last executing test programs: 7.729405311s ago: executing program 3 (id=1894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000300)={0x1, 0x9, [{0xffffffffffffffff, 0x0, 0x4000}, {0xffffffffffffffff, 0x0, 0x4000}, {0xffffffffffffffff, 0x0, 0x10000}, {0xffffffffffffffff, 0x0, 0x1000000, 0x8000}, {0xffffffffffffffff, 0x0, 0x8000, 0x4000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x1000}, {0xffffffffffffffff, 0x0, 0x100000000}, {r0, 0x0, 0x1000, 0xaee1aa04e35db843}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffff000}]}) ioctl(r3, 0x80, &(0x7f0000001300)="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") r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x5, 0xfff1}, {0xfff1, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r10, 0x0) r11 = gettid() sigaltstack(&(0x7f00000000c0)={&(0x7f0000002400)=""/4095, 0x0, 0xfff}, 0x0) rt_sigqueueinfo(r11, 0x21, &(0x7f0000000000)) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 7.449506078s ago: executing program 3 (id=1897): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x7, 0x4) (async) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x14, &(0x7f00000007c0)={0x20, 0xd, 0xb6, {0xb6, 0x2, "743064d6c04bc986424ec5748260237cbfbe68e0e941327b0457db5d7864798e17ead0880fd57894e1ebdc3a6ecd7919ee20f275438126b44dec92243ed2344a405bb1a0677cb6759b02f9c6a1f2bc089c1629e7773302f7df6643f0a098ef7fc93559f52b242d37eeef12c6ad598a2d83daa9c3adafe9b56361937c874a78eebc6c6e9e18ebe42d4d8049412a6e1db467ab703f94eec5bb0afa89aa8164d6df68314e2e6f2b4aeb6ceb535ab70fc0e18b1806fc"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, &(0x7f00000001c0)={0x0, 0x22, 0x1b, {[@global=@item_012={0x2, 0x1, 0x6, "9dc5"}, @main=@item_4={0x3, 0x0, 0x8, "4deeca3e"}, @local=@item_012={0x1, 0x2, 0x1, "e9"}, @local=@item_4={0x3, 0x2, 0x0, "bb9368da"}, @local=@item_012={0x1, 0x2, 0x9, "c0"}, @local=@item_4={0x3, 0x2, 0x4, "c51c956e"}, @local=@item_4={0x3, 0x2, 0x3, "fc5f7635"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff0, 0x6, 0x1, {0x22, 0xa65}}}}, &(0x7f0000000b00)={0x18, &(0x7f0000000880)={0x20, 0x9, 0x71, "a0d9eade48cf90cbdf7a054bb31e2975dee25145f939ab3c95300ce3802050f4cc2f7abb12370592495a0d8e51139c412216a5f23b2d1e731388e56a0e5da4e9a8498f4abda56088351abfa7a99f327bff73a6ec36d6fe5ded6f937ea7df3c10cc48f6909eaf8cbe6e564a24d2b979e540"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x59}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000980)={0x20, 0x1, 0xfb, "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"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x30}}) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000100090808004149004001040800", 0x58}], 0x1) r2 = epoll_create1(0x0) (async) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x60001}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback={0xe0}, 0xfffffffc}, 0x1c) syz_usb_control_io$rtl8150(r0, &(0x7f0000000340)={0xc, &(0x7f0000000200)={0x20, 0xe, 0x34, {0x34, 0xb, "baa822afeeab44adfd67fe4c6d9b4329a4d57e4c343a89cfcbe480eaaaabb85ba46589ff12d758265cc00b1c7ed620c57d82"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f0000000680)={0x18, &(0x7f00000004c0)={0x0, 0x14, 0xc7, "76aa115a6fded33870f91a4934818982431b7b813ace36cc65a6e392ee9ede872d2c24ea7060547f10cfee04181ff1222c195c2d9fe9f9849582abb2167f45a01ebf4295fd6691fccae0f870f279cd7f2f8deb89e78a6d3759cf54f68fbe86ac6a833c95d9fe80711de599b531deccd133161f10fbe1a1e221a99a7823fcd63e0c1b3af5567cc387a48bafa974986a6f48b47565539f50a1c4b95da227fdbda51266413d01ee72589fab7bd354eb9991b1a51d8b2b9a4f5c38ec1115dc799fb0f996e040563e06"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000600)={0xc0, 0x5, 0x1, '%'}, &(0x7f0000000640)={0x40, 0x5, 0x2, "b722"}}) (async) pipe(&(0x7f0000000380)) (async) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x1, &(0x7f0000000780)="e0"}], 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701fe0300ff00000000017c0000040041800c00018006000600800a00000800028004001180"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 6.613770204s ago: executing program 4 (id=1905): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1b, 0xb, 0xdd, &(0x7f0000000680)}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589c", 0xd) (async, rerun: 32) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) (async, rerun: 64) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) (async, rerun: 64) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0xb20}, 0x48) (rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009cb5984071042903dadb000000010902120001000000"], 0x0) 6.383130562s ago: executing program 3 (id=1908): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000001180)=0xc) sched_setattr(r3, &(0x7f0000001240)={0x38, 0x5, 0x78, 0x8001, 0x0, 0x81, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d0200000000000000000000000038"], 0x51) close(r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, r4}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x4, @local}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x104) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='fd\x00', 0xfffffffffffffffe) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0xfffffff8}}}, 0x104) 6.303021559s ago: executing program 4 (id=1909): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}}, 0x0) 6.217556961s ago: executing program 2 (id=1910): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x7daf, 0x10, 0x7fff, 0x8000e1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x7daf, 0x10, 0x8000, 0x8000e1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x9, 0x6000, @fd=r9, 0x100, 0x0, 0x0, 0x1c}) io_uring_enter(r6, 0x627, 0xc1040000, 0x43, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x9, 0x6000, @fd, 0x100, 0x0, 0x0, 0x1c}) io_uring_enter(r3, 0x627, 0xc1040000, 0x43, 0x0, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r12, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x2103, 0x1, {0x1}}) io_uring_enter(r13, 0x47f6, 0x0, 0x4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r16 = accept4$alg(r2, 0x0, 0x0, 0x0) read$alg(r16, &(0x7f0000001540)=""/4131, 0x1023) 5.976327787s ago: executing program 4 (id=1911): fsopen(&(0x7f0000000700)='affs\x00', 0x1) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0xffffffff, 0x4) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{{0x4, 0x1, 0x1}, {0x0, 0x1}}], 0x8) bind$can_raw(r1, &(0x7f0000001c00), 0x10) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0xd, 0x0, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0xe8, &(0x7f0000000240)={@empty, @local, @void, {@mpls_mc={0x8848, {[{0x9}, {0xf94}, {0x3}], @llc={@llc={0xaa, 0x6, "18c2", "0213c6289cd9fafb8f96ddf5e8e7ba8b882bc11c04c064a2d0e5b2325d5f3cef550b333950f3f6231260694f1f7d80b5410aefdb904b2f31ecccbd7e03af3d1bc8394b8638834250a428884f3e3588372b0f44bc17a832ea6819d3445bb8c368a9dcb1fb60c84665722d4103aab4042834019c006cfbf4f6cf2399ed4c79b732cc65a5f55ea8ea1000f9f91ae459b64a26ad3fbb556b765e4f037b936b9c5110dbb3bc00cd1d24578a732408abe6ab84cb3dc44be8bc61a3bc0039b15fe779c661906d29f5d780647844"}}}}}}, &(0x7f0000000040)={0x1, 0x4, [0x273, 0xc36, 0xf3d, 0x925]}) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) syz_usb_connect(0x5, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000965d06403e131508667e010203010902120001000000000904000000ff870800"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="fc", 0x7}]) ioctl$TUNSETLINK(r4, 0x400454cd, 0x304) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x6, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_multiq={{0x8}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000007400)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.127049665s ago: executing program 0 (id=1913): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000690000004300000001"], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = gettid() kcmp(r4, r4, 0x1, 0xffffffffffffffff, r2) sched_getattr(r4, &(0x7f0000000840)={0x38}, 0x38, 0x0) prctl$PR_MCE_KILL_GET(0x22) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='vv=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101042, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlink(&(0x7f0000000040)='.\x00') 5.043503393s ago: executing program 2 (id=1914): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0x78}}, 0x0) syz_usb_connect(0x0, 0x120, &(0x7f0000000000)=ANY=[@ANYBLOB="120101007cde0440720c130049b30000000109020e0101000000000904e50008c5440600090501"], 0x0) 4.743431055s ago: executing program 3 (id=1916): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000004600), 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8000, 0x0, 0x9, 0x8000001, 0x800, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0x24, 0x1, 0x3, 0xfffc, 0x3, 0x4, 0x0, 0xff, 0x0, 0xfe, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x0, 0x90000000]}}) writev(r5, &(0x7f0000000180), 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fad396aed323fa254e5d77596b0e", 0xe}, {&(0x7f00000001c0)="7ffba264740d38e4f67cc304bd6ebb5918361852219d57e2ae66b8aa0dd2401528db50a1f75249dd0b47cd843945953d84ffc6", 0x33}, {&(0x7f0000000200)="ba078b108806e0c98f6beac0927ee559802601f755af2041652ff673a1a21e5b516f6ce2312e21e24ccab8", 0x2b}, {&(0x7f00000002c0)="5d2187e5a44bad8599e7515aaba36345b1ea2b145d897d736efac48d8df1437ed60b800ca4f33b90ed770dce3e932f673505a0fcf5a7c67e36e5d1f92b3f8de48d50a23da4cf9d49ab20aa01bee7ed6770be160edbc0076375bbaac7aa1a3677ef6698e0ba2732e7e034f55ed3fac3417ddf2c89b143f42b731746fa7947c6d3bfd8ce9fd87cd6a7257e57c8bfbb6438", 0x90}, {&(0x7f0000000380)="b2b8af9a1918fc0b8c65b4aea07106f993107cc3e8d0c3c306a8415eb8aab2b896ac1d9d7e3da62f3014a175c189aa4348495d41f23f007eacd04bd6ef60ae22aa7aa5b3b24cb6ca00869cd9a8a9f7cef7a1011c3cf5542aef0ef15ed66fac448d3ff4610f17d52e34522f1ef6b25854bcabe8e471457190b88ae7db7637c04261eee99a07e39627f7e9dad103b39a3bbb0f03c313dfd90f51c412c2bcf7b5d057eb11b61fad5201b14233c440574c4c1d7334e9a9d6527e91414110254734ea28841b1e2faf8c0ed02dc0020293aa7ccf3aa2b277019002e392530504ff8b79d07482df750582d8f38d739a8bcfc054e4139206c46fbc595a7644ec200c755bb6e1a11121b20ad73ea5d5cccb06bcaf7db8b577c0d3226d6dc061a8768c04a4402f0196dd461c0984d7f8238fe4221a5670e8582e92e34f415447d67e7ffba28205ff7a265509cbaa2d625cfa0c738a26b2238978445bb19d963470fda2cf462c6ffa6d2a072987a9ebb155d3e4a7903a0a03f81e7ed22f466b6a814094093a03236493f2448587b993db88d3c9809d4da8bc6dd44c78d3abf7b0545a2f6da2c7cb9709a3dd6f45fa125791a81677dcd24e40c1d7611381f825e4d5e39ba8bbb8ffa5620a8b221d37ab66d26d46ce1a8e7332a1b81700e7b9739005b4ecbebed959b8162171c51e90d5d6d1dc0f80971dc4b012cdec13511787bddacf9070bc498bda113daa40b5849904297971aeb200867febbd415d0c9526923d3c891dcb8a3ec019ed7b7ee91887f7d898dc25e55f6861e877113b7bdc7e9a3aa16f11accc9a6513cb46d8dec9891a1a96564d9b7afedba7a0a4acd18a66929bd0ee892642d64c3ca17450e7165244d5e2049c6257a832e23dedcb3030eb496900859c3e3d57a88135c5ad0344e7e02c0aead75283606457d2f3c332570469cae882eb2b18f35c6fba8b17795948d158fe52fe6543c9e7d4fef7075e53eb702d00545a051bc7af4fd8ad8f48d42743db873bef6567a1e316a87c1cdaa81f87dc092e882f09780e39844e3ef8d0934494b94e2879cedc1cccf5fa8117e3a29792c891e0d8822f7acfc01feec5934a4bfd321cdd8d2f7e7583e79028d2f7c6aa2971ae5cd7361ba5af9a4a4f2d39562995d0e705ed062df0371b7d7e627c6b8dfbd82356f559e148d7eef9e92f085018260961c3f5bf5ea12a8388a033540e753b270bb2037d1c10fd59ab7ceb7660325da28d9d06dff84d0c10c4e2bda878fabb62e6a9dd92583e0f295af74f07290fd94e22a0f3af25afd6131814ef578bbd5eab068c595782da8bacdbbe6d5fb96063d75c0c12dd3b7dd4b3153cb40f8eb8cffbcd982ad43d3612db287fb14904414412a8e5950f1ebfcdceabdcd5b33ea8836f9175f289cb35d55b2e03d56e84a85aa68accd5d8c6e6e286fc22eaef80e79fc426f0f04466e5c0a9643f7b293a333fa8406eb226c2f05231d3a1e6ea78202e98dbd7968dd4e17f0f0aad607d5d98186f40c8ea4a69bd5dc69a3109a0ca5bdd828fa5de46bf4311a9e19c0e37523c690b59ba73b909f415c3014b01b6c62ae8b77a1e0d819a6fded4c43e25cc5937eeadd5bdb389fd07cd3eb6b71212099d6fe7bf5928449f113a878eaefa45a051939787cb0845f441b62064d5d4cea263b0485fce6c8d14397b1debf7dd7872a653b5f8a20758332a7b2f58ac49d4f255315161824ee82a781f4804fd530754649bd49730f0d306207400a758b09c936d41c9aee622edb79ff5927cae21bc936bb36d47e3f852ee2207c81e605bdad74f90dc92b6e4c93535a06e9d757c32c1d8e5f2c38c34b92c3ae4b8b1c392679a68349403458979d612c9ffc01b750e2d53a86988403e3770eb89fc2be4567f053aa247f870d26259a241ac0593019ce55f142cab0873bb638b390b2af87fb0cfe405fbeb313da334d9b435b1c6de4c02c45c0494074d8bf61e576ffd9635eb7782a99c09acf4cf2eaca1178ee3f0683b9e6e56edad5f5534d62cb806f02a65d39c29b6ed7d25ea8dcb2fb00a94de24e6c96d120c558eca2e3ebc03bd1e4bebedadcd5e68fc1f2468308326ac4323a90650f7bfef676147363688e32bc2a6cb0110c6827d74c248121649cff7f65fd9ab6cbb6469a196489d8eb20ea76b05ad7af216bafaa13b7b2d79cfe3878cc0153b3b27ede8a494204609e8b6aa51850aeb90d3b38aee6071f03e160c37620d96a8de7adc799855a839a4e074dc95ceb4b6b1c33adf7bc90a6d4647b7000052da275fe02d13ce4898493b283eceef83828485233b1d9b4ddaa123359e4ba622b9e40e8d46699d570094860a88d698b0576c315d37db2a94226c762d611d5d1392838ff2e965f3f75d8c8c733c499884bbc41921fdfcccf31e9946800e5414287ca23ca7837161362edea38e31fb0b4aa54ece80e73019d7283a0d138042e2eba523dc5ba31c1b851d2b366f3addbe552d477637b71817ac015871be16912507461c95a74e4d86bab78ac837ada4cbc4023d5cb51b32d52faa8118ab9e0585e37753cea70f5c02f96ea5a9a9278fd060b26a6c8c886f378dbe986552edb4fd58da6f86646be47ac16791643ebd65e8ffa104e9a828c39c850d472e375d22fd52621f6a1f0b1dd8ceb82d740f66185cda2a29b83c73e3f8977ecde9aac5b44b22445b6a77e6c751557a1485dbe762dd0dbd2118a2908cf3172e125d85caa34ca6deab159be5781a62050ef672584573dd19cc26d7eb5938565000ce3978d04b346a1ad845cc06708757aad352aa07d4c5f761a83893b4af056a0892d840f7da574d69abd315ef7da5cd47917c101677ce6328cc78644f10eab4c9cd4efe1ece2691cbb6cc2564786de1d88529c407bc8adae3464b95cb73704882ba78414283efabcbab6ec171c1a05ee93e1c69bd5170d125202d0f0b7b26629f29cf556bb37a6702612c7befd17ec3f520497daf5ac85aea3608e2e0a7c3d47eda3336b4c4c1ab0ebf4e11ca59e4239bfa3ddec828aacc54362419ac5853fc31fc5797f3d871156550a524177818de87b6a054173a560ed42f1e02d428c245b82b9213496f74b59c9bf51c29e19b50d2f3d2626072005d8f6e4f7a614225cf4c56ae7359984e0578ad53ebb9a2d09f8c290d086853cdb9f03d146268534a297be0719d50298da906eeeea1300caf9af1121aafd8a831c47ec6e3af3f84a0124374f2996e2a0952f31ab6de57476d77413c0a9796a389eaaaedb3c9f25897062758937ed92f382d178ac9bdf702a24eeb11eb744c8d283e7a4b939edb48eadb6cfdbf5e4ca9f694ae80c3492b919852990e63ad13c1e0c2dd3a1844939cd2d734b437daa3b6a1e5ef928456689a5e4d9cb588d80179c7ff08c3db80e7fa04663b47994263aca0fd9bfc45801ca6c7f9a5da24e768548bdb82f2d8155ba436b043daa454517015c595399a027d969054aaf7e8f7fb4911789f44c4b8b8afeee37f0a50f45fb3d520c7ae796d522ffa52445cbcc6cf33c377beb42037e351209e8936efc2538a9728236724dbb3bdce5eaf57c7d47a5ee7afc2a87e7a94483ac2f777ddbefb7e86dcd919ac5bcaa289af08b6cc380d4b43d678ca060f16ae986e467ab5dae3cb0ea3c3f0b9ba397aaf42da7a029b529e2699d54f1d7d6cfd6daae1c451e34ea4da91e94d60821c8115316ce90dd5d61a0c1e6026e513591646621fe80d827b3a52ac78aa607dbd007daa5c5e793e962e91842c3b2850c9d8e3e00715f6ca5bf12592aa76854c428758eea558b15793d47dc61ec80c50fc42086623742f909be3bb8e3daf6ec8e6da672cd18c5853af1acb00fb9e1b7aa9406a0e2fdd2e9dbcbdf51f37ed558e119dd28adebce9191c0a7f2956ebc826c6a62b2b4f9bf3af9f414928c864d937affc2fa855298b06fca9996c57416af9047602878a416a1144ef14834ab7c5a85c30980db6cad93e31fcdb164b29940d9eef71d605b62a25d15b51bc83cbb5bfb2e74d249753821d2db084fee1d752210d83a32a224c1753c5e0482c87c3f04e8a1c975ebdfc732a8c7f685958ccfda006bd9359a55f827b00e06cff3917053c5bc78d879f2980a3250525fd992c7352d55407a502f0dc526dcf5ba80ff6f920526c27cff2f3894357832f9fde3d1560952c63c4eb64b7fd008a682b46e21137e29594a275872243517ba699c856f30165b9b19ce00867fb095000ba9280f48415078e07c3b7b52f1784bcfde3136e3c8816040ed177fe4dc5bd071b259b6ce4cc8ea0d10674835c032a1ccc1aa17935dce5ad7382f97edc77116e2ea6f244e78f94cbac7e7339665b5567b3c80f6f7e574b13181806be38f1061ca3c4c597e63d9842b532c17dfa5994d20f71a3029811d386d75b8615d5a8c5d9a86606b306dfdce25281e92092b1ac8f0ad5063e8597c4de8fd59bbb6ea8125c42720428c742906c9c0f729890c744b6e4ca3f271bebf335d4015404636e33a9e8ed53e6accc8496e11f058b2ff1946830f72c74661dc016099343d6d8e7321519ed3fc031e1aa5ecfadf83a8d180da8c9522bf56b4d28f7b48a82099d7da4281f4428d3b102e2640efa5946fe299bd42df6bbd0be5cf9e8961dba8211213c166773685fb1c4e104a96682cf9221438326e331ec6826d5f4c34636041e3fbfb85a7b896a600f44127effdb4d2df7421169ccc26ded28f9a2fa8aad10f62350749fa11d9e811c29d5f1d40120db42712f738f8ceb5d8d68c4915126711c3ba2bc9b744adbb295407bdc01e68d127f413131ead0ffb77de2636c94ecfb6481c530dac29bae9ab530d29459aed9ec6a8429a76c0711c6b6b46671533a9769eb180139b07fffd9033918cc2784723213f3328bc04075f4306fafb82e375950103ac0f0f4e87bfe82b51ed405076e6257508b6de5eae0c7ef7504032f30743a6d840ce1e058685132dbaf96dd0a252ea3a3a1c24bb77ba8050a8867ffd7acb3cd8443e323efdc232b84c8db89a7fdda9450dcf5a489c9f4de27a6ef0e1e80cf1c8a6eca08f569cefdbb776a4a6879559ae55981b16f8acf1ac0e0f28667d6567ef8fda4eac14682f5b70165b240dd287ae04d57b2105a27972038a769d34ee5984a8c550ffb70b7ec2d39ca05d4827547586fd73ced80b79842b3fed67fc30523ed70d8232eb78e4c488ee2dfce5256b9e979f8ea321905e6c848ea9b18e7caf28728ed6d03ed4e5ef9699933d034f0fdbe2872dcb31810ad891073533d5a1af7ec9b9891744754d013c130a24ec90afd9f4496f7326e12c36044f36fc1751775b492fe710eb222585b111476c7c03b7f2469d6200873544468afb1ebe26d94624c8b8f163264472d9ceba86c8b079e4836b53b109755f9e3418e5c1e607fe50ca96ac93465bbab9f3cf754e848ac98dcc554c1f5fe60b7f6f56f02ec5305f7fac2049daa84208db27ecfdb4ccc6500f15225f460ba80a37cde4d1e1f3451fe649147c1c011c11f089cca9e2a386670281c706f87fb64978ce0f07f010af2c234ffb2ea60a64e8ffcaac0b3d923adbb4735573c9a901be088ee42198ff0c576a62e881b1688b3352fbbba1debbbf4293c22fbb77a58617bb7238ababfa4ec6f93ba599cbdb865ad512865125ae14fd95b291d8568902cc4363480561d9db34bd02d7a0731a5cd244395f59ea248ade09b9e5bfe0583d468d6bfcc644e0d30ab54805d1a5620e1768d5c35d7355d14818794d74cd08b2795b6dd541adfc5dc17d80927a9248c95d8af021694638dc3d63598164fb4142caa20a340", 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001380)="a635195e4f9392a68c4d0c1282a99a9c855055252d25973ae5ceb3f9803385353649e43cdeab2744b9d7c51d0fe64f4087ec4a8906a047af8bd9bdaa0883fa97e67964f0ca6252044a3ae77b5f8da78d816359eb766850dc9c461ab07a2bb345da41fee01311978954f4596c184057f4863a2b71af4b56676224f03aa08c74c8780ab3ea104da8f1ee908f421933c70291968a3d6ffdef04273b921de673c6cc0141b4201e780dc5165f2470f46d34492664394babb3ed8b7f90b68913a068c38cc802f3d233614058ff3582fe2e6a7df33ace6e308f009ed0881490770b6e232c68c017e0f8a8780e", 0xe9}, {&(0x7f0000001480)="d0d9b71d9f1edc929f5938f3f58555d8a4398ac896885d6637840532b8b6ee4597023e87c0c73d8db293fb4258772f7aa7e4f5262b9b83ba6c5bc183e25259ba97c86a3a7046e03936c1edb6a1d83744021b90b90abb510634a6dc3f0374216943e5484e59db77c5a7c158c106378eed735a4fac2a2be87a7828e61fb8e91380b06b7ed9393afc7f838fefe4a87329ab6a7dd19eb6464ced90b8e721068d5d57aac9a8e538ff061781", 0xa9}, {&(0x7f0000001540)="70ef9b82044e337aedf23dd8cd6ba8b0b8005e3fd82ea91e099bd1d001a7664fdfa550e9e69a9bbc643ceded81db6fa7a86b4baab34fc3637b0621636e8956ecfb18a421f292e8c319b1f2341b81b765b02a6a6469d3358ca895f8ecdb172c29ce2b951cf4a0073224d1c4aab6e2ee2d9198ce02b940d8e6c79b0b32cf0e44d29606c41ff1ec839ba216e71f0440f030198ed543fb2e79cc72", 0x99}, {&(0x7f0000001600)="4f2338169dc21835d270d291e495d27612e5c3034a0465fb1b38b3a708bed07eb054491c6688d0a48360ceee84733ac7583a68e40e134910960df6d5fd8051169f0f62ccee6be294b335a1b4221d77da2aabd4a9bc6d913891b9bd588a01cf538dd86773fac43765daa5608e5e9defd17ad4a178d4586afb0facdbb5de47deb3411e4844f7d2b1d86b8c73845f077ce5e19830ba44381269293e8e22f790ad9c38d743d2cc99a5ec3727", 0xaa}, {&(0x7f00000016c0)="2ef131b1177b447d8a5abe55ba957a5aa4ef62320b86dfa1424850d730a036cd5cb61764e8dc4289f39b898928ea2d965d1c705da36d6ebe4821e1a2210364afca8fde65314f9cd2cb89c24d5b6977d6708518ae04dec1b92e1e4c4f6a51a635331207a3f89c460e066be80f898d", 0x6e}, {&(0x7f0000001740)="2872cf4ad8b9899fdd0934a6014a2f66250803b68701d355cd68a7c1e88fb6c100ed5b547cc05c3d8ef1f58c342270803abe716192451e47267a5c1e7012fb0357ad9c18617581f4b294542272c714dc0704f96a176be71c2d7a4a22f4b96ad6629692d295a8b06346dd555f5906e0c7c156dc273e002e0a536144e966adbe5c87ff75d17dd82e6ee47ce6fbdc4568447e3e5520f9495f29f050b5e00c4f3a754672cedfb0ec33180c5f0c8935826d977dbccedabb3ee0ff82217f814ea9d29f2c", 0xc1}], 0x6, &(0x7f0000001880)=[{0x5c, 0x111, 0x5, "6a844a9d4bcd4b16d90af3d43166857f6ad12dfe68bb1d4ab477ed7c55361f8328c9a4a09a666a8feb2492872084f6fa3b2e1fee1ecf216b71a3225f8916bcb143746bdf54be786a5257a196490c8d"}], 0x5c}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001900)="47881d089774bf542b5d8aa59ee0052e4b85964e3181", 0x16}, {&(0x7f0000001940)="59a71d972b89e2aa782f07377df8eb2eaf55a7ce7969925f1bab79e6efcecc07c97b86e55ab75943877df3b8c0b1db1911782ca59dbbd0fbb7a4bcfa73ddeb4b34568632dd60653ff42c6c119e0797e69e88ca3636b1ab497a3946bfa67636a354674638970c16bc93f30e968ecb", 0x6e}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)="46c047705885449e131c0be73e13c94b4bbeda161fb31191d8edadf305aeb14f840e50ef857df4fa42", 0x29}, {&(0x7f0000001a40)="47dddf172083758e9f17b07ff62afb49a1f3ad5b02df15e3ff9bd50f354336eab07927172bd7ac20450cd233756ab7c0bbc357f24684d7fb12aa5e0d2cac887344530f60e4c982c22c37b3733844b84d703d937519fd2566e35be9915ac21bbea233fb2ab68e0a0d0c3fc46d7ed1f471158eda309ece827ef08735721f8c8278a05f16cf4049b46b19a44a57f02375ce52f8e2abed5d6de0455ad3c1206872c4a8c7392d93f8104dbb13e24aeb6969206da5", 0xb2}, {&(0x7f0000001b00)="4fc2f8841374928cfb2507f8998b22e3d2ca0cbffb2df953fa98a96b69434d3c91762e277b0f3b11d9ede9cfda404fc0d993dc1908e88b7c697b65ee1fda8ba127e618174dbd64f21dd714a0c40a384ff9dfcdc8b4ebd97728029df7b0215e5675a36ed8fe40a0cfac0b0899db68f3ced1bec6cf33b4e26e41cc6b6d1d11a5d4f9b1685f250b5455f4eb056a8e6284aa054f10b7fb843b9050d16ec3aed75afe2f97ced80541a6486aaa3eccdb0ec17381b943b098d2d70daff83a41cafc9fcb50f4759cf86357f49e56ea6c51bcf91fbd9ea3ea622a58d2a9a33e2ae4d482ae94072dd66bfceced3930029738347b9f", 0xf0}], 0x6, &(0x7f0000001c40)=[{0x5c, 0xff, 0x7, "651a33c14495e30a4463d40bd8c2c78b3c034ad2f93b278c4af18a772ad45da067058c7632e6b838e21dc720026125f24e9e0495d4fdac1b33d0ecedf2ff61fc80de0b90d44a81d5025c6867b4af"}, {0x90, 0x102, 0x5, "5e5c6b8a03759c6bfa40e9fa435a070e74924faecc56043de9b96a6c323762e695cf6cc4c27a728604afb41542164b14d2c7fe7a280b7f37685d64ae10d01b70b6e44203e7f1b41bdee792faf5d58eacf5c6425103194ba2c6f7dd73be36e6888538d144b34b327a3711a08865b9de86a8071b449aa8b469e1287678713a816e2cd8c1"}], 0xec}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001d40)="037df7b8b14e497057045a1de8913a44b84c3156346489df3530a687a1402bad4e79c56a8852e7df4b099b33350349791ca83dcf51d4a778c234c87ced51a1bcdbd2cc51eac25dff6a7e0df0cb347470a74f40e14b8b0290d3413cee545a089d3cfb727619587fdc54395fb29ac69b2913d71bde905d631feec5d287225493354107aeffebeeb916ea589091fb0f288dde12b40702553508c78de75738bf488a264be19a5ab27222a7a859ae9154b3d5c58847f25b1e349f4e3079df172a5ac209844bc7271dd9d5a9011a1788b5be532de072c8bd897a856def44eefbca6d011c6d81e29735272954e4dc4c4c279b6d06e25e4f34ec92681749e8b008c5c60fb52228e0d05f8dc381cdadb2c9a01048ed08cc076facd28500a7d6c9e096689442e8e3002f39a530279fdbe5547d4eec20cf32081b2124bfedfb01d6750000e9456c9db26b4a38ff6c618ab2e83e0e9bdc9870703b4dedb5d113214b1aaf08f61e3b576db8b787ef7e0c713f868d8e843d40a06874674ac65cc9cc2f00e92cb55cd51bb1c19ba2c6f4f99e954fae91977f1401ea277738aaa1628265ee9b762e1954459abf3b3852cfe890497d2a0de78fbc1fdf4775e6420f959a580f8dd592e1565c927331219008b5e5299b8b7c12ae11ea260cab7c354133048fb4f3affe3c2724ccd0ccfd0cd51bbc9bf339b3276c89a0b8457dcaf69519a657bfd22c4a211c25749b48bf5a669172f32f3f2e23736432f8fb4116710584b49e66e47ef7dbe8fda1961ca299c752abf014835d6071b6a61ae6b8bfdd016c522717ceb45f8ca934ece6a1c92cda3195aa8adee22960bdded734da7610c119c19c60ac821119d35121be85bd44ba2c3009dd54f4c14350928bd24296bc2024941380b13adcfd02ab29bb5b4795d0f8fd02334a62485e9aa46d85691365fbbc758be6f06b6d694b66ebad8577a228ae524e99620b1d7e5a369125c2cb0b930cd7e5a385c84ae301323937c6513a7b6e47351fabb7e869fc34ecf0d7510f56db3d087e2fc0be1a5d10d614c5c1678dd1c5009edc818d11f12f262205d4c59abd73f45a3cc3d9724d24fa6bb7a0729eefc737ac73a8f1d2690e8193cfe80d8be071891e8a0238a7be2c5916d516bf73209b3c542437abd84db1bb2b10a10f880c40a6ba828479cef2993d4f0de214c2deb89e4eb23bbb42ebf869d9790ae076c2e29d6f51ed984b899daf37c19ef7dd6fcb8b3d71f47019e6dbc1ce910abeec90f511a046e937a92751c1c57873be5bfb09e890ce9d5bac300ac64ae01b3491d1ce72023434a7b5fc4d10b7be6880c6866f5ecaf48c4705dabca1389a3b48b64afa6dfea2592a59d5c8ee48acb14918044c5d72320a058a836aa6a1818cae04489e471e4b6113be85adf588929d4508f4708cb70fc740d21b48384d4d7062c91037b49b150b9ae2568bee625b57a4ad2b06f11f68235395922d6b6f51faaf073948d7c5810589472ffb82b2b560f1c371090d149a9db14992e53904920a58f378b04f30042374d3fc1a8187281d772b45a734df6ea9f1036eabdfbb1a04782d683577717afc5dd7676093b298d47172e8b612dd9e7461fc7d8199f04d33a47c920d3170bc68cf58178871dd702ad11098800a94fda65aee504138798455742aae2321b6452e2a04e11cf168130df666267c5951e45d956493d481ea2dcf2a998823d00b4c05a51b57fc7a26f6dff575e754d7c2f2639d7beb609a31df69d16eac18cc0ead0e070836ac2602e8175da6014bd1928193bfae62f2335f9bf799017e80567d227d308b3807f5bdc4ef99111c5ed117a73389f418e8b0b12e66eab18410a977e7b20655c8cc6431c08c761d4e6e67837c696e857b1cec5903c5b6cc0079883dd558b70f5a68f9ffc6f99829b8784f2cb192346602233c865ceeb7349e390170a3481c3e276817965b8ca367f5a0e1eb196bcfc7e6e8f4639aa55f51e471d49ce0d61c2029d6976e070da7c418cf6256a768401d0ad2b3827f7fb3dd513e3b8c1877744d888e91465b981853e34d71d3f2007015fd4af66b72f383b848c3ecab3f7da81e02420b428925ad9964136041ffbc1f8bf718ca0b31b5cb866bf8f51dab2a0cc4ccac2512a49ec5cd7895a89bac08bb3813fdf6061d1ca82f75744d05c72949bcfb72aaf1c81bbe1f71dc4b4b0a6a820b48da4090f90da5e30b895c7371d28c5ebc07305d63777eeffde283db81ed3d8ac06e6de6be6e90bfbb968db3e49027f43371a47ef748cdab3c8d319804152bd35792b6476f29c3a8616c1464384c748bf1f18697dd009ce33a8f586a94f6deae6c92d768910a93dcb0cd6662f0a2b3fec3699ba9c38c68d05bf2866e39911faf0562db2a795f001f74670066791c3b3d378b5adc9ff6abf884861ea935097ae3f9674aab4ad3c680895bbeeccf4fd7d87691fd8e3fe4666b6e5aa18a1fa17926a09c3258762da13fa796831ca9cf15371369f53a3602c66307758cf3c405185d060426aa6819c873f0994bedc9d70c9c5504650a131382cfabcfc632635d8ddc907c5dd8c0f2b4474241e79850af86da07c201366fee838d38e24b4fd60e4d77bf573810c735e62b07caf130ea88f57337e67056fe1c15920a8d290f47a33f8ae766d03f76914a4c2c930b531535a164da4d507b36083adf073283bb97c1418d73a2a2b4fec8b120f4e406401c9b4ca67bd0c498f50728e14b1850e2cc5f282e1aafc29f6e7a58694ae32f5bc6f1a17918ff61a1241189b897c394b1f8ad823e607411b7ca572a493286f7c1f25248a14b10fda537ed3bbc206a46d8579f17bdc16af498339e354adc42f681603cc1a3fd370a3a651df1ba0f09ec2b84eaec1f0ac7eb74bae9e017a24302a56a3953a0eb974a8143806cacc1626d3dee39ed0ae74b70d8fe96ccca92977a05b00c7b901e9bbfe7fd6d8b195aa383e754703b7df2d1ce32ec3a75ee852e00f679e3d31a24e569ddae8c035fc0b0659d38a5c108702eec8e72a64b8a075892f038905f3afd9158985b35b0bc2877de16be9840e93e1bdd4989dcec456964a6f48e2320fe95a400062c7db8af0277c0882d5a250c14e8b7830786c6e478d9cb3473f4535ba0bf2dbae73c2595f77b7c3471f2c5f90ccf46d1cae8b9ea25ab27ccfd6c39742fe70befb8663a64d98bf08bb8d000b43423798eb0cbcaeb8987cd367b0b9dda265c14b8249c6f913c62b1301380ebc705d8628399653c65210f6f6548c02724aa65a38b6a65e2659ec0ec38afe51c4c07354395550901f5077f4e3c8dc512639be4d9afbc64013b25342199a62a321b2c51f436149fad32b0debf2db76aa74fe7e70b0535b29e7c641121c4fc9240d91f4a8fd2f677fff3f80c9e2e744542160dd638ffa2f575f659cd8bf64dc66cf0b75b69198a107cf3fe100f2fc6447247ac40524d380d692528b4b37d03dc9bdf55ceb5c73b12a8c079f4a7aa1022cd5cf2853eb59f1d18d071a1e813d8b37f3bc271fea44b3288522803cf916a1356a0465c4a7dd905c7c11da967bf8e3ffaad16d29b0ab86a872e49e0cb0d2604767b85f9bc6e96d9ad1504d96a9a96a339b889e9fb82327c06ba756cbe7822b4fa03c6677a8695231ed428b6c16713cbfe8898bc1c6ee394ae14ec9582df8af886685d05db7a8390c622604d58a6dca583d3cd907c0d4ef2afde7e1bb582d568cd2f53378c59530559bd3b9c0a4417a48ab217d35cc5ef16ca41bf66b68bfd4f322c716accd3536323c056654a8c68614f29627dae36966ec0088ed4d33b02c9568b8b764267871629d79681f8649f01c264197b733e88adfbee5328ab2d60d6f6bfc4bfab64533e716970df91e050d22b3e8ade13b15ceaa71f29039120a337ed7ccc1b095ad9fcefb1ca07198d29aafc95bb24a5d45ac64a3125c39ef5e2ae3d8f5216d8c78771198aa60968f8674c118a643d7cc3f45dbd25efcf0edd8ee9ffda77b7a4e3bf5812fd36f1a02f6ae7ad06d20d38456e4f0e447f5082bfd44d3f2e6fa4acd4d51df9889fdd213baf8aadbb8bd6948b464d7c4fa92e83d3b1797faa30e149a1a9be83ec412f4cc903c12fd308b6ba25bf906b7bccaa0252043fc83517bb5ec72ad17c6801ac9e6670199c3a62b40021dd54592b40a4a2d7527bc5eb0e3c2d6b9b98a9e53cb06d7a6534e582dd80ad56073548d9b656aeb0cf4751a94c2580a8f0262a600074eca7bfa1b0160a5492a1dc53326a760f0d062592e93914c3deb6a7d1e101edb4f9dfe61028a4d73634946a56f0edc2da36dfd29bf2a9d50d71dee1c3eb73e5d940a2d17e8d925d07de14da3031937e4eb4791b35a90310a3f21ce00d2d2ec6d7e3e6900d24c24b765bf01647ab3a0105820a42c188f4631d8a124a36102beee60f10fecefa56010bae653f5d4c42696bea4840250632b548452a65f363802913c81977eb3109942c647c1daf78f958ffa76e7dfdc4f63a833c5049de6493328e12161e03c861f13329415bd9e668fe848b285ef781f9403d2f83b2a376b978984a7e7cd64e927c8b497b5e4b762701f23243e2326439ba69da005c61f28376c09ac65459f9687da9ea6fbfbb67e9c6b700eaf7f2ce2281d627e505ff1488d0c09b766875bc4bb7c3fa752468da6fd5c1effca83d9cb31b1a9ebbaa932d876eba3fd6e195000b24484bf98bddb23e9b9106a178c83e5252086b31534c9aa272102e044c477333e224554e06882d573258f8861e7e8af1dd54d035ec05f875421b93acb53f56431809f2e4d8956735ef8cdcf2bf3b5d4c6dd9d236d658e7f34cd263529451b06a6f310b39872218525037f1560377c5a9c0380f23d52fadafeaf92f12562b04970373c8ab9f5723e4e4b54de6635d3138069e08ff5f556286461fbf3bb30bb30dd0d4c975d02ef21fe7fc6cfbf8fc807e74c52cf33ae137b7574ebb350412056def758f9991c7ddbe2e78139f051d8e1123db7015413b236996651d7104942d30d781f805395e2a552c7297eef12d61ca87e42e950dce4e171f433b54318ec07933c870a5f0f36de4dd1d6b0e1e333e4c30a5f13c20b53db2b38838c64229df48a7e4aa478585b610b180165496358087f7c1dafd20e88a1a0b2c38df974623622712e93a8bddf2bb4f78fb6647a7e92c518ae7d3a8c4084d0f2f2fae704dceba544beead6607ec6641004c7f873d55c00e624dec47b550df2a331d82642839101f1c28256b806aaeb46d0372d3df1f67b58d8512e2af8211cbf3c64bb55eb43243b503475cac98ccf13067ff60ba3d685515ff2e6833af1b33b016e3e62a0514abd84249a2b2db8fb7ffbc3933c90840f02cc5d878f55a0f4d418f31a2ce7e80444d1dccef27a421ed228e7b69868e6e6d0704aaa8b017a3ee77f114c440bfdd55d0608ce183f6500952871e8796c77ae30dc9cc07e376e4a478e3bf67179bbcf51b14b1f7889f0469b37330b9114c601fcfc9af47990d87d04df77ec95280384af136fe65fa5860dcfa28e01c33fa3e7cc6cd94ceb96461758e4fdcfb48b30d759d8372b15a02a4de16d1a776ae9f20c3c07d41f900a95f766f0498c6fa7138e463b05475740c833722ba3b00ee1a1765f052152b63f6acc94819b9b22a223771a7725ea849e5719ea7e5858612ab220c16ebdaa0449fe49e5583fc511125ad9a614f87508186ff5324061a5aacd3c64dbafc17795061c688e611136437610bb3b9d764309bd93fc49a27f28fd306851e4d4d7d2152aeea40ad5d41861c935e43377cd5d89acfff9f5a73ea1145bf", 0x1000}, {&(0x7f0000002d40)="c49a6e183b4d9ec5888c318d03b6ef73a75a94e5a2a55db817e9ddf629bf98653156ed1bf1366a862477c5e64123e117d4020d72ee3afa683be8ac2b1d081d798744cdb31178a4184f596edcac2e07ed6bbe873c9d417ee19d6d103a94e4b366d9a428ef0db62d17dd14d155f747046e0702c6b0105adf8dc39bcd478169f9be60", 0x81}], 0x2, &(0x7f0000002e40)=[{0xec, 0x118, 0x8aad, "f31d1e4625c4ae61619b5674c2587b1a22b097f4a1cd5556d254cdff6dfac351e18caae0e5ead40a39a6d23310e84e963da160b03370a66b4294bcf3e276e06797e4ff16338c58e5f2839f169939ccb913b2ada5328ae5dd5044064a3a2295a92aba1e9f1ba8acbefbc485e9734265e50887b602afb53e5a14175a6a0de6cb664d49a7f24c5bffbb5639cdf4e2b44b2050eff4efe6ece9b9b75c766d0db531217d913cdf58f8028dfd5355ae2ae6c17cb22515dcb1eb7c00296c0872d97e0668c8c3041bca2c36d6ef35578f3cd0ba73a1fe2042b962a00585acf68a00"}, {0x24, 0x14, 0x0, "cd1d4f9cd437e0a8d60c8dee4d7fcc5a30bdc6cb95606b"}, {0xe4, 0x108, 0x5305c58f, "74a1a9a915a9cb1145cb2c752454760b7275cc05727591bfeb3cbd528bec2150ea829a05abdeb797c13dc30a4a2597d3edaca6595dab21e3358c0bcb8e91c95f4d460a0f15bb10bd0c977403f9244b4c18106cf0fb66126025fc36eec99fbdf49ea4fecf2072204bc3cab6668f870927b6cf9906e7dda72409fd45b7af1030d95e6f63f3b74581adba187cbc2a2eb9890ede798dbee195bb5a3353732b7c7d8cb63a88aa91b298e5a7bb9a178225b53725d58e45e8a0acf39d1874800311a2e153b86763f3ec4602e42a4e5843a37dfad04b7dfbae"}, {0x100c, 0x11, 0x1, "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"}, {0xb4, 0x113, 0x200, "de893bea0db69dcb395af7d2d9daf44d828c7072b36d777ba33c628c6798d52f54a2597fb9c77b94a685440430e6106f472cfb63ca110171b85ecc373883ecedad45bbe73fa9245d872d09a8fe810f01086419edc3101cfbc2ed3b10b0e788139b67f05b378eebb6e998352eabdfe6fcfe42fe5f0bc4b16105aa84adda3158fb52a210e3371ee19a94c87f46c3ac314ccabce526685df1f9ac873cd768b692f32ff174266df2fa2b"}, {0x9c, 0x10a, 0x0, "e171e687a4a9bf9f6404d84bdad0702b5a612991fc0b0b032c9182b77b73f04c10e2a9366be63842be05e475bc29412c087ba921f075b9e9bcd5688812d1378efc32994c4c5768d99c1438fe0f90a369a7799f02a8a5cd64f569a71ad357cf285cafe196e94e4bf7a08b5d9eed05edbdca3f78bdd34140f7f8fd2bb1ee24864f722438be25723e91164c2113cc2f3060"}], 0x1350}}], 0x2, 0x0) r6 = fsopen(&(0x7f0000000140)='fuse\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x1, @stop_pts=0x1}) socket$nl_route(0x10, 0x3, 0x0) 4.21862079s ago: executing program 1 (id=1918): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fcntl$setpipe(r0, 0x407, 0x6) r1 = openat$vimc1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x3, 0x1}, {0x4c, 0x2}, @period={0x5d, 0xa370, 0x0, 0x0, 0x2, {0xfffd, 0x1, 0x4, 0x2}, 0x0, 0x0}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) ioctl$VIDIOC_DQBUF(r1, 0xc04c5611, &(0x7f0000000140)=@userptr={0x5, 0xa, 0x4, 0x0, 0x5, {0x0, 0x2710}, {0x5, 0x1, 0x0, 0x6, 0x50, 0x0, "f902c3d9"}, 0x0, 0x2, {&(0x7f00000000c0)}, 0x40, 0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000000), 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) unshare(0x22020600) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') setns(r6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0xc0010117, 0x0, 0x490}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000280)=@abs, 0x6e) 4.20124102s ago: executing program 0 (id=1919): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x5fa5, &(0x7f0000000480)={0x0, 0x0, 0x200, 0x0, 0x348}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r5, 0x4, 0x5}, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r6, 0x0, 0x0, 0xffffffffffffffff, 0x1400}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.503714387s ago: executing program 2 (id=1920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB="0501fffffffffcdbdf252e00000008000300", @ANYRESHEX=r0, @ANYBLOB="050034008c0000000c004900"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4000d080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@private1, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x6, 0x0, 0x100, 0xffffffffffffffeb, 0x12, r5}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x78, 0x4d, 0xb4, 0x8, 0x7fa, 0x846, 0xbc83, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x3, 0x3, 0x34, 0xc9, 0xc7, 0xfe, [], [{{0x9, 0x5, 0x7, 0x13, 0x200, 0x10, 0x2, 0x1d}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0xb, 0x5, 0x81}}, {{0x9, 0x5, 0xc, 0x1, 0x0, 0x1, 0x12, 0x1}}]}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x10}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffff, 0xffe0}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "01"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r11, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000009ef09acfed896a7eba72af46229403a4357855f9930c8bdf690d085787c5f39a2bd738e99d54fd9ddbcc333e1b892872905c830d56cd1b078ae53768735727206d0f43c99f7a6c7cd95fbde85746a6df469149dacc24cb1c3c43d3556bea9f598465e5c4efb79a3ff44e3a02fa8812287096349e0f0d4d7da09ced191e5d03888893f0c473681eefc11d5b6871b48e944317236237e57997537666bced4bb7e1f2f6b1208b47ac", @ANYRES16=r1, @ANYBLOB="00082dbd7000fedbdf254c0000000c00580010000000000000000c0058000200000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40018}, 0x20000000) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0x160, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @remote, 0x80}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7ff, @local, 0xb99b}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5dc3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xe3, @private1, 0xe}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8778}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb}}}}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x98}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x71}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2aa5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc00}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.282074581s ago: executing program 0 (id=1921): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}}, 0x0) 3.074747904s ago: executing program 0 (id=1922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00', 0x112}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 2.897544775s ago: executing program 4 (id=1923): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000690000004300000001"], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = gettid() kcmp(r4, r4, 0x1, 0xffffffffffffffff, r2) sched_getattr(r4, &(0x7f0000000840)={0x38}, 0x38, 0x0) prctl$PR_MCE_KILL_GET(0x22) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='vv=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2000000000001}}, 0x30) socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101042, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlink(&(0x7f0000000040)='.\x00') 2.896226452s ago: executing program 0 (id=1933): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}}, 0x0) 2.895686434s ago: executing program 1 (id=1924): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) read(r1, &(0x7f0000000040), 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x4003, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x351a, 0x100, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046, 0x1004}) 2.650377901s ago: executing program 0 (id=1925): syz_emit_ethernet(0x46, &(0x7f0000001380)={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @remote}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x11, 0x0, @loopback, @remote}}}}}}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8106"], 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000980)=""/126, 0x7e}, {&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f0000000580)=""/93, 0x5d}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f00000001c0)=""/25, 0x19}], 0x6}, 0x40000100) sigaltstack(&(0x7f0000001340)={&(0x7f0000000240)=""/4088, 0x0, 0xfffffe16}, 0x0) sigaltstack(&(0x7f00000000c0)={0x0, 0x80000000}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0x1) syz_open_dev$I2C(&(0x7f0000000080), 0xb12, 0x880802) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$alg(0x26, 0x5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001580)=ANY=[@ANYBLOB="ec000000", @ANYBLOB="21516b2e5d05994fa1d5cdc04e227f028ab0062815c40603beead65b256340d289eb5d7533be6507ffa02a81bd4629c5961120c3ebe258f7cb81f8964522a71d3ec8c1", @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003", @ANYBLOB="680b0d3a0000000075f02c"], 0xec}, 0x1, 0x0, 0x0, 0x20040011}, 0x20040050) r7 = syz_open_dev$I2C(&(0x7f0000001240), 0x7, 0xcc080) ioctl$I2C_RETRIES(r7, 0x701, 0x7ffa) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000001300)='bond_slave_1\x00') setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4d0, 0x258, 0xc8, 0x320, 0x190, 0x190, 0x408, 0x408, 0x408, 0x408, 0x41d, 0x6, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'virt_wifi0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x24}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0xffffffff], [], 'pimreg\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x5, 0x22}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x3f, 0x9, 0x4, 0x13}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1, 0x80}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) 2.608706456s ago: executing program 1 (id=1926): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) read(r1, &(0x7f0000000040), 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x4003, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x351a, 0x100, 0x0, 0x0, 0x4000) 2.037548261s ago: executing program 1 (id=1927): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e23, 0x6, @private2, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000740)="4fd2", 0x2}], 0x1}}], 0x2, 0x40408d1) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000000)="0200009021ec5d37", 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x8, 0x8, 0x6, 0x1, 0x2, 0xb, 0x8, 0xe796, [{0x101, 0x8000, 0xfff, 0xdea2}, {0x4c8f, 0x0, 0x0, 0x7}, {0x4, 0x0, 0x0, 0x8}, {0xe, 0x7, 0xfffffff7, 0xb464}, {0x4932d8f8, 0x5, 0x83, 0x10000}, {0x8, 0x9, 0x0, 0x8}]}}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0xffff}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 1.889101457s ago: executing program 4 (id=1928): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setresgid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.855155379s ago: executing program 2 (id=1929): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000690000004300000001"], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = gettid() kcmp(r4, r4, 0x1, 0xffffffffffffffff, r2) sched_getattr(r4, &(0x7f0000000840)={0x38}, 0x38, 0x0) prctl$PR_MCE_KILL_GET(0x22) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='vv=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101042, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unlink(&(0x7f0000000040)='.\x00') 1.793019304s ago: executing program 1 (id=1930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) gettid() r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r5], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r7, r6], &(0x7f0000000180)=[0x31], 0x0, 0x8000000000009}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14}}, 0x98}}, 0x0) 1.791627274s ago: executing program 4 (id=1931): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'vfat\x00', 0x3a, '\\fat\x00', 0x3a, './file0'}, 0x31) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x10a02, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet(0x2, 0x1, 0x5) sendmsg$inet(r2, &(0x7f0000000740)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000001a00)="78f6611986b034b36b2d1e65c85f54c3758c99472738ef749c345d75e2fb07384d2334df7535d9d45fbf5bacc10494bc7f04672acfd6a9416fc7e1bda6bfb39a461ff597ac350fab76ecfe62387605ff4b2e5651c68d4d6bfb309c4898c8b4dce13af08a635d2473cd5501be58d612ce015262a9abec6ffa5318863f4631bba871bca6cf120851fdf50a96fc71024c27de057b7f1baeba8f5731ef7089b05fde705cf7e41cc9dbb7045faeab754302f51e593f60c4554d4bce0504694309f357d6313331c0bce59a4fd3bdc242200a43ac0bfa29704631c94ea31bdeed0399b8418496001e898caeff5cad5ce7885428410ef34f5de01bb1a38561748e4d98befef7df942bedd3b303aa6330e19251ca8f319e4427e344b33dafabbf4d521055e751c1feaef5dd6308fed6b8082866e8e1567d9ca57ad14d573e8846aaa48d7016c12517a85207184c2c553ce9b497041ddaac0c0e6713606e5140b3188631895ccd89fa0c06deb146c4b8ea33b66ec5dce6fe5d82e7e83a3ef3847f0400d1266b23b78aea63cd484966a82da28c09348c019d8f9348325586fc492aceb7c88fbfd7c815019749cb6530894e4b8b74cbc303a6b2446d8a010247", 0x1ba}, {&(0x7f0000000400)="265a640dbd", 0x5}, {&(0x7f0000000740), 0xfffffffffffffd6b}, {&(0x7f0000000940)="fb6883c0fab2e63d0ad35afb2d5c5e0edb2e3a4c43e08379deec509d74167250fd6a59e8928108330289e6b3a909be77c23834c9196a46b374e56d93e310dbd0a51603eb760b2d4f9bbd42f34c1325843edf86bb8594d4164c276122142b4a4d8b434df043a641c3e5c23c41e997", 0x6e}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="a8f4651d4ed1274e1a5ed1bd7f7178c4d282d8b9fe44f3243c1a62f5a3fe0755525b8aead58621c56f8f27f1e74cfe2b5afbbc56c148fa84bbd84c", 0x3b}], 0x6, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES8, @ANYRES64=r1], 0x40}, 0x4081) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'vlan0\x00', @multicast}) r3 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x13}, @ioring_restriction_sqe_op={0x1, 0xbd32dcd6e16288f0}], 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x0, 0x400000, 0x0, &(0x7f00000007c0)=""/95, 0x0, 0x40000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0xeeee8000, 0x0, 0x0}, {0x1000, 0x71, &(0x7f0000000640)=""/113}]}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000000c0)={0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r4], 0x0}, 0x0) 1.620955256s ago: executing program 3 (id=1932): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000300)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x133d, 0x0, 0x8, 0x0, 0x0) shutdown(r3, 0x1) socket$netlink(0x10, 0x3, 0xa) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r7, 0x200004) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffff"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000180), &(0x7f0000000600)}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc01c7c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000240)}) userfaultfd(0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x604ab000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 965.872883ms ago: executing program 2 (id=1934): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000210001000004d72a6dbe13145596c7fcd3c20a28fda56c685900000a00000000000000000000001afd1d"], 0x24}}, 0x0) prctl$PR_SET_SECCOMP(0x3f, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'rose0\x00', {0xa}, 0x7}) 913.06529ms ago: executing program 2 (id=1935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x46c}, 0x1, 0x0, 0x0, 0x40008d1}, 0x20001050) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x46c}, 0x1, 0x0, 0x0, 0x40008d1}, 0x20001050) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) (async) 649.73268ms ago: executing program 1 (id=1936): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000480)=[{0x9, 0xa200, 0x0, 0x0}, {0x1900, 0x800, 0x0, 0x0}, {0x8001, 0x9001, 0x0, 0x0}], 0x3}) 0s ago: executing program 3 (id=1937): ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) kernel console output (not intermixed with test programs): pid=10591 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 445.698528][ T5986] pwc: recv_control_msg error -71 req 04 val 1100 [ 445.709198][T10594] FAULT_INJECTION: forcing a failure. [ 445.709198][T10594] name failslab, interval 1, probability 0, space 0, times 0 [ 445.737165][ T5986] pwc: recv_control_msg error -71 req 04 val 1200 [ 445.750783][ T31] audit: type=1326 audit(1765905420.915:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 445.796916][ T5986] pwc: Registered as video103. [ 445.839103][ T5986] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input47 [ 445.863341][ T31] audit: type=1326 audit(1765905420.915:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 445.893491][ T5986] usb 3-1: USB disconnect, device number 49 [ 445.921672][T10594] CPU: 1 UID: 0 PID: 10594 Comm: syz.2.1300 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.921703][T10594] Tainted: [L]=SOFTLOCKUP [ 445.921709][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 445.921719][T10594] Call Trace: [ 445.921727][T10594] [ 445.921735][T10594] dump_stack_lvl+0x189/0x250 [ 445.921756][T10594] ? __pfx____ratelimit+0x10/0x10 [ 445.921771][T10594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.921783][T10594] ? __pfx__printk+0x10/0x10 [ 445.921799][T10594] ? __pfx___might_resched+0x10/0x10 [ 445.921810][T10594] ? fs_reclaim_acquire+0x7d/0x100 [ 445.921823][T10594] should_fail_ex+0x414/0x560 [ 445.921840][T10594] should_failslab+0xa8/0x100 [ 445.921853][T10594] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 445.921867][T10594] ? __d_alloc+0x37/0x6f0 [ 445.921879][T10594] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 445.921895][T10594] __d_alloc+0x37/0x6f0 [ 445.921910][T10594] d_alloc_pseudo+0x21/0xc0 [ 445.921923][T10594] alloc_file_pseudo+0xcc/0x210 [ 445.921937][T10594] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 445.921949][T10594] ? __pfx_anon_inode_make_secure_inode+0x10/0x10 [ 445.921970][T10594] __anon_inode_getfile+0x129/0x200 [ 445.921986][T10594] io_uring_create+0x542/0x940 [ 445.922001][T10594] __se_sys_io_uring_setup+0x235/0x240 [ 445.922015][T10594] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 445.922042][T10594] ? __pfx_ksys_write+0x10/0x10 [ 445.922055][T10594] ? __do_fast_syscall_32+0xbe/0x590 [ 445.922073][T10594] __do_fast_syscall_32+0x1f7/0x590 [ 445.922084][T10594] ? rcu_is_watching+0x15/0xb0 [ 445.922095][T10594] ? do_fast_syscall_32+0x34/0x80 [ 445.922108][T10594] do_fast_syscall_32+0x34/0x80 [ 445.922118][T10594] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.922130][T10594] RIP: 0023:0xf70cd539 [ 445.922139][T10594] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 445.922148][T10594] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 445.922160][T10594] RAX: ffffffffffffffda RBX: 0000000000003454 RCX: 0000000080000200 [ 445.922167][T10594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.922173][T10594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.922178][T10594] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 445.922184][T10594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.922202][T10594] [ 446.210341][ T31] audit: type=1326 audit(1765905420.915:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 446.233335][ T31] audit: type=1326 audit(1765905420.915:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 446.293399][ T31] audit: type=1326 audit(1765905420.915:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 446.323429][ T31] audit: type=1326 audit(1765905420.915:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 446.353701][ T31] audit: type=1326 audit(1765905420.915:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 446.384073][ T31] audit: type=1326 audit(1765905420.915:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 446.555575][ T31] audit: type=1326 audit(1765905420.925:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 446.592724][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.599318][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.633659][ T5898] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 448.797605][ T5898] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 448.812526][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.842305][ T5898] usb 2-1: Product: syz [ 448.852711][ T5898] usb 2-1: Manufacturer: syz [ 448.862329][ T5898] usb 2-1: SerialNumber: syz [ 449.229121][ T5898] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 449.242018][T10638] syzkaller0: entered promiscuous mode [ 449.247882][T10638] syzkaller0: entered allmulticast mode [ 449.261304][T10638] openvswitch: netlink: Message has 592 unknown bytes. [ 449.268351][ T5898] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 449.283560][T10638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.300125][ T5898] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 449.332458][ T5898] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 449.366796][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 449.386293][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1311'. [ 449.444316][T10638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1313'. [ 449.472103][ T5986] usb 2-1: USB disconnect, device number 36 [ 449.800363][T10650] bond0: entered promiscuous mode [ 449.813291][T10650] bond_slave_0: entered promiscuous mode [ 449.840997][T10650] bond_slave_1: entered promiscuous mode [ 449.853574][T10650] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 449.887097][T10650] batadv0: entered promiscuous mode [ 449.893196][T10650] debugfs: 'hsr1' already exists in 'hsr' [ 449.899170][T10650] Cannot create hsr debugfs directory [ 449.922051][T10650] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 449.973649][T10650] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 450.025602][T10650] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 450.055421][T10650] bond0: left promiscuous mode [ 450.060246][T10650] bond_slave_0: left promiscuous mode [ 450.142384][T10650] bond_slave_1: left promiscuous mode [ 450.210949][T10650] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 450.497896][T10650] batadv0: left promiscuous mode [ 451.614370][T10674] sctp: [Deprecated]: syz.1.1322 (pid 10674) Use of int in max_burst socket option. [ 451.614370][T10674] Use struct sctp_assoc_value instead [ 451.913430][ T5915] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 452.063436][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 452.069914][ T5915] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 452.078897][ T5915] usb 3-1: config 179 has no interface number 0 [ 452.093980][ T5915] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 452.109828][ T5915] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 452.121536][ T5915] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 452.138071][ T5915] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 452.149968][ T5915] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 452.168366][ T5915] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 452.177575][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.197379][T10681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.101992][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'. [ 454.118686][T10715] IPv6: Can't replace route, no match found [ 454.130931][T10719] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 454.148476][T10719] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 454.278968][T10674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.459573][ T5986] usb 3-1: USB disconnect, device number 50 [ 454.459645][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 454.474101][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 454.745984][T10708] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 454.761464][T10708] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 454.786259][T10708] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 454.807175][T10708] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 454.820904][T10708] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 454.830689][T10708] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 454.886793][ T5898] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 454.964735][T10708] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 454.974612][T10708] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 455.019877][T10708] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 455.043640][T10708] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 455.053457][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 455.066659][ T5898] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 455.087641][ T5898] usb 4-1: config 179 has no interface number 0 [ 455.099518][ T5898] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 455.185831][ T5898] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 455.202123][ T5898] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 455.217540][ T5898] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 455.231962][ T5898] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 455.254692][ T5898] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 455.278583][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.310787][T10739] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 456.391424][T10770] netlink: 'syz.4.1343': attribute type 10 has an invalid length. [ 457.557985][T10786] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1346'. [ 458.003743][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 458.215028][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.226223][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.258141][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 458.304081][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 458.312111][ T9] usb 2-1: Manufacturer: syz [ 458.388970][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 458.397290][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 458.416221][ T5898] usb 4-1: USB disconnect, device number 26 [ 458.439515][T10806] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1349'. [ 458.453315][T10806] netlink: 'syz.3.1349': attribute type 1 has an invalid length. [ 458.465544][ T9] usb 2-1: config 0 descriptor?? [ 459.087529][ T9] usbhid 2-1:0.0: can't add hid device: -32 [ 459.093858][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 459.527685][T10831] fuse: Bad value for 'rootmode' [ 459.695067][T10838] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1354'. [ 460.593584][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1358'. [ 460.602674][T10859] IPv6: Can't replace route, no match found [ 460.853380][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 460.958087][T10874] loop5: detected capacity change from 0 to 7 [ 460.991521][ T5898] usb 2-1: USB disconnect, device number 37 [ 461.013376][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 461.056016][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 461.069728][T10874] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 461.083462][ T9] usb 3-1: config 179 has no interface number 0 [ 461.090032][T10874] loop5: partition table partially beyond EOD, truncated [ 461.113709][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 461.123580][T10874] loop5: p1 size 2989602745 extends beyond EOD, [ 461.125069][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 461.133994][T10874] truncated [ 461.151045][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 461.187511][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 461.210937][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 461.253828][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 461.302742][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.484297][T10864] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 462.835735][T10905] mmap: syz.4.1364 (10905): VmData 37486592 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 463.319003][ T9] usb 3-1: USB disconnect, device number 51 [ 463.325005][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 463.325042][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 463.636044][T10924] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 463.918111][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 464.030402][T10932] syzkaller0: entered promiscuous mode [ 464.054128][T10932] syzkaller0: entered allmulticast mode [ 464.325591][ T9] usb 3-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 464.493168][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 464.508022][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'. [ 464.540600][T10937] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1374'. [ 464.626517][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.648398][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.673316][ T9] usb 3-1: Product: syz [ 464.703341][ T9] usb 3-1: Manufacturer: syz [ 464.728443][ T9] usb 3-1: SerialNumber: syz [ 464.964930][T10922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.010860][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.040023][T10922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.052825][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.186030][T10923] input: syz1 as /devices/virtual/input/input48 [ 465.402877][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 465.444431][ T9] usb 3-1: USB disconnect, device number 52 [ 465.641404][T10952] bridge0: port 3(macvtap1) entered blocking state [ 465.661736][T10952] bridge0: port 3(macvtap1) entered disabled state [ 465.685074][T10952] macvtap1: entered allmulticast mode [ 465.691697][T10952] bridge0: entered allmulticast mode [ 465.702281][T10952] macvtap1: left allmulticast mode [ 465.710354][T10961] netlink: 'syz.3.1378': attribute type 5 has an invalid length. [ 465.718566][T10952] bridge0: left allmulticast mode [ 466.285293][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 466.463328][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 466.507108][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 466.533362][ T9] usb 3-1: config 179 has no interface number 0 [ 466.553405][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 466.593593][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 466.605226][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 466.616708][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 466.628543][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 466.702920][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 466.731058][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.766016][T10967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 467.342780][T10983] netlink: 'syz.3.1385': attribute type 10 has an invalid length. [ 467.690349][T10986] syzkaller0: entered promiscuous mode [ 467.696361][T10986] syzkaller0: entered allmulticast mode [ 468.212015][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 468.226088][T10995] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1389'. [ 468.481074][T10998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 469.183681][ T9] usb 3-1: USB disconnect, device number 53 [ 469.189629][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 469.189660][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 469.216740][T11013] tipc: Enabled bearer , priority 0 [ 469.230918][T11013] syzkaller0: entered promiscuous mode [ 469.303160][T11013] syzkaller0: entered allmulticast mode [ 469.343976][T11013] tipc: Resetting bearer [ 469.353724][T11016] FAULT_INJECTION: forcing a failure. [ 469.353724][T11016] name failslab, interval 1, probability 0, space 0, times 0 [ 469.366802][T11016] CPU: 1 UID: 0 PID: 11016 Comm: syz.2.1394 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.366830][T11016] Tainted: [L]=SOFTLOCKUP [ 469.366836][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.366847][T11016] Call Trace: [ 469.366854][T11016] [ 469.366863][T11016] dump_stack_lvl+0x189/0x250 [ 469.366890][T11016] ? __pfx____ratelimit+0x10/0x10 [ 469.366916][T11016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.366937][T11016] ? __pfx__printk+0x10/0x10 [ 469.366973][T11016] should_fail_ex+0x414/0x560 [ 469.367004][T11016] should_failslab+0xa8/0x100 [ 469.367024][T11016] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 469.367052][T11016] ? __alloc_skb+0x255/0x430 [ 469.367068][T11016] ? napi_skb_cache_get+0x4a5/0x780 [ 469.367085][T11016] ? napi_skb_cache_get+0x151/0x780 [ 469.367107][T11016] __alloc_skb+0x255/0x430 [ 469.367128][T11016] ? __pfx___alloc_skb+0x10/0x10 [ 469.367156][T11016] ? inet6_rt_notify+0xaf/0x470 [ 469.367176][T11016] inet6_rt_notify+0x170/0x470 [ 469.367199][T11016] ? atomic_notifier_call_chain+0x16e/0x180 [ 469.367224][T11016] fib6_add_rt2node+0x187f/0x3470 [ 469.367264][T11016] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 469.367285][T11016] ? kmem_cache_alloc_noprof+0x3ce/0x710 [ 469.367313][T11016] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 469.367334][T11016] ? fib6_add_1+0xe7f/0x1460 [ 469.367369][T11016] fib6_add+0x8da/0x18a0 [ 469.367400][T11016] ? __pfx_fib6_add+0x10/0x10 [ 469.367428][T11016] ? ip6_route_add+0xc9/0x1b0 [ 469.367450][T11016] ip6_route_add+0xde/0x1b0 [ 469.367474][T11016] ipv6_route_ioctl+0x35c/0x480 [ 469.367501][T11016] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 469.367547][T11016] ? __might_fault+0xb0/0x130 [ 469.367576][T11016] inet6_compat_ioctl+0x374/0x380 [ 469.367597][T11016] ? __pfx_inet6_compat_ioctl+0x10/0x10 [ 469.367634][T11016] compat_sock_ioctl+0x17d/0xc80 [ 469.367664][T11016] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 469.367690][T11016] ? __fget_files+0x3a0/0x420 [ 469.367710][T11016] ? __fget_files+0x2a/0x420 [ 469.367732][T11016] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 469.367754][T11016] __ia32_compat_sys_ioctl+0x543/0x840 [ 469.367783][T11016] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 469.367801][T11016] ? __fget_files+0x3a0/0x420 [ 469.367828][T11016] ? fput+0xa0/0xd0 [ 469.367850][T11016] ? ksys_write+0x22a/0x250 [ 469.367865][T11016] ? exc_page_fault+0x82/0x100 [ 469.367884][T11016] ? __pfx_ksys_write+0x10/0x10 [ 469.367905][T11016] ? __do_fast_syscall_32+0xbe/0x590 [ 469.367928][T11016] __do_fast_syscall_32+0x1f7/0x590 [ 469.367948][T11016] ? rcu_is_watching+0x15/0xb0 [ 469.367967][T11016] ? do_fast_syscall_32+0x34/0x80 [ 469.367992][T11016] do_fast_syscall_32+0x34/0x80 [ 469.368010][T11016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.368032][T11016] RIP: 0023:0xf70cd539 [ 469.368048][T11016] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 469.368063][T11016] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 469.368081][T11016] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000890b [ 469.368094][T11016] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.368105][T11016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.368115][T11016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 469.368126][T11016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.368155][T11016] [ 469.368525][T11012] tipc: Resetting bearer [ 469.867299][T11012] tipc: Disabling bearer [ 470.108372][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1396'. [ 470.507933][T11029] syzkaller0: entered promiscuous mode [ 470.590420][T11029] syzkaller0: entered allmulticast mode [ 470.640835][T11036] tap0: tun_chr_ioctl cmd 35111 [ 472.463019][T11054] program syz.4.1405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.002724][T11097] FAULT_INJECTION: forcing a failure. [ 475.002724][T11097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.052674][T11097] CPU: 1 UID: 0 PID: 11097 Comm: syz.1.1419 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.052702][T11097] Tainted: [L]=SOFTLOCKUP [ 475.052707][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.052719][T11097] Call Trace: [ 475.052727][T11097] [ 475.052734][T11097] dump_stack_lvl+0x189/0x250 [ 475.052758][T11097] ? __pfx____ratelimit+0x10/0x10 [ 475.052783][T11097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.052803][T11097] ? __pfx__printk+0x10/0x10 [ 475.052828][T11097] ? __might_fault+0xb0/0x130 [ 475.052859][T11097] should_fail_ex+0x414/0x560 [ 475.052889][T11097] _copy_from_user+0x2d/0xb0 [ 475.052911][T11097] get_compat_msghdr+0xad/0x4a0 [ 475.052936][T11097] ? __pfx_get_compat_msghdr+0x10/0x10 [ 475.052959][T11097] ? kstrtouint+0x6e/0xe0 [ 475.052989][T11097] ___sys_sendmsg+0x193/0x2a0 [ 475.053012][T11097] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.053038][T11097] ? rcu_read_lock_any_held+0xb3/0x120 [ 475.053084][T11097] ? __fget_files+0x2a/0x420 [ 475.053104][T11097] ? __fget_files+0x3a0/0x420 [ 475.053133][T11097] __sys_sendmsg+0x164/0x220 [ 475.053155][T11097] ? __pfx___sys_sendmsg+0x10/0x10 [ 475.053184][T11097] ? __pfx_ksys_write+0x10/0x10 [ 475.053203][T11097] ? __do_fast_syscall_32+0xbe/0x590 [ 475.053229][T11097] __do_fast_syscall_32+0x1f7/0x590 [ 475.053248][T11097] ? rcu_is_watching+0x15/0xb0 [ 475.053266][T11097] ? do_fast_syscall_32+0x34/0x80 [ 475.053289][T11097] do_fast_syscall_32+0x34/0x80 [ 475.053308][T11097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.053327][T11097] RIP: 0023:0xf7f74539 [ 475.053340][T11097] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 475.053354][T11097] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 475.053381][T11097] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 475.053392][T11097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 475.053402][T11097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.053411][T11097] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 475.053421][T11097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.053449][T11097] [ 475.683471][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 475.823436][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 475.945996][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.956413][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 475.978606][T11115] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 475.996178][ T10] usb 4-1: device descriptor read/64, error -71 [ 476.002580][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.021559][ T9] usb 3-1: config 0 descriptor?? [ 476.080042][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 476.509227][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 476.663431][ T10] usb 4-1: device descriptor read/64, error -71 [ 476.843876][ T10] usb usb4-port1: attempt power cycle [ 477.413420][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 477.460282][ T10] usb 4-1: device descriptor read/8, error -71 [ 477.703657][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 477.734841][ T10] usb 4-1: device descriptor read/8, error -71 [ 477.853773][ T10] usb usb4-port1: unable to enumerate USB device [ 478.233878][ T5915] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 478.406374][ T5915] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 478.415752][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.440336][ T5915] usb 2-1: config 0 descriptor?? [ 478.464607][ T5915] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 478.544451][ T9] pwc: recv_control_msg error -71 req 02 val 2700 [ 478.551409][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 478.592643][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 478.635763][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 478.703373][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 478.715121][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 478.735052][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 478.769072][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 478.796576][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 478.822671][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 478.851047][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 478.878296][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 478.895695][T11132] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1430'. [ 478.911963][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 478.960375][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 478.997536][ T5915] gspca_cpia1: usb_control_msg 03, error -71 [ 479.000943][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 479.031749][ T5915] gspca_cpia1: usb_control_msg 01, error -71 [ 479.038878][ T9] pwc: Registered as video103. [ 479.071760][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input49 [ 479.081871][ T5915] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 479.132863][ T5915] usb 2-1: USB disconnect, device number 38 [ 479.170897][ T9] usb 3-1: USB disconnect, device number 54 [ 479.208952][T11154] rtc_cmos 00:00: Alarms can be up to one day in the future [ 480.757759][T11177] tipc: Enabled bearer , priority 0 [ 480.857864][T11183] tipc: Resetting bearer [ 481.504093][T11198] netem: unknown loss type 0 [ 481.516580][T11198] netem: change failed [ 482.514082][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 482.793466][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 482.814417][T11232] netlink: 'syz.3.1464': attribute type 6 has an invalid length. [ 482.822213][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 482.869490][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 482.886248][ T10] usb 3-1: config 179 has no interface number 0 [ 482.915079][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 482.944551][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 482.980913][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 483.115602][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 483.179875][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 483.272627][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 483.295095][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.466037][T11214] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 485.355811][ T10] usb 3-1: USB disconnect, device number 55 [ 485.361791][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 485.361839][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 485.405258][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'. [ 485.891052][T11272] netlink: 'syz.0.1476': attribute type 10 has an invalid length. [ 485.963535][ T5915] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 486.123420][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 486.131024][ T5915] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1023 [ 486.142142][ T5915] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 1024 [ 486.156468][ T5915] usb 4-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.176542][ T5915] usb 4-1: config 1 interface 0 has no altsetting 0 [ 486.190621][ T5915] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.210631][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.224289][ T5915] usb 4-1: Product: syz [ 486.230268][ T5915] usb 4-1: Manufacturer: 핾놰㬇í‘խꞗá⳥⪣㒟ì…ą᭩刉囹ﱜ쟲锕⹱십쨵々ᤳଲ᎗彫å‡â±€î¤³â—§á†å‹ë‚°ë²ƒé®ê¥¯ã¼–韭살牱眼ኂæ¤åŒ¥î†ê½‚언닶⠗쇥랙破鸅밧㚟ï‚å¾²î˜ [ 486.253756][ T5915] usb 4-1: SerialNumber: syz [ 486.268584][T11268] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 486.281683][T11268] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 486.424142][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 486.424159][ T31] audit: type=1326 audit(1765905461.695:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11278 comm="syz.0.1479" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe4539 code=0x0 [ 486.591368][ T5915] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 486.647263][ T5915] usb 4-1: USB disconnect, device number 31 [ 487.893366][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 488.095748][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 488.113418][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 488.126065][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 488.142613][ T10] usb 4-1: config 179 has no interface number 0 [ 488.174207][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 488.211801][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 488.236450][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 488.266516][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 488.297360][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 488.361526][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 488.412804][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 488.425453][T11311] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 488.432729][T11311] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 488.475461][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.527023][T11298] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 488.837355][T11317] netlink: 'syz.2.1487': attribute type 10 has an invalid length. [ 489.613487][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 489.650397][ T5915] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 489.793484][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 489.827039][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 489.827576][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.845776][ T10] usb 3-1: config 179 has no interface number 0 [ 489.845894][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 489.868227][ T5915] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 489.885104][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.899949][ T5915] usb 2-1: config 0 descriptor?? [ 489.944158][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 490.004114][ T5915] pwc: Askey VC010 type 2 USB webcam detected. [ 490.019267][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 490.079442][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 490.185557][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 490.426192][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 490.549731][ T5986] usb 4-1: USB disconnect, device number 32 [ 490.549781][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 490.564011][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 490.591924][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.711194][T11338] random: crng reseeded on system resumption [ 490.738201][T11338] netlink: 380 bytes leftover after parsing attributes in process `syz.3.1494'. [ 490.758673][T11338] netlink: 'syz.3.1494': attribute type 6 has an invalid length. [ 491.013534][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 491.141193][T11324] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 492.747388][ T5915] pwc: recv_control_msg error -71 req 02 val 2700 [ 492.768849][ T5915] pwc: recv_control_msg error -71 req 02 val 2c00 [ 492.788495][ T5915] pwc: recv_control_msg error -71 req 04 val 1000 [ 492.804704][ T5915] pwc: recv_control_msg error -71 req 04 val 1300 [ 492.833392][ T5915] pwc: recv_control_msg error -71 req 04 val 1400 [ 492.859719][ T5915] pwc: recv_control_msg error -71 req 02 val 2000 [ 492.892739][ T5915] pwc: recv_control_msg error -71 req 02 val 2100 [ 492.922428][ T5915] pwc: recv_control_msg error -71 req 04 val 1500 [ 492.933026][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1496'. [ 492.982843][ T5915] pwc: recv_control_msg error -71 req 02 val 2500 [ 493.014491][ T5915] pwc: recv_control_msg error -71 req 02 val 2400 [ 493.051351][ T5915] pwc: recv_control_msg error -71 req 02 val 2600 [ 493.080051][ T5915] pwc: recv_control_msg error -71 req 02 val 2900 [ 493.110990][ T5915] pwc: recv_control_msg error -71 req 02 val 2800 [ 493.137910][ T5915] pwc: recv_control_msg error -71 req 04 val 1100 [ 493.183982][ T5915] pwc: recv_control_msg error -71 req 04 val 1200 [ 493.251575][ T5915] pwc: Registered as video103. [ 493.307038][ T5915] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input50 [ 493.358234][ T5915] usb 2-1: USB disconnect, device number 39 [ 493.896547][ T5915] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 493.910373][T11359] netlink: 'syz.0.1500': attribute type 10 has an invalid length. [ 494.091236][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.130962][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.180510][ T5915] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 494.200706][T11363] rtc_cmos 00:00: Alarms can be up to one day in the future [ 494.213606][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 494.235814][ T5915] usb 2-1: SerialNumber: syz [ 494.523098][T11348] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 494.583131][ T5915] usb 2-1: 0:2 : does not exist [ 494.584069][ T9] usb 3-1: USB disconnect, device number 56 [ 494.584119][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 494.602408][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 494.674442][ T5915] usb 2-1: USB disconnect, device number 40 [ 494.777260][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.704084][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 495.847765][T11383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 495.875786][ T9] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 495.885125][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.913590][ T9] usb 2-1: config 0 has no interface number 0 [ 495.922642][ T9] usb 2-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 495.949314][ T9] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 495.960576][ T9] usb 2-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.977495][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 495.988173][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1509'. [ 495.998418][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.020784][ T9] usb 2-1: Product: syz [ 496.036347][ T9] usb 2-1: Manufacturer: syz [ 496.041357][ T9] usb 2-1: SerialNumber: syz [ 496.053914][T11388] netlink: 'syz.4.1510': attribute type 9 has an invalid length. [ 496.062956][ T9] usb 2-1: config 0 descriptor?? [ 496.077781][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1510'. [ 496.090505][T11378] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 496.148733][T11388] macvlan2: entered promiscuous mode [ 496.154197][T11388] hsr0: entered promiscuous mode [ 496.159431][T11388] macvlan2: entered allmulticast mode [ 496.173284][T11388] hsr0: entered allmulticast mode [ 496.180162][T11388] hsr_slave_0: entered allmulticast mode [ 496.191192][T11388] hsr_slave_1: entered allmulticast mode [ 496.204502][T11393] netlink: 'syz.3.1512': attribute type 10 has an invalid length. [ 496.341474][T11378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.360569][T11378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.385176][T11378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.413712][T11378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.436109][ T9] usb 2-1: USB disconnect, device number 41 [ 496.506415][T11404] fuse: Unknown parameter 'vv' [ 496.574251][T11402] netlink: 'syz.3.1516': attribute type 10 has an invalid length. [ 497.284076][T11410] FAULT_INJECTION: forcing a failure. [ 497.284076][T11410] name failslab, interval 1, probability 0, space 0, times 0 [ 497.323300][T11410] CPU: 0 UID: 0 PID: 11410 Comm: syz.2.1520 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.323330][T11410] Tainted: [L]=SOFTLOCKUP [ 497.323337][T11410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.323348][T11410] Call Trace: [ 497.323356][T11410] [ 497.323363][T11410] dump_stack_lvl+0x189/0x250 [ 497.323390][T11410] ? __pfx____ratelimit+0x10/0x10 [ 497.323416][T11410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.323437][T11410] ? __pfx__printk+0x10/0x10 [ 497.323467][T11410] ? __pfx___might_resched+0x10/0x10 [ 497.323492][T11410] should_fail_ex+0x414/0x560 [ 497.323522][T11410] should_failslab+0xa8/0x100 [ 497.323543][T11410] kmem_cache_alloc_noprof+0x88/0x710 [ 497.323567][T11410] ? ptlock_alloc+0x20/0x70 [ 497.323592][T11410] ptlock_alloc+0x20/0x70 [ 497.323614][T11410] pte_alloc_one+0x7a/0x370 [ 497.323632][T11410] ? __pte_alloc+0x1d/0x1a0 [ 497.323650][T11410] __pte_alloc+0x25/0x1a0 [ 497.323664][T11410] ? do_raw_spin_lock+0x121/0x290 [ 497.323690][T11410] do_pte_missing+0x2b2f/0x3330 [ 497.323708][T11410] ? do_raw_spin_unlock+0x122/0x240 [ 497.323731][T11410] ? _raw_spin_unlock+0x28/0x50 [ 497.323762][T11410] handle_mm_fault+0x1b26/0x32b0 [ 497.323785][T11410] ? mt_find+0x15c/0x5e0 [ 497.323810][T11410] ? handle_mm_fault+0xdb/0x32b0 [ 497.323839][T11410] ? __pfx_handle_mm_fault+0x10/0x10 [ 497.323884][T11410] ? __pfx_find_vma+0x10/0x10 [ 497.323908][T11410] ? vma_is_secretmem+0xd/0x50 [ 497.323932][T11410] __get_user_pages+0x1650/0x29f0 [ 497.323985][T11410] get_user_pages_remote+0x2f1/0xac0 [ 497.324017][T11410] ? __pfx_get_user_pages_remote+0x10/0x10 [ 497.324038][T11410] ? mmap_read_lock_maybe_expand+0xb0/0x3c0 [ 497.324059][T11410] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 497.324076][T11410] ? create_init_stack_vma+0x538/0x680 [ 497.324103][T11410] get_arg_page+0x104/0x330 [ 497.324125][T11410] ? up_write+0x1ac/0x410 [ 497.324148][T11410] ? __pfx_get_arg_page+0x10/0x10 [ 497.324182][T11410] copy_string_kernel+0x191/0x2a0 [ 497.324213][T11410] do_execveat_common+0x3c5/0x6a0 [ 497.324241][T11410] __ia32_compat_sys_execveat+0xca/0xe0 [ 497.324263][T11410] __do_fast_syscall_32+0x1f7/0x590 [ 497.324283][T11410] ? rcu_is_watching+0x15/0xb0 [ 497.324301][T11410] ? do_fast_syscall_32+0x34/0x80 [ 497.324321][T11410] do_fast_syscall_32+0x34/0x80 [ 497.324337][T11410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 497.324355][T11410] RIP: 0023:0xf70cd539 [ 497.324370][T11410] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 497.324384][T11410] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000166 [ 497.324403][T11410] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000 [ 497.324415][T11410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 497.324424][T11410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.324433][T11410] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 497.324441][T11410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.324466][T11410] [ 497.643651][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 497.731319][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'. [ 497.818236][ T9] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 497.832370][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.841572][ T9] usb 2-1: Product: syz [ 497.846042][ T9] usb 2-1: Manufacturer: syz [ 497.850646][ T9] usb 2-1: SerialNumber: syz [ 498.089232][ T9] gspca_main: pac207-2.14.0 probing 093a:2476 [ 498.100987][ T9] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 498.117751][ T9] uvcvideo 2-1:13.0: probe with driver uvcvideo failed with error -22 [ 498.134896][ T9] usb 2-1: USB disconnect, device number 42 [ 498.196242][T11425] netlink: 'syz.2.1526': attribute type 10 has an invalid length. [ 499.696398][T11455] random: crng reseeded on system resumption [ 499.719265][T11455] netlink: 380 bytes leftover after parsing attributes in process `syz.1.1533'. [ 499.740284][T11455] netlink: 'syz.1.1533': attribute type 6 has an invalid length. [ 499.748131][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'. [ 499.913389][ T5915] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 499.987730][T11458] trusted_key: syz.0.1534 sent an empty control message without MSG_MORE. [ 499.998529][T11458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1534'. [ 500.011031][T11458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1534'. [ 500.090105][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.123623][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.172797][ T5915] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 500.240375][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 500.259125][ T5915] usb 4-1: SerialNumber: syz [ 500.504969][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.750687][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.415580][T11469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1537'. [ 502.604294][ T5915] usb 4-1: 0:2 : does not exist [ 502.616397][ T5915] usb 4-1: unit 5 not found! [ 502.810696][ T5915] usb 4-1: USB disconnect, device number 33 [ 503.044805][T11487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1544'. [ 506.202875][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1553'. [ 506.470613][T11541] bridge3: port 1(veth3) entered blocking state [ 506.477595][T11541] bridge3: port 1(veth3) entered disabled state [ 506.487953][T11541] veth3: entered allmulticast mode [ 506.500239][T11541] veth3: entered promiscuous mode [ 506.625085][T11541] bridge3: port 2(veth0_to_bond) entered blocking state [ 506.642911][T11541] bridge3: port 2(veth0_to_bond) entered disabled state [ 506.699638][T11541] veth0_to_bond: entered allmulticast mode [ 506.787065][T11541] veth0_to_bond: entered promiscuous mode [ 507.157672][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1562'. [ 507.314129][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 507.463471][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 507.511383][T11545] bridge3: port 3(veth5) entered blocking state [ 507.547337][T11545] bridge3: port 3(veth5) entered disabled state [ 507.598414][T11545] veth5: entered allmulticast mode [ 507.675639][T11545] veth5: entered promiscuous mode [ 507.718867][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 507.738513][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 507.751107][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 507.789725][T11565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.817997][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 507.829322][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.995921][ T9] usb 4-1: config 0 descriptor?? [ 508.027102][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.033626][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.212749][T11569] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 508.281319][T11569] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 508.452140][ T9] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 509.466189][T11599] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 509.633421][ T10] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 509.787202][ T10] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 509.801114][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 509.825253][ T10] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 510.041780][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.132550][ T10] usb 3-1: config 0 descriptor?? [ 510.353656][ T10] usb 3-1: USB disconnect, device number 57 [ 510.723626][ T9] usb 4-1: reset high-speed USB device number 34 using dummy_hcd [ 510.873732][ T9] usb 4-1: device descriptor read/64, error -71 [ 511.123336][ T9] usb 4-1: reset high-speed USB device number 34 using dummy_hcd [ 511.253853][ T9] usb 4-1: device descriptor read/64, error -71 [ 511.573362][ T9] usb 4-1: reset high-speed USB device number 34 using dummy_hcd [ 511.684333][ T9] usb 4-1: device descriptor read/8, error -71 [ 511.933405][ T9] usb 4-1: reset high-speed USB device number 34 using dummy_hcd [ 511.957466][ T9] usb 4-1: device descriptor read/8, error -71 [ 512.173370][ T5915] usb 4-1: USB disconnect, device number 34 [ 512.366423][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1585'. [ 512.403642][ T5915] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 512.563624][ T5915] usb 4-1: device descriptor read/64, error -71 [ 512.813331][ T5915] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 512.846755][T11657] fuse: Unknown parameter 'vv' [ 512.953368][ T5915] usb 4-1: device descriptor read/64, error -71 [ 513.065451][ T5915] usb usb4-port1: attempt power cycle [ 513.977327][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1595'. [ 514.248675][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1598'. [ 514.467288][T11685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1599'. [ 514.757441][T11693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1602'. [ 514.864311][ T31] audit: type=1326 audit(1765905490.145:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.3.1601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 515.057792][T11694] pim6reg: entered allmulticast mode [ 515.123508][ T31] audit: type=1326 audit(1765905490.165:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.3.1601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 515.314170][T11697] bridge1: port 1(veth3) entered blocking state [ 515.314228][ T31] audit: type=1326 audit(1765905490.165:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.3.1601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 515.346209][ T31] audit: type=1326 audit(1765905490.165:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.3.1601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 515.346404][T11697] bridge1: port 1(veth3) entered disabled state [ 515.450066][T11707] fuse: Unknown parameter 'vv' [ 515.505857][T11697] veth3: entered allmulticast mode [ 515.513827][T11697] veth3: entered promiscuous mode [ 515.535842][T11702] bridge1: port 2(veth0_to_bond) entered blocking state [ 515.615808][ T31] audit: type=1326 audit(1765905490.165:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.3.1601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 515.684370][ T31] audit: type=1326 audit(1765905490.165:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.3.1601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 515.732026][ T31] audit: type=1326 audit(1765905490.165:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.3.1601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 515.758508][T11702] bridge1: port 2(veth0_to_bond) entered disabled state [ 515.788570][T11702] veth0_to_bond: entered promiscuous mode [ 515.936027][ T31] audit: type=1326 audit(1765905490.165:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.3.1601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 516.020588][ T31] audit: type=1326 audit(1765905490.165:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.3.1601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 516.094375][ T31] audit: type=1326 audit(1765905490.165:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.3.1601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 516.237845][T11709] bridge1: port 3(veth5) entered blocking state [ 516.274686][T11709] bridge1: port 3(veth5) entered disabled state [ 516.397317][T11709] veth5: entered allmulticast mode [ 516.404529][T11709] veth5: entered promiscuous mode [ 516.424621][T11690] pim6reg: left allmulticast mode [ 516.731584][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1607'. [ 516.816746][T11719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.868473][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1608'. [ 516.894050][T11721] netlink: 'syz.0.1606': attribute type 10 has an invalid length. [ 517.810405][T11749] netlink: 'syz.1.1614': attribute type 1 has an invalid length. [ 517.895012][T11749] syz.1.1614 (11749): /proc/11746/oom_adj is deprecated, please use /proc/11746/oom_score_adj instead. [ 518.093424][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 518.250940][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 518.310407][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 518.385212][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 518.432928][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 518.442168][ T9] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 518.450501][ T9] usb 4-1: Product: syz [ 518.750517][ T9] usb 4-1: Manufacturer: syz [ 518.757110][ T9] usb 4-1: SerialNumber: syz [ 518.825900][ T9] usb 4-1: config 0 descriptor?? [ 518.865612][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 519.097673][T11760] fuse: Unknown parameter 'vv' [ 519.943819][ T6209] usb 4-1: Failed to submit usb control message: -110 [ 519.963510][ T6209] usb 4-1: unable to send the bmi data to the device: -110 [ 519.982925][ T6209] usb 4-1: unable to get target info from device [ 520.014781][ T6209] usb 4-1: could not get target info (-110) [ 520.063534][ T6209] usb 4-1: could not probe fw (-110) [ 520.406295][T11769] netlink: 'syz.0.1619': attribute type 10 has an invalid length. [ 520.756385][ T5915] usb 4-1: USB disconnect, device number 38 [ 521.020481][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1625'. [ 521.080024][T11792] netlink: 'syz.2.1624': attribute type 9 has an invalid length. [ 521.166394][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 521.267680][T11792] macvlan2: entered promiscuous mode [ 521.278913][T11792] hsr0: entered promiscuous mode [ 521.294077][T11792] macvlan2: entered allmulticast mode [ 521.325050][T11792] hsr0: entered allmulticast mode [ 521.342974][T11792] hsr_slave_0: entered allmulticast mode [ 521.441519][T11792] hsr_slave_1: entered allmulticast mode [ 521.801729][T11802] fuse: Unknown parameter 'vv' [ 522.367142][T11809] netlink: 'syz.4.1629': attribute type 9 has an invalid length. [ 522.377562][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 522.397283][T11809] macvlan3: entered promiscuous mode [ 522.412480][T11809] macvlan3: entered allmulticast mode [ 522.781367][T11817] netlink: 'syz.4.1631': attribute type 10 has an invalid length. [ 522.793610][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 523.016244][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 523.022946][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.052107][ T9] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 523.078920][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 523.112028][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 523.126611][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.169785][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1634'. [ 523.201264][ T9] usb 4-1: config 0 descriptor?? [ 523.271346][T11826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.444096][ T9] mcp2200 0003:04D8:00DF.000F: item 0 4 0 9 parsing failed [ 523.451757][ T9] mcp2200 0003:04D8:00DF.000F: can't parse reports [ 523.479094][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 523.494941][ T9] mcp2200 0003:04D8:00DF.000F: probe with driver mcp2200 failed with error -22 [ 523.636820][ T9] usb 4-1: USB disconnect, device number 39 [ 523.751643][T11840] binder_alloc: 11839: pid 11839 spamming oneway? 1 buffers allocated for a total size of 4096 [ 523.766271][T11840] binder_alloc: 11839: pid 11839 spamming oneway? 2 buffers allocated for a total size of 5120 [ 523.839502][T11841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1638'. [ 523.913585][T11840] binder: BINDER_SET_CONTEXT_MGR already set [ 523.921777][T11840] binder: 11839:11840 ioctl 4018620d 80000100 returned -16 [ 524.233359][ T5986] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 524.395258][ T5986] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.407823][ T5986] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 524.421393][ T5986] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 524.766134][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.809103][ T5986] usb 4-1: config 0 descriptor?? [ 524.822483][ T5986] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 524.835463][ T5986] dvb-usb: bulk message failed: -22 (3/0) [ 524.889749][ T5986] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 524.904194][ T5986] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 524.917206][ T5986] usb 4-1: media controller created [ 524.928489][ T5986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.948350][ T5986] dvb-usb: bulk message failed: -22 (6/0) [ 524.957449][ T5986] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 524.975726][ T5986] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input52 [ 525.003481][ T5986] dvb-usb: schedule remote query interval to 150 msecs. [ 525.020423][ T5986] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 525.175714][ T5986] dvb-usb: bulk message failed: -22 (1/0) [ 525.181673][ T5986] dvb-usb: error while querying for an remote control event. [ 525.217932][T11851] fuse: Unknown parameter 'vv' [ 525.304465][ T5986] usb 4-1: USB disconnect, device number 40 [ 525.337334][ T5986] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 525.954980][T11857] FAULT_INJECTION: forcing a failure. [ 525.954980][T11857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.009199][T11857] CPU: 1 UID: 0 PID: 11857 Comm: syz.2.1642 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.009230][T11857] Tainted: [L]=SOFTLOCKUP [ 526.009237][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 526.009247][T11857] Call Trace: [ 526.009255][T11857] [ 526.009263][T11857] dump_stack_lvl+0x189/0x250 [ 526.009295][T11857] ? __pfx____ratelimit+0x10/0x10 [ 526.009321][T11857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.009342][T11857] ? __pfx__printk+0x10/0x10 [ 526.009366][T11857] ? __might_fault+0xb0/0x130 [ 526.009401][T11857] should_fail_ex+0x414/0x560 [ 526.009431][T11857] _copy_from_user+0x2d/0xb0 [ 526.009452][T11857] snd_seq_oss_write+0x515/0x930 [ 526.009492][T11857] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 526.009524][T11857] ? security_file_permission+0x75/0x290 [ 526.009546][T11857] odev_write+0x5a/0x80 [ 526.009565][T11857] ? __pfx_odev_write+0x10/0x10 [ 526.009587][T11857] vfs_write+0x27e/0xb30 [ 526.009613][T11857] ? __pfx_vfs_write+0x10/0x10 [ 526.009631][T11857] ? __fget_files+0x2a/0x420 [ 526.009656][T11857] ? __fget_files+0x2a/0x420 [ 526.009675][T11857] ? __fget_files+0x3a0/0x420 [ 526.009695][T11857] ? __fget_files+0x2a/0x420 [ 526.009723][T11857] ksys_write+0x145/0x250 [ 526.009739][T11857] ? exc_page_fault+0x82/0x100 [ 526.009758][T11857] ? __pfx_ksys_write+0x10/0x10 [ 526.009779][T11857] ? __do_fast_syscall_32+0xbe/0x590 [ 526.009802][T11857] __do_fast_syscall_32+0x1f7/0x590 [ 526.009822][T11857] ? rcu_is_watching+0x15/0xb0 [ 526.009841][T11857] ? do_fast_syscall_32+0x34/0x80 [ 526.009865][T11857] do_fast_syscall_32+0x34/0x80 [ 526.009883][T11857] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 526.009904][T11857] RIP: 0023:0xf70cd539 [ 526.009920][T11857] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 526.009935][T11857] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 526.009958][T11857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000880 [ 526.009970][T11857] RDX: 00000000000002c2 RSI: 0000000000000000 RDI: 0000000000000000 [ 526.009981][T11857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 526.009992][T11857] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 526.010003][T11857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 526.010031][T11857] [ 526.301186][T11865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1644'. [ 526.359523][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 526.701182][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 526.969320][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 526.969337][ T31] audit: type=1326 audit(1765905502.235:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 527.010661][ T31] audit: type=1326 audit(1765905502.235:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 527.038468][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'. [ 527.183047][ T31] audit: type=1326 audit(1765905502.245:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 527.353392][ T31] audit: type=1326 audit(1765905502.245:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 527.389906][ T31] audit: type=1326 audit(1765905502.245:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 527.415559][ T31] audit: type=1326 audit(1765905502.245:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=40000003 syscall=398 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 527.440986][ T31] audit: type=1326 audit(1765905502.245:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 527.464432][ T31] audit: type=1326 audit(1765905502.245:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 527.487394][ T31] audit: type=1326 audit(1765905502.245:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 527.514236][ T31] audit: type=1326 audit(1765905502.245:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05539 code=0x7ffc0000 [ 527.758443][T11881] syz.4.1651 (11881): drop_caches: 2 [ 528.963194][T11907] geneve1: left allmulticast mode [ 528.994073][T11907] geneve1: left promiscuous mode [ 529.389434][T11922] sctp: [Deprecated]: syz.2.1658 (pid 11922) Use of int in max_burst socket option. [ 529.389434][T11922] Use struct sctp_assoc_value instead [ 529.424102][T11907] hsr0: left allmulticast mode [ 529.440683][T11907] hsr_slave_0: left allmulticast mode [ 529.447345][T11907] hsr_slave_1: left allmulticast mode [ 529.463813][T11907] hsr0: left promiscuous mode [ 531.693457][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1670'. [ 531.863705][ T5915] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 532.153604][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 532.172870][ T5915] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 532.209894][ T5915] usb 4-1: config 179 has no interface number 0 [ 532.255055][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 532.293439][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 532.313306][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 532.333782][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 532.353442][ T5915] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 532.566105][ T5915] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 532.613309][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.688490][T11957] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 533.468584][T11978] loop8: detected capacity change from 0 to 8 [ 533.483568][ T5826] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 533.489557][ T5826] loop8: partition table partially beyond EOD, truncated [ 533.506033][ T5826] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 533.543082][T11978] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 533.554259][T11978] loop8: partition table partially beyond EOD, truncated [ 533.571534][T11983] sctp: [Deprecated]: syz.0.1677 (pid 11983) Use of int in max_burst socket option. [ 533.571534][T11983] Use struct sctp_assoc_value instead [ 533.685916][T11978] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 534.558713][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 534.764949][ T10] usb 4-1: USB disconnect, device number 41 [ 534.765307][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 534.780061][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 534.992824][ T5826] udevd[5826]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 535.172737][T11999] tipc: New replicast peer: 172.20.20.63 [ 535.180404][T11999] tipc: Enabled bearer , priority 10 [ 535.762372][T12007] fuse: Unknown parameter 'vv' [ 536.197332][ T10] tipc: Node number set to 1105682574 [ 537.082551][ T31] kauditd_printk_skb: 67 callbacks suppressed [ 537.082568][ T31] audit: type=1326 audit(1765905512.345:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 537.223444][ T31] audit: type=1326 audit(1765905512.355:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 537.272407][ T31] audit: type=1326 audit(1765905512.395:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 537.413696][ T31] audit: type=1326 audit(1765905512.405:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 537.436256][ T31] audit: type=1326 audit(1765905512.405:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 537.823501][ T31] audit: type=1326 audit(1765905512.405:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 537.863753][ T31] audit: type=1326 audit(1765905512.405:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 537.945306][ T31] audit: type=1326 audit(1765905512.405:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 537.983387][ T31] audit: type=1326 audit(1765905512.405:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 538.038473][ T31] audit: type=1326 audit(1765905512.405:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.0.1686" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 538.553452][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 538.754602][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 538.763946][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 538.772957][ T10] usb 4-1: config 179 has no interface number 0 [ 538.893137][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 538.943432][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 539.034941][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 539.136646][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 539.325051][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 539.338578][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 539.364521][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.483100][T12036] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 540.638317][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 541.245448][T12062] netlink: 'syz.1.1700': attribute type 10 has an invalid length. [ 541.302779][T12064] fuse: Unknown parameter 'vv' [ 541.322511][T12066] Invalid logical block size (2304) [ 541.953899][ T10] usb 4-1: USB disconnect, device number 42 [ 541.959839][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 541.959868][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 541.998040][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1704'. [ 542.090534][T12077] netlink: 'syz.3.1704': attribute type 10 has an invalid length. [ 542.109453][T12077] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 542.613065][T12083] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 542.620980][T12083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.220911][T12068] syz.1.1702 (12068): drop_caches: 2 [ 545.122468][T12128] fuse: Unknown parameter 'vv' [ 545.551162][T12132] loop2: detected capacity change from 0 to 7 [ 545.585266][T12132] Dev loop2: unable to read RDB block 7 [ 545.611065][T12132] loop2: unable to read partition table [ 545.622778][T12132] loop2: partition table beyond EOD, truncated [ 545.650595][T12132] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 545.935640][ T31] kauditd_printk_skb: 61 callbacks suppressed [ 545.936624][ T31] audit: type=1400 audit(1765905521.195:1021): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=12133 comm="syz.1.1719" [ 545.987375][T12142] team0: entered promiscuous mode [ 545.994946][T12142] team_slave_0: entered promiscuous mode [ 546.002184][T12142] team_slave_1: entered promiscuous mode [ 546.031816][T12142] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.991191][T12152] bond3: option lp_interval: invalid value (0) [ 546.997855][T12152] bond3: option lp_interval: allowed values 1 - 2147483647 [ 547.134662][T12152] bond3 (unregistering): Released all slaves [ 547.197675][T12155] netlink: 'syz.0.1725': attribute type 9 has an invalid length. [ 547.209092][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'. [ 548.133344][ T5898] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 548.283421][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 548.291620][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 548.402390][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 548.421008][ T5898] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 548.440707][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.450790][ T5898] usb 2-1: Product: syz [ 548.568527][ T5898] usb 2-1: Manufacturer: syz [ 548.573549][ T5898] usb 2-1: SerialNumber: syz [ 548.580300][ T5898] usb 2-1: config 0 descriptor?? [ 548.588862][ T5898] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 548.598355][ T5898] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 549.194359][ T5898] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 549.205655][ T5898] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 549.288596][T12194] netlink: 'syz.4.1738': attribute type 9 has an invalid length. [ 549.299900][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 549.953494][ T5898] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 549.975044][ T5898] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 550.154160][ T5898] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 550.167372][ T5898] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 550.262049][ T5898] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 550.315512][ T5898] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 550.334242][ T5898] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 550.346768][ T5898] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 550.385272][ T5898] usb 2-1: USB disconnect, device number 43 [ 550.754886][T12217] FAULT_INJECTION: forcing a failure. [ 550.754886][T12217] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 550.814652][T12217] CPU: 1 UID: 0 PID: 12217 Comm: syz.4.1744 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.814682][T12217] Tainted: [L]=SOFTLOCKUP [ 550.814689][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.814700][T12217] Call Trace: [ 550.814708][T12217] [ 550.814716][T12217] dump_stack_lvl+0x189/0x250 [ 550.814742][T12217] ? __pfx____ratelimit+0x10/0x10 [ 550.814767][T12217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.814787][T12217] ? __pfx__printk+0x10/0x10 [ 550.814813][T12217] ? fs_reclaim_acquire+0x7d/0x100 [ 550.814841][T12217] should_fail_ex+0x414/0x560 [ 550.814871][T12217] prepare_alloc_pages+0x22b/0x650 [ 550.814898][T12217] __alloc_frozen_pages_noprof+0x123/0x370 [ 550.814923][T12217] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 550.814948][T12217] ? __pfx__copy_from_iter+0x10/0x10 [ 550.814968][T12217] ? policy_nodemask+0x27c/0x720 [ 550.814988][T12217] ? aa_file_perm+0x44c/0x1530 [ 550.815014][T12217] alloc_pages_mpol+0x232/0x4a0 [ 550.815041][T12217] alloc_pages_noprof+0xa9/0x190 [ 550.815063][T12217] anon_pipe_write+0xbf0/0x1460 [ 550.815084][T12217] ? __pfx_aa_file_perm+0x10/0x10 [ 550.815129][T12217] ? __pfx_anon_pipe_write+0x10/0x10 [ 550.815147][T12217] ? common_file_perm+0x1b5/0x220 [ 550.815172][T12217] ? bpf_lsm_file_permission+0x9/0x20 [ 550.815190][T12217] ? security_file_permission+0x75/0x290 [ 550.815217][T12217] vfs_write+0x5c9/0xb30 [ 550.815239][T12217] ? __pfx_anon_pipe_write+0x10/0x10 [ 550.815260][T12217] ? __pfx_vfs_write+0x10/0x10 [ 550.815288][T12217] ? __fget_files+0x2a/0x420 [ 550.815320][T12217] ksys_write+0x145/0x250 [ 550.815336][T12217] ? exc_page_fault+0x82/0x100 [ 550.815355][T12217] ? __pfx_ksys_write+0x10/0x10 [ 550.815376][T12217] ? __do_fast_syscall_32+0xbe/0x590 [ 550.815400][T12217] __do_fast_syscall_32+0x1f7/0x590 [ 550.815437][T12217] ? rcu_is_watching+0x15/0xb0 [ 550.815457][T12217] ? do_fast_syscall_32+0x34/0x80 [ 550.815482][T12217] do_fast_syscall_32+0x34/0x80 [ 550.815502][T12217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 550.815522][T12217] RIP: 0023:0xf7f05539 [ 550.815538][T12217] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 550.815552][T12217] RSP: 002b:00000000f537055c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 550.815577][T12217] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 550.815589][T12217] RDX: 0000000000011000 RSI: 0000000000000000 RDI: 0000000000000000 [ 550.815600][T12217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 550.815610][T12217] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 550.815620][T12217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 550.815649][T12217] [ 551.505793][T12233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1749'. [ 551.600450][T12233] bond1: entered promiscuous mode [ 552.509531][T12246] fuse: Unknown parameter 'vv' [ 553.059261][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1754'. [ 553.425597][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 553.817172][T12268] netlink: 'syz.1.1759': attribute type 10 has an invalid length. [ 553.827143][T12268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.894652][T12273] netlink: 'syz.1.1759': attribute type 12 has an invalid length. [ 553.909590][T12273] syzkaller0: entered promiscuous mode [ 553.917138][T12273] syzkaller0: entered allmulticast mode [ 553.933432][ T5898] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 554.096923][ T5898] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 554.110716][ T5898] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 554.121167][ T5898] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 554.130765][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.144867][T12266] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 554.156736][ T5898] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 554.376559][ T5915] usb 4-1: USB disconnect, device number 43 [ 554.729389][T12292] fuse: Unknown parameter 'vv' [ 554.936532][T12296] hsr0: left allmulticast mode [ 554.941433][T12296] hsr_slave_0: left allmulticast mode [ 554.947300][T12296] hsr_slave_1: left allmulticast mode [ 554.959766][T12296] hsr0: left promiscuous mode [ 555.303812][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 555.473305][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 555.503085][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 555.521134][ T9] usb 3-1: config 179 has no interface number 0 [ 555.533433][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 555.567397][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 555.578891][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 555.590800][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 555.603377][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 555.636930][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 555.661476][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.698385][T12296] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 557.140868][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 557.501657][T12323] netlink: 'syz.4.1775': attribute type 9 has an invalid length. [ 557.509619][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1775'. [ 557.760933][ T5898] usb 3-1: USB disconnect, device number 58 [ 557.760939][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 557.775575][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 558.096675][T12335] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 558.136244][T12336] fuse: Unknown parameter 'vv' [ 558.141222][T12335] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 559.590489][T12350] netlink: 'syz.2.1783': attribute type 10 has an invalid length. [ 559.703455][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 559.885673][ T9] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 559.902364][T12360] netlink: 'syz.2.1787': attribute type 9 has an invalid length. [ 559.912264][ T9] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 559.921282][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 559.930478][ T9] usb 2-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 559.950878][ T9] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 560.135339][ T9] usb 2-1: config 0 has no interface number 0 [ 560.180707][ T9] usb 2-1: config 0 has no interface number 1 [ 560.223401][ T9] usb 2-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 560.281132][ T9] usb 2-1: config 0 interface 197 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 560.369889][ T9] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 560.404079][ T9] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 560.430975][ T9] usb 2-1: config 0 interface 255 has no altsetting 0 [ 560.450644][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 560.464661][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.520276][ T9] usb 2-1: Product: syz [ 560.529729][ T9] usb 2-1: Manufacturer: syz [ 560.534868][ T9] usb 2-1: SerialNumber: syz [ 560.590496][ T9] usb 2-1: config 0 descriptor?? [ 560.606570][T12347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 560.620578][ T9] qmi_wwan 2-1:0.197: probe with driver qmi_wwan failed with error -22 [ 560.733456][ T5898] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 561.495033][ T5898] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 561.514004][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.537660][ T5898] usb 4-1: config 0 descriptor?? [ 561.827340][T12372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.837277][T12372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.931327][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1794'. [ 562.060902][ T5898] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 562.080268][ T9] usb 2-1: USB disconnect, device number 44 [ 562.098053][T12386] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 562.129046][T12386] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 562.263734][T12372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.272457][T12372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.287736][ T5898] [drm:udl_init] *ERROR* Selecting channel failed [ 562.305995][ T5898] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 562.314027][ T5898] [drm] Initialized udl on minor 2 [ 562.326804][ T5898] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 562.367508][ T5898] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 562.389466][ T5913] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 562.414168][T12390] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 562.427104][T12390] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 562.457895][ T5898] usb 4-1: USB disconnect, device number 44 [ 562.467101][ T5913] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 562.894036][ T31] audit: type=1326 audit(1765905538.095:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 562.935869][ T31] audit: type=1326 audit(1765905538.195:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 563.015002][ T31] audit: type=1326 audit(1765905538.205:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 563.125088][ T31] audit: type=1326 audit(1765905538.205:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 563.154697][ T31] audit: type=1326 audit(1765905538.205:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 563.315189][ T31] audit: type=1326 audit(1765905538.205:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 563.337828][ T31] audit: type=1326 audit(1765905538.205:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 563.474432][ T31] audit: type=1326 audit(1765905538.205:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 563.573104][ T31] audit: type=1326 audit(1765905538.205:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 563.631001][ T31] audit: type=1326 audit(1765905538.205:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12391 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f74539 code=0x7ffc0000 [ 563.668723][T12404] netlink: 'syz.3.1799': attribute type 10 has an invalid length. [ 563.804506][T12408] netlink: 'syz.0.1801': attribute type 9 has an invalid length. [ 563.812442][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'. [ 563.842789][T12408] macvlan0: entered promiscuous mode [ 563.862129][T12408] hsr0: entered promiscuous mode [ 563.869316][T12408] macvlan0: entered allmulticast mode [ 563.929642][T12408] hsr0: entered allmulticast mode [ 563.964831][T12408] hsr_slave_0: entered allmulticast mode [ 563.998381][T12408] hsr_slave_1: entered allmulticast mode [ 564.674565][T12435] loop5: detected capacity change from 0 to 7 [ 564.683077][ T5826] Dev loop5: unable to read RDB block 7 [ 564.694437][ T5826] loop5: unable to read partition table [ 564.696476][T12436] input: syz1 as /devices/virtual/input/input53 [ 564.707315][T12438] FAULT_INJECTION: forcing a failure. [ 564.707315][T12438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.713169][ T5826] loop5: partition table beyond EOD, truncated [ 564.722047][T12438] CPU: 0 UID: 0 PID: 12438 Comm: syz.1.1811 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.722073][T12438] Tainted: [L]=SOFTLOCKUP [ 564.722080][T12438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.722090][T12438] Call Trace: [ 564.722097][T12438] [ 564.722104][T12438] dump_stack_lvl+0x189/0x250 [ 564.722130][T12438] ? __pfx____ratelimit+0x10/0x10 [ 564.722156][T12438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.722176][T12438] ? __pfx__printk+0x10/0x10 [ 564.722200][T12438] ? __might_fault+0xb0/0x130 [ 564.722234][T12438] should_fail_ex+0x414/0x560 [ 564.722264][T12438] _copy_from_iter+0x1cd/0x1630 [ 564.722285][T12438] ? __build_skb_around+0x22d/0x3c0 [ 564.722308][T12438] ? __pfx__copy_from_iter+0x10/0x10 [ 564.722323][T12438] ? __alloc_skb+0x2f1/0x430 [ 564.722343][T12438] ? __pfx___alloc_skb+0x10/0x10 [ 564.722362][T12438] ? netlink_sendmsg+0x642/0xb30 [ 564.722382][T12438] ? skb_put+0x11b/0x210 [ 564.722403][T12438] netlink_sendmsg+0x6b2/0xb30 [ 564.722432][T12438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.722463][T12438] ? __import_iovec+0x5d4/0x7f0 [ 564.722480][T12438] ? aa_sock_msg_perm+0xf1/0x1b0 [ 564.722503][T12438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.722519][T12438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.722541][T12438] __sock_sendmsg+0x21c/0x270 [ 564.722567][T12438] ____sys_sendmsg+0x505/0x820 [ 564.722592][T12438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.722615][T12438] ? kstrtouint+0x6e/0xe0 [ 564.722646][T12438] ___sys_sendmsg+0x21f/0x2a0 [ 564.722667][T12438] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.722692][T12438] ? rcu_read_lock_any_held+0xb3/0x120 [ 564.722738][T12438] ? __fget_files+0x2a/0x420 [ 564.722757][T12438] ? __fget_files+0x3a0/0x420 [ 564.722786][T12438] __sys_sendmsg+0x164/0x220 [ 564.722808][T12438] ? __pfx___sys_sendmsg+0x10/0x10 [ 564.722836][T12438] ? __pfx_ksys_write+0x10/0x10 [ 564.722856][T12438] ? __do_fast_syscall_32+0xbe/0x590 [ 564.722877][T12438] __do_fast_syscall_32+0x1f7/0x590 [ 564.722896][T12438] ? rcu_is_watching+0x15/0xb0 [ 564.722914][T12438] ? do_fast_syscall_32+0x34/0x80 [ 564.722937][T12438] do_fast_syscall_32+0x34/0x80 [ 564.722956][T12438] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 564.722976][T12438] RIP: 0023:0xf7f74539 [ 564.722990][T12438] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 564.723005][T12438] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 564.723023][T12438] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 564.723035][T12438] RDX: 0000000000040800 RSI: 0000000000000000 RDI: 0000000000000000 [ 564.723046][T12438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.723056][T12438] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 564.723066][T12438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.723092][T12438] [ 564.754370][T12439] input: syz1 as /devices/virtual/input/input54 [ 565.035111][T12435] Dev loop5: unable to read RDB block 7 [ 565.063639][T12435] loop5: unable to read partition table [ 565.079575][T12435] loop5: partition table beyond EOD, truncated [ 565.102611][T12435] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 565.286306][T12448] netlink: 'syz.2.1813': attribute type 10 has an invalid length. [ 566.103493][ T5986] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 566.303382][ T5898] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 566.394934][ T5986] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 566.403263][ T5986] usb 4-1: config 179 has no interface number 0 [ 566.409525][ T5986] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 566.489717][ T5986] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 566.499882][ T5986] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 566.503892][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 566.511336][ T5986] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 566.511366][ T5986] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 566.511408][ T5986] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 566.554789][ T5898] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 566.556863][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.565357][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.586512][T12462] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 566.598495][ T5986] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 566.614493][ T5986] xpad 4-1:179.65: probe with driver xpad failed with error -90 [ 566.629799][ T5898] pvrusb2: Hardware description: Terratec Grabster AV400 [ 566.652744][ T5898] pvrusb2: ********** [ 566.666051][ T5898] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 566.689811][ T5898] pvrusb2: Important functionality might not be entirely working. [ 566.697580][T12468] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 566.703390][ T5898] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 566.723648][T12468] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.1821'. [ 566.744028][ T5898] pvrusb2: ********** [ 566.810125][T12464] netlink: 'syz.1.1819': attribute type 23 has an invalid length. [ 566.818182][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 566.885033][ T2344] pvrusb2: Invalid write control endpoint [ 566.957202][ T2344] pvrusb2: Invalid write control endpoint [ 566.977259][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 567.014390][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 567.021979][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 567.038114][ T2344] pvrusb2: Device being rendered inoperable [ 567.076219][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 567.091225][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 567.110305][ T2344] pvrusb2: Attached sub-driver cx25840 [ 567.121562][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 567.142358][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 567.305374][ T5986] usb 2-1: USB disconnect, device number 45 [ 567.370931][T12487] netlink: 'syz.0.1825': attribute type 10 has an invalid length. [ 568.582876][T12506] usb usb1: check_ctrlrecip: process 12506 (syz.2.1829) requesting ep 01 but needs 81 [ 568.592667][T12506] usb usb1: usbfs: process 12506 (syz.2.1829) did not claim interface 0 before use [ 568.775984][T12508] FAULT_INJECTION: forcing a failure. [ 568.775984][T12508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.789351][T12508] CPU: 0 UID: 0 PID: 12508 Comm: syz.2.1830 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.789380][T12508] Tainted: [L]=SOFTLOCKUP [ 568.789386][T12508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.789396][T12508] Call Trace: [ 568.789403][T12508] [ 568.789410][T12508] dump_stack_lvl+0x189/0x250 [ 568.789437][T12508] ? __pfx____ratelimit+0x10/0x10 [ 568.789462][T12508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.789484][T12508] ? __pfx__printk+0x10/0x10 [ 568.789507][T12508] ? __might_fault+0xb0/0x130 [ 568.789542][T12508] should_fail_ex+0x414/0x560 [ 568.789572][T12508] _copy_from_user+0x2d/0xb0 [ 568.789594][T12508] __sys_connect+0x123/0x440 [ 568.789615][T12508] ? __pfx___sys_connect+0x10/0x10 [ 568.789643][T12508] ? __pfx_ksys_write+0x10/0x10 [ 568.789665][T12508] __ia32_sys_connect+0x7a/0x90 [ 568.789682][T12508] __do_fast_syscall_32+0x1f7/0x590 [ 568.789700][T12508] ? rcu_is_watching+0x15/0xb0 [ 568.789718][T12508] ? do_fast_syscall_32+0x34/0x80 [ 568.789741][T12508] do_fast_syscall_32+0x34/0x80 [ 568.789759][T12508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 568.789781][T12508] RIP: 0023:0xf70cd539 [ 568.789796][T12508] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 568.789811][T12508] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 568.789830][T12508] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 568.789852][T12508] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.789862][T12508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.789872][T12508] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 568.789882][T12508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.789907][T12508] [ 569.025584][ T5986] usb 4-1: USB disconnect, device number 45 [ 569.422812][T12527] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1832'. [ 569.465932][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.472373][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.507740][T12531] netlink: 'syz.4.1836': attribute type 10 has an invalid length. [ 569.687675][T12535] sctp: [Deprecated]: syz.4.1838 (pid 12535) Use of int in max_burst socket option deprecated. [ 569.687675][T12535] Use struct sctp_assoc_value instead [ 569.997470][T12538] geneve2: entered promiscuous mode [ 570.002710][T12538] geneve2: entered allmulticast mode [ 570.024832][ T6209] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 570.069056][ T6209] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 570.090625][ T6209] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 570.113597][ T6209] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 570.380019][T12548] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 570.727005][T12562] netlink: 'syz.1.1849': attribute type 10 has an invalid length. [ 571.042415][T12574] m1Ie5nè‹Ò: entered promiscuous mode [ 571.072950][ T5986] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 571.163877][ T5986] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 571.171408][ T5986] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 571.179516][ T5986] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 571.627855][ T5986] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 571.655592][T12576] netlink: 'syz.1.1854': attribute type 9 has an invalid length. [ 571.659415][ T5986] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 571.700435][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 571.702943][ T5986] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 571.732079][T12576] macvlan2: entered promiscuous mode [ 571.737994][T12576] hsr0: entered promiscuous mode [ 571.744085][T12576] macvlan2: entered allmulticast mode [ 571.749678][T12576] hsr0: entered allmulticast mode [ 571.755680][T12576] hsr_slave_0: entered allmulticast mode [ 571.761716][T12576] hsr_slave_1: entered allmulticast mode [ 571.761803][ T5986] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 571.840051][ T5986] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 571.860597][ T5986] hid-generic 00A0:0006:0003.0010: unknown main item tag 0x0 [ 571.897296][ T5986] hid-generic 00A0:0006:0003.0010: hidraw0: HID v0.05 Device [syz1] on syz0 [ 572.070327][T12586] netlink: 'syz.4.1858': attribute type 9 has an invalid length. [ 572.079378][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 572.203799][ T5898] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 572.334117][ T5898] usb 4-1: device descriptor read/64, error -71 [ 572.583374][ T5898] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 572.594748][T12605] netlink: 'syz.1.1863': attribute type 10 has an invalid length. [ 572.713521][ T5898] usb 4-1: device descriptor read/64, error -71 [ 572.815754][T12609] hsr0: left allmulticast mode [ 572.820697][T12609] hsr_slave_0: left allmulticast mode [ 572.825940][ T5898] usb usb4-port1: attempt power cycle [ 572.832427][T12609] hsr_slave_1: left allmulticast mode [ 572.838508][T12609] hsr0: left promiscuous mode [ 572.845832][ T5952] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 572.855051][ T5952] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 572.899718][ T5952] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 572.910012][ T5952] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 573.133344][ T5915] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 573.163385][ T5898] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 573.184025][ T5898] usb 4-1: device descriptor read/8, error -71 [ 573.293819][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 573.309294][ T5915] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 573.318387][ T5915] usb 2-1: config 179 has no interface number 0 [ 573.324983][ T5915] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 573.336732][ T5915] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 573.394793][ T5915] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 573.406235][ T5915] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 573.423538][ T5915] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 573.436850][ T5915] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 573.447028][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.463397][ T5898] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 573.524072][ T5898] usb 4-1: device descriptor read/8, error -71 [ 573.525932][T12609] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 573.644411][ T5898] usb usb4-port1: unable to enumerate USB device [ 574.094663][T12620] netlink: 'syz.2.1867': attribute type 9 has an invalid length. [ 574.142834][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1867'. [ 574.371991][T12620] macvlan3: entered promiscuous mode [ 574.382294][T12620] hsr0: entered promiscuous mode [ 574.403852][T12620] macvlan3: entered allmulticast mode [ 574.409429][T12620] hsr0: entered allmulticast mode [ 574.473413][T12620] hsr_slave_0: entered allmulticast mode [ 574.493915][T12620] hsr_slave_1: entered allmulticast mode [ 575.143125][T12630] netlink: 'syz.4.1871': attribute type 9 has an invalid length. [ 575.178190][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'. [ 575.222221][T12630] macvlan4: entered promiscuous mode [ 575.246451][T12630] hsr0: entered promiscuous mode [ 575.253488][ T5898] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 575.258976][T12630] macvlan4: entered allmulticast mode [ 575.282781][T12630] hsr0: entered allmulticast mode [ 575.299354][T12630] hsr_slave_0: entered allmulticast mode [ 575.321050][T12630] hsr_slave_1: entered allmulticast mode [ 575.416631][ T5898] usb 3-1: config 0 has an invalid interface number: 177 but max is 0 [ 575.439556][ T5898] usb 3-1: config 0 has no interface number 0 [ 575.466787][ T5898] usb 3-1: config 0 interface 177 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 575.497404][ T5898] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=9f.2b [ 575.523931][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.564745][ T5898] usb 3-1: config 0 descriptor?? [ 575.591145][ T5898] HFC-S_USB 3-1:0.177: probe with driver HFC-S_USB failed with error -5 [ 575.852321][T12646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.915297][T12647] fuse: Unknown parameter 'vv' [ 575.996239][ T5986] usb 2-1: USB disconnect, device number 46 [ 575.996239][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 575.996376][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 576.019940][T12646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.134298][T12627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.168455][T12627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.186292][T12651] netlink: 'syz.1.1876': attribute type 29 has an invalid length. [ 576.198798][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1876'. [ 576.402216][ T5898] usb 3-1: USB disconnect, device number 59 [ 576.800521][T12661] netlink: 'syz.3.1880': attribute type 10 has an invalid length. [ 577.190023][T12672] set match dimension is over the limit! [ 577.214412][T12672] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1883'. [ 577.224345][T12672] netlink: 'syz.2.1883': attribute type 7 has an invalid length. [ 577.232106][T12672] netlink: 'syz.2.1883': attribute type 8 has an invalid length. [ 577.244145][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'. [ 577.295456][T12675] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1885'. [ 578.076302][T12681] hsr0: left allmulticast mode [ 578.081090][T12681] hsr_slave_0: left allmulticast mode [ 578.100023][T12681] hsr_slave_1: left allmulticast mode [ 578.107321][T12681] hsr0: left promiscuous mode [ 578.613621][ T5986] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 578.758720][T12688] bond3: entered promiscuous mode [ 578.765204][T12688] 8021q: adding VLAN 0 to HW filter on device bond3 [ 578.772552][ T5986] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 578.788260][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.799619][ T5986] usb 4-1: config 0 descriptor?? [ 578.898261][T12694] netlink: 'syz.2.1891': attribute type 10 has an invalid length. [ 579.015865][ T5986] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 579.228519][ T5986] [drm:udl_init] *ERROR* Selecting channel failed [ 579.246852][T12700] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 1, id = 0 [ 579.331665][ T5986] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 579.348650][ T5986] [drm] Initialized udl on minor 2 [ 579.360595][ T5986] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 579.406940][ T5986] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 579.421149][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 579.429473][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 579.444012][ T5986] usb 4-1: USB disconnect, device number 50 [ 579.936372][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1896'. [ 580.384429][T12717] netlink: 'syz.1.1898': attribute type 9 has an invalid length. [ 580.394589][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1898'. [ 580.415891][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 580.480739][T12716] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 580.503722][ T5898] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 580.530724][T12717] macvlan3: entered promiscuous mode [ 580.574376][T12717] hsr0: entered promiscuous mode [ 580.597192][T12717] macvlan3: entered allmulticast mode [ 580.623632][T12717] hsr0: entered allmulticast mode [ 580.654015][T12717] hsr_slave_0: entered allmulticast mode [ 580.660054][T12717] hsr_slave_1: entered allmulticast mode [ 580.693758][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 580.724088][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 580.738471][ T5898] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 580.748006][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.749045][T12722] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 580.758045][ T5898] usb 4-1: Product: syz [ 580.769142][ T5898] usb 4-1: Manufacturer: syz [ 580.773824][ T5898] usb 4-1: SerialNumber: syz [ 580.791293][T12722] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 580.793880][ T5898] usb 4-1: config 0 descriptor?? [ 580.845738][ T5898] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 580.846441][T12725] netlink: 'syz.2.1902': attribute type 10 has an invalid length. [ 580.863390][ T5898] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 580.900799][T12730] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1904'. [ 581.224173][ T5898] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 581.306666][T12750] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1909'. [ 581.322173][ T5898] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 581.455044][T12752] fuse: Unknown parameter 'vv' [ 581.474087][ T5898] em28xx 4-1:0.0: board has no eeprom [ 581.623626][ T5898] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 581.633059][ T5898] em28xx 4-1:0.0: dvb set to bulk mode. [ 581.639908][ T5915] em28xx 4-1:0.0: Binding DVB extension [ 581.662298][ T5898] usb 4-1: USB disconnect, device number 51 [ 581.689965][ T5898] em28xx 4-1:0.0: Disconnecting em28xx [ 582.158710][ T5915] em28xx 4-1:0.0: Registering input extension [ 582.191188][ T5898] em28xx 4-1:0.0: Closing input extension [ 582.315515][ T5898] em28xx 4-1:0.0: Freeing device [ 582.572185][T12771] fuse: Unknown parameter 'vv' [ 582.636750][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1914'. [ 582.830934][T12776] syzkaller0: entered promiscuous mode [ 582.845356][T12776] syzkaller0: entered allmulticast mode [ 582.923684][ T5986] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 583.076025][ T5986] usb 3-1: config 0 has an invalid interface number: 229 but max is 0 [ 583.085391][ T5986] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.105965][ T5986] usb 3-1: config 0 has no interface number 0 [ 583.112412][ T5986] usb 3-1: config 0 interface 229 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 583.112522][T12782] netlink: 'syz.1.1917': attribute type 10 has an invalid length. [ 583.126428][ T5986] usb 3-1: config 0 interface 229 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 583.150877][ T5986] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b3.49 [ 583.209400][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.226564][ T5986] usb 3-1: config 0 descriptor?? [ 583.417071][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 583.417089][ T31] audit: type=1326 audit(1765905558.695:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 583.437222][ T5986] peak_usb 3-1:0.229 can0: unable to request usb[type=0 value=1] err=-71 [ 583.478748][ T31] audit: type=1326 audit(1765905558.695:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 583.506701][ T5986] peak_usb 3-1:0.229: unable to read PCAN-Chip USB firmware info (err -71) [ 583.562343][ T31] audit: type=1326 audit(1765905558.695:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 583.626190][ T5986] peak_usb 3-1:0.229: probe with driver peak_usb failed with error -71 [ 583.635901][ T31] audit: type=1326 audit(1765905558.695:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 583.655725][ T5986] usb 3-1: USB disconnect, device number 60 [ 583.683714][ T31] audit: type=1326 audit(1765905558.695:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 583.769545][ T31] audit: type=1326 audit(1765905558.695:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 583.845091][ T31] audit: type=1326 audit(1765905558.695:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 583.910751][ T31] audit: type=1326 audit(1765905558.695:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 583.981595][ T31] audit: type=1326 audit(1765905558.695:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 584.015773][ T31] audit: type=1326 audit(1765905558.695:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12785 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe4539 code=0x7ffc0000 [ 584.333894][ T9] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 584.380493][T12805] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1921'. [ 584.486656][ T9] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 584.495615][ T9] usb 3-1: config 0 has no interface number 0 [ 584.518317][ T9] usb 3-1: config 0 interface 130 altsetting 3 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 584.561720][ T9] usb 3-1: config 0 interface 130 altsetting 3 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 584.606064][ T9] usb 3-1: config 0 interface 130 altsetting 3 endpoint 0xC has invalid wMaxPacketSize 0 [ 584.637702][ T9] usb 3-1: config 0 interface 130 has no altsetting 0 [ 584.666750][ T9] usb 3-1: New USB device found, idVendor=07fa, idProduct=0846, bcdDevice=bc.83 [ 584.697267][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.723302][ T9] usb 3-1: Product: syz [ 584.778372][ T9] usb 3-1: Manufacturer: syz [ 584.802473][T12818] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1933'. [ 584.812180][ T9] usb 3-1: SerialNumber: syz [ 584.829155][ T9] usb 3-1: config 0 descriptor?? [ 584.851059][T12800] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 584.866394][T12800] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 584.945797][T12823] fuse: Unknown parameter 'vv' [ 585.092305][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.120418][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.160009][ T9] HFC-S_USB 3-1:0.130: probe with driver HFC-S_USB failed with error -5 [ 585.179824][ T9] usb 3-1: USB disconnect, device number 61 [ 585.569861][T12840] syzkaller0: entered promiscuous mode [ 585.576461][T12840] syzkaller0: entered allmulticast mode [ 585.703015][T12842] netlink: 'syz.4.1928': attribute type 10 has an invalid length. [ 585.836326][T12849] fuse: Unknown parameter 'vv' [ 586.076581][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 586.089019][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1932'. [ 586.102856][T12856] netlink: 'syz.3.1932': attribute type 12 has an invalid length. [ 586.113055][T12856] netlink: 'syz.3.1932': attribute type 11 has an invalid length. [ 586.483690][ T5898] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 586.633368][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 586.640525][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 586.649859][ T5898] usb 4-1: config 4 interface 0 has no altsetting 0 [ 586.659884][ T5898] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 586.669541][ T5898] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 586.683751][ T5898] usb 4-1: Manufacturer: syz [ 586.692319][ T5898] usb 4-1: SerialNumber: syz [ 586.918679][ T5898] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 586.929871][ T5898] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 586.933905][ T10] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 586.940671][ T5898] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 586.955055][ T5898] usb 4-1: media controller created [ 586.967703][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 586.985426][ T5898] zl10353_read_register: readreg error (reg=127, ret==0) [ 587.016261][ T5898] usb 4-1: USB disconnect, device number 52 [ 587.095840][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 587.104493][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 587.114385][ T10] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 587.122457][ T10] usb 3-1: config 0 has no interface number 0 [ 587.129105][ T10] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 587.133609][ T5915] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 587.140946][ T10] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 587.158887][ T10] usb 3-1: config 0 interface 88 has no altsetting 0 [ 587.168102][ T10] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 587.177757][ T10] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 587.186272][ T10] usb 3-1: Product: syz [ 587.190423][ T10] usb 3-1: Manufacturer: syz [ 587.195457][ T10] usb 3-1: SerialNumber: syz [ 587.201692][ T10] usb 3-1: config 0 descriptor?? [ 587.293990][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 587.301018][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 587.313210][ T5915] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 587.321911][ T5915] usb 2-1: config 4 has no interface number 0 [ 587.328135][ T5915] usb 2-1: config 4 interface 30 has no altsetting 0 [ 587.338049][ T5915] usb 2-1: string descriptor 0 read error: -22 [ 587.344417][ T5915] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 587.353504][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.376573][ T5915] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 587.384336][ T5915] dw2102: su3000_power_ctrl: 1, initialized 0 [ 587.391027][ T5915] dvb-usb: bulk message failed: -22 (2/0) [ 587.399768][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 587.414462][T12865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.421097][ T5915] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 587.426450][T12865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.433567][ T5915] usb 2-1: media controller created [ 587.444756][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 587.453692][ T5915] dw2102: i2c transfer failed. [ 587.456639][ T10] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input56 [ 587.458822][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 587.478268][ T10] usb 3-1: USB disconnect, device number 62 [ 587.500462][ T5915] dw2102: i2c transfer failed. [ 587.523837][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 587.529614][ T5915] dw2102: i2c transfer failed. [ 587.542441][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 587.548457][ T5915] dw2102: i2c transfer failed. [ 587.553558][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 587.561078][ T5915] dw2102: i2c transfer failed. [ 587.569461][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 587.575371][ T5915] dw2102: i2c transfer failed. [ 587.580620][ T5915] dvb-usb: MAC address: 02:02:02:02:02:02 [ 587.580626][T12868] dvb-usb: bulk message failed: -22 (3/0) [ 587.594545][T12868] dw2102: i2c transfer failed. [ 587.607162][T12868] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 587.618454][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.619078][T12868] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 587.635803][T12868] CPU: 0 UID: 0 PID: 12868 Comm: syz.1.1936 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.646750][T12868] Tainted: [L]=SOFTLOCKUP [ 587.651068][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 587.661115][T12868] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 587.667016][T12868] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 4d 7a 6b fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 587.686610][T12868] RSP: 0018:ffffc9000b3778c8 EFLAGS: 00010202 [ 587.692672][T12868] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 587.700631][T12868] RDX: ffffffff87bc8dd5 RSI: ffffffff8eec1650 RDI: 0000000000001900 [ 587.708589][T12868] RBP: 0000000000000001 R08: ffff88802b873d00 R09: 0000000000000002 [ 587.716549][T12868] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 587.724509][T12868] R13: 1ffff11005e84072 R14: 0000000000000003 R15: ffff88802f420398 [ 587.732465][T12868] FS: 0000000000000000(0000) GS:ffff888125e35000(0063) knlGS:00000000f5466b40 [ 587.741383][T12868] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 587.747959][T12868] CR2: 0000000030c23ffc CR3: 000000005449e000 CR4: 00000000003526f0 [ 587.755919][T12868] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 587.763880][T12868] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 587.771842][T12868] Call Trace: [ 587.775118][T12868] [ 587.778043][T12868] __i2c_transfer+0x871/0x2110 [ 587.782807][T12868] ? i2c_transfer+0x120/0x3a0 [ 587.787471][T12868] ? __pfx___i2c_transfer+0x10/0x10 [ 587.792657][T12868] ? rt_mutex_lock_nested+0x172/0x1e0 [ 587.798020][T12868] ? i2c_transfer+0x120/0x3a0 [ 587.802694][T12868] i2c_transfer+0x25b/0x3a0 [ 587.807294][T12868] ? __pfx_i2c_transfer+0x10/0x10 [ 587.812308][T12868] ? _copy_from_user+0x94/0xb0 [ 587.817065][T12868] i2cdev_ioctl_rdwr+0x460/0x740 [ 587.821997][T12868] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 587.827201][T12868] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 587.832834][T12868] ? __fget_files+0x3a0/0x420 [ 587.837507][T12868] ? __fget_files+0x2a/0x420 [ 587.842092][T12868] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 587.847643][T12868] __ia32_compat_sys_ioctl+0x543/0x840 [ 587.853089][T12868] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 587.859063][T12868] ? __se_sys_futex_time32+0x360/0x3e0 [ 587.864510][T12868] ? rcu_is_watching+0x15/0xb0 [ 587.869266][T12868] ? __do_fast_syscall_32+0xbe/0x590 [ 587.874540][T12868] __do_fast_syscall_32+0x1f7/0x590 [ 587.879724][T12868] ? lockdep_hardirqs_on+0x98/0x140 [ 587.884910][T12868] ? do_fast_syscall_32+0x34/0x80 [ 587.889924][T12868] ? irqentry_exit+0x10f/0x660 [ 587.894675][T12868] do_fast_syscall_32+0x34/0x80 [ 587.899516][T12868] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 587.905951][T12868] RIP: 0023:0xf7f74539 [ 587.910026][T12868] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 587.929630][T12868] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 587.938057][T12868] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 587.946027][T12868] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 587.953985][T12868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 587.961942][T12868] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 587.969900][T12868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 587.977872][T12868] [ 587.980891][T12868] Modules linked in: [ 587.985610][T12868] ---[ end trace 0000000000000000 ]--- [ 588.005447][T12868] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 588.011540][T12868] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 4d 7a 6b fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 588.032642][T12868] RSP: 0018:ffffc9000b3778c8 EFLAGS: 00010202 [ 588.074429][T12868] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 588.082448][T12868] RDX: ffffffff87bc8dd5 RSI: ffffffff8eec1650 RDI: 0000000000001900 [ 588.091016][T12868] RBP: 0000000000000001 R08: ffff88802b873d00 R09: 0000000000000002 [ 588.101221][T12868] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 588.109793][T12868] R13: 1ffff11005e84072 R14: 0000000000000003 R15: ffff88802f420398 [ 588.118161][T12868] FS: 0000000000000000(0000) GS:ffff888125e35000(0063) knlGS:00000000f5466b40 [ 588.127558][T12868] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 588.134528][T12868] CR2: 00000000f73a7250 CR3: 000000005449e000 CR4: 00000000003526f0 [ 588.142512][T12868] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 588.150995][T12868] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 588.159593][T12868] Kernel panic - not syncing: Fatal exception [ 588.166016][T12868] Kernel Offset: disabled [ 588.170328][T12868] Rebooting in 86400 seconds..