][T14498] ? vmci_datagram_dispatch+0x450/0xc60 [ 642.850633][T14498] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 642.850656][T14498] ? vmci_host_close+0x98/0x160 [ 642.850677][T14498] ? vmci_qp_broker_detach+0x117/0xf20 [ 642.850701][T14498] ? exit_to_user_mode_loop+0xed/0x480 [ 642.850721][T14498] ? __pfx___mutex_lock+0x10/0x10 [ 642.850742][T14498] vmci_qp_broker_detach+0x117/0xf20 [ 642.850769][T14498] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 642.850792][T14498] ? kasan_quarantine_put+0xbb/0x1f0 [ 642.850806][T14498] ? lockdep_hardirqs_on+0x7a/0x110 [ 642.850822][T14498] ? kfree+0x1c5/0x640 [ 642.850842][T14498] ? vmci_ctx_put+0x5ef/0xc40 [ 642.850857][T14498] ? vmci_ctx_put+0x141/0xc40 [ 642.850875][T14498] vmci_ctx_put+0x64e/0xc40 [ 642.850891][T14498] ? __pfx___schedule+0x10/0x10 [ 642.850913][T14498] ? vmci_ctx_put+0x141/0xc40 [ 642.850931][T14498] ? __pfx_vmci_ctx_put+0x10/0x10 [ 642.850953][T14498] ? preempt_schedule_thunk+0x16/0x30 [ 642.850972][T14498] ? preempt_schedule_common+0x82/0xd0 [ 642.850998][T14498] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 642.851018][T14498] vmci_datagram_dispatch+0x450/0xc60 [ 642.851039][T14498] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 642.851062][T14498] vmci_qp_broker_detach+0x8dd/0xf20 [ 642.851089][T14498] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 642.851111][T14498] ? kasan_quarantine_put+0xbb/0x1f0 [ 642.851127][T14498] ? kfree+0x1c5/0x640 [ 642.851148][T14498] ? vmci_ctx_put+0x5ef/0xc40 [ 642.851163][T14498] ? vmci_ctx_put+0x141/0xc40 [ 642.851181][T14498] vmci_ctx_put+0x64e/0xc40 [ 642.851198][T14498] ? vmci_ctx_put+0x141/0xc40 [ 642.851215][T14498] ? __pfx_vmci_ctx_put+0x10/0x10 [ 642.851237][T14498] vmci_host_close+0x98/0x160 [ 642.851259][T14498] ? __pfx_vmci_host_close+0x10/0x10 [ 642.851281][T14498] __fput+0x44f/0xa60 [ 642.851305][T14498] task_work_run+0x1d9/0x270 [ 642.851324][T14498] ? __pfx_task_work_run+0x10/0x10 [ 642.851343][T14498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.851358][T14498] exit_to_user_mode_loop+0xed/0x480 [ 642.851378][T14498] ? rcu_is_watching+0x15/0xb0 [ 642.851392][T14498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.851407][T14498] do_syscall_64+0x33e/0xf80 [ 642.851422][T14498] ? trace_irq_disable+0x3b/0x140 [ 642.851441][T14498] ? clear_bhb_loop+0x40/0x90 [ 642.851457][T14498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.851473][T14498] RIP: 0033:0x7fe3fd79c819 [ 642.851489][T14498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.851504][T14498] RSP: 002b:00007fe3fe6c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 642.851521][T14498] RAX: 0000000000000000 RBX: 00007fe3fda16090 RCX: 00007fe3fd79c819 [ 642.851533][T14498] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 642.851544][T14498] RBP: 00007fe3fd832c91 R08: 0000000000000000 R09: 0000000000000000 [ 642.851555][T14498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.851565][T14498] R13: 00007fe3fda16128 R14: 00007fe3fda16090 R15: 00007fe3fdb3fa48 [ 642.851584][T14498] [ 643.056639][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 643.438291][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.448680][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.458551][ T9] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 643.468616][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.478272][ T9] usb 6-1: config 0 descriptor?? [ 643.486211][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 643.753077][T14501] netlink: 'syz.5.2454': attribute type 10 has an invalid length. [ 645.692507][T14501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.704057][ T10] usb 6-1: USB disconnect, device number 36 [ 647.509637][ T5825] usbhid 2-1:0.0: can't add hid device: -32 [ 647.515769][ T5825] usbhid 2-1:0.0: probe with driver usbhid failed with error -32