last executing test programs: 6.406588988s ago: executing program 4 (id=1882): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000002280)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002240)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000002340)=@abs={0x0, 0x0, 0x4e22}, 0x36) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r3, &(0x7f00000022c0)='net/dev\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="0600000004006496f2f7ea95972000000000e665c2ca340e2d3d0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x3, 0xc, &(0x7f0000002580)=ANY=[@ANYRES16=r0, @ANYRES32=r6, @ANYBLOB="34c393c8281fc153d17a486a71c572c17f806038f95e082d77c534b25a4c582d1f634623a4371cff0c0f5e7c5469d536165d1b7831281ede1ae1e221f4631eac066119ef6ec4a260b018e6f0d0d3598aa6881bc2b723ab094d6f27234295266dcfc58c4074fcf95e441847e8df9a5d1b645fe2b1504c03096933912a2189acfba41d1e20345ded5b861e0a55dccedd11f04957971cbc6a994cd38b17c215a312b79cbec7877100e6518e85e935ecc28b456af0e3c0d26e1de32d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002300)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYRES8=r7, @ANYBLOB="b988d2b329", @ANYRES16=r6, @ANYBLOB='\x00\x00\x00\x00('], 0x48) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) waitid(0x0, r3, &(0x7f0000002500), 0x4, &(0x7f00000023c0)) 4.372961745s ago: executing program 4 (id=1895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0x4, 0x0, 0x7}]}, {0x0, [0x61, 0x5f, 0x30, 0x30, 0x2e]}}, &(0x7f00000008c0)=""/204, 0x2b, 0xcc, 0x1}, 0x28) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x158, 0x10, 0x713, 0x70bd25, 0x0, {{@in6=@mcast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in=@loopback, 0x4d2, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x1c00000000000}, {0x11df, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xd8, 0x60, "00000000000000000000a1c31b3718243e97a18e6085921a4cf3f6"}}]}, 0x158}}, 0x0) 4.325664899s ago: executing program 2 (id=1896): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000800000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) poll(&(0x7f00000001c0)=[{r1, 0x81}], 0x1, 0x400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 4.144032918s ago: executing program 2 (id=1897): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 3.935004458s ago: executing program 0 (id=1898): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 3.669786274s ago: executing program 0 (id=1899): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) 3.457534602s ago: executing program 0 (id=1900): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) lstat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x18, 0xa, 0x2, &(0x7f00000003c0)) unshare(0x60000480) 2.880081341s ago: executing program 4 (id=1904): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) clock_gettime(0x0, 0x0) 2.749321587s ago: executing program 4 (id=1907): ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000000)={'ipvlan0\x00', 0x3}) sendmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="7f00", 0x2}], 0x1}}], 0x1, 0x4044808) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000b4", 0x27}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.475008779s ago: executing program 1 (id=1910): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0xf5}, {&(0x7f0000000fc0)="efaf7a93d21cbc", 0x7}], 0x2}}], 0x1, 0x0) 2.473644325s ago: executing program 3 (id=1911): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000200)=""/138, 0x46, 0x8a, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) 2.213611589s ago: executing program 4 (id=1912): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0) 2.213057442s ago: executing program 0 (id=1913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4001}, 0x40c4) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2.200155189s ago: executing program 3 (id=1914): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.130581275s ago: executing program 3 (id=1915): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0x10, 0x80002, 0x6) sendto$inet6(r1, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) 1.981737475s ago: executing program 3 (id=1916): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, 0x0) 1.968283795s ago: executing program 3 (id=1917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x2, 0x0, @remote}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) connect$inet(r8, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[], 0x110) write$binfmt_register(r1, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c040000100001040000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e403"], 0x40c}}, 0x0) 1.88567187s ago: executing program 2 (id=1918): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f41) 1.745651918s ago: executing program 2 (id=1919): ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() keyctl$set_reqkey_keyring(0xe, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x5c, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.408006535s ago: executing program 1 (id=1920): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 922.266681ms ago: executing program 0 (id=1921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x30) 585.588152ms ago: executing program 0 (id=1922): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000540)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000080b700004dde02549b02a0f653780601499793ba9b40ce71064c45103a61a66bdf86059cba46b198895fae92bc5aa7bc1eb49fe21965c7cda79195af8495f99530f06daeee473137cc3729e0e26dd573d7bf874d7baecf5529b0b269dde2537cff6c9fb9a76d12cd3edc1c8c62663126be81309760b068e19bde9580951facff95459b52ae4e3b1bbb9ea328a157076ba4ab877c4b20dc498dec5ce3c29c439a2affd0381e6cbf36eaadfaca65cfa2c33325a2bbcbd55d0d3e1778b3"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 498.776474ms ago: executing program 4 (id=1923): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000140)={0x50, 0xffffffffffffffda, 0xfffffffffffffffd, {0x7, 0x29, 0x1, 0xf7c44837fbff9df4, 0xbe2, 0x1ff, 0x8, 0x12c00, 0x0, 0x0, 0x20, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 493.512865ms ago: executing program 1 (id=1924): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000020000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000d40a0000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000023c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x10001, {0x6, 0x6, ':yE', 0x2, 0x3a, 0xff, @private1, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 273.605823ms ago: executing program 1 (id=1925): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) 273.114986ms ago: executing program 2 (id=1926): bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}}, [@tmpl={0x84, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in=@dev, 0xffffffff}]}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 178.84371ms ago: executing program 1 (id=1927): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f0000000100)=[{0x0, 0x9, 0xfb, 0xad}, {0x5, 0x0, 0x86, 0x6}]}) 85.566955ms ago: executing program 1 (id=1928): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108590000224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/fscaps', 0x40000, 0x2d) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) 37.342936ms ago: executing program 2 (id=1929): bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000080000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) r5 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r6 = socket(0x10, 0x803, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x4800) 0s ago: executing program 3 (id=1930): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6108000000383afffc000000000000000000000000000001ff020000000000000000000000000001"], 0x0) kernel console output (not intermixed with test programs): 0bb [ 491.618029][T10780] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 491.618036][T10780] RDX: 0000000000000000 RSI: 0000000000010046 RDI: 0000000000000000 [ 491.618042][T10780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.618048][T10780] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 491.618054][T10780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.618068][T10780] [ 491.912300][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.998299][ T30] audit: type=1400 audit(1755029568.950:387): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 2-1: USB disconnect, device number 53 [ 493.414414][ T980] usb 5-1: USB disconnect, device number 62 [ 493.482828][T10795] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1350'. [ 494.006250][ T980] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 494.226449][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 494.235472][ T980] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 494.244399][ T980] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 494.308854][ T980] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 494.352512][ T980] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 494.413460][ T980] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.666356][ T980] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 494.677017][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.908703][ T980] usb 3-1: GET_CAPABILITIES returned 0 [ 494.923279][ T980] usbtmc 3-1:16.0: can't read capabilities [ 495.539427][ T980] usb 3-1: USB disconnect, device number 63 [ 495.563275][T10806] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 495.590054][T10828] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1357'. [ 496.829235][T10838] netlink: 'syz.0.1358': attribute type 10 has an invalid length. [ 496.844556][T10838] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1358'. [ 496.920532][T10838] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 496.928664][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1358'. [ 497.361813][T10854] usb usb8: usbfs: process 10854 (syz.3.1361) did not claim interface 0 before use [ 497.446284][ T1213] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 497.635600][ T1213] usb 5-1: config 0 has no interfaces? [ 497.648276][ T1213] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 497.661202][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.688780][ T30] audit: type=1400 audit(1755029574.640:388): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 12 bytes leftover after parsing attributes in process `syz.0.1364'. [ 497.782406][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.812191][ T1213] usb 5-1: Product: syz [ 497.819487][ T1213] usb 5-1: Manufacturer: syz [ 497.825821][ T1213] usb 5-1: SerialNumber: syz [ 497.836283][ T1213] usb 5-1: config 0 descriptor?? [ 498.065281][ T5940] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 498.086788][T10851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.106017][T10851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.356464][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 498.425289][ T5940] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 498.435522][ T5940] usb 4-1: config 0 has no interface number 0 [ 498.457765][ T5940] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 498.488411][ T5940] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 498.517125][ T5940] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 498.536272][ T5940] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 498.549976][ T5940] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 498.559521][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.865462][ T5940] usb 4-1: config 0 descriptor?? [ 498.945562][ T5940] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 499.324268][ T980] usb 4-1: USB disconnect, device number 59 [ 499.324273][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 499.410672][ T980] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 500.333381][ T9] usb 5-1: USB disconnect, device number 63 [ 500.407105][ T980] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 500.568673][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 500.576117][ T980] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 500.593066][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.643092][ T980] usb 1-1: config 0 descriptor?? [ 500.732010][T10900] netlink: 'syz.3.1376': attribute type 10 has an invalid length. [ 500.836343][T10900] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1376'. [ 500.882377][T10900] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 500.886410][ T980] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 500.924830][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1376'. [ 500.956731][ T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 500.977278][ T980] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 500.984480][ T980] usb 1-1: media controller created [ 501.127816][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.188750][T10911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1380'. [ 501.198978][ T980] az6027: usb out operation failed. (-71) [ 501.200168][ T980] az6027: usb out operation failed. (-71) [ 501.200185][ T980] stb0899_attach: Driver disabled by Kconfig [ 501.200197][ T980] az6027: no front-end attached [ 501.200197][ T980] [ 501.203394][ T980] az6027: usb out operation failed. (-71) [ 501.203409][ T980] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 501.207996][ T980] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input102 [ 501.211774][ T980] dvb-usb: schedule remote query interval to 400 msecs. [ 501.211795][ T980] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 501.264662][ T980] usb 1-1: USB disconnect, device number 65 [ 501.534522][ T30] audit: type=1400 audit(1755029578.480:389): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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ieee802154 phy0 wpan0: encryption failed: -22 [ 501.598046][ T980] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 501.689228][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.696263][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.185981][ T5933] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 502.481923][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 502.495166][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 502.576544][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 502.627014][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 502.682022][ T5933] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 502.691542][ T5947] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 502.814461][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.845826][ T5933] usb 4-1: config 0 descriptor?? [ 502.860326][ T5947] usb 1-1: config 0 has no interfaces? [ 502.920968][ T5947] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 502.930383][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.938807][ T5947] usb 1-1: Product: syz [ 502.943187][ T5947] usb 1-1: Manufacturer: syz [ 502.956416][ T5947] usb 1-1: SerialNumber: syz [ 502.975915][T10932] netlink: 'syz.4.1385': attribute type 4 has an invalid length. [ 502.984641][ T5947] usb 1-1: config 0 descriptor?? [ 503.069960][T10935] netlink: 'syz.4.1385': attribute type 4 has an invalid length. [ 503.094715][ T5933] usbhid 4-1:0.0: can't add hid device: -71 [ 503.101752][ T5933] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 503.127674][ T5933] usb 4-1: USB disconnect, device number 60 [ 503.210446][T10927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.219806][T10927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.456836][T10944] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 504.026447][ T1213] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 504.189489][ T1213] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 504.233246][ T1213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 504.244929][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 504.406794][ T1213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 504.417504][ T1213] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 504.639930][ T1213] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 504.681644][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.714960][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.732887][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.741837][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 504.755925][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.765571][ T1213] usb 2-1: config 0 descriptor?? [ 504.795245][ T9] usb 5-1: config 0 descriptor?? [ 504.911533][T10961] fuse: Unknown parameter '' [ 504.979424][ T1213] usbhid 2-1:0.0: can't add hid device: -71 [ 504.991934][ T1213] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 505.032905][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1391'. [ 505.050778][ T1213] usb 2-1: USB disconnect, device number 54 [ 505.077400][T10952] openvswitch: netlink: nsh attr 2 has unexpected len 2 expected 16 [ 505.111721][T10961] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1394'. [ 505.111761][T10952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.438155][ T9] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 505.450505][ T9] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 505.470363][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000B/input/input103 [ 505.602469][ T9] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 505.615526][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 505.678190][ T9] usb 5-1: USB disconnect, device number 64 [ 505.831033][T10971] fido_id[10971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 505.961580][ T980] usb 1-1: USB disconnect, device number 66 [ 507.114055][T10988] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1403'. [ 507.648145][T10994] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3356708090 (26853664720 ns) > initial count (9735166528 ns). Using initial count to start timer. [ 507.753414][T10994] kvm: Disabled LAPIC found during irq injection [ 507.959253][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 507.974879][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1409'. [ 507.984188][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 508.117879][T11006] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1410'. [ 508.706352][ T5962] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 508.924896][ T5962] usb 3-1: config 0 has no interfaces? [ 508.941446][ T5962] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 509.276628][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.324546][ T5962] usb 3-1: Product: syz [ 509.348254][ T5962] usb 3-1: Manufacturer: syz [ 509.375985][ T5962] usb 3-1: SerialNumber: syz [ 509.420220][ T5962] usb 3-1: config 0 descriptor?? [ 509.801851][T11020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.812098][T11020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.396233][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 510.574076][ T10] usb 4-1: config 47 has no interfaces? [ 510.589709][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 510.599083][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.628335][ T10] usb 4-1: Product: syz [ 510.652802][ T10] usb 4-1: Manufacturer: syz [ 510.684746][ T10] usb 4-1: SerialNumber: syz [ 511.016767][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 511.086732][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 511.105658][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 511.532965][T11059] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1426'. [ 512.063678][ T5962] usb 3-1: USB disconnect, device number 64 [ 512.316048][T11070] netlink: 'syz.2.1429': attribute type 5 has an invalid length. [ 513.185206][ T10] usb 4-1: USB disconnect, device number 61 [ 513.321741][T11080] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1433'. [ 513.327398][T11082] fuse: Unknown parameter 'gd' [ 513.666473][ T5940] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 513.939354][ T5940] usb 5-1: config 0 has no interfaces? [ 513.942426][T11092] sctp: [Deprecated]: syz.0.1437 (pid 11092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.942426][T11092] Use struct sctp_sack_info instead [ 513.969607][ T5940] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 513.978864][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.004188][ T5940] usb 5-1: Product: syz [ 514.018364][ T5940] usb 5-1: Manufacturer: syz [ 514.094890][ T5940] usb 5-1: SerialNumber: syz [ 514.514996][ T5940] usb 5-1: config 0 descriptor?? [ 514.792081][T11084] input: syz1 as /devices/virtual/input/input104 [ 515.280900][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 515.292165][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 515.828110][ T30] audit: type=1400 audit(1755029592.780:390): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 516.676288][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 516.718173][ T5962] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 516.729164][ T5962] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 516.806259][ T5962] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 516.866453][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.868172][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 516.909275][ T5962] usb 4-1: config 0 descriptor?? [ 516.942792][ T5962] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 516.953274][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 516.974720][ T5940] usb 5-1: USB disconnect, device number 65 [ 516.984432][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 517.022002][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 517.034816][T11139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1453'. [ 517.051890][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 517.054483][T11139] FAULT_INJECTION: forcing a failure. [ 517.054483][T11139] name failslab, interval 1, probability 0, space 0, times 0 [ 517.068107][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 517.078229][T11139] CPU: 1 UID: 0 PID: 11139 Comm: syz.1.1453 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 517.078256][T11139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 517.078267][T11139] Call Trace: [ 517.078275][T11139] [ 517.078284][T11139] dump_stack_lvl+0x189/0x250 [ 517.078309][T11139] ? __pfx____ratelimit+0x10/0x10 [ 517.078343][T11139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.078364][T11139] ? __pfx__printk+0x10/0x10 [ 517.078393][T11139] ? __pfx___might_resched+0x10/0x10 [ 517.078410][T11139] ? fs_reclaim_acquire+0x7d/0x100 [ 517.078440][T11139] should_fail_ex+0x414/0x560 [ 517.078467][T11139] should_failslab+0xa8/0x100 [ 517.078493][T11139] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 517.078517][T11139] ? __alloc_skb+0x112/0x2d0 [ 517.078546][T11139] __alloc_skb+0x112/0x2d0 [ 517.078573][T11139] netlink_ack+0x146/0xa50 [ 517.078594][T11139] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 517.078635][T11139] netlink_rcv_skb+0x28c/0x470 [ 517.078656][T11139] ? __lock_acquire+0xab9/0xd20 [ 517.078680][T11139] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 517.078705][T11139] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.078743][T11139] ? netlink_deliver_tap+0x2e/0x1b0 [ 517.078774][T11139] netlink_unicast+0x82c/0x9e0 [ 517.078804][T11139] ? __pfx_netlink_unicast+0x10/0x10 [ 517.078827][T11139] ? netlink_sendmsg+0x642/0xb30 [ 517.078849][T11139] ? skb_put+0x11b/0x210 [ 517.078876][T11139] netlink_sendmsg+0x805/0xb30 [ 517.078907][T11139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.078934][T11139] ? __import_iovec+0x5d4/0x7f0 [ 517.078955][T11139] ? aa_sock_msg_perm+0xf1/0x1d0 [ 517.078982][T11139] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.079001][T11139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.079029][T11139] __sock_sendmsg+0x21c/0x270 [ 517.079053][T11139] ____sys_sendmsg+0x505/0x830 [ 517.079077][T11139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.079110][T11139] ___sys_sendmsg+0x21f/0x2a0 [ 517.079130][T11139] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.079182][T11139] ? __fget_files+0x2a/0x420 [ 517.079196][T11139] ? __fget_files+0x3a0/0x420 [ 517.079222][T11139] __sys_sendmsg+0x164/0x220 [ 517.079242][T11139] ? __pfx___sys_sendmsg+0x10/0x10 [ 517.079275][T11139] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.079300][T11139] __do_fast_syscall_32+0xb6/0x2b0 [ 517.079325][T11139] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.079356][T11139] do_fast_syscall_32+0x34/0x80 [ 517.079380][T11139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.079401][T11139] RIP: 0023:0xf7f94539 [ 517.079418][T11139] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 517.079433][T11139] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 517.079452][T11139] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 517.079465][T11139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 517.079476][T11139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.079487][T11139] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 517.079497][T11139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.079523][T11139] [ 517.206371][ T980] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 517.214656][T11144] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1455'. [ 517.217249][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 517.228169][ T5933] usb 4-1: USB disconnect, device number 62 [ 517.231441][ T9] usb 1-1: Product: syz [ 517.396428][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.410003][ T9] usb 1-1: Manufacturer: syz [ 517.505187][ T980] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.510828][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 517.591226][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 517.601591][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 517.618654][ T980] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 517.628270][ T980] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 517.633460][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 517.653501][ T980] usb 3-1: Product: syz [ 517.668520][ T980] usb 3-1: Manufacturer: syz [ 517.673214][ T980] usb 3-1: SerialNumber: syz [ 517.703733][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 517.704408][ T980] usb 3-1: config 0 descriptor?? [ 517.718209][ C1] wdm_int_callback: 52 callbacks suppressed [ 517.718232][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 517.730798][ C1] wdm_int_callback: 52 callbacks suppressed [ 517.730817][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 517.743438][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 517.750057][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 517.756384][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 517.762975][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 517.769325][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 517.775912][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 517.782139][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 517.788743][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 517.795106][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 517.801692][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 517.808029][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 517.814661][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 517.820911][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 517.827503][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 517.833768][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 517.840350][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 517.846600][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 517.853199][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 517.883568][ T980] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 517.955397][ T9] usb 1-1: USB disconnect, device number 67 [ 517.955394][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 517.980312][ T6345] udevd[6345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.381754][ T980] IPVS: starting estimator thread 0... [ 518.476418][T11159] IPVS: using max 50 ests per chain, 120000 per kthread [ 518.985812][T11170] netlink: 'syz.0.1462': attribute type 4 has an invalid length. [ 519.146293][T11170] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1462'. [ 519.426860][ T5933] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 519.616475][ T5962] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 519.641388][ T5933] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.656235][ T5933] usb 1-1: config 0 has no interface number 0 [ 519.963977][ T5933] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 519.976800][ T5933] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 519.988166][ T5933] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 520.008351][ T5962] usb 2-1: config 0 has no interfaces? [ 520.034991][ T5962] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 520.044531][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.074979][ T5962] usb 2-1: Product: syz [ 520.097780][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.105902][ T5962] usb 2-1: Manufacturer: syz [ 520.121037][ T5962] usb 2-1: SerialNumber: syz [ 520.138564][ T5962] usb 2-1: config 0 descriptor?? [ 520.161150][ T5933] usb 1-1: config 0 descriptor?? [ 520.191017][T11174] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 520.311915][ T5962] usb 3-1: USB disconnect, device number 65 [ 520.335995][ T5933] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 520.440888][T11179] input: syz1 as /devices/virtual/input/input105 [ 520.826355][ T5933] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 520.880971][ T980] usb 1-1: USB disconnect, device number 68 [ 520.979268][ T5933] usb 3-1: device descriptor read/64, error -71 [ 521.132810][ T30] audit: type=1400 audit(1755029598.080:391): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 521.746268][ T5933] usb 3-1: device descriptor read/64, error -71 [ 521.856662][ T5933] usb usb3-port1: attempt power cycle [ 522.265856][T11202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1470'. [ 522.336444][ T5933] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 522.356828][ T5933] usb 3-1: device descriptor read/8, error -71 [ 522.487383][ T5962] usb 2-1: USB disconnect, device number 55 [ 522.656345][ T5933] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 522.692736][ T5933] usb 3-1: device descriptor read/8, error -71 [ 522.901530][ T5933] usb usb3-port1: unable to enumerate USB device [ 524.061829][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 524.072511][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 524.338080][ T980] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 524.496740][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 524.506412][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 524.513831][ T980] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 524.522960][ T980] usb 3-1: config 0 has no interface number 0 [ 524.529543][ T980] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.540858][ T980] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 524.554491][ T980] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 524.572672][ T980] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 524.586637][ T980] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 524.596607][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.611366][ T980] usb 3-1: config 0 descriptor?? [ 524.622960][ T980] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 524.679824][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.706844][ T9] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 524.725933][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 524.738252][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 524.756229][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 524.770495][ T9] usb 2-1: Product: syz [ 524.775387][ T9] usb 2-1: Manufacturer: syz [ 524.786701][ T9] usb 2-1: SerialNumber: syz [ 524.812932][ T9] usb 2-1: config 0 descriptor?? [ 524.862263][ T9] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 524.934105][ T6345] udevd[6345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.362102][ T980] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 525.470156][ T30] audit: type=1400 audit(1755029602.420:392): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 5-1: config 0 has no interfaces? [ 526.472306][ T980] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 526.481547][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.490314][ T980] usb 5-1: Product: syz [ 526.494622][ T980] usb 5-1: Manufacturer: syz [ 526.698877][ T980] usb 5-1: SerialNumber: syz [ 526.745186][ T980] usb 5-1: config 0 descriptor?? [ 526.876493][ T980] usb 3-1: USB disconnect, device number 70 [ 526.887519][ T980] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 527.038937][T11243] input: syz1 as /devices/virtual/input/input106 [ 527.473569][ T5962] usb 2-1: USB disconnect, device number 56 [ 527.485186][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'. [ 527.566903][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 527.900292][T11269] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 527.979581][T11273] netlink: 'syz.2.1490': attribute type 3 has an invalid length. [ 528.026333][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 528.437262][ T5962] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 528.596355][ T5962] usb 3-1: device descriptor read/64, error -71 [ 528.772374][T11283] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1493'. [ 528.866243][ T5962] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 528.996322][ T980] usb 5-1: USB disconnect, device number 66 [ 529.003452][ T5962] usb 3-1: device descriptor read/64, error -71 [ 529.172186][ T5962] usb usb3-port1: attempt power cycle [ 529.560834][ T5962] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 529.612874][ T5962] usb 3-1: device descriptor read/8, error -71 [ 529.627469][ T980] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 529.776245][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 529.789777][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.802068][ T980] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 529.824374][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 529.838833][ T980] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 529.848290][ T980] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 529.856587][ T5962] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 529.864400][ T980] usb 2-1: Product: syz [ 529.874467][ T980] usb 2-1: Manufacturer: syz [ 529.884614][ T980] usb 2-1: SerialNumber: syz [ 529.890252][ T5962] usb 3-1: device descriptor read/8, error -71 [ 529.986369][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 530.284548][ T5962] usb usb3-port1: unable to enumerate USB device [ 530.292248][ T980] usb 2-1: config 0 descriptor?? [ 530.301072][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 530.317584][ T9] usb 1-1: config 0 has no interface number 0 [ 530.333444][ T980] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 530.362335][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 530.396119][ T6345] udevd[6345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.408424][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 530.469519][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 530.499660][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 530.516988][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 530.527807][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.540682][ T9] usb 1-1: config 0 descriptor?? [ 530.564403][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 530.742418][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 530.751902][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 532.116033][T11324] FAULT_INJECTION: forcing a failure. [ 532.116033][T11324] name failslab, interval 1, probability 0, space 0, times 0 [ 532.186441][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 532.217658][T11324] CPU: 1 UID: 0 PID: 11324 Comm: syz.3.1507 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 532.217687][T11324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.217699][T11324] Call Trace: [ 532.217706][T11324] [ 532.217715][T11324] dump_stack_lvl+0x189/0x250 [ 532.217742][T11324] ? __pfx____ratelimit+0x10/0x10 [ 532.217765][T11324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.217786][T11324] ? __pfx__printk+0x10/0x10 [ 532.217814][T11324] ? __pfx___might_resched+0x10/0x10 [ 532.217831][T11324] ? fs_reclaim_acquire+0x7d/0x100 [ 532.217864][T11324] should_fail_ex+0x414/0x560 [ 532.217889][T11324] should_failslab+0xa8/0x100 [ 532.217916][T11324] kmem_cache_alloc_noprof+0x73/0x3c0 [ 532.217939][T11324] ? skb_clone+0x212/0x3a0 [ 532.217962][T11324] skb_clone+0x212/0x3a0 [ 532.217979][T11324] ? nfnetlink_rcv+0x486/0x2520 [ 532.218003][T11324] nfnetlink_rcv+0x4b4/0x2520 [ 532.218028][T11324] ? __dev_queue_xmit+0x1d79/0x3b50 [ 532.218056][T11324] ? __dev_queue_xmit+0x27b/0x3b50 [ 532.218075][T11324] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 532.218104][T11324] ? ref_tracker_free+0x63a/0x7d0 [ 532.218126][T11324] ? __asan_memcpy+0x40/0x70 [ 532.218146][T11324] ? __pfx_ref_tracker_free+0x10/0x10 [ 532.218185][T11324] ? skb_clone+0x246/0x3a0 [ 532.218207][T11324] ? __netlink_deliver_tap+0x807/0x850 [ 532.218230][T11324] ? netlink_deliver_tap+0x2e/0x1b0 [ 532.218270][T11324] netlink_unicast+0x82c/0x9e0 [ 532.218301][T11324] ? __pfx_netlink_unicast+0x10/0x10 [ 532.218325][T11324] ? netlink_sendmsg+0x642/0xb30 [ 532.218347][T11324] ? skb_put+0x11b/0x210 [ 532.218375][T11324] netlink_sendmsg+0x805/0xb30 [ 532.218409][T11324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.218435][T11324] ? __import_iovec+0x5d4/0x7f0 [ 532.218453][T11324] ? aa_sock_msg_perm+0xf1/0x1d0 [ 532.218474][T11324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 532.218486][T11324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.218500][T11324] __sock_sendmsg+0x21c/0x270 [ 532.218526][T11324] ____sys_sendmsg+0x505/0x830 [ 532.218550][T11324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.218584][T11324] ___sys_sendmsg+0x21f/0x2a0 [ 532.218606][T11324] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.218648][T11324] ? __fget_files+0x2a/0x420 [ 532.218657][T11324] ? __fget_files+0x3a0/0x420 [ 532.218677][T11324] __sys_sendmsg+0x164/0x220 [ 532.218691][T11324] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.218724][T11324] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.218749][T11324] __do_fast_syscall_32+0xb6/0x2b0 [ 532.218774][T11324] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.218800][T11324] do_fast_syscall_32+0x34/0x80 [ 532.218824][T11324] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.218845][T11324] RIP: 0023:0xf7ff8539 [ 532.218862][T11324] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 532.218878][T11324] RSP: 002b:00000000f551655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 532.218898][T11324] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 532.218910][T11324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.218919][T11324] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.218929][T11324] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 532.218941][T11324] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.218968][T11324] [ 532.430715][ T9] usb 3-1: config 0 has no interfaces? [ 532.509177][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.691203][ T5933] usb 1-1: USB disconnect, device number 69 [ 532.707252][ T5933] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 532.818716][T11329] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1509'. [ 532.835242][ T5962] usb 2-1: USB disconnect, device number 57 [ 533.177857][ T5933] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 533.318886][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 533.330259][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.338754][ T9] usb 3-1: Product: syz [ 533.348100][ T9] usb 3-1: Manufacturer: syz [ 533.352882][ T9] usb 3-1: SerialNumber: syz [ 533.385585][ T9] usb 3-1: config 0 descriptor?? [ 533.391708][ T5933] usb 1-1: config 0 has no interfaces? [ 533.407125][ T5933] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 533.419613][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.610581][ T5933] usb 1-1: Product: syz [ 533.736451][ T5933] usb 1-1: Manufacturer: syz [ 533.773224][T11320] input: syz1 as /devices/virtual/input/input107 [ 533.819485][ T5933] usb 1-1: SerialNumber: syz [ 533.841411][ T5933] usb 1-1: config 0 descriptor?? [ 534.178519][T11330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.238386][T11330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.540300][T11339] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1510'. [ 534.804054][T11349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1511'. [ 534.868397][T11349] vxcan3: entered promiscuous mode [ 534.906402][ T1213] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 534.914716][ T5940] usb 3-1: USB disconnect, device number 75 [ 535.127521][ T1213] usb 2-1: config 0 has no interfaces? [ 535.178426][ T1213] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 535.198673][ T30] audit: type=1326 audit(1755029612.150:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.3.1511" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x0 [ 535.226841][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.365642][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'. [ 535.365661][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'. [ 535.769815][ T1213] usb 2-1: Product: syz [ 535.774107][ T1213] usb 2-1: Manufacturer: syz [ 535.890267][ T5947] usb 1-1: USB disconnect, device number 70 [ 535.926703][ T1213] usb 2-1: SerialNumber: syz [ 535.970689][ T1213] usb 2-1: config 0 descriptor?? [ 536.406276][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.419549][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.478034][ T5947] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 536.576849][ T1213] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 536.666802][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 536.677942][ T5947] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 536.687657][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.697531][ T5947] usb 5-1: Product: syz [ 536.703710][T11377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1522'. [ 536.713557][ T5947] usb 5-1: Manufacturer: syz [ 536.720595][ T5947] usb 5-1: SerialNumber: syz [ 536.741390][ T5947] usb 5-1: config 0 descriptor?? [ 536.756965][ T5947] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 536.766127][ T1213] usb 4-1: Using ep0 maxpacket: 8 [ 536.773933][ T1213] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 536.786627][ T1213] usb 4-1: config 0 has no interface number 0 [ 536.799760][ T1213] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 536.812328][ T1213] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 536.968704][ T5947] gp8psk: usb in 128 operation failed. [ 536.995887][ T1213] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 536.998552][ T5947] gp8psk: usb in 137 operation failed. [ 537.025800][ T5947] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 537.043281][ T1213] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 537.059075][ T5947] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 537.068722][ T1213] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 537.088501][ T1213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.277562][ T1213] usb 4-1: config 0 descriptor?? [ 537.310257][ T5947] usb 5-1: media controller created [ 537.315973][ T1213] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 537.386717][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 537.440689][ T5947] gp8psk_fe: Frontend revision 1 attached [ 537.449513][ T5947] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 537.769201][ T5947] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 537.866239][ T1213] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 538.057009][ T5940] usb 2-1: USB disconnect, device number 58 [ 538.150999][ T1213] usb 3-1: config 0 has no interfaces? [ 538.162561][ T1213] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 538.172353][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.190902][ T1213] usb 3-1: Product: syz [ 538.220223][ T1213] usb 3-1: Manufacturer: syz [ 538.235171][ T1213] usb 3-1: SerialNumber: syz [ 538.271425][ T1213] usb 3-1: config 0 descriptor?? [ 538.575036][T11385] input: syz1 as /devices/virtual/input/input108 [ 539.612912][ T5933] usb 4-1: USB disconnect, device number 63 [ 539.643851][ T5933] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 539.705582][ T5947] gp8psk: usb in 138 operation failed. [ 539.728810][ T5947] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 539.778393][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'. [ 539.790163][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'. [ 539.800864][ T5947] gp8psk: found Genpix USB device pID = 201 (hex) [ 539.840765][ T5947] usb 5-1: USB disconnect, device number 67 [ 539.859591][T11400] support for the xor transformation has been removed. [ 540.405726][ T5947] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 540.428312][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1531'. [ 540.597706][ T5933] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 541.094551][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.175964][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.204080][ T980] usb 3-1: USB disconnect, device number 76 [ 541.454525][T11413] ptrace attach of "./syz-executor exec"[5882] was attempted by "./syz-executor exec"[11413] [ 541.457715][ T5947] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 541.493555][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.493609][ T5933] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 541.493632][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.506819][ T5933] usb 4-1: config 0 descriptor?? [ 541.712847][ T5947] usb 5-1: config 0 has no interfaces? [ 541.728796][ T5947] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 541.743432][T11415] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 541.760623][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.769939][ T5947] usb 5-1: Product: syz [ 541.774442][ T5947] usb 5-1: Manufacturer: syz [ 541.858212][ T5947] usb 5-1: SerialNumber: syz [ 541.880400][ T5947] usb 5-1: config 0 descriptor?? [ 541.976531][ T980] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 542.146297][ T980] usb 3-1: device descriptor read/64, error -71 [ 542.221792][T11411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.236865][T11411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.391959][ T5933] usbhid 4-1:0.0: can't add hid device: -71 [ 542.398510][ T5933] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 542.416953][ T980] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 542.425577][ T5933] usb 4-1: USB disconnect, device number 64 [ 542.506381][ T1213] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 542.547404][ T980] usb 3-1: device descriptor read/64, error -71 [ 542.568640][T11430] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1536'. [ 542.656589][ T980] usb usb3-port1: attempt power cycle [ 542.685011][ T1213] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.698753][ T1213] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.733863][ T1213] usb 1-1: config 0 interface 0 has no altsetting 0 [ 542.771202][ T1213] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 542.780345][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 542.790959][ T1213] usb 1-1: Product: syz [ 542.797474][ T1213] usb 1-1: Manufacturer: syz [ 542.802198][ T1213] usb 1-1: SerialNumber: syz [ 542.815156][ T1213] usb 1-1: config 0 descriptor?? [ 542.996354][ T980] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 543.012839][ T1213] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 543.017158][ T980] usb 3-1: device descriptor read/8, error -71 [ 543.077681][ T6345] udevd[6345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.246598][ T5933] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 543.278404][ T980] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 543.308297][ T980] usb 3-1: device descriptor read/8, error -71 [ 543.455769][ T980] usb usb3-port1: unable to enumerate USB device [ 543.478198][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 543.488815][ T5933] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 543.498283][ T5933] usb 4-1: config 0 has no interface number 0 [ 543.504491][ T5933] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 543.535745][ T5933] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 543.553575][ T5933] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 543.565250][ T5933] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 543.604796][ T5933] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 543.633832][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.671487][ T5933] usb 4-1: config 0 descriptor?? [ 543.701291][ T5933] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 543.840511][ T1213] usb 5-1: USB disconnect, device number 68 [ 543.920848][ T5933] usb 4-1: USB disconnect, device number 65 [ 543.930123][ T5933] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 543.971679][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'. [ 543.991703][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 544.346287][ T5940] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 544.517855][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 544.525910][ T5940] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 544.541439][ T5940] usb 5-1: config 0 has no interface number 0 [ 544.548906][ T5940] usb 5-1: config 0 interface 184 has no altsetting 0 [ 544.562942][ T5940] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 544.677118][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.708805][ T5940] usb 5-1: Product: syz [ 544.717115][ T5940] usb 5-1: Manufacturer: syz [ 544.722066][ T5940] usb 5-1: SerialNumber: syz [ 544.742995][ T5940] usb 5-1: config 0 descriptor?? [ 544.763902][ T5940] smsc75xx v1.0.0 [ 544.856342][ T5962] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 545.126273][ T5933] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 545.247337][ T5962] usb 4-1: config 0 has no interfaces? [ 545.290251][ T5962] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 545.301775][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.330536][ T5962] usb 4-1: Product: syz [ 545.344992][ T5962] usb 4-1: Manufacturer: syz [ 545.367830][ T5933] usb 3-1: config 0 has no interfaces? [ 545.378938][ T5933] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 545.388262][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.404630][ T5933] usb 3-1: Product: syz [ 545.417894][ T5962] usb 4-1: SerialNumber: syz [ 545.440644][ T5947] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 545.466244][ T5933] usb 3-1: Manufacturer: syz [ 545.566344][ T5962] usb 4-1: config 0 descriptor?? [ 545.571621][ T5933] usb 3-1: SerialNumber: syz [ 545.623464][ T1213] usb 1-1: USB disconnect, device number 71 [ 545.660289][ T5947] usb 2-1: config 0 has no interfaces? [ 545.672655][ T5933] usb 3-1: config 0 descriptor?? [ 545.812337][T11453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.829949][T11453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.900481][ T5947] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 545.998515][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.023473][ T5947] usb 2-1: Product: syz [ 546.036338][ T5947] usb 2-1: Manufacturer: syz [ 546.051366][T11466] sctp: [Deprecated]: syz.0.1546 (pid 11466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 546.051366][T11466] Use struct sctp_sack_info instead [ 546.066885][ T5947] usb 2-1: SerialNumber: syz [ 546.087869][ T5947] usb 2-1: config 0 descriptor?? [ 546.173258][T11457] input: syz1 as /devices/virtual/input/input109 [ 546.276954][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 546.308732][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 546.388947][T11461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.405359][T11461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.545461][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 546.623092][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 546.648922][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 546.666382][ T5940] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 546.691836][ T5940] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 546.714358][ T5940] usb 5-1: USB disconnect, device number 69 [ 547.406285][ T5933] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 547.556211][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 547.569112][ T5933] usb 5-1: config 0 has an invalid descriptor of length 57, skipping remainder of the config [ 547.579468][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 547.626281][ T5933] usb 5-1: New USB device found, idVendor=0003, idProduct=6030, bcdDevice= 0.00 [ 547.655859][ T9] usb 4-1: USB disconnect, device number 66 [ 547.705260][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.823490][ T5947] usb 3-1: USB disconnect, device number 81 [ 547.855420][ T5933] usb 5-1: config 0 descriptor?? [ 547.874733][ T5933] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 548.168619][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 548.178527][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'. [ 548.336679][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 548.356383][ T5933] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 548.503574][ T9] usb 4-1: config 0 has no interfaces? [ 548.515693][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 548.525011][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.527905][ T5933] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.543583][ T9] usb 4-1: Product: syz [ 548.552566][ T5933] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.553626][ T9] usb 4-1: Manufacturer: syz [ 548.580817][ T9] usb 4-1: SerialNumber: syz [ 548.587203][ T5933] usb 1-1: config 0 interface 0 has no altsetting 0 [ 548.601054][ T9] usb 4-1: config 0 descriptor?? [ 548.613828][ T5933] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 548.623704][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 548.626473][ T1213] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 548.642786][ T5933] usb 1-1: Product: syz [ 548.654286][ T5933] usb 1-1: Manufacturer: syz [ 548.685650][ T5933] usb 1-1: SerialNumber: syz [ 548.702013][ T5933] usb 1-1: config 0 descriptor?? [ 548.794611][ T1213] usb 3-1: config 0 has no interfaces? [ 548.809381][ T1213] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 548.818916][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.829843][ T1213] usb 3-1: Product: syz [ 548.834137][ T1213] usb 3-1: Manufacturer: syz [ 548.843038][ T9] usb 2-1: USB disconnect, device number 59 [ 548.875121][ T1213] usb 3-1: SerialNumber: syz [ 548.939312][ T1213] usb 3-1: config 0 descriptor?? [ 548.987066][T11497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1555'. [ 549.067158][T11485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.076408][T11485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.139687][ T5933] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 549.259870][T11493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.273462][T11493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.309045][ T6345] udevd[6345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.178276][ T5962] usb 5-1: USB disconnect, device number 70 [ 550.883393][ T5933] usb 4-1: USB disconnect, device number 67 [ 551.010128][T11511] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 551.359506][ T5933] usb 1-1: USB disconnect, device number 72 [ 551.388249][ T5940] usb 3-1: USB disconnect, device number 82 [ 551.504088][T11522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1564'. [ 551.588308][ T5962] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 551.681308][T11528] batman_adv: batadv0: Adding interface: dummy0 [ 551.708607][T11528] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.798448][T11528] batman_adv: batadv0: Interface activated: dummy0 [ 551.798838][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 551.811517][ T5962] usb 4-1: config 0 has no interfaces? [ 551.845116][ T5962] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 551.905052][T11534] batadv0: mtu less than device minimum [ 551.911617][T11534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 551.916354][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.923812][T11534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 551.942322][T11534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 551.954366][T11534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 551.966268][T11534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 551.978237][T11534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 551.990884][T11534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 552.003028][T11534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 552.015290][T11534] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 552.148465][T11529] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 552.249448][ T9] usb 5-1: config 0 has no interfaces? [ 552.258153][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 552.269789][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.280008][ T9] usb 5-1: Product: syz [ 552.284257][ T9] usb 5-1: Manufacturer: syz [ 552.296247][ T5962] usb 4-1: Product: syz [ 552.300302][ T9] usb 5-1: SerialNumber: syz [ 552.310354][ T5962] usb 4-1: Manufacturer: syz [ 552.314993][ T5962] usb 4-1: SerialNumber: syz [ 552.328465][ T9] usb 5-1: config 0 descriptor?? [ 552.518512][ T5962] usb 4-1: config 0 descriptor?? [ 552.654461][T11525] input: syz1 as /devices/virtual/input/input111 [ 552.898928][T11523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.946569][T11541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1568'. [ 552.978701][T11523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.426425][ T5962] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 553.586542][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 553.596412][ T5962] usb 1-1: unable to get BOS descriptor or descriptor too short [ 553.608881][ T5962] usb 1-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 553.621582][ T5962] usb 1-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 553.638617][ T5962] usb 1-1: config 4 interface 0 has no altsetting 0 [ 553.654401][ T5962] usb 1-1: string descriptor 0 read error: -22 [ 553.663234][ T5962] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 553.703771][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.738447][ T5962] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 553.750775][ T5962] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 553.776901][ T5962] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 553.968002][T11541] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 554.135872][ T5962] usb 1-1: media controller created [ 554.170610][T11541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.194886][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.207660][T11541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.261924][ T5962] zl10353_read_register: readreg error (reg=127, ret==0) [ 554.583223][ T5962] usb 1-1: USB disconnect, device number 73 [ 554.655620][ T5933] usb 5-1: USB disconnect, device number 71 [ 554.864927][ T9] usb 4-1: USB disconnect, device number 68 [ 554.955217][T11566] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1575'. [ 555.116509][ T5933] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 555.118148][T11569] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1576'. [ 555.549431][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 555.578448][ T5933] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 555.771621][ T5933] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 555.806659][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.814777][ T5933] usb 5-1: Product: syz [ 555.819609][ T5933] usb 5-1: Manufacturer: syz [ 555.824228][ T5933] usb 5-1: SerialNumber: syz [ 556.196485][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 556.197862][ T5933] usb 5-1: config 0 descriptor?? [ 556.222912][ T5933] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 556.233866][ T5933] usb 5-1: Detected FT232R [ 556.381169][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.434783][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.445507][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.455732][ T9] usb 1-1: Product: syz [ 556.461115][ T9] usb 1-1: Manufacturer: syz [ 556.471079][ T9] usb 1-1: SerialNumber: syz [ 556.554911][T11583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.570756][T11583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.618051][ T5933] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 556.862901][ T5933] ftdi_sio 5-1:0.0: GPIO initialisation failed: -32 [ 556.871176][ T5933] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 556.939496][T11592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1582'. [ 557.026324][ T980] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 557.248903][ T980] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.263735][ T980] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 557.274697][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.283362][ T980] usb 3-1: Product: syz [ 557.288074][ T980] usb 3-1: Manufacturer: syz [ 557.370339][ T980] usb 3-1: SerialNumber: syz [ 557.509178][T11579] FAULT_INJECTION: forcing a failure. [ 557.509178][T11579] name failslab, interval 1, probability 0, space 0, times 0 [ 557.524461][T11579] CPU: 0 UID: 0 PID: 11579 Comm: syz.0.1579 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 557.524479][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 557.524486][T11579] Call Trace: [ 557.524491][T11579] [ 557.524496][T11579] dump_stack_lvl+0x189/0x250 [ 557.524513][T11579] ? __pfx____ratelimit+0x10/0x10 [ 557.524527][T11579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.524550][T11579] ? __pfx__printk+0x10/0x10 [ 557.524567][T11579] ? __pfx___might_resched+0x10/0x10 [ 557.524577][T11579] ? fs_reclaim_acquire+0x7d/0x100 [ 557.524601][T11579] should_fail_ex+0x414/0x560 [ 557.524617][T11579] should_failslab+0xa8/0x100 [ 557.524633][T11579] __kmalloc_noprof+0xcb/0x4f0 [ 557.524646][T11579] ? kfree+0x4d/0x440 [ 557.524657][T11579] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 557.524670][T11579] tomoyo_realpath_from_path+0xe3/0x5d0 [ 557.524681][T11579] ? tomoyo_domain+0xd9/0x130 [ 557.524695][T11579] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 557.524708][T11579] tomoyo_path_number_perm+0x1e8/0x5a0 [ 557.524723][T11579] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 557.524746][T11579] ? __lock_acquire+0xab9/0xd20 [ 557.524771][T11579] ? __fget_files+0x2a/0x420 [ 557.524783][T11579] ? __fget_files+0x3a0/0x420 [ 557.524791][T11579] ? __fget_files+0x2a/0x420 [ 557.524803][T11579] security_file_ioctl_compat+0xcb/0x2d0 [ 557.524818][T11579] __ia32_compat_sys_ioctl+0x128/0x840 [ 557.524832][T11579] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 557.524845][T11579] ? __fget_files+0x3a0/0x420 [ 557.524858][T11579] ? fput+0xa0/0xd0 [ 557.524868][T11579] ? ksys_write+0x22a/0x250 [ 557.524886][T11579] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.524901][T11579] __do_fast_syscall_32+0xb6/0x2b0 [ 557.524919][T11579] do_fast_syscall_32+0x34/0x80 [ 557.524933][T11579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.524946][T11579] RIP: 0023:0xf7f25539 [ 557.524955][T11579] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 557.524964][T11579] RSP: 002b:00000000f5445504 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 557.524976][T11579] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085507 [ 557.524984][T11579] RDX: 00000000f5445548 RSI: 00000000f73b4ff4 RDI: 0000000000000000 [ 557.524990][T11579] RBP: 00000000f5446568 R08: 0000000000000000 R09: 0000000000000000 [ 557.524997][T11579] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 557.525003][T11579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.525018][T11579] [ 557.525036][T11579] ERROR: Out of memory at tomoyo_realpath_from_path. [ 557.579315][ T5933] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 557.893198][ T9] cdc_ncm 1-1:1.0: failed to get mac address [ 557.905152][ T9] cdc_ncm 1-1:1.0: bind() failure [ 558.225188][ T9] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 558.257152][ T9] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 558.270435][ T9] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 558.296720][ T9] usb 1-1: USB disconnect, device number 74 [ 558.362129][ T5933] usb 2-1: config 0 has no interfaces? [ 558.374064][ T5933] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 558.383484][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.391679][ T5933] usb 2-1: Product: syz [ 558.404981][ T5933] usb 2-1: Manufacturer: syz [ 558.416280][ T5933] usb 2-1: SerialNumber: syz [ 558.534072][ T5933] usb 2-1: config 0 descriptor?? [ 558.741290][ T5933] usb 5-1: USB disconnect, device number 72 [ 558.889966][T11587] net_ratelimit: 10 callbacks suppressed [ 558.889986][T11587] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 558.944021][T11608] input: syz1 as /devices/virtual/input/input112 [ 558.953134][T11609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.978157][T11609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.020716][ T980] cdc_ncm 3-1:1.0: failed to get mac address [ 559.030030][ T980] cdc_ncm 3-1:1.0: bind() failure [ 559.042191][ T5933] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 559.185389][ T980] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 559.200124][ T980] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 559.265780][ T5933] ftdi_sio 5-1:0.0: device disconnected [ 559.342218][ T980] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 559.426458][ T1213] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 559.451644][ T980] usb 3-1: USB disconnect, device number 83 [ 559.634903][ T1213] usb 4-1: config 0 has no interfaces? [ 559.644595][ T1213] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 559.654128][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.662451][ T1213] usb 4-1: Product: syz [ 559.686403][ T1213] usb 4-1: Manufacturer: syz [ 559.691122][ T1213] usb 4-1: SerialNumber: syz [ 559.787289][ T5933] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 559.838287][ T1213] usb 4-1: config 0 descriptor?? [ 560.065061][T11611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.075624][T11611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.164976][ T5933] usb 5-1: config 0 has no interfaces? [ 560.178692][T11629] : entered promiscuous mode [ 560.241822][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 560.260318][ T5933] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 560.276284][ T1213] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 560.288942][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.309511][ T5933] usb 5-1: Product: syz [ 560.313728][ T5933] usb 5-1: Manufacturer: syz [ 560.321209][T11630] netlink: ct family unspecified [ 560.326699][T11630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.345452][ T5933] usb 5-1: SerialNumber: syz [ 560.364344][ T5933] usb 5-1: config 0 descriptor?? [ 560.389458][ T5962] usb 2-1: USB disconnect, device number 60 [ 560.438714][ T1213] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 560.455702][ T1213] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 560.501711][T11632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1593'. [ 560.511067][ T1213] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 560.536078][ T1213] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 560.562872][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.613242][T11627] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 560.885727][T11619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.898290][ T1213] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 560.960215][T11619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.978487][ T1213] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input113 [ 561.069682][ T1213] usb 3-1: USB disconnect, device number 84 [ 561.075996][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 561.116414][ T5962] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 561.304333][ T5962] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.317805][ T5962] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 561.576323][ T5962] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 561.744625][T11652] netlink: 'syz.2.1596': attribute type 10 has an invalid length. [ 561.763234][T11652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1596'. [ 561.855217][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'. [ 562.049592][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.080926][ T5962] usb 1-1: config 0 descriptor?? [ 562.261551][ T5962] usb 4-1: USB disconnect, device number 69 [ 562.299982][ T980] usb 1-1: USB disconnect, device number 75 [ 562.576057][ T980] usb 5-1: USB disconnect, device number 73 [ 563.032511][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.039336][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.297225][T11678] overlayfs: missing 'lowerdir' [ 564.054086][T11689] : entered promiscuous mode [ 564.210254][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 564.266377][T11689] netlink: ct family unspecified [ 564.271376][T11689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.461345][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 564.470980][T11695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1607'. [ 564.647993][T11698] netlink: 'syz.0.1608': attribute type 10 has an invalid length. [ 564.664926][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1610'. [ 564.700404][T11698] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 564.893249][T11709] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1613'. [ 564.977234][T11714] netlink: 'syz.3.1612': attribute type 1 has an invalid length. [ 565.128673][T11714] bond4: entered promiscuous mode [ 565.136215][T11714] bond4: entered allmulticast mode [ 565.194716][T11725] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1617'. [ 565.240999][T11722] bond4: (slave geneve2): making interface the new active one [ 565.265682][T11722] geneve2: entered promiscuous mode [ 565.275613][T11722] geneve2: entered allmulticast mode [ 565.284080][T11722] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 565.637457][T11738] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 565.761160][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 565.807595][T11739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1620'. [ 566.867701][T11748] input: syz1 as /devices/virtual/input/input114 [ 566.926787][T11747] fuse: Unknown parameter '_+‡ê“Ž/~|tZN;'»fd' [ 566.992406][T11747] netlink: 'syz.3.1623': attribute type 2 has an invalid length. [ 567.015827][T11747] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1623'. [ 567.146308][T11752] netlink: 'syz.3.1623': attribute type 2 has an invalid length. [ 567.154856][T11754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1625'. [ 567.182388][T11752] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1623'. [ 567.966872][ T5962] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 568.130625][T11777] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1633'. [ 568.170780][ T5962] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.183540][ T5962] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 568.375381][ T5962] usb 1-1: config 0 interface 0 has no altsetting 0 [ 568.510660][ T5962] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 568.521024][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 568.631603][ T5962] usb 1-1: Product: syz [ 568.654798][ T5962] usb 1-1: Manufacturer: syz [ 568.679839][ T5962] usb 1-1: SerialNumber: syz [ 568.702943][ T5962] usb 1-1: config 0 descriptor?? [ 568.724486][ T5962] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 568.922539][ T6345] udevd[6345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.946318][ T5962] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 570.408733][ T5962] usb 3-1: config 0 has no interfaces? [ 570.619307][ T5962] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 570.664151][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.673907][ T5962] usb 3-1: Product: syz [ 570.681598][ T5962] usb 3-1: Manufacturer: syz [ 570.688233][ T5962] usb 3-1: SerialNumber: syz [ 570.695387][ T5962] usb 3-1: config 0 descriptor?? [ 570.774490][T11823] input: syz1 as /devices/virtual/input/input116 [ 570.936645][T11804] input: syz1 as /devices/virtual/input/input115 [ 571.098076][ T9] usb 1-1: USB disconnect, device number 76 [ 571.314519][T11823] netlink: 'syz.3.1645': attribute type 4 has an invalid length. [ 571.322581][T11823] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1645'. [ 572.536396][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 572.613973][ T980] usb 3-1: USB disconnect, device number 85 [ 572.716358][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 572.731070][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 572.742794][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.794856][ T9] usb 2-1: Product: syz [ 572.806388][ T9] usb 2-1: Manufacturer: syz [ 572.823970][ T9] usb 2-1: SerialNumber: syz [ 572.832097][ T9] usb 2-1: config 0 descriptor?? [ 572.962663][T11852] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1653'. [ 573.248322][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 573.815122][ T980] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 573.834639][ T5962] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 573.894376][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 574.050934][ T980] usb 4-1: config 0 has no interfaces? [ 574.077627][ T980] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 574.108760][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.130381][ T980] usb 4-1: Product: syz [ 574.251513][ T980] usb 4-1: Manufacturer: syz [ 574.260241][ T980] usb 4-1: SerialNumber: syz [ 574.268219][ T5962] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.278675][ T5962] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.302778][ T980] usb 4-1: config 0 descriptor?? [ 574.309349][ T5962] usb 5-1: config 0 interface 0 has no altsetting 0 [ 574.639160][ T5962] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 574.650149][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 574.662939][ T5962] usb 5-1: Product: syz [ 574.669833][ T5962] usb 5-1: Manufacturer: syz [ 574.679728][T11860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.700939][T11860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.711212][ T5962] usb 5-1: SerialNumber: syz [ 574.722146][ T5962] usb 5-1: config 0 descriptor?? [ 574.742638][ T5962] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 574.768261][ T6345] udevd[6345]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.973854][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'. [ 574.992669][T11873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1659'. [ 575.280390][ T1213] usb 2-1: USB disconnect, device number 61 [ 575.463377][T11881] input: syz1 as /devices/virtual/input/input117 [ 575.703785][T11884] netlink: 'syz.1.1661': attribute type 4 has an invalid length. [ 575.741701][T11884] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1661'. [ 576.302712][ T5962] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 576.496377][ T5962] usb 3-1: Using ep0 maxpacket: 16 [ 576.505025][ T5962] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 576.535285][ T5962] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 576.593804][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.726192][ T5962] usb 3-1: Product: syz [ 576.741183][ T5962] usb 3-1: Manufacturer: syz [ 576.753436][ T5962] usb 3-1: SerialNumber: syz [ 576.799375][ T5962] usb 3-1: config 0 descriptor?? [ 576.813924][T11902] FAULT_INJECTION: forcing a failure. [ 576.813924][T11902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.843311][T11902] CPU: 0 UID: 0 PID: 11902 Comm: syz.1.1667 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 576.843339][T11902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.843359][T11902] Call Trace: [ 576.843367][T11902] [ 576.843376][T11902] dump_stack_lvl+0x189/0x250 [ 576.843403][T11902] ? __pfx____ratelimit+0x10/0x10 [ 576.843426][T11902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.843447][T11902] ? __pfx__printk+0x10/0x10 [ 576.843470][T11902] ? __might_fault+0xb0/0x130 [ 576.843505][T11902] should_fail_ex+0x414/0x560 [ 576.843534][T11902] _copy_from_user+0x2d/0xb0 [ 576.843555][T11902] ucma_write+0x158/0x2e0 [ 576.843581][T11902] ? __pfx_ucma_write+0x10/0x10 [ 576.843602][T11902] ? iov_iter_iovec_advance+0x1e0/0x290 [ 576.843629][T11902] vfs_writev+0x4b6/0x960 [ 576.843650][T11902] ? __pfx_ucma_write+0x10/0x10 [ 576.843675][T11902] ? __pfx_vfs_writev+0x10/0x10 [ 576.843707][T11902] ? __fget_files+0x2a/0x420 [ 576.843726][T11902] ? __fget_files+0x3a0/0x420 [ 576.843740][T11902] ? __fget_files+0x2a/0x420 [ 576.843764][T11902] do_writev+0x14d/0x2d0 [ 576.843783][T11902] ? __pfx_do_writev+0x10/0x10 [ 576.843802][T11902] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.843828][T11902] __do_fast_syscall_32+0xb6/0x2b0 [ 576.843853][T11902] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.843879][T11902] do_fast_syscall_32+0x34/0x80 [ 576.843903][T11902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 576.843925][T11902] RIP: 0023:0xf7f94539 [ 576.843941][T11902] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 576.843946][ T5962] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 576.843956][T11902] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 576.843976][T11902] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 576.843987][T11902] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.843995][T11902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.844004][T11902] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 576.844014][T11902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.844039][T11902] [ 577.159038][T11908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.168459][T11908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.259154][ T5933] usb 4-1: USB disconnect, device number 70 [ 577.368829][ T9] usb 5-1: USB disconnect, device number 74 [ 577.900557][ T5962] usb 3-1: Detected FT232R [ 577.954845][ T5962] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 577.990969][ T5962] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 578.017429][ T5962] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 579.489672][T11939] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1678'. [ 579.498864][ T5962] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 579.596314][ T980] usb 3-1: USB disconnect, device number 86 [ 579.605847][ T980] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 579.616601][ T980] ftdi_sio 3-1:0.0: device disconnected [ 579.763185][ T5962] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.809378][ T5962] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 579.894602][ T5962] usb 2-1: config 0 interface 0 has no altsetting 0 [ 579.919929][ T5962] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 579.935361][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 579.980160][ T5962] usb 2-1: Product: syz [ 579.989178][ T5962] usb 2-1: Manufacturer: syz [ 580.010467][ T5962] usb 2-1: SerialNumber: syz [ 580.082696][T11952] input: syz1 as /devices/virtual/input/input118 [ 580.116034][ T5962] usb 2-1: config 0 descriptor?? [ 580.253476][ T5962] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 580.307886][ T6345] udevd[6345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.926988][ T5962] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 581.112214][ T5962] usb 5-1: config 0 has no interfaces? [ 581.123549][ T5962] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 581.132956][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.141748][ T5962] usb 5-1: Product: syz [ 581.147912][ T5962] usb 5-1: Manufacturer: syz [ 581.152826][ T5962] usb 5-1: SerialNumber: syz [ 581.244525][ T5962] usb 5-1: config 0 descriptor?? [ 581.502014][T11962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.512886][T11962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.942652][ T5962] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 582.267195][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 582.280207][ T5962] usb 1-1: unable to get BOS descriptor or descriptor too short [ 582.468847][ T5962] usb 1-1: config 10 has an invalid interface number: 223 but max is 2 [ 582.479724][ T9] usb 2-1: USB disconnect, device number 62 [ 582.481695][ T5962] usb 1-1: config 10 has an invalid interface number: 79 but max is 2 [ 582.495698][ T5962] usb 1-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 582.524735][ T5962] usb 1-1: config 10 has 2 interfaces, different from the descriptor's value: 3 [ 582.544128][ T5962] usb 1-1: config 10 has no interface number 0 [ 582.568318][ T5962] usb 1-1: config 10 has no interface number 1 [ 582.587080][ T5962] usb 1-1: config 10 interface 223 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 582.641072][ T5962] usb 1-1: config 10 interface 79 altsetting 73 endpoint 0x1 has invalid wMaxPacketSize 0 [ 582.736944][ T5962] usb 1-1: config 10 interface 79 altsetting 73 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 582.801269][ T5962] usb 1-1: config 10 interface 223 has no altsetting 0 [ 582.821682][ T5962] usb 1-1: config 10 interface 79 has no altsetting 0 [ 582.843497][ T5962] usb 1-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=a3.4b [ 582.853830][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.875091][ T5962] usb 1-1: Product: syz [ 582.894117][ T5962] usb 1-1: Manufacturer: syz [ 582.916972][ T5962] usb 1-1: SerialNumber: syz [ 582.926268][ T1213] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 583.086256][ T1213] usb 4-1: Using ep0 maxpacket: 16 [ 583.118954][ T1213] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 583.132206][ T1213] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 583.150462][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.172964][ T1213] usb 4-1: Product: syz [ 583.185771][ T1213] usb 4-1: Manufacturer: syz [ 583.195137][ T1213] usb 4-1: SerialNumber: syz [ 583.217231][ T1213] usb 4-1: config 0 descriptor?? [ 583.245663][ T1213] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 583.262763][ T5962] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 583.287354][ T1213] usb 4-1: Detected FT232R [ 583.355389][T11981] IPv6: syztnl1: Disabled Multicast RS [ 583.394476][ T5962] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 583.463179][ T5962] dib0700: firmware download failed at 7 with -8 [ 583.476562][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 583.565156][T11995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.574614][T11995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.605267][ T5962] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 583.667333][ T5962] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 583.676475][ T5962] dib0700: firmware download failed at 7 with -8 [ 583.707293][ T9] usb 3-1: config 0 has no interfaces? [ 583.715941][ T5962] usb 1-1: USB disconnect, device number 77 [ 583.755491][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 583.791076][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.813743][ T1213] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 583.842035][T11997] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1694'. [ 583.854732][ T9] usb 3-1: Product: syz [ 583.861250][ T9] usb 3-1: Manufacturer: syz [ 583.881842][ T9] usb 3-1: SerialNumber: syz [ 583.912726][ T9] usb 3-1: config 0 descriptor?? [ 584.143833][ T5962] usb 5-1: USB disconnect, device number 75 [ 584.161965][ T1213] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32 [ 584.256935][ T1213] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 584.457738][T12005] input: syz1 as /devices/virtual/input/input120 [ 584.675345][T12009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1696'. [ 587.216674][ T1213] usb 3-1: USB disconnect, device number 87 [ 587.358617][T12029] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1700'. [ 587.423572][ T9] usb 4-1: USB disconnect, device number 71 [ 587.443369][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 587.599324][ T9] ftdi_sio 4-1:0.0: device disconnected [ 588.316384][ T980] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 588.796391][ T980] usb 5-1: device descriptor read/64, error -71 [ 589.056379][ T980] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 589.201092][ T980] usb 5-1: device descriptor read/64, error -71 [ 589.347268][ T980] usb usb5-port1: attempt power cycle [ 589.720747][ T980] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 589.779243][ T980] usb 5-1: device descriptor read/8, error -71 [ 590.025521][ T980] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 590.057217][ T980] usb 5-1: device descriptor read/8, error -71 [ 590.157562][ T5962] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 590.171845][ T980] usb usb5-port1: unable to enumerate USB device [ 590.328926][ T5962] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 590.337001][ T5962] usb 3-1: can't read configurations, error -61 [ 590.378171][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 590.476366][ T5962] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 590.516294][ T980] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 590.628819][ T5962] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 590.651674][ T5962] usb 3-1: can't read configurations, error -61 [ 590.659963][ T5962] usb usb3-port1: attempt power cycle [ 590.687749][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.697703][ T980] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 590.708367][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.729390][ T980] usb 1-1: config 0 descriptor?? [ 591.007556][ T5962] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 591.107532][ T5962] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 591.117214][ T5962] usb 3-1: can't read configurations, error -61 [ 591.286410][ T5962] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 591.314940][ T5962] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 591.344433][ T5962] usb 3-1: can't read configurations, error -61 [ 591.375547][ T5962] usb usb3-port1: unable to enumerate USB device [ 591.521875][T12100] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1724'. [ 591.614732][ T980] usbhid 1-1:0.0: can't add hid device: -71 [ 591.624649][ T980] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 591.639723][ T980] usb 1-1: USB disconnect, device number 78 [ 593.756423][ T9] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 594.076382][ T9] usb 3-1: config 0 has no interfaces? [ 594.099299][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 594.590513][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.022850][ T9] usb 3-1: Product: syz [ 595.056932][ T9] usb 3-1: Manufacturer: syz [ 595.061620][ T9] usb 3-1: SerialNumber: syz [ 595.099134][ T9] usb 3-1: config 0 descriptor?? [ 595.516864][ T1213] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 595.593496][T12160] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1740'. [ 595.671680][ T1213] usb 5-1: config 0 interface 0 has no altsetting 0 [ 595.756281][ T1213] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 595.765603][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.795718][ T1213] usb 5-1: config 0 descriptor?? [ 595.878967][T12138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.890615][T12138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.232979][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'. [ 596.255385][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1744'. [ 596.444409][ T1213] sony 0003:1345:3008.000C: hiddev0,hidraw0: USB HID v90.00 Device [HID 1345:3008] on usb-dummy_hcd.4-1/input0 [ 596.485295][ T1213] sony 0003:1345:3008.000C: failed to claim input [ 596.665820][T12173] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1745'. [ 597.186526][ T1213] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 597.249799][ T980] usb 3-1: USB disconnect, device number 92 [ 597.349602][ T1213] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 597.357820][ T1213] usb 4-1: can't read configurations, error -61 [ 597.516277][ T1213] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 597.602888][T12188] binder: 12187:12188 ioctl 40086602 80000080 returned -22 [ 597.622765][T12188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1750'. [ 597.719713][ T1213] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 597.731606][ T1213] usb 4-1: can't read configurations, error -61 [ 597.750829][ T1213] usb usb4-port1: attempt power cycle [ 598.116549][ T1213] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 598.200982][ T1213] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 598.223489][ T1213] usb 4-1: can't read configurations, error -61 [ 598.303680][ T980] usb 5-1: USB disconnect, device number 80 [ 598.416797][ T1213] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 598.480424][ T1213] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 598.488748][ T1213] usb 4-1: can't read configurations, error -61 [ 598.509738][ T1213] usb usb4-port1: unable to enumerate USB device [ 598.588502][T12198] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1753'. [ 598.768553][T12204] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 598.929700][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1756'. [ 598.945792][T12204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1756'. [ 600.196617][ T980] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 600.378901][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 600.498663][ T980] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 600.543213][T12225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1761'. [ 600.604077][ T980] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 600.615807][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.624821][ T980] usb 4-1: Product: syz [ 600.632859][ T980] usb 4-1: Manufacturer: syz [ 600.639718][ T980] usb 4-1: SerialNumber: syz [ 600.658289][ T980] usb 4-1: config 0 descriptor?? [ 600.673431][ T980] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 600.911871][ T980] usb 4-1: Detected FT232R [ 600.918146][ T980] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 601.201136][ T980] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 601.453631][T12215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 602.281005][T12238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1764'. [ 602.656316][ T5962] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 602.714264][ T9] usb 4-1: USB disconnect, device number 76 [ 602.753771][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 602.787869][ T9] ftdi_sio 4-1:0.0: device disconnected [ 602.808120][ T5962] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.818824][ T5962] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 602.839539][ T5962] usb 5-1: config 0 interface 0 has no altsetting 0 [ 602.940611][ T5962] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 602.956968][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 603.031517][ T5962] usb 5-1: Product: syz [ 603.073978][ T5962] usb 5-1: Manufacturer: syz [ 603.083713][ T5962] usb 5-1: SerialNumber: syz [ 603.100218][ T5962] usb 5-1: config 0 descriptor?? [ 603.142756][ T5962] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 603.210596][ T6345] udevd[6345]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.266308][ T5962] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 604.587767][ T1213] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 604.943044][ T1213] usb 2-1: config 0 has no interfaces? [ 604.978106][ T1213] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 604.989803][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.027851][ T5962] usb 1-1: config 0 has no interfaces? [ 605.076345][ T5962] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 605.088021][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.103982][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 605.130582][ T1213] usb 2-1: Product: syz [ 605.136939][ T5962] usb 1-1: Product: syz [ 605.137344][ T1213] usb 2-1: Manufacturer: syz [ 605.145910][ T5962] usb 1-1: Manufacturer: syz [ 605.154715][ T5962] usb 1-1: SerialNumber: syz [ 605.199514][ T5962] usb 1-1: config 0 descriptor?? [ 605.211501][ T1213] usb 2-1: SerialNumber: syz [ 605.268806][ T1213] usb 2-1: config 0 descriptor?? [ 605.356424][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 605.484241][ T980] usb 5-1: USB disconnect, device number 81 [ 605.676388][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.708145][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.758184][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.804633][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.825009][ T9] usb 3-1: Product: syz [ 605.834167][ T9] usb 3-1: Manufacturer: syz [ 605.840638][ T9] usb 3-1: SerialNumber: syz [ 606.009690][T12264] input: syz1 as /devices/virtual/input/input122 [ 606.050515][T12269] input: syz1 as /devices/virtual/input/input123 [ 606.124023][ T9] usb 3-1: 0:2 : does not exist [ 606.245960][ T9] usb 3-1: USB disconnect, device number 93 [ 606.379611][ T6345] udevd[6345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.459855][T12289] syz.2.1775 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 608.035946][ T9] usb 2-1: USB disconnect, device number 63 [ 608.168419][ T5940] usb 1-1: USB disconnect, device number 79 [ 608.486457][T12303] FAULT_INJECTION: forcing a failure. [ 608.486457][T12303] name failslab, interval 1, probability 0, space 0, times 0 [ 608.535265][T12303] CPU: 0 UID: 0 PID: 12303 Comm: syz.3.1779 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 608.535291][T12303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 608.535301][T12303] Call Trace: [ 608.535309][T12303] [ 608.535317][T12303] dump_stack_lvl+0x189/0x250 [ 608.535341][T12303] ? __pfx____ratelimit+0x10/0x10 [ 608.535363][T12303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.535383][T12303] ? __pfx__printk+0x10/0x10 [ 608.535412][T12303] ? __pfx___might_resched+0x10/0x10 [ 608.535433][T12303] should_fail_ex+0x414/0x560 [ 608.535475][T12303] should_failslab+0xa8/0x100 [ 608.535499][T12303] __kmalloc_cache_noprof+0x70/0x3d0 [ 608.535522][T12303] ? binder_get_thread+0x1c8/0x6d0 [ 608.535542][T12303] binder_get_thread+0x1c8/0x6d0 [ 608.535562][T12303] binder_poll+0x46/0x380 [ 608.535577][T12303] ? do_select+0x104a/0x17e0 [ 608.535599][T12303] ? __pfx_binder_poll+0x10/0x10 [ 608.535618][T12303] do_select+0x105b/0x17e0 [ 608.535649][T12303] ? do_select+0x831/0x17e0 [ 608.535692][T12303] ? __pfx_do_select+0x10/0x10 [ 608.535712][T12303] ? __lock_acquire+0xab9/0xd20 [ 608.535743][T12303] ? __pfx___pollwait+0x10/0x10 [ 608.535770][T12303] ? __pfx_pollwake+0x10/0x10 [ 608.535865][T12303] compat_core_sys_select+0x69c/0x970 [ 608.535890][T12303] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 608.535930][T12303] ? __pfx_compat_core_sys_select+0x10/0x10 [ 608.535953][T12303] ? rcu_read_lock_any_held+0xb3/0x120 [ 608.535999][T12303] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 608.536019][T12303] ? __pfx_vfs_write+0x10/0x10 [ 608.536049][T12303] do_compat_pselect+0x269/0x2d0 [ 608.536072][T12303] ? count_memcg_event_mm+0x21/0x260 [ 608.536102][T12303] ? __pfx_do_compat_pselect+0x10/0x10 [ 608.536143][T12303] __ia32_compat_sys_pselect6_time32+0x149/0x190 [ 608.536167][T12303] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.536192][T12303] __do_fast_syscall_32+0xb6/0x2b0 [ 608.536215][T12303] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.536239][T12303] do_fast_syscall_32+0x34/0x80 [ 608.536263][T12303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 608.536285][T12303] RIP: 0023:0xf7ff8539 [ 608.536302][T12303] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 608.536318][T12303] RSP: 002b:00000000f551655c EFLAGS: 00000206 ORIG_RAX: 0000000000000134 [ 608.536344][T12303] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 0000000080000300 [ 608.536357][T12303] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 608.536369][T12303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 608.536380][T12303] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 608.536392][T12303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 608.536419][T12303] [ 611.026840][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 611.156932][ T5940] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 611.410363][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 611.586683][ T1213] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 611.843488][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1788'. [ 611.933826][ T9] usb 5-1: config 0 has no interfaces? [ 611.942474][ T9] usb 5-1: New USB device found, idVendor=040a, idProduct=ce50, bcdDevice= 0.00 [ 611.963251][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.984951][ T1213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.998486][ T9] usb 5-1: config 0 descriptor?? [ 612.013528][ T5940] usb 2-1: config 0 has no interfaces? [ 612.020951][ T1213] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 612.035987][ T5940] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 612.045587][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.055125][ T5940] usb 2-1: Product: syz [ 612.059729][ T1213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.075022][ T5940] usb 2-1: Manufacturer: syz [ 612.084942][ T5940] usb 2-1: SerialNumber: syz [ 612.108689][ T1213] usb 4-1: config 0 descriptor?? [ 612.114507][ T5940] usb 2-1: config 0 descriptor?? [ 612.375361][T12333] input: syz1 as /devices/virtual/input/input124 [ 613.306376][ T5940] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 613.479020][ T5940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.489677][ T5940] usb 1-1: config 0 has no interfaces? [ 613.544338][ T5940] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 613.799872][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.824670][ T5962] usb 5-1: USB disconnect, device number 82 [ 613.854208][ T5940] usb 1-1: config 0 descriptor?? [ 613.861642][ T1213] usbhid 4-1:0.0: can't add hid device: -71 [ 613.871937][ T1213] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 613.936013][ T1213] usb 4-1: USB disconnect, device number 77 [ 614.031391][ T5940] usb 2-1: USB disconnect, device number 64 [ 614.100951][ T9] usb 1-1: USB disconnect, device number 80 [ 614.216248][ T980] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 614.376469][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 614.388228][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 614.420217][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.446181][ T980] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 614.465566][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.476039][ T980] usb 3-1: config 0 descriptor?? [ 615.261383][T12374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.274032][T12374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.366045][T12381] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 615.501143][ T980] usbhid 3-1:0.0: can't add hid device: -71 [ 615.511234][ T980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 615.552404][ T980] usb 3-1: USB disconnect, device number 94 [ 615.569124][T12381] block device autoloading is deprecated and will be removed. [ 616.098847][ T30] audit: type=1326 audit(1755029693.050:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 616.188323][ T30] audit: type=1326 audit(1755029693.050:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 616.214759][ T30] audit: type=1326 audit(1755029693.050:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 616.237677][ T30] audit: type=1326 audit(1755029693.050:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12399 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 617.344271][T12422] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 617.603691][ T30] audit: type=1326 audit(1755029694.550:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12426 comm="syz.1.1819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 617.706245][ T30] audit: type=1326 audit(1755029694.550:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12426 comm="syz.1.1819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 617.803157][ T30] audit: type=1326 audit(1755029694.550:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12426 comm="syz.1.1819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 617.870053][ T30] audit: type=1326 audit(1755029694.550:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12426 comm="syz.1.1819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 617.903744][ T30] audit: type=1326 audit(1755029694.550:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12426 comm="syz.1.1819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 617.927529][ T30] audit: type=1326 audit(1755029694.550:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12426 comm="syz.1.1819" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 618.126417][ T980] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 618.286462][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 618.298674][ T980] usb 5-1: config 0 has an invalid interface number: 90 but max is 0 [ 618.311518][ T980] usb 5-1: config 0 has no interface number 0 [ 618.323157][ T980] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01a6, bcdDevice=2c.6f [ 618.336033][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.345582][ T980] usb 5-1: Product: syz [ 618.352150][ T980] usb 5-1: Manufacturer: syz [ 618.358941][ T980] usb 5-1: SerialNumber: syz [ 618.370222][ T980] usb 5-1: config 0 descriptor?? [ 618.380527][ T980] ftdi_sio 5-1:0.90: FTDI USB Serial Device converter detected [ 618.406645][T12464] fuse: Bad value for 'fd' [ 618.413049][ T980] ftdi_sio ttyUSB0: unknown device type: 0x2c6f [ 618.506356][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 618.667998][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.682927][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.694166][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 618.707282][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.728639][ T9] usb 1-1: config 0 descriptor?? [ 619.546453][ T5940] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 619.554747][ T9] usb 1-1: string descriptor 0 read error: -71 [ 619.562350][ T9] uclogic 0003:256C:006D.000D: failed retrieving string descriptor #200: -71 [ 619.572511][ T9] uclogic 0003:256C:006D.000D: failed retrieving pen parameters: -71 [ 619.581599][ T9] uclogic 0003:256C:006D.000D: failed probing pen v2 parameters: -71 [ 619.590510][ T9] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 619.598390][ T9] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 619.611916][ T9] usb 1-1: USB disconnect, device number 81 [ 619.716198][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 619.723251][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.734963][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.744891][ T5940] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 619.755926][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.766047][ T5940] usb 4-1: config 0 descriptor?? [ 620.193519][ T5940] koneplus 0003:1E7D:2D51.000E: unknown main item tag 0x0 [ 620.203469][ T5940] koneplus 0003:1E7D:2D51.000E: unknown main item tag 0x0 [ 620.212241][ T5940] koneplus 0003:1E7D:2D51.000E: unknown main item tag 0x0 [ 620.220103][ T5940] koneplus 0003:1E7D:2D51.000E: unknown main item tag 0x0 [ 620.228070][ T5940] koneplus 0003:1E7D:2D51.000E: unknown main item tag 0x0 [ 620.246708][ T5940] koneplus 0003:1E7D:2D51.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 620.468163][T12479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.481766][T12479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.494498][ T5940] koneplus 0003:1E7D:2D51.000E: couldn't init struct koneplus_device [ 620.511552][ T5940] koneplus 0003:1E7D:2D51.000E: couldn't install mouse [ 620.528650][ T5940] koneplus 0003:1E7D:2D51.000E: probe with driver koneplus failed with error -71 [ 620.565496][ T5940] usb 4-1: USB disconnect, device number 78 [ 621.086924][ T5962] usb 5-1: USB disconnect, device number 83 [ 621.095941][ T5962] ftdi_sio 5-1:0.90: device disconnected [ 621.116249][ T980] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 621.272677][T12530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1862'. [ 621.295414][T12530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1862'. [ 621.297873][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 621.305415][T12530] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1862'. [ 621.333055][ T980] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 621.350143][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.379401][ T980] usb 3-1: config 0 descriptor?? [ 621.385865][T12520] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 621.700125][T12545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 621.826686][ T980] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 621.851222][ T980] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 621.874523][ T980] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 621.894272][ T980] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 621.915021][ T980] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 621.944381][T12549] input: syz0 as /devices/virtual/input/input125 [ 621.997908][ T980] hid-picolcd 0003:04D8:C002.000F: No report with id 0x11 found [ 622.029961][ T980] usb 3-1: USB disconnect, device number 95 [ 622.084540][T12551] binder: 12550:12551 ioctl c0306201 0 returned -14 [ 622.617477][T12565] binder: 12564:12565 ioctl c0306201 0 returned -14 [ 624.469914][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.483018][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.959478][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1895'. [ 626.216491][ T980] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 626.428166][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.446147][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.476223][ T980] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 626.498463][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.538007][ T980] usb 3-1: config 0 descriptor?? [ 627.122277][ T30] kauditd_printk_skb: 281 callbacks suppressed [ 627.122295][ T30] audit: type=1326 audit(1755029704.070:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 627.160904][ T30] audit: type=1326 audit(1755029704.070:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 627.230702][ T30] audit: type=1326 audit(1755029704.070:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=38 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 627.281750][ T30] audit: type=1326 audit(1755029704.070:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 627.386408][ T30] audit: type=1326 audit(1755029704.070:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 627.450345][ T30] audit: type=1326 audit(1755029704.070:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 627.473818][ T30] audit: type=1326 audit(1755029704.070:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 627.496474][ T30] audit: type=1326 audit(1755029704.070:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 627.536753][ T30] audit: type=1326 audit(1755029704.070:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 627.571453][ T30] audit: type=1326 audit(1755029704.070:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12645 comm="syz.1.1902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 627.618186][ T980] uclogic 0003:256C:006D.0010: failed retrieving Huion firmware version: -71 [ 627.627307][ T980] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 627.635036][ T980] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 627.650732][ T980] usb 3-1: USB disconnect, device number 96 [ 629.237550][T12703] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.1917'. [ 629.865249][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1926'. [ 630.086963][T12719] [ 630.089329][T12719] ====================================================== [ 630.096610][T12719] WARNING: possible circular locking dependency detected [ 630.103653][T12719] 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 Not tainted [ 630.110766][T12719] ------------------------------------------------------ [ 630.117860][T12719] syz.1.1928/12719 is trying to acquire lock: [ 630.123918][T12719] ffff88801b2ffa20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 630.133231][T12724] netlink: 'syz.2.1929': attribute type 1 has an invalid length. [ 630.134166][T12719] [ 630.134166][T12719] but task is already holding lock: [ 630.134177][T12719] ffff888142b8e2c8 (&q->q_usage_counter(io)#24){++++}-{0:0} [ 630.142234][T12724] netlink: 'syz.2.1929': attribute type 2 has an invalid length. [ 630.149399][T12719] , at: lo_ioctl+0x17f2/0x1d00 [ 630.149431][T12719] [ 630.149431][T12719] which lock already depends on the new lock. [ 630.149431][T12719] [ 630.149438][T12719] [ 630.149438][T12719] the existing dependency chain (in reverse order) is: [ 630.149445][T12719] [ 630.149445][T12719] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 630.149478][T12719] lock_acquire+0x120/0x360 [ 630.149502][T12719] blk_alloc_queue+0x538/0x620 [ 630.149522][T12719] __blk_mq_alloc_disk+0x15c/0x340 [ 630.149547][T12719] loop_add+0x411/0xad0 [ 630.149564][T12719] loop_init+0xd9/0x170 [ 630.149586][T12719] do_one_initcall+0x233/0x820 [ 630.149608][T12719] do_initcall_level+0x104/0x190 [ 630.149624][T12719] do_initcalls+0x59/0xa0 [ 630.149639][T12719] kernel_init_freeable+0x334/0x4b0 [ 630.149654][T12719] kernel_init+0x1d/0x1d0 [ 630.149668][T12719] ret_from_fork+0x3f9/0x770 [ 630.149684][T12719] ret_from_fork_asm+0x1a/0x30 [ 630.161555][T12724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1929'. [ 630.164676][T12719] [ 630.164676][T12719] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 630.164712][T12719] lock_acquire+0x120/0x360 [ 630.179547][T12724] netlink: 'syz.2.1929': attribute type 1 has an invalid length. [ 630.180036][T12719] fs_reclaim_acquire+0x72/0x100 [ 630.189319][T12724] netlink: 'syz.2.1929': attribute type 2 has an invalid length. [ 630.197738][T12719] kmem_cache_alloc_noprof+0x44/0x3c0 [ 630.197769][T12719] __kernfs_iattrs+0xd9/0x320 [ 630.197785][T12719] kernfs_iop_setattr+0xea/0x3f0 [ 630.197800][T12719] notify_change+0xb33/0xe40 [ 630.197819][T12719] do_truncate+0x1a4/0x220 [ 630.197839][T12719] path_openat+0x306c/0x3830 [ 630.197856][T12719] do_filp_open+0x1fa/0x410 [ 630.197873][T12719] do_sys_openat2+0x121/0x1c0 [ 630.197889][T12719] __x64_sys_openat+0x138/0x170 [ 630.197906][T12719] do_syscall_64+0xfa/0x3b0 [ 630.197928][T12719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.197946][T12719] [ 630.197946][T12719] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 630.197981][T12719] validate_chain+0xb9b/0x2140 [ 630.197997][T12719] __lock_acquire+0xab9/0xd20 [ 630.198018][T12719] lock_acquire+0x120/0x360 [ 630.198039][T12719] down_read+0x46/0x2e0 [ 630.198060][T12719] kernfs_iop_getattr+0x9e/0x450 [ 630.198075][T12719] vfs_getattr_nosec+0x2de/0x430 [ 630.198090][T12719] loop_assign_backing_file+0x222/0x400 [ 630.198113][T12719] lo_ioctl+0x1860/0x1d00 [ 630.198130][T12719] lo_compat_ioctl+0x298/0x330 [ 630.205605][T12724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1929'. [ 630.208504][T12719] compat_blkdev_ioctl+0x5d1/0x780 [ 630.208540][T12719] __ia32_compat_sys_ioctl+0x543/0x840 [ 630.208561][T12719] __do_fast_syscall_32+0xb6/0x2b0 [ 630.443426][T12719] do_fast_syscall_32+0x34/0x80 [ 630.448914][T12719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 630.455811][T12719] [ 630.455811][T12719] other info that might help us debug this: [ 630.455811][T12719] [ 630.466118][T12719] Chain exists of: [ 630.466118][T12719] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 630.466118][T12719] [ 630.480566][T12719] Possible unsafe locking scenario: [ 630.480566][T12719] [ 630.488014][T12719] CPU0 CPU1 [ 630.493378][T12719] ---- ---- [ 630.498729][T12719] lock(&q->q_usage_counter(io)#24); [ 630.504209][T12719] lock(fs_reclaim); [ 630.510805][T12719] lock(&q->q_usage_counter(io)#24); [ 630.518723][T12719] rlock(&root->kernfs_iattr_rwsem); [ 630.524143][T12719] [ 630.524143][T12719] *** DEADLOCK *** [ 630.524143][T12719] [ 630.532292][T12719] 3 locks held by syz.1.1928/12719: [ 630.537473][T12719] #0: ffff888142f09400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0xfbf/0x1d00 [ 630.546428][T12719] #1: ffff888142b8e2c8 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x17f2/0x1d00 [ 630.556644][T12719] #2: ffff888142b8e300 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: lo_ioctl+0x17f2/0x1d00 [ 630.567138][T12719] [ 630.567138][T12719] stack backtrace: [ 630.573120][T12719] CPU: 1 UID: 0 PID: 12719 Comm: syz.1.1928 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 630.573139][T12719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.573147][T12719] Call Trace: [ 630.573154][T12719] [ 630.573160][T12719] dump_stack_lvl+0x189/0x250 [ 630.573177][T12719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.573189][T12719] ? __pfx__printk+0x10/0x10 [ 630.573211][T12719] print_circular_bug+0x2ee/0x310 [ 630.573224][T12719] check_noncircular+0x134/0x160 [ 630.573236][T12719] validate_chain+0xb9b/0x2140 [ 630.573247][T12719] ? tomoyo_path_perm+0x1e3/0x4b0 [ 630.573264][T12719] __lock_acquire+0xab9/0xd20 [ 630.573279][T12719] ? kernfs_iop_getattr+0x9e/0x450 [ 630.573290][T12719] lock_acquire+0x120/0x360 [ 630.573303][T12719] ? kernfs_iop_getattr+0x9e/0x450 [ 630.573316][T12719] down_read+0x46/0x2e0 [ 630.573331][T12719] ? kernfs_iop_getattr+0x9e/0x450 [ 630.573342][T12719] kernfs_iop_getattr+0x9e/0x450 [ 630.573353][T12719] vfs_getattr_nosec+0x2de/0x430 [ 630.573365][T12719] loop_assign_backing_file+0x222/0x400 [ 630.573380][T12719] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 630.573392][T12719] ? schedule+0x91/0x360 [ 630.573407][T12719] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 630.573425][T12719] lo_ioctl+0x1860/0x1d00 [ 630.573439][T12719] ? __pfx_lo_ioctl+0x10/0x10 [ 630.573451][T12719] ? __lock_acquire+0xab9/0xd20 [ 630.573476][T12719] ? unwind_next_frame+0xa5/0x2390 [ 630.573495][T12719] ? rcu_is_watching+0x15/0xb0 [ 630.573512][T12719] ? __kasan_check_byte+0x12/0x40 [ 630.573536][T12719] ? unwind_next_frame+0xa5/0x2390 [ 630.573555][T12719] ? unwind_next_frame+0xa5/0x2390 [ 630.573566][T12719] ? rcu_is_watching+0x15/0xb0 [ 630.573575][T12719] ? __kasan_check_byte+0x12/0x40 [ 630.573588][T12719] ? is_bpf_text_address+0x26/0x2b0 [ 630.573602][T12719] ? rcu_is_watching+0x15/0xb0 [ 630.573612][T12719] ? __kasan_check_byte+0x12/0x40 [ 630.573625][T12719] ? rcu_is_watching+0x15/0xb0 [ 630.573635][T12719] ? __lock_acquire+0xab9/0xd20 [ 630.573651][T12719] ? __lock_acquire+0xab9/0xd20 [ 630.573669][T12719] ? __lock_acquire+0xab9/0xd20 [ 630.573683][T12719] ? __lock_acquire+0xab9/0xd20 [ 630.573699][T12719] ? __lock_acquire+0xab9/0xd20 [ 630.573714][T12719] ? __lock_acquire+0xab9/0xd20 [ 630.573730][T12719] ? is_bpf_text_address+0x26/0x2b0 [ 630.573745][T12719] ? is_bpf_text_address+0x292/0x2b0 [ 630.573759][T12719] ? is_bpf_text_address+0x26/0x2b0 [ 630.573773][T12719] ? kernel_text_address+0xa5/0xe0 [ 630.573787][T12719] ? __kernel_text_address+0xd/0x40 [ 630.573800][T12719] ? unwind_get_return_address+0x4d/0x90 [ 630.573811][T12719] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.573824][T12719] ? arch_stack_walk+0xfc/0x150 [ 630.573838][T12719] ? stack_trace_save+0x9c/0xe0 [ 630.573849][T12719] ? __pfx_stack_trace_save+0x10/0x10 [ 630.573861][T12719] ? stack_depot_save_flags+0x40/0x860 [ 630.573875][T12719] ? kasan_save_track+0x4f/0x80 [ 630.573887][T12719] ? kasan_save_track+0x3e/0x80 [ 630.573898][T12719] ? kasan_save_free_info+0x46/0x50 [ 630.573908][T12719] ? __kasan_slab_free+0x5b/0x80 [ 630.573920][T12719] ? kfree+0x18e/0x440 [ 630.573931][T12719] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 630.573944][T12719] ? security_file_ioctl_compat+0xcb/0x2d0 [ 630.573958][T12719] ? __ia32_compat_sys_ioctl+0x128/0x840 [ 630.573970][T12719] ? __do_fast_syscall_32+0xb6/0x2b0 [ 630.573986][T12719] ? do_fast_syscall_32+0x34/0x80 [ 630.573999][T12719] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 630.574015][T12719] ? __asan_memset+0x22/0x50 [ 630.574026][T12719] ? blk_get_meta_cap+0x140/0x710 [ 630.574040][T12719] lo_compat_ioctl+0x298/0x330 [ 630.574052][T12719] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 630.574063][T12719] ? kasan_quarantine_put+0xdd/0x220 [ 630.574076][T12719] ? blkdev_common_ioctl+0xff7/0x2550 [ 630.574092][T12719] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 630.574104][T12719] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 630.574118][T12719] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 630.574131][T12719] ? do_vfs_ioctl+0xbe8/0x1430 [ 630.574143][T12719] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 630.574157][T12719] ? __lock_acquire+0xab9/0xd20 [ 630.574173][T12719] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 630.574184][T12719] compat_blkdev_ioctl+0x5d1/0x780 [ 630.574205][T12719] ? __fget_files+0x2a/0x420 [ 630.574215][T12719] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 630.574228][T12719] ? __fget_files+0x2a/0x420 [ 630.574237][T12719] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 630.574251][T12719] __ia32_compat_sys_ioctl+0x543/0x840 [ 630.574263][T12719] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 630.574277][T12719] ? __se_sys_futex_time32+0x360/0x3e0 [ 630.574294][T12719] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.574307][T12719] __do_fast_syscall_32+0xb6/0x2b0 [ 630.574323][T12719] do_fast_syscall_32+0x34/0x80 [ 630.574337][T12719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 630.574349][T12719] RIP: 0023:0xf7f94539 [ 630.574359][T12719] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 630.574368][T12719] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 630.574380][T12719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c06 [ 630.574387][T12719] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.574394][T12719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 630.574400][T12719] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 630.574406][T12719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 630.574415][T12719]