last executing test programs: 14.209621925s ago: executing program 0 (id=1236): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_emit_ethernet(0x2e4, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000340)={0x166422e6, 0x3, 0xe}) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000100)={{@any, 0x2}, @any, 0x6, 0x7a00, 0x7948, 0xfff, 0x3, 0x2, 0x4}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @auto=[0x34, 0x62, 0x38, 0x35, 0x65, 0x64, 0x38, 0x37, 0x36, 0x32, 0x62, 0x33, 0x39, 0x63, 0x66, 0x62]}, &(0x7f00000001c0)={0x0, "ed7775e65eafd28c998ed46d479658881ccacd0c245ad4d444213a00202509c5accfa410081d82ce2a4905411dee1154155efeb6111658c4224f35d6d4f57692", 0x22}, 0x48, 0xfffffffffffffffd) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x24, 0x0, 0x6, 0x23}) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 12.60612545s ago: executing program 1 (id=1241): socket$rxrpc(0x21, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea", 0x3}], 0x1}}], 0x1, 0x4008) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') exit(0xf) pread64(r3, 0x0, 0x0, 0x7) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1}, 0x10102) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r4 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x5, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x2}, 0x9c) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x80, 0x0, 0x192}, &(0x7f0000001340), &(0x7f0000000140)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="1d1bc577eb384a935182d7900ec3f70122779d8f592b5f706ed602a6e8c605bf438afa054e57fd8bf546eaf34fd26c05daaf01e7216b913298f07485e380a506830d6f513415fcaa5709000000000000000c99bf839f1f490937714b35f85645ae783bd4614b0fb215c0"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) io_uring_enter(r4, 0x47fb, 0x0, 0x0, 0x0, 0x0) 11.240033505s ago: executing program 1 (id=1245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$TIPC_NL_MEDIA_GET(r4, 0x0, 0x8000) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x2c) mkdir(&(0x7f0000000180)='./file0\x00', 0xc4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000019580)) syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000600000000000000ffffff7f00100000", @ANYRES32, @ANYBLOB="0400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000400"/28], 0x50) statfs(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)=""/215) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 10.674935016s ago: executing program 4 (id=1247): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$TIPC_NL_MEDIA_GET(r4, 0x0, 0x8000) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x2c) mkdir(&(0x7f0000000180)='./file0\x00', 0xc4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000019580)) syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000600000000000000ffffff7f00100000", @ANYRES32, @ANYBLOB="0400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000400"/28], 0x50) statfs(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)=""/215) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 9.51911051s ago: executing program 0 (id=1248): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x3, 0x0, [{0x25e, 0x0, 0x7d}, {0x9b7, 0x0, 0x13d05793}, {0x481, 0x0, 0x7}]}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r1, 0x8920, &(0x7f00000002c0)={'veth0_to_batadv\x00', @ifru_settings={0x7, 0x101, @fr=0x0}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000014c0)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="2006010000009e"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) 9.471801816s ago: executing program 2 (id=1249): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x35c}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) fcntl$lock(r2, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x7}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x20000000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300)) 8.793687687s ago: executing program 2 (id=1250): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) r2 = dup(r1) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0xfffffffc, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0xb77b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x401, 0x0, 0xffff, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xffffffff, 0x3, 0x2000000, 0x0, 0x0, 0x7, 0x3, 0x200001, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x80000000, 0x0, 0x0, 0x0, 0xfffffff9, 0x3ff, 0x0, 0x1, 0x0, 0x3], [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffe, 0x0, 0x8, 0x40, 0x5, 0x0, 0xfffffffd, 0x0, 0x100000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x5e4, 0x6, 0x0, 0x20000002, 0x0, 0x10000, 0xeef, 0x0, 0x0, 0xfffffffc, 0xfffffffe], [0x2, 0x0, 0xfffffffe, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x401, 0xfffffffc, 0x4, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8d5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x800000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x7, 0x0, 0xf7fffffc, 0x0, 0xfffffffd, 0x2000007, 0x0, 0x0, 0x23ee7eb, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x20000006, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x100, 0x0, 0xfffffffd, 0x0, 0x100, 0xfffffffd, 0x0, 0x0, 0xa000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0xd5c2, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000011c0)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r5, 0x0, 0x6}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) close(0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd(0x8b) 8.603502542s ago: executing program 4 (id=1252): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) read$FUSE(r0, &(0x7f0000003ec0)={0x2020}, 0x2020) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000080), 0x8201fffd) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x10000, 0x6, 0x7, 0xb, 0xfffffffe, 0x0, 0x80, 0x10000, 0x4, 0x2, 0xd2, 0xffffffff, 0x6, 0x0, 0x0, 0x4, 0x7, 0x38fd, 0x10001, 0x7fff, 0x1, 0x9, 0xbbc6, 0x64b0, 0xfffffffa, 0x1c, 0x1e, 0x3, 0x9, 0x10000, 0x988, 0x4, 0x6, 0x10000, 0x756e, 0x8000, 0x10000, 0x3, 0x3ada, 0x401, 0x0, 0x1bc, 0x4, 0x9, 0x80000001, 0x3, 0x100, 0x2f2, 0x475f, 0xf970, 0xf7b, 0xf, 0x2707, 0x8, 0x6, 0x1000, 0x4, 0x10001, 0x5, 0x0, 0x5, 0x8, 0x101, 0x8001, 0x1, 0xffffff81, 0x2, 0xef, 0x80, 0x7, 0x8, 0x9, 0x9, 0x3ff000, 0xde49, 0x0, 0x5, 0x4, 0xa99, 0x2, 0x200, 0x8, 0x2, 0x36d000, 0x5, 0x2, 0x0, 0x101, 0x58, 0x0, 0xde5, 0xfff, 0x0, 0x1aa8, 0x9, 0x2, 0xf, 0x400, 0x200, 0x1, 0x4, 0x2, 0x0, 0x401, 0x1ff, 0x5, 0x1, 0x5, 0xfffffffa, 0x5, 0x3, 0x5, 0x3, 0x2, 0x1ac, 0xdd64, 0x8001, 0x5, 0x3, 0xffff, 0xfffffff8, 0x7, 0x8, 0x1000, 0x1, 0x8, 0x5, 0xb08, 0xa, 0xfe7f, 0xfffffff5, 0x6, 0x7, 0xff, 0x2, 0x101, 0x2, 0x1, 0x7ff, 0x1, 0x4, 0x6, 0x4, 0x7, 0x2, 0x4, 0x0, 0x4, 0x8, 0x6, 0x4, 0xab1, 0x74f1, 0x9, 0x4a, 0x2, 0x7d2, 0x8c8a, 0xc, 0x5, 0xf6, 0x5, 0x8, 0x7f, 0x0, 0x0, 0x9c, 0x1, 0x1, 0xfffffbff, 0x5, 0x80000001, 0x10, 0x8000, 0x0, 0x0, 0xd, 0x3, 0x4, 0x6, 0x2, 0x3, 0x7, 0xfffff843, 0x6, 0x6, 0x9, 0x9, 0xffffff93, 0xd, 0xfff, 0x4, 0x80000001, 0xf93, 0x6, 0xd, 0xd, 0x7, 0x9, 0x4, 0x7fffffff, 0x5, 0xe92e, 0x2, 0x8, 0x0, 0x2, 0x2, 0xd, 0x2, 0x80, 0x4, 0x90, 0xfffffbff, 0xb0bb, 0x4, 0xc0, 0x19fa, 0x2b, 0xfffffeff, 0x6, 0x7, 0x2, 0x8, 0x0, 0x9, 0x4, 0x4, 0x4, 0xfffff000, 0x7, 0x3dbc4d99, 0x4e, 0xcef, 0x80000000, 0x400, 0x7, 0x6103, 0xf, 0x5, 0x5, 0x40, 0x5, 0x6, 0x7, 0x6, 0xe9c8, 0x1a0, 0x3fe, 0x10001, 0x8000, 0x5, 0x1000, 0x4, 0xb13]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x9, 0x80, 0x7, 0x10, 0x8000, 0x0, 0x9, 0x2000000, 0x800004, 0x5, 0x7, 0x6, 0x8, 0xb48, 0x5, 0x9, 0x101, 0xa, 0x3, 0x5, 0xfff, 0x7, 0x10000000, 0xffffffff, 0x1d3e, 0x4, 0x22, 0xfffffffd, 0x80000000, 0x8, 0xffffffff, 0x200, 0x7fff, 0x20009, 0x5, 0x1, 0xfff, 0x402, 0x0, 0x0, 0x3d0, 0x3, 0x78b5, 0x8, 0x5, 0x9d, 0x5, 0x40, 0xf9e, 0x8, 0x1, 0xb, 0x6, 0x3, 0x8, 0x8, 0x800, 0x0, 0x3, 0xaa, 0x9, 0x4, 0x9, 0xfffffff9, 0x8, 0x7, 0x6, 0xffe, 0x800, 0x1, 0x6, 0x2, 0x81, 0x81, 0x5, 0x200, 0x401, 0x9464, 0x1, 0x7fff, 0x2, 0x9, 0x5a, 0x1a, 0x5fd, 0x81, 0x1, 0x7fffffff, 0x2, 0xf8c, 0x4, 0x6, 0x2, 0x0, 0x1, 0x6, 0xab99, 0xe, 0x1, 0x2, 0x3ff, 0x6, 0xb, 0x7f1, 0x7fffffff, 0x3, 0x40, 0x7, 0x1, 0x15, 0x1, 0x7fffffff, 0x1, 0x6, 0x3, 0x91, 0x0, 0x9, 0x4, 0x3, 0xffffff0d, 0xe, 0x7, 0xdc, 0x8, 0x80000001, 0xb, 0x6, 0x8, 0x0, 0x2f, 0xe1, 0x10000, 0x0, 0x1407, 0x9, 0x5, 0x8, 0x81, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x8, 0x5, 0x3, 0x0, 0x8000, 0x4, 0x7, 0x3, 0x400, 0x2, 0x6, 0x5, 0x4e38211e, 0x0, 0xa959, 0x67, 0x400, 0x1000, 0xaf, 0xfffffff9, 0x30cfd753, 0xe0, 0x4, 0x1, 0x800, 0x9, 0x4, 0x400, 0x39a, 0x2, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x40, 0x9742393, 0x0, 0x4ef5, 0x6, 0x80000001, 0xffff0fb7, 0x1, 0x0, 0x1, 0x0, 0xe, 0x3, 0x0, 0x5000, 0x4, 0xb14, 0x6, 0xf864eed, 0xc5, 0x8, 0x7, 0x125, 0x40, 0x2, 0x3ff, 0x9, 0x10000, 0x101, 0xc, 0x0, 0x9, 0x800, 0x7, 0x4, 0x3, 0x0, 0xf34a, 0x9, 0x18, 0x3ff, 0x1, 0xde, 0x0, 0x2, 0x77f, 0x0, 0x5, 0xcd0c, 0x0, 0x3, 0x0, 0x8, 0x4, 0x3ff, 0x4, 0x1, 0x1, 0x100, 0x5553, 0x4, 0xfffffffe, 0x25f76613, 0xffffffff, 0xc7, 0x4, 0x1000, 0xf0, 0x3, 0x1, 0x7f, 0x3, 0x7fff, 0x5, 0x3, 0x101, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x6, 0x8, 0x8, 0x4, {0x6, 0x0, 0xb, 0x2, 0x8, 0x1}, {0x4, 0x2, 0x30, 0x1, 0x7, 0x3}, 0xb, 0x5}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) 8.557902707s ago: executing program 1 (id=1253): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)=@multiplanar_userptr={0x5, 0x8, 0x4, 0x10, 0xa, {}, {0x1, 0x1, 0xab, 0xa, 0x1, 0x10, "761a98fc"}, 0x0, 0x2, {0x0}}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6}) socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 8.257239424s ago: executing program 4 (id=1255): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$TIPC_NL_MEDIA_GET(r4, 0x0, 0x8000) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x2c) mkdir(&(0x7f0000000180)='./file0\x00', 0xc4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000019580)) syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000600000000000000ffffff7f00100000", @ANYRES32, @ANYBLOB="0400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000400"/28], 0x50) statfs(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)=""/215) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 6.904591928s ago: executing program 2 (id=1257): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) 6.633730305s ago: executing program 3 (id=1258): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x3, 0x2000000000000296, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x8000}}]}, 0x88}, 0x1, 0x7}, 0x0) 6.521140346s ago: executing program 2 (id=1259): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_emit_ethernet(0x2e4, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000340)={0x166422e6, 0x3, 0xe}) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000100)={{@any, 0x2}, @any, 0x6, 0x7a00, 0x7948, 0xfff, 0x3, 0x2, 0x4}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @auto=[0x34, 0x62, 0x38, 0x35, 0x65, 0x64, 0x38, 0x37, 0x36, 0x32, 0x62, 0x33, 0x39, 0x63, 0x66, 0x62]}, &(0x7f00000001c0)={0x0, "ed7775e65eafd28c998ed46d479658881ccacd0c245ad4d444213a00202509c5accfa410081d82ce2a4905411dee1154155efeb6111658c4224f35d6d4f57692", 0x22}, 0x48, 0xfffffffffffffffd) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x24, 0x0, 0x6, 0x23}) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 6.508014108s ago: executing program 3 (id=1260): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x35c}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) fcntl$lock(r2, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x7}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x20000000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300)) 5.820927384s ago: executing program 0 (id=1261): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) (async) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101"], 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = eventfd2(0x0, 0x80800) readv(r9, &(0x7f0000001840)=[{&(0x7f0000000180)=""/18, 0x12}], 0x1) (async) readv(r9, &(0x7f0000001840)=[{&(0x7f0000000180)=""/18, 0x12}], 0x1) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) (async) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (async) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5.730298508s ago: executing program 3 (id=1262): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34b}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.140649308s ago: executing program 1 (id=1263): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$TIPC_NL_MEDIA_GET(r4, 0x0, 0x8000) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x2c) mkdir(&(0x7f0000000180)='./file0\x00', 0xc4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000019580)) syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000600000000000000ffffff7f00100000", @ANYRES32, @ANYBLOB="0400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000400"/28], 0x50) statfs(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)=""/215) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 5.140457681s ago: executing program 4 (id=1264): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[], 0x40}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_emit_ethernet(0x2e4, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000340)={0x166422e6, 0x3, 0xe}) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000100)={{@any, 0x2}, @any, 0x6, 0x7a00, 0x7948, 0xfff, 0x3, 0x2, 0x4}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @auto=[0x34, 0x62, 0x38, 0x35, 0x65, 0x64, 0x38, 0x37, 0x36, 0x32, 0x62, 0x33, 0x39, 0x63, 0x66, 0x62]}, &(0x7f00000001c0)={0x0, "ed7775e65eafd28c998ed46d479658881ccacd0c245ad4d444213a00202509c5accfa410081d82ce2a4905411dee1154155efeb6111658c4224f35d6d4f57692", 0x22}, 0x48, 0xfffffffffffffffd) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x24, 0x0, 0x6, 0x23}) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 3.260674754s ago: executing program 0 (id=1265): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$TIPC_NL_MEDIA_GET(r3, 0x0, 0x8000) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x2c) mkdir(&(0x7f0000000180)='./file0\x00', 0xc4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000019580)) syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000600000000000000ffffff7f00100000", @ANYRES32, @ANYBLOB="0400000000000000", @ANYRES32=0x0, @ANYBLOB="020000000400"/28], 0x50) statfs(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)=""/215) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 3.176304151s ago: executing program 2 (id=1266): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[], 0x40}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) syz_emit_ethernet(0x2e4, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000340)={0x166422e6, 0x3, 0xe}) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000100)={{@any, 0x2}, @any, 0x6, 0x7a00, 0x7948, 0xfff, 0x3, 0x2, 0x4}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @auto=[0x34, 0x62, 0x38, 0x35, 0x65, 0x64, 0x38, 0x37, 0x36, 0x32, 0x62, 0x33, 0x39, 0x63, 0x66, 0x62]}, &(0x7f00000001c0)={0x0, "ed7775e65eafd28c998ed46d479658881ccacd0c245ad4d444213a00202509c5accfa410081d82ce2a4905411dee1154155efeb6111658c4224f35d6d4f57692", 0x22}, 0x48, 0xfffffffffffffffd) syz_emit_ethernet(0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="dfa473846208cc4aff7f54da81000a008906"], 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x24, 0x0, 0x6, 0x23}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 2.596530462s ago: executing program 3 (id=1267): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x2000000}], 0x34000, 0x0) 2.106563748s ago: executing program 1 (id=1268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000104, 0x0, 0x2}]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000cc0)={@fallback, 0xffffffffffffffff, 0x2f, 0x3}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r9 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000080)={r9, 0x4}) unshare(0x22020600) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000040)={r9, 0x4, 0x1}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0xfff2, 0x12}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x40, 0x8d, 0x80, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) r10 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0xc00, 0x0) ioctl$BINDER_THREAD_EXIT(r10, 0x40046208, 0x0) recvmmsg(r4, &(0x7f0000003b80)=[{{&(0x7f0000000300)=@x25, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/9, 0x9}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x4, &(0x7f0000000680)=""/94, 0x5e}, 0x4}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000580)=""/7, 0x7}, {&(0x7f0000000700)=""/52, 0x34}, {&(0x7f0000000740)=""/100, 0x64}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/123, 0x7b}, {&(0x7f0000000900)=""/164, 0xa4}, {&(0x7f00000009c0)=""/207, 0xcf}, {&(0x7f0000000ac0)=""/253, 0xfd}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/4, 0x4}], 0xa, &(0x7f0000000d00)=""/85, 0x55}, 0x9}, {{&(0x7f0000000d80)=@ax25={{0x3, @rose}, [@rose, @default, @netrom, @null, @netrom, @rose, @default, @null]}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e00)=""/104, 0x68}, {&(0x7f0000000e80)=""/207, 0xcf}, {&(0x7f0000000c80)}], 0x3, &(0x7f0000000fc0)=""/71, 0x47}}, {{&(0x7f0000001040)=@x25={0x9, @remote}, 0x80, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/209, 0xd1}, {&(0x7f00000011c0)=""/93, 0x5d}, {&(0x7f0000003300)=""/214, 0xd6}, {&(0x7f0000003400)=""/141, 0x8d}, {&(0x7f0000001240)=""/20, 0x14}], 0x5, &(0x7f00000034c0)=""/237, 0xed}, 0x1ba8}, {{&(0x7f00000035c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003640)=""/113, 0x71}], 0x1, &(0x7f0000003700)=""/202, 0xca}}, {{&(0x7f0000003800)=@isdn, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003880)=""/229, 0xe5}, {&(0x7f0000003980)}, {&(0x7f00000039c0)=""/234, 0xea}], 0x3, &(0x7f0000003b00)=""/91, 0x5b}, 0xd}], 0x6, 0x40000000, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r13], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) 1.788685957s ago: executing program 3 (id=1269): mq_open(0x0, 0x42, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x5ac}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)='a', 0x1}], 0x1}}], 0x2, 0x400c404) 1.687338527s ago: executing program 0 (id=1270): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_io_uring_setup(0x4b5, &(0x7f00000004c0)={0x0, 0x80086e1, 0x2, 0x8, 0x1}, &(0x7f0000010080), &(0x7f0000000000)) r2 = dup2(r1, r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[r3, r1], 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x3, 0x2000000000000296, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x8000}}]}, 0x88}, 0x1, 0x7}, 0x0) 1.599350274s ago: executing program 0 (id=1271): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x2000100) bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000600)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x17) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r9, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0xe3}) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x48894}, 0x851) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}, 0x1, 0x0, 0x0, 0x20008002}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xffffffffffffffdf, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x24040004}, 0x814) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.321690333s ago: executing program 3 (id=1272): socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xfc) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34b}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000580)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000080)='//', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.27186929s ago: executing program 4 (id=1273): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) close(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000500)={0x0, 0x2, 0x20a47}) 993.109219ms ago: executing program 4 (id=1274): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe6, 0x35, 0x55, 0x40, 0x5ac, 0x290, 0xdc1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x2}}]}}]}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x200) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xfe72, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x8000000000000002, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020000000, 0xc, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x2000, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0xf507, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x8000000000000000, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xfffffffb, 0x2, 0x0, 0x0, 0xdbe]}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000602010018010000646c6c250000000000a02020731af8ff00000000bfa1000000000f4240010000f8ffffffb702000008000000b703000001000000850000000640000895"], 0x0, 0x6, 0x23, &(0x7f0000000240)=""/35, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0xe, 0x480) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 432.25887ms ago: executing program 1 (id=1275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0xa}, 0xfc5e) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4) dup(r0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0x60, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009700c0ffffffffff95"], 0x0, 0xf}, 0x94) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r7, 0x0}) r10 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0xe0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r10, 0xc01064c5, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={r7, r9, 0x9, 0x7, 0x1}) 0s ago: executing program 2 (id=1276): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$TIPC_NL_MEDIA_GET(r4, 0x0, 0x8000) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x2c) mkdir(&(0x7f0000000180)='./file0\x00', 0xc4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000019580)) syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000600000000000000ffffff7f00100000", @ANYRES32, @ANYBLOB="0400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000400"/28], 0x50) statfs(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)=""/215) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): 363.721465][ T8824] netlink: 'syz.3.737': attribute type 3 has an invalid length. [ 363.843527][ T8824] netlink: 11 bytes leftover after parsing attributes in process `syz.3.737'. [ 364.748013][ T8836] netlink: 76 bytes leftover after parsing attributes in process `syz.1.740'. [ 364.757567][ T8836] netlink: 72 bytes leftover after parsing attributes in process `syz.1.740'. [ 364.767001][ T8836] netlink: 'syz.1.740': attribute type 3 has an invalid length. [ 364.921221][ T8798] delete_channel: no stack [ 364.926106][ T5920] usb 5-1: USB disconnect, device number 37 [ 365.018314][ T8836] netlink: 11 bytes leftover after parsing attributes in process `syz.1.740'. [ 365.712672][ T8847] tipc: Started in network mode [ 365.718029][ T8847] tipc: Node identity 1e3b6fc9495, cluster identity 4711 [ 365.725613][ T8847] tipc: Enabled bearer , priority 0 [ 365.733423][ T8847] syzkaller0: entered promiscuous mode [ 365.738910][ T8847] syzkaller0: entered allmulticast mode [ 365.972014][ T8847] netlink: 'syz.4.744': attribute type 4 has an invalid length. [ 366.184929][ T8847] netlink: 'syz.4.744': attribute type 4 has an invalid length. [ 366.271091][ T8847] tipc: Resetting bearer [ 366.329965][ T8846] tipc: Resetting bearer [ 366.472214][ T8846] tipc: Disabling bearer [ 366.505895][ T5923] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 366.760576][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 366.769952][ T5923] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.810442][ T5923] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 366.820658][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.864821][ T5923] usb 1-1: config 0 descriptor?? [ 366.927246][ T5923] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 367.153534][ T5923] gspca_vc032x: reg_r err -32 [ 367.197758][ T5923] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 367.450828][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 367.526269][ T8868] FAULT_INJECTION: forcing a failure. [ 367.526269][ T8868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.554257][ T8868] CPU: 1 UID: 0 PID: 8868 Comm: syz.3.750 Not tainted syzkaller #0 PREEMPT(full) [ 367.554286][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.554297][ T8868] Call Trace: [ 367.554304][ T8868] [ 367.554314][ T8868] dump_stack_lvl+0x189/0x250 [ 367.554344][ T8868] ? __pfx____ratelimit+0x10/0x10 [ 367.554372][ T8868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.554397][ T8868] ? __pfx__printk+0x10/0x10 [ 367.554429][ T8868] should_fail_ex+0x414/0x560 [ 367.554464][ T8868] _copy_to_user+0x31/0xb0 [ 367.554490][ T8868] simple_read_from_buffer+0xe1/0x170 [ 367.554523][ T8868] proc_fail_nth_read+0x1b3/0x220 [ 367.554551][ T8868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.554579][ T8868] ? rw_verify_area+0x2a6/0x4d0 [ 367.554603][ T8868] ? __lock_acquire+0xab9/0xd20 [ 367.554621][ T8868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.554646][ T8868] vfs_read+0x200/0xa30 [ 367.554670][ T8868] ? fdget_pos+0x247/0x320 [ 367.554694][ T8868] ? __pfx___mutex_lock+0x10/0x10 [ 367.554722][ T8868] ? __pfx_vfs_read+0x10/0x10 [ 367.554749][ T8868] ? __fget_files+0x2a/0x420 [ 367.554773][ T8868] ? __fget_files+0x3a0/0x420 [ 367.554790][ T8868] ? __fget_files+0x2a/0x420 [ 367.554818][ T8868] ksys_read+0x145/0x250 [ 367.554863][ T8868] ? __pfx_ksys_read+0x10/0x10 [ 367.554892][ T8868] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 367.554923][ T8868] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.554954][ T8868] __do_fast_syscall_32+0xb6/0x2b0 [ 367.554972][ T8868] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.555004][ T8868] do_fast_syscall_32+0x34/0x80 [ 367.555022][ T8868] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.555044][ T8868] RIP: 0023:0xf7f43539 [ 367.555061][ T8868] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 367.555077][ T8868] RSP: 002b:00000000f5436590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 367.555098][ T8868] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5436620 [ 367.555111][ T8868] RDX: 000000000000000f RSI: 00000000f73d6ff4 RDI: 0000000000000000 [ 367.555123][ T8868] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 367.555134][ T8868] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 367.555145][ T8868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.555178][ T8868] [ 367.831769][ T9] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 367.849381][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.917248][ T9] usb 2-1: config 0 descriptor?? [ 367.928668][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 368.304630][ T9] gspca_cpia1: usb_control_msg 03, error -71 [ 368.314461][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 368.323132][ T9] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 368.356594][ T9] usb 2-1: USB disconnect, device number 29 [ 369.134331][ T8894] netlink: 76 bytes leftover after parsing attributes in process `syz.4.754'. [ 369.143774][ T8894] netlink: 72 bytes leftover after parsing attributes in process `syz.4.754'. [ 369.152891][ T8894] netlink: 'syz.4.754': attribute type 3 has an invalid length. [ 369.160608][ T8894] netlink: 11 bytes leftover after parsing attributes in process `syz.4.754'. [ 369.447204][ T8858] delete_channel: no stack [ 369.749941][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.755'. [ 371.210883][ T5923] usb 1-1: USB disconnect, device number 20 [ 372.439864][ T44] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 372.609490][ T44] usb 2-1: device descriptor read/64, error -71 [ 372.919385][ T44] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 373.070249][ T44] usb 2-1: device descriptor read/64, error -71 [ 373.179709][ T44] usb usb2-port1: attempt power cycle [ 373.549491][ T5920] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 373.677346][ T44] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 373.733244][ T5920] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 373.752546][ T44] usb 2-1: device descriptor read/8, error -71 [ 373.764958][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.792477][ T5920] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.806178][ T5920] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.820691][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.146115][ T5920] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.176142][ T44] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 374.220521][ T5920] usb 4-1: invalid MIDI out EP 0 [ 374.245381][ T44] usb 2-1: device descriptor read/8, error -71 [ 374.412411][ T44] usb usb2-port1: unable to enumerate USB device [ 374.574711][ T5920] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 374.590070][ T5959] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 374.784456][ T5959] usb 1-1: Using ep0 maxpacket: 8 [ 374.797588][ T5959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.811076][ T5959] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 374.821210][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.841857][ T5959] usb 1-1: config 0 descriptor?? [ 374.862350][ T5959] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 374.963946][ T8967] netlink: 76 bytes leftover after parsing attributes in process `syz.2.773'. [ 374.999561][ T8967] netlink: 72 bytes leftover after parsing attributes in process `syz.2.773'. [ 375.008779][ T8967] netlink: 'syz.2.773': attribute type 3 has an invalid length. [ 375.017293][ T8967] netlink: 11 bytes leftover after parsing attributes in process `syz.2.773'. [ 375.082707][ T5959] gspca_vc032x: reg_r err -32 [ 375.129452][ T5959] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 375.673294][ T8977] netlink: 'syz.1.776': attribute type 39 has an invalid length. [ 376.382470][ T8988] usb usb8: usbfs: process 8988 (syz.2.779) did not claim interface 0 before use [ 376.799392][ T5923] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 376.999381][ T5923] usb 3-1: device descriptor read/64, error -71 [ 377.052722][ T8956] delete_channel: no stack [ 377.060556][ T5920] usb 4-1: USB disconnect, device number 31 [ 377.299443][ T5923] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 377.899451][ T5923] usb 3-1: device descriptor read/64, error -71 [ 378.064755][ T5923] usb usb3-port1: attempt power cycle [ 378.419394][ T5923] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 378.440218][ T5923] usb 3-1: device descriptor read/8, error -71 [ 378.537057][ T9013] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 378.692721][ T5920] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 378.702566][ T5923] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 378.781307][ T5923] usb 3-1: device descriptor read/8, error -71 [ 378.899875][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.906992][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.916124][ T5923] usb usb3-port1: unable to enumerate USB device [ 378.945189][ T5920] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 378.954795][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.963845][ T5920] usb 5-1: Product: syz [ 378.968689][ T5920] usb 5-1: Manufacturer: syz [ 378.974094][ T5920] usb 5-1: SerialNumber: syz [ 378.996117][ T5920] usb 5-1: config 0 descriptor?? [ 379.200482][ T5920] usb 1-1: USB disconnect, device number 21 [ 379.403309][ T5923] usb 5-1: USB disconnect, device number 38 [ 379.738625][ T9029] ipvlan2: entered promiscuous mode [ 379.775426][ T9029] bridge0: port 3(ipvlan2) entered blocking state [ 379.814578][ T9029] bridge0: port 3(ipvlan2) entered disabled state [ 379.877883][ T9029] ipvlan2: entered allmulticast mode [ 379.891580][ T9029] bridge0: entered allmulticast mode [ 379.975573][ T9029] ipvlan2: left allmulticast mode [ 380.085661][ T9029] bridge0: left allmulticast mode [ 380.501116][ T9044] kvm: faulting far call emulation tainted memory [ 380.563022][ T9044] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 380.959360][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 381.203436][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 381.222144][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 381.350686][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 381.367572][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.380266][ T9] usb 5-1: Product: syz [ 381.384786][ T9] usb 5-1: Manufacturer: syz [ 381.391396][ T9] usb 5-1: SerialNumber: syz [ 381.406652][ T9] usb 5-1: config 0 descriptor?? [ 383.034483][ T9081] netlink: 32 bytes leftover after parsing attributes in process `syz.2.802'. [ 383.134402][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 383.340823][ T9] usb 5-1: USB disconnect, device number 39 [ 383.903497][ T7040] udevd[7040]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.099461][ T9091] netlink: 44 bytes leftover after parsing attributes in process `syz.4.804'. [ 384.226807][ T9091] netlink: 43 bytes leftover after parsing attributes in process `syz.4.804'. [ 384.283418][ T9091] netlink: 'syz.4.804': attribute type 6 has an invalid length. [ 384.318735][ T9091] netlink: 'syz.4.804': attribute type 5 has an invalid length. [ 384.366628][ T9091] netlink: 43 bytes leftover after parsing attributes in process `syz.4.804'. [ 385.024098][ T9094] ipvlan2: entered promiscuous mode [ 385.057680][ T9094] bridge0: port 3(ipvlan2) entered blocking state [ 385.065534][ T9097] netlink: 'syz.0.806': attribute type 39 has an invalid length. [ 385.076441][ T9094] bridge0: port 3(ipvlan2) entered disabled state [ 385.084108][ T9094] ipvlan2: entered allmulticast mode [ 385.098137][ T44] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 385.106049][ T9094] bridge0: entered allmulticast mode [ 385.122092][ T44] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 385.144587][ T9094] ipvlan2: left allmulticast mode [ 385.151851][ T9094] bridge0: left allmulticast mode [ 386.589829][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 386.601666][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 386.789097][ T9128] netlink: 'syz.3.818': attribute type 39 has an invalid length. [ 386.793526][ T9130] FAULT_INJECTION: forcing a failure. [ 386.793526][ T9130] name failslab, interval 1, probability 0, space 0, times 0 [ 386.816472][ T9130] CPU: 0 UID: 0 PID: 9130 Comm: syz.0.817 Not tainted syzkaller #0 PREEMPT(full) [ 386.816501][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.816513][ T9130] Call Trace: [ 386.816520][ T9130] [ 386.816529][ T9130] dump_stack_lvl+0x189/0x250 [ 386.816562][ T9130] ? __pfx____ratelimit+0x10/0x10 [ 386.816589][ T9130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.816614][ T9130] ? __pfx__printk+0x10/0x10 [ 386.816640][ T9130] ? __lock_acquire+0xab9/0xd20 [ 386.816667][ T9130] should_fail_ex+0x414/0x560 [ 386.816701][ T9130] should_failslab+0xa8/0x100 [ 386.816723][ T9130] kmem_cache_alloc_noprof+0x74/0x6e0 [ 386.816750][ T9130] ? skb_clone+0x212/0x3a0 [ 386.816778][ T9130] skb_clone+0x212/0x3a0 [ 386.816803][ T9130] __netlink_deliver_tap+0x404/0x850 [ 386.816839][ T9130] ? netlink_deliver_tap+0x2e/0x1b0 [ 386.816860][ T9130] netlink_deliver_tap+0x19c/0x1b0 [ 386.816880][ T9130] netlink_unicast+0x7fa/0x9e0 [ 386.816917][ T9130] ? __pfx_netlink_unicast+0x10/0x10 [ 386.816947][ T9130] ? netlink_sendmsg+0x642/0xb30 [ 386.816994][ T9130] ? skb_put+0x11b/0x210 [ 386.817017][ T9130] netlink_sendmsg+0x805/0xb30 [ 386.817047][ T9130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.817069][ T9130] ? trace_irq_disable+0x37/0x110 [ 386.817088][ T9130] ? aa_sock_msg_perm+0xf1/0x1d0 [ 386.817117][ T9130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.817136][ T9130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.817157][ T9130] __sock_sendmsg+0x21c/0x270 [ 386.817186][ T9130] sock_write_iter+0x279/0x360 [ 386.817214][ T9130] ? __pfx_sock_write_iter+0x10/0x10 [ 386.817251][ T9130] ? bpf_lsm_file_permission+0x9/0x20 [ 386.817271][ T9130] ? security_file_permission+0x75/0x290 [ 386.817303][ T9130] vfs_write+0x5c9/0xb30 [ 386.817335][ T9130] ? __pfx_sock_write_iter+0x10/0x10 [ 386.817360][ T9130] ? __pfx_vfs_write+0x10/0x10 [ 386.817404][ T9130] ? __fget_files+0x2a/0x420 [ 386.817433][ T9130] ksys_write+0x145/0x250 [ 386.817462][ T9130] ? __pfx_ksys_write+0x10/0x10 [ 386.817491][ T9130] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 386.817522][ T9130] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.817552][ T9130] __do_fast_syscall_32+0xb6/0x2b0 [ 386.817571][ T9130] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.817602][ T9130] do_fast_syscall_32+0x34/0x80 [ 386.817619][ T9130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 386.817642][ T9130] RIP: 0023:0xf7f02539 [ 386.817659][ T9130] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 386.817676][ T9130] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 386.817699][ T9130] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 386.817711][ T9130] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.817723][ T9130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.817734][ T9130] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 386.817746][ T9130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.817778][ T9130] [ 386.879505][ T44] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 386.880565][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.131573][ T44] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 387.134046][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.142370][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.239220][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.250873][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.417257][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 387.442118][ T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 387.451896][ T44] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 387.460824][ T44] usb 3-1: Manufacturer: syz [ 387.472517][ T44] usb 3-1: config 0 descriptor?? [ 387.841540][ T9142] usb usb8: usbfs: process 9142 (syz.4.820) did not claim interface 0 before use [ 387.901862][ T44] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 388.060248][ T9138] netlink: 44 bytes leftover after parsing attributes in process `syz.3.819'. [ 388.155310][ T5920] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 388.167975][ T44] appleir 0003:05AC:8243.000E: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 388.250504][ T5923] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 388.319458][ T5920] usb 5-1: device descriptor read/64, error -71 [ 388.619426][ T5923] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 388.739561][ T5920] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 388.747845][ T5923] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.760256][ T5923] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.773750][ T5923] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 388.784965][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.846696][ T5923] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 388.865809][ T5923] usb 1-1: invalid MIDI out EP 0 [ 388.889720][ T5920] usb 5-1: device descriptor read/64, error -71 [ 388.937583][ T9146] program syz.2.815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.023320][ T9146] vlan0: entered promiscuous mode [ 389.044999][ T5920] usb usb5-port1: attempt power cycle [ 389.086956][ T5923] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 389.098834][ T7040] udevd[7040]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.173721][ T9124] raw-gadget.0 gadget.2: fail, usb_ep_queue returned -108 [ 389.412617][ T5920] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 389.440228][ T5920] usb 5-1: device descriptor read/8, error -71 [ 389.650736][ T9166] netlink: 76 bytes leftover after parsing attributes in process `syz.1.826'. [ 389.661355][ T9166] netlink: 72 bytes leftover after parsing attributes in process `syz.1.826'. [ 389.670473][ T9166] netlink: 'syz.1.826': attribute type 3 has an invalid length. [ 389.678447][ T9166] netlink: 11 bytes leftover after parsing attributes in process `syz.1.826'. [ 389.699353][ T5920] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 389.786831][ T5920] usb 5-1: device descriptor read/8, error -71 [ 389.900240][ T5920] usb usb5-port1: unable to enumerate USB device [ 389.954122][ T24] usb 3-1: USB disconnect, device number 35 [ 391.058079][ T5912] usb 1-1: USB disconnect, device number 22 [ 391.109195][ T9144] delete_channel: no stack [ 392.619816][ T5923] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 392.857681][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 392.889806][ T5923] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 392.928932][ T5923] usb 3-1: config 0 has no interface number 0 [ 392.974534][ T5923] usb 3-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0 [ 392.994041][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.024481][ T5923] usb 3-1: Product: syz [ 393.028697][ T5923] usb 3-1: Manufacturer: syz [ 393.073243][ T5923] usb 3-1: SerialNumber: syz [ 393.090662][ T5923] usb 3-1: config 0 descriptor?? [ 393.122342][ T5923] quatech2 3-1:0.30: Quatech 2nd gen USB to Serial Driver converter detected [ 393.303292][ T5923] usb 3-1: qt2_attach - failed to power on unit: -71 [ 393.329485][ T5920] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 393.347998][ T5923] quatech2 3-1:0.30: probe with driver quatech2 failed with error -71 [ 393.407407][ T5923] usb 3-1: USB disconnect, device number 36 [ 393.535797][ T5920] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 393.547862][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.559031][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.569080][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 393.594300][ T5920] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 393.604147][ T5920] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 393.614705][ T5920] usb 4-1: Manufacturer: syz [ 393.624788][ T5920] usb 4-1: config 0 descriptor?? [ 393.709513][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 393.866108][ T24] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 393.914625][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.954736][ T24] usb 1-1: Product: syz [ 394.040732][ T24] usb 1-1: Manufacturer: syz [ 394.062587][ T24] usb 1-1: SerialNumber: syz [ 394.081299][ T5920] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 394.091218][ T24] usb 1-1: config 0 descriptor?? [ 394.119985][ T5920] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 394.687839][ T9] usb 1-1: USB disconnect, device number 23 [ 394.879748][ T9223] program syz.3.837 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.891980][ T9223] vlan0: entered promiscuous mode [ 396.279603][ T9] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 396.431702][ T9] usb 5-1: device descriptor read/64, error -71 [ 396.439657][ T24] usb 4-1: USB disconnect, device number 32 [ 396.715571][ T9] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 396.889936][ T9] usb 5-1: device descriptor read/64, error -71 [ 396.979088][ T44] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 397.027132][ T9] usb usb5-port1: attempt power cycle [ 397.091627][ T9254] netlink: 76 bytes leftover after parsing attributes in process `syz.0.850'. [ 397.100700][ T9254] netlink: 72 bytes leftover after parsing attributes in process `syz.0.850'. [ 397.109729][ T9254] netlink: 'syz.0.850': attribute type 3 has an invalid length. [ 397.118147][ T9254] netlink: 11 bytes leftover after parsing attributes in process `syz.0.850'. [ 397.349498][ T44] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 397.524808][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.543387][ T44] usb 3-1: config 0 has no interfaces? [ 397.549704][ T44] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 397.559686][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.571676][ T44] usb 3-1: config 0 descriptor?? [ 397.579634][ T9] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 397.601590][ T9] usb 5-1: device descriptor read/8, error -71 [ 398.090227][ T9] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 398.174035][ T9] usb 5-1: device descriptor read/8, error -71 [ 398.229818][ T5912] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 398.301707][ T9] usb usb5-port1: unable to enumerate USB device [ 398.429381][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 398.439233][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.457515][ T5912] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 398.473910][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.534486][ T5912] usb 2-1: config 0 descriptor?? [ 398.587803][ T5912] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 398.872172][ T5912] gspca_vc032x: reg_r err -32 [ 398.877744][ T5912] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 399.351135][ T9263] netlink: 76 bytes leftover after parsing attributes in process `syz.4.852'. [ 399.360306][ T9263] netlink: 72 bytes leftover after parsing attributes in process `syz.4.852'. [ 399.369329][ T9263] netlink: 'syz.4.852': attribute type 3 has an invalid length. [ 399.377422][ T9263] netlink: 11 bytes leftover after parsing attributes in process `syz.4.852'. [ 399.487922][ T44] usb 3-1: USB disconnect, device number 37 [ 400.059386][ T44] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 400.252411][ T44] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 400.261928][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.467406][ T44] usb 3-1: Product: syz [ 400.496795][ T44] usb 3-1: Manufacturer: syz [ 400.503249][ T44] usb 3-1: SerialNumber: syz [ 400.539771][ T44] usb 3-1: config 0 descriptor?? [ 400.762057][ T9280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.856'. [ 400.826844][ T44] usb 3-1: USB disconnect, device number 38 [ 402.443216][ T9] usb 2-1: USB disconnect, device number 34 [ 402.840556][ T44] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 402.891777][ T44] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 404.139997][ T9330] netlink: 76 bytes leftover after parsing attributes in process `syz.1.867'. [ 404.149048][ T9330] netlink: 72 bytes leftover after parsing attributes in process `syz.1.867'. [ 404.158144][ T9330] netlink: 'syz.1.867': attribute type 3 has an invalid length. [ 404.165893][ T9330] netlink: 11 bytes leftover after parsing attributes in process `syz.1.867'. [ 405.800293][ T9337] process 'syz.1.870' launched './file1' with NULL argv: empty string added [ 406.339358][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 406.409362][ T44] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 406.489949][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 406.510407][ T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 406.528565][ T9] usb 5-1: config 0 has no interface number 0 [ 406.544450][ T9] usb 5-1: config 0 interface 12 has no altsetting 0 [ 406.566436][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 406.586036][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.586925][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 406.597813][ T9] usb 5-1: Product: syz [ 406.606237][ T9] usb 5-1: Manufacturer: syz [ 406.608337][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.625704][ T9] usb 5-1: SerialNumber: syz [ 406.639688][ T9] usb 5-1: config 0 descriptor?? [ 406.651457][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 406.668075][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.682872][ T44] usb 4-1: config 0 descriptor?? [ 406.692638][ T44] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 406.912589][ T44] gspca_vc032x: reg_r err -32 [ 406.920327][ T44] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 408.086611][ T9372] netlink: 76 bytes leftover after parsing attributes in process `syz.2.879'. [ 408.095886][ T9372] netlink: 72 bytes leftover after parsing attributes in process `syz.2.879'. [ 408.111432][ T9372] netlink: 'syz.2.879': attribute type 3 has an invalid length. [ 408.119423][ T9372] netlink: 11 bytes leftover after parsing attributes in process `syz.2.879'. [ 408.540529][ T984] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 408.578480][ T984] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 408.649683][ T44] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 408.811806][ T44] usb 1-1: config 0 has an invalid interface number: 178 but max is 0 [ 408.831502][ T44] usb 1-1: config 0 has no interface number 0 [ 408.859796][ T44] usb 1-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 408.871886][ T44] usb 1-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 408.885566][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.914629][ T44] usb 1-1: config 0 descriptor?? [ 409.069979][ T9377] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 409.293022][ T44] usb 1-1: string descriptor 0 read error: -71 [ 409.303772][ T44] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 409.317095][ T44] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 11 is not bulk. [ 409.327689][ T44] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 409.351416][ T44] usb 1-1: USB disconnect, device number 24 [ 409.730539][ T9] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 409.738258][ T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 409.749822][ T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 409.757479][ T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 409.775003][ T9] usb 5-1: USB disconnect, device number 48 [ 409.900514][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 409.992149][ T9395] usb usb8: usbfs: process 9395 (syz.0.887) did not claim interface 0 before use [ 410.228259][ T5887] usb 4-1: USB disconnect, device number 33 [ 410.249504][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 410.306834][ T9397] usb usb8: usbfs: process 9397 (syz.3.888) did not claim interface 0 before use [ 410.402080][ T9399] batadv1: entered promiscuous mode [ 410.432257][ T9] usb 1-1: config 0 has no interfaces? [ 410.444618][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 410.460813][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 410.472218][ T9] usb 1-1: Product: syz [ 410.476551][ T9] usb 1-1: Manufacturer: syz [ 410.481995][ T9] usb 1-1: SerialNumber: syz [ 410.493997][ T9] usb 1-1: config 0 descriptor?? [ 410.629660][ T5887] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 410.636249][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 410.669411][ T44] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 410.712884][ T9406] batadv1: entered promiscuous mode [ 410.760920][ T5887] usb 4-1: device descriptor read/64, error -71 [ 410.822388][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 410.829717][ T44] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 410.840855][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.853283][ T44] usb 5-1: config 0 descriptor?? [ 411.011609][ T5887] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 411.070803][ T44] usb 5-1: string descriptor 0 read error: -71 [ 411.091168][ T44] uvcvideo 5-1:0.0: Found multiple Units with ID 1 [ 411.098260][ T44] uvcvideo 5-1:0.0: Found UVC 0.00 device (2833:0201) [ 411.106703][ T44] uvcvideo 5-1:0.0: No valid video chain found. [ 411.119225][ T44] usb 5-1: USB disconnect, device number 49 [ 411.149467][ T5887] usb 4-1: device descriptor read/64, error -71 [ 411.279925][ T5887] usb usb4-port1: attempt power cycle [ 411.639656][ T5887] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 411.671095][ T5887] usb 4-1: device descriptor read/8, error -71 [ 411.929718][ T5887] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 411.941916][ T9423] netlink: 76 bytes leftover after parsing attributes in process `syz.4.894'. [ 411.951158][ T9423] netlink: 72 bytes leftover after parsing attributes in process `syz.4.894'. [ 411.960143][ T9423] netlink: 'syz.4.894': attribute type 3 has an invalid length. [ 411.967830][ T9423] netlink: 11 bytes leftover after parsing attributes in process `syz.4.894'. [ 412.078552][ T5887] usb 4-1: device descriptor read/8, error -71 [ 412.185170][ T9425] netlink: 'syz.2.895': attribute type 10 has an invalid length. [ 412.195407][ T9425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.895'. [ 412.210068][ T5887] usb usb4-port1: unable to enumerate USB device [ 412.287971][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 412.297945][ T9425] team0: Port device geneve0 added [ 412.620359][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 413.034086][ T44] usb 1-1: USB disconnect, device number 25 [ 413.119400][ T5887] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 413.137990][ T9443] tipc: Started in network mode [ 413.143132][ T9443] tipc: Node identity 7ec42b257b7f, cluster identity 4711 [ 413.152185][ T9443] tipc: Enabled bearer , priority 0 [ 413.163639][ T9443] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 413.176349][ T9443] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 413.190486][ T9443] tipc: Resetting bearer [ 413.210755][ T9442] tipc: Disabling bearer [ 413.279822][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 413.310550][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.339357][ T5887] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 413.348666][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.393112][ T5887] usb 2-1: config 0 descriptor?? [ 413.422101][ T5887] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 413.451332][ T44] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 413.477910][ T44] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 413.638611][ T5887] gspca_vc032x: reg_r err -32 [ 413.645407][ T5887] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 413.779398][ T89] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 414.026870][ T89] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 414.037487][ T89] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 414.049385][ T89] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.068553][ T89] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 414.101830][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.144166][ T89] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.157550][ T89] usb 1-1: invalid MIDI out EP 0 [ 414.271314][ T7040] udevd[7040]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.302667][ T89] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 415.724044][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 416.082508][ T9485] usb usb8: usbfs: process 9485 (syz.4.911) did not claim interface 0 before use [ 416.339370][ T89] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 416.484097][ T44] usb 1-1: USB disconnect, device number 26 [ 416.500401][ T9451] delete_channel: no stack [ 416.572184][ T89] usb 5-1: config 0 has no interfaces? [ 416.588266][ T89] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 416.613480][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 416.644457][ T89] usb 5-1: Product: syz [ 416.657050][ T89] usb 5-1: Manufacturer: syz [ 416.671964][ T89] usb 5-1: SerialNumber: syz [ 416.697358][ T89] usb 5-1: config 0 descriptor?? [ 416.946732][ T44] usb 2-1: USB disconnect, device number 35 [ 416.954019][ T9489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.912'. [ 417.039465][ T9489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.912'. [ 417.498131][ T9500] usb usb8: usbfs: process 9500 (syz.2.915) did not claim interface 0 before use [ 417.759737][ T5887] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 417.909353][ T5887] usb 3-1: device descriptor read/64, error -71 [ 418.159516][ T5887] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 418.309367][ T5887] usb 3-1: device descriptor read/64, error -71 [ 418.419690][ T5887] usb usb3-port1: attempt power cycle [ 418.759433][ T5887] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 418.780239][ T5887] usb 3-1: device descriptor read/8, error -71 [ 418.950018][ T9] usb 5-1: USB disconnect, device number 50 [ 419.071152][ T5887] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 419.112023][ T5887] usb 3-1: device descriptor read/8, error -71 [ 419.240401][ T5887] usb usb3-port1: unable to enumerate USB device [ 420.000502][ T5887] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 420.069060][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 420.437975][ T5887] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 420.449400][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.533204][ T5887] usb 4-1: config 0 has no interfaces? [ 420.538969][ T5887] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 420.557816][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.568988][ T89] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 420.603230][ T89] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 420.632944][ T5887] usb 4-1: config 0 descriptor?? [ 421.296509][ T5923] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 421.529704][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 421.537433][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.549519][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 421.559020][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.613024][ T5923] usb 2-1: config 0 descriptor?? [ 421.625567][ T5923] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 421.753683][ T44] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 421.833918][ T5923] gspca_vc032x: reg_r err -32 [ 421.838816][ T5923] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 421.924235][ T44] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 421.940504][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.952050][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.963655][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 421.982403][ T44] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 421.999380][ T44] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 422.014504][ T44] usb 5-1: Manufacturer: syz [ 422.027683][ T44] usb 5-1: config 0 descriptor?? [ 422.470123][ T44] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 422.855970][ T89] usb 4-1: USB disconnect, device number 38 [ 423.405908][ T9566] usb usb8: usbfs: process 9566 (syz.3.930) did not claim interface 0 before use [ 423.519980][ T44] appleir 0003:05AC:8243.0014: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 423.659443][ T89] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 423.831961][ T89] usb 4-1: config 0 has no interfaces? [ 423.841313][ T89] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 423.850724][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 423.860124][ T89] usb 4-1: Product: syz [ 423.864358][ T89] usb 4-1: Manufacturer: syz [ 423.869065][ T89] usb 4-1: SerialNumber: syz [ 423.876690][ T89] usb 4-1: config 0 descriptor?? [ 424.621385][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'. [ 424.799417][ T44] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 424.984110][ T44] usb 5-1: device firmware changed [ 424.997258][ T5923] usb 5-1: USB disconnect, device number 51 [ 425.070278][ T44] usb 2-1: USB disconnect, device number 36 [ 425.199951][ T5923] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 425.372901][ T5923] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 425.415440][ T5923] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 425.641952][ T5923] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.656302][ T5923] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 425.665687][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.986073][ T5923] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.020372][ T5923] usb 5-1: invalid MIDI out EP 0 [ 426.207275][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.259438][ T984] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 426.269953][ T5923] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 426.450467][ T5887] usb 4-1: USB disconnect, device number 39 [ 426.883522][ T5887] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 426.903143][ T5887] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 428.157173][ T89] usb 5-1: USB disconnect, device number 52 [ 428.175923][ T9579] delete_channel: no stack [ 428.527944][ T5887] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 428.794678][ T5887] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 428.903423][ T9625] FAULT_INJECTION: forcing a failure. [ 428.903423][ T9625] name failslab, interval 1, probability 0, space 0, times 0 [ 428.919003][ T9625] CPU: 0 UID: 0 PID: 9625 Comm: syz.1.945 Not tainted syzkaller #0 PREEMPT(full) [ 428.919032][ T9625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 428.919044][ T9625] Call Trace: [ 428.919053][ T9625] [ 428.919062][ T9625] dump_stack_lvl+0x189/0x250 [ 428.919094][ T9625] ? __pfx____ratelimit+0x10/0x10 [ 428.919122][ T9625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.919147][ T9625] ? __pfx__printk+0x10/0x10 [ 428.919174][ T9625] ? __pfx___might_resched+0x10/0x10 [ 428.919202][ T9625] should_fail_ex+0x414/0x560 [ 428.919243][ T9625] should_failslab+0xa8/0x100 [ 428.919264][ T9625] __kmalloc_noprof+0xcb/0x7f0 [ 428.919287][ T9625] ? kfree+0x4d/0x6d0 [ 428.919306][ T9625] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 428.919340][ T9625] tomoyo_realpath_from_path+0xe3/0x5d0 [ 428.919370][ T9625] ? tomoyo_domain+0xd9/0x130 [ 428.919396][ T9625] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 428.919421][ T9625] tomoyo_path_number_perm+0x1e8/0x5a0 [ 428.919449][ T9625] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 428.919495][ T9625] ? __lock_acquire+0xab9/0xd20 [ 428.919538][ T9625] ? __fget_files+0x2a/0x420 [ 428.919572][ T9625] ? __fget_files+0x3a0/0x420 [ 428.919590][ T9625] ? __fget_files+0x2a/0x420 [ 428.919614][ T9625] security_file_ioctl_compat+0xcb/0x2d0 [ 428.919641][ T9625] __ia32_compat_sys_ioctl+0x128/0x840 [ 428.919671][ T9625] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 428.919697][ T9625] ? __fget_files+0x3a0/0x420 [ 428.919722][ T9625] ? fput+0xa0/0xd0 [ 428.919744][ T9625] ? ksys_write+0x22a/0x250 [ 428.919773][ T9625] ? __pfx_ksys_write+0x10/0x10 [ 428.919803][ T9625] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 428.919835][ T9625] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.919866][ T9625] __do_fast_syscall_32+0xb6/0x2b0 [ 428.919886][ T9625] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.919918][ T9625] do_fast_syscall_32+0x34/0x80 [ 428.919936][ T9625] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.919960][ T9625] RIP: 0023:0xf70ad539 [ 428.919978][ T9625] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 428.919994][ T9625] RSP: 002b:00000000f545b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 428.920016][ T9625] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000040086200 [ 428.920030][ T9625] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.920042][ T9625] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.920053][ T9625] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 428.920065][ T9625] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.920098][ T9625] [ 429.483307][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.506570][ T9625] ERROR: Out of memory at tomoyo_realpath_from_path. [ 429.520713][ T5887] usb 3-1: Product: syz [ 429.525292][ T5887] usb 3-1: Manufacturer: syz [ 429.537752][ T5887] usb 3-1: SerialNumber: syz [ 429.554568][ T5887] usb 3-1: config 0 descriptor?? [ 430.077409][ T89] usb 3-1: USB disconnect, device number 43 [ 430.092992][ T5923] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 430.259756][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 430.284160][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.305271][ T5923] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 430.330226][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.386482][ T5923] usb 4-1: config 0 descriptor?? [ 430.414009][ T5923] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 430.609604][ T984] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 430.638322][ T5923] gspca_vc032x: reg_r err -32 [ 430.644886][ T5923] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 430.754739][ T9637] usb usb8: usbfs: process 9637 (syz.1.950) did not claim interface 0 before use [ 430.782294][ T984] usb 5-1: device descriptor read/64, error -71 [ 431.071159][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 431.080004][ T984] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 431.360084][ T984] usb 5-1: device descriptor read/64, error -71 [ 431.392386][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.412402][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 431.440172][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 431.455989][ T24] usb 2-1: Product: syz [ 431.464273][ T24] usb 2-1: Manufacturer: syz [ 431.474044][ T24] usb 2-1: SerialNumber: syz [ 431.480220][ T984] usb usb5-port1: attempt power cycle [ 431.839027][ T984] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 431.873560][ T984] usb 5-1: device descriptor read/8, error -71 [ 432.159646][ T984] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 432.570948][ T984] usb 5-1: device descriptor read/8, error -71 [ 432.694791][ T984] usb usb5-port1: unable to enumerate USB device [ 433.580853][ T9660] FAULT_INJECTION: forcing a failure. [ 433.580853][ T9660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.599502][ T9660] CPU: 1 UID: 0 PID: 9660 Comm: syz.4.954 Not tainted syzkaller #0 PREEMPT(full) [ 433.599540][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.599552][ T9660] Call Trace: [ 433.599561][ T9660] [ 433.599570][ T9660] dump_stack_lvl+0x189/0x250 [ 433.599601][ T9660] ? __pfx____ratelimit+0x10/0x10 [ 433.599629][ T9660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.599654][ T9660] ? __pfx__printk+0x10/0x10 [ 433.599689][ T9660] should_fail_ex+0x414/0x560 [ 433.599723][ T9660] _copy_to_user+0x31/0xb0 [ 433.599750][ T9660] __se_sys_move_pages+0x13c6/0x1650 [ 433.599794][ T9660] ? __pfx___se_sys_move_pages+0x10/0x10 [ 433.599850][ T9660] ? fput+0xa0/0xd0 [ 433.599872][ T9660] ? ksys_write+0x22a/0x250 [ 433.599897][ T9660] ? exc_page_fault+0x82/0x100 [ 433.599924][ T9660] ? __pfx_ksys_write+0x10/0x10 [ 433.599954][ T9660] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 433.599983][ T9660] ? __ia32_sys_move_pages+0x21/0xf0 [ 433.600009][ T9660] __do_fast_syscall_32+0xb6/0x2b0 [ 433.600027][ T9660] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.600058][ T9660] do_fast_syscall_32+0x34/0x80 [ 433.600076][ T9660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 433.600099][ T9660] RIP: 0023:0xf708d539 [ 433.600116][ T9660] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 433.600133][ T9660] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 000000000000013d [ 433.600155][ T9660] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000001efe [ 433.600169][ T9660] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000040 [ 433.600181][ T9660] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.600192][ T9660] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 433.600204][ T9660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 433.600235][ T9660] [ 433.872142][ T9660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.954'. [ 433.881328][ T9660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.954'. [ 433.896660][ T984] usb 2-1: USB disconnect, device number 37 [ 434.058289][ T24] usb 4-1: USB disconnect, device number 40 [ 434.186140][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'. [ 434.599360][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 434.762611][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 434.809560][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.823424][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.834141][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 434.849384][ T5887] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 434.857252][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 434.867074][ T24] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 434.875972][ T24] usb 5-1: Manufacturer: syz [ 434.896149][ T24] usb 5-1: config 0 descriptor?? [ 435.005886][ T5887] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 435.035025][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.053474][ T5887] usb 2-1: Product: syz [ 435.141862][ T5887] usb 2-1: Manufacturer: syz [ 435.190549][ T5887] usb 2-1: SerialNumber: syz [ 435.220288][ T5887] usb 2-1: config 0 descriptor?? [ 435.261873][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'. [ 435.547612][ T24] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 435.575831][ T5887] usb 2-1: USB disconnect, device number 38 [ 435.650581][ T24] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 435.910915][ T89] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 436.045939][ T9682] program syz.4.959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.058078][ T9682] vlan0: entered promiscuous mode [ 436.087603][ T89] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 436.098964][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.110185][ T89] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.120624][ T89] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 436.136182][ T89] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 436.147110][ T89] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 436.169474][ T89] usb 1-1: Manufacturer: syz [ 436.180690][ T89] usb 1-1: config 0 descriptor?? [ 436.289893][ T9692] usb usb8: usbfs: process 9692 (syz.2.966) did not claim interface 0 before use [ 436.379779][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 436.549625][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 436.668550][ T89] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 436.799799][ T89] appleir 0003:05AC:8243.0017: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 437.102513][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.140854][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 437.150585][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 437.180471][ T24] usb 3-1: Product: syz [ 437.184659][ T24] usb 3-1: Manufacturer: syz [ 437.189825][ T24] usb 3-1: SerialNumber: syz [ 437.222277][ T89] usb 1-1: USB disconnect, device number 28 [ 437.305011][ T9697] fido_id[9697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 437.865562][ T984] usb 5-1: USB disconnect, device number 57 [ 438.006286][ T89] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 438.029200][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.970'. [ 438.073116][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'. [ 438.222519][ T89] usb 4-1: Using ep0 maxpacket: 8 [ 438.233205][ T89] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.247365][ T89] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 438.267495][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.288204][ T89] usb 4-1: config 0 descriptor?? [ 438.513410][ T89] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 438.528996][ T89] gspca_vc032x: reg_r err -32 [ 438.541476][ T89] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 438.849382][ T984] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 439.016587][ T984] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 439.026405][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.035263][ T984] usb 2-1: Product: syz [ 439.040165][ T984] usb 2-1: Manufacturer: syz [ 439.044990][ T984] usb 2-1: SerialNumber: syz [ 439.055353][ T984] usb 2-1: config 0 descriptor?? [ 439.338865][ T984] usb 3-1: USB disconnect, device number 44 [ 439.362385][ T24] usb 2-1: USB disconnect, device number 39 [ 439.839370][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 440.012667][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 440.023871][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.144337][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.979'. [ 440.153697][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.183835][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 440.198855][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 440.216239][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 440.224589][ T9] usb 3-1: Manufacturer: syz [ 440.235816][ T9] usb 3-1: config 0 descriptor?? [ 440.334205][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.341110][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.478400][ T9742] FAULT_INJECTION: forcing a failure. [ 440.478400][ T9742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.493778][ T9742] CPU: 0 UID: 0 PID: 9742 Comm: syz.0.981 Not tainted syzkaller #0 PREEMPT(full) [ 440.493807][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.493819][ T9742] Call Trace: [ 440.493829][ T9742] [ 440.493838][ T9742] dump_stack_lvl+0x189/0x250 [ 440.493870][ T9742] ? __pfx____ratelimit+0x10/0x10 [ 440.493896][ T9742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.493922][ T9742] ? __pfx__printk+0x10/0x10 [ 440.493943][ T9742] ? __might_fault+0xb0/0x130 [ 440.493982][ T9742] should_fail_ex+0x414/0x560 [ 440.494017][ T9742] _copy_from_user+0x2d/0xb0 [ 440.494040][ T9742] kstrtouint_from_user+0xc4/0x170 [ 440.494064][ T9742] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 440.494103][ T9742] proc_fail_nth_write+0x88/0x200 [ 440.494129][ T9742] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 440.494159][ T9742] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 440.494184][ T9742] vfs_write+0x27e/0xb30 [ 440.494222][ T9742] ? __pfx_vfs_write+0x10/0x10 [ 440.494245][ T9742] ? __fget_files+0x2a/0x420 [ 440.494263][ T9742] ? __fget_files+0x3a0/0x420 [ 440.494276][ T9742] ? __fget_files+0x2a/0x420 [ 440.494298][ T9742] ksys_write+0x145/0x250 [ 440.494321][ T9742] ? __pfx_ksys_write+0x10/0x10 [ 440.494344][ T9742] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 440.494368][ T9742] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.494392][ T9742] __do_fast_syscall_32+0xb6/0x2b0 [ 440.494407][ T9742] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.494431][ T9742] do_fast_syscall_32+0x34/0x80 [ 440.494453][ T9742] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.494471][ T9742] RIP: 0023:0xf7f02539 [ 440.494485][ T9742] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 440.494498][ T9742] RSP: 002b:00000000f53f6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 440.494516][ T9742] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53f6620 [ 440.494527][ T9742] RDX: 0000000000000001 RSI: 00000000f7396ff4 RDI: 0000000000000000 [ 440.494535][ T9742] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 440.494544][ T9742] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 440.494552][ T9742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.494577][ T9742] [ 441.016081][ T9] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 441.057782][ T9] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 441.420493][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 441.462034][ T9754] program syz.2.978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.533130][ T9767] usb usb8: usbfs: process 9767 (syz.4.987) did not claim interface 0 before use [ 442.695038][ T89] usb 4-1: USB disconnect, device number 41 [ 442.838008][ T5920] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 442.930555][ T9775] netlink: 200 bytes leftover after parsing attributes in process `syz.3.989'. [ 443.020984][ T24] usb 3-1: USB disconnect, device number 45 [ 443.033420][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.065702][ T5920] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 443.089304][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 443.097442][ T5920] usb 5-1: Product: syz [ 443.147004][ T5920] usb 5-1: Manufacturer: syz [ 443.169368][ T5920] usb 5-1: SerialNumber: syz [ 443.751202][ T9788] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 443.800415][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 444.177305][ T9801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.994'. [ 444.233315][ T9788] bond1: entered promiscuous mode [ 444.250853][ T9788] bond1: entered allmulticast mode [ 444.404149][ T9791] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 444.425208][ T9791] bond1: (slave bridge5): making interface the new active one [ 444.442759][ T9791] bridge5: entered promiscuous mode [ 444.456733][ T9791] bridge5: entered allmulticast mode [ 444.477964][ T9791] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 444.638904][ T9801] bond1: left promiscuous mode [ 444.776306][ T9801] bridge5: left promiscuous mode [ 444.845252][ T9801] bond1: left allmulticast mode [ 444.883549][ T9801] bridge5: left allmulticast mode [ 444.900186][ T9801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.382083][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 445.672589][ T24] usb 5-1: USB disconnect, device number 58 [ 445.959360][ T89] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 445.964327][ T5920] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 446.112563][ T89] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 446.124245][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.150164][ T89] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.171764][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 446.177260][ T89] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 446.191631][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.204657][ T5920] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 446.206293][ T89] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 446.231678][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.261077][ T89] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 446.273403][ T5920] usb 1-1: config 0 descriptor?? [ 446.294434][ T89] usb 4-1: Manufacturer: syz [ 446.324642][ T89] usb 4-1: config 0 descriptor?? [ 446.326328][ T5920] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 446.408097][ T9830] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1004'. [ 446.526315][ T5920] gspca_vc032x: reg_r err -32 [ 446.540647][ T5920] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 447.001759][ T89] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 447.028495][ T89] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 447.740181][ T9834] program syz.3.1000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.919348][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 449.106865][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 449.146723][ T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 449.412668][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 449.445047][ T89] usb 4-1: USB disconnect, device number 42 [ 449.566339][ T24] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 449.740621][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 449.758136][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.075106][ T9] usb 1-1: USB disconnect, device number 29 [ 450.496166][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 450.770174][ T24] usb 2-1: invalid MIDI out EP 0 [ 450.919883][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 451.051705][ T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 451.074672][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 451.583965][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.614167][ T9] usb 3-1: Product: syz [ 451.640686][ T9] usb 3-1: Manufacturer: syz [ 451.677460][ T9] usb 3-1: SerialNumber: syz [ 451.761783][ T9] usb 3-1: config 0 descriptor?? [ 452.038849][ T5887] usb 3-1: USB disconnect, device number 46 [ 452.540681][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.019206][ T5887] usb 2-1: USB disconnect, device number 40 [ 453.080873][ T9849] delete_channel: no stack [ 454.047170][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 454.734472][ T984] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 454.969215][ T984] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 454.991307][ T89] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 455.000579][ T984] usb 1-1: config 0 has no interface number 0 [ 455.029428][ T984] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 455.077141][ T984] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 455.159370][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 455.192191][ T89] usb 3-1: Using ep0 maxpacket: 8 [ 455.194567][ T984] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 455.211057][ T89] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.327165][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.355530][ T89] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 455.356813][ T984] usb 1-1: Product: syz [ 455.438761][ T10] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 455.447601][ T984] usb 1-1: Manufacturer: syz [ 455.468226][ T984] usb 1-1: SerialNumber: syz [ 455.487347][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 455.503097][ T984] usb 1-1: config 0 descriptor?? [ 455.522127][ T9906] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 455.531602][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.546426][ T984] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 455.589412][ T10] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.624097][ T89] usb 3-1: config 0 descriptor?? [ 455.771080][ T9921] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1026'. [ 455.780251][ T9921] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1026'. [ 455.789387][ T9921] netlink: 'syz.1.1026': attribute type 3 has an invalid length. [ 455.797291][ T9921] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1026'. [ 455.946725][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 455.980799][ T89] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 456.000307][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.175310][ T89] gspca_vc032x: reg_r err -32 [ 456.196061][ T89] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 456.216929][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 456.310322][ T10] usb 5-1: invalid MIDI out EP 0 [ 456.953319][ T10] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 457.518333][ T984] usb 1-1: USB disconnect, device number 30 [ 457.565127][ T984] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 458.051271][ T984] usb 5-1: USB disconnect, device number 59 [ 458.096832][ T9912] delete_channel: no stack [ 458.217297][ T24] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 458.270670][ T24] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 458.410278][ T89] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 458.470760][ T9945] tipc: Enabled bearer , priority 0 [ 458.488530][ T9945] syzkaller0: entered promiscuous mode [ 458.501856][ T5920] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 458.513222][ T9945] syzkaller0: entered allmulticast mode [ 458.572482][ T9945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1033'. [ 458.616568][ T89] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 458.639837][ T89] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 458.666283][ T9945] tipc: Resetting bearer [ 458.693064][ T5920] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 458.713042][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.721320][ T89] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.721378][ T89] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 458.721403][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.785876][ T9944] tipc: Resetting bearer [ 458.803822][ T89] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 458.816780][ T89] usb 4-1: invalid MIDI out EP 0 [ 458.869146][ T9944] tipc: Disabling bearer [ 458.931695][ T7040] udevd[7040]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.953302][ T89] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 458.990991][ T5920] usb 2-1: Product: syz [ 458.995299][ T5920] usb 2-1: Manufacturer: syz [ 459.098344][ T5920] usb 2-1: SerialNumber: syz [ 459.164466][ T5920] usb 2-1: config 0 descriptor?? [ 459.470447][ T5920] usb 3-1: USB disconnect, device number 47 [ 459.538753][ T44] usb 2-1: USB disconnect, device number 41 [ 459.634403][ T9958] FAULT_INJECTION: forcing a failure. [ 459.634403][ T9958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.643246][ T9954] netlink: 'syz.4.1034': attribute type 3 has an invalid length. [ 459.674326][ T9958] CPU: 1 UID: 0 PID: 9958 Comm: syz.2.1035 Not tainted syzkaller #0 PREEMPT(full) [ 459.674354][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.674364][ T9958] Call Trace: [ 459.674371][ T9958] [ 459.674380][ T9958] dump_stack_lvl+0x189/0x250 [ 459.674412][ T9958] ? __pfx____ratelimit+0x10/0x10 [ 459.674436][ T9958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.674460][ T9958] ? __pfx__printk+0x10/0x10 [ 459.674492][ T9958] should_fail_ex+0x414/0x560 [ 459.674525][ T9958] _copy_to_user+0x31/0xb0 [ 459.674552][ T9958] compat_drm_wait_vblank+0x14c/0x1b0 [ 459.674581][ T9958] ? __pfx___drm_dev_dbg+0x10/0x10 [ 459.674601][ T9958] ? __pfx_compat_drm_wait_vblank+0x10/0x10 [ 459.674634][ T9958] ? __fget_files+0x2a/0x420 [ 459.674661][ T9958] drm_compat_ioctl+0x243/0x330 [ 459.674690][ T9958] ? __pfx_compat_drm_wait_vblank+0x10/0x10 [ 459.674720][ T9958] __ia32_compat_sys_ioctl+0x543/0x840 [ 459.674747][ T9958] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 459.674771][ T9958] ? __fget_files+0x3a0/0x420 [ 459.674796][ T9958] ? fput+0xa0/0xd0 [ 459.674821][ T9958] ? rcu_is_watching+0x15/0xb0 [ 459.674846][ T9958] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 459.674873][ T9958] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.674902][ T9958] __do_fast_syscall_32+0xb6/0x2b0 [ 459.674921][ T9958] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.674951][ T9958] do_fast_syscall_32+0x34/0x80 [ 459.674979][ T9958] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 459.675002][ T9958] RIP: 0023:0xf7f63539 [ 459.675019][ T9958] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 459.675036][ T9958] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 459.675057][ T9958] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c010643a [ 459.675071][ T9958] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 459.675083][ T9958] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.675094][ T9958] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 459.675105][ T9958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.675136][ T9958] [ 460.950451][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 460.950906][ T44] usb 4-1: USB disconnect, device number 43 [ 460.965376][ T9941] delete_channel: no stack [ 461.086479][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 461.123551][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 461.136357][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.148258][ T10] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 461.182845][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 461.205683][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 461.256975][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.302022][ T10] usb 3-1: config 0 descriptor?? [ 462.049774][ T9990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1045'. [ 462.225364][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 462.269384][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 462.327516][ T10] usb 3-1: USB disconnect, device number 48 [ 464.065615][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 464.659454][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 464.821965][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 464.843618][ T10] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 464.849552][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.890038][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.939536][ T10] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 465.268490][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 465.281897][ T984] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 465.342347][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 465.352288][ T24] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 465.360584][ T24] usb 3-1: Manufacturer: syz [ 465.370751][ T24] usb 3-1: config 0 descriptor?? [ 465.604952][ T984] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 465.618700][ T984] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 465.700436][ T984] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.805573][ T24] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 465.816273][ T984] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 465.895212][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.947141][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1056'. [ 466.040693][ T984] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 466.081739][ T984] usb 5-1: invalid MIDI out EP 0 [ 466.227384][ T984] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 466.310209][T10027] program syz.2.1052 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.834670][ T24] appleir 0003:05AC:8243.001C: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 468.316927][T10041] netlink: 'syz.2.1060': attribute type 10 has an invalid length. [ 468.325042][T10041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1060'. [ 468.363834][ T5920] usb 5-1: USB disconnect, device number 60 [ 468.394214][T10021] delete_channel: no stack [ 468.401604][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. [ 468.671484][ T44] usb 3-1: USB disconnect, device number 49 [ 469.274432][T10052] fido_id[10052]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 469.501042][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1066'. [ 469.864252][T10067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1067'. [ 470.184915][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'. [ 470.439517][T10075] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1070'. [ 470.516400][T10075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1070'. [ 470.539531][T10075] unsupported nlmsg_type 40 [ 470.703074][ T89] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 470.765469][ T89] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 471.078183][T10083] fido_id[10083]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 472.565550][T10100] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1075'. [ 472.649465][T10100] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1075'. [ 472.659091][T10100] netlink: 'syz.2.1075': attribute type 3 has an invalid length. [ 473.372233][T10100] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1075'. [ 474.035264][T10114] netlink: 'syz.0.1080': attribute type 10 has an invalid length. [ 474.110196][T10114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1080'. [ 474.148213][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1080'. [ 474.304065][T10114] team0: Port device geneve0 added [ 474.380634][ T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 474.406820][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1082'. [ 474.586648][ T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 474.614805][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.633551][ T24] usb 5-1: Product: syz [ 474.637815][ T24] usb 5-1: Manufacturer: syz [ 474.654668][ T24] usb 5-1: SerialNumber: syz [ 474.665465][ T24] usb 5-1: config 0 descriptor?? [ 474.750241][ T5920] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 474.904394][ T24] usb 5-1: USB disconnect, device number 61 [ 474.929568][ T5920] usb 3-1: device descriptor read/64, error -71 [ 475.169598][ T5920] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 475.309413][ T5920] usb 3-1: device descriptor read/64, error -71 [ 475.430818][ T5920] usb usb3-port1: attempt power cycle [ 475.789430][ T5920] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 475.830209][ T5920] usb 3-1: device descriptor read/8, error -71 [ 475.870470][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 476.059341][ T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 476.091127][T10137] netlink: 1164 bytes leftover after parsing attributes in process `syz.0.1089'. [ 476.129440][ T5920] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 476.129476][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 476.150839][ T5920] usb 3-1: device descriptor read/8, error -71 [ 476.229668][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 476.241588][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.279727][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 476.290318][ T5920] usb usb3-port1: unable to enumerate USB device [ 476.291316][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 476.307018][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.320253][ T24] usb 5-1: config 0 descriptor?? [ 476.343918][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 476.363216][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 476.469388][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 476.523868][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 476.537935][ T24] gspca_vc032x: reg_r err -32 [ 476.542877][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.551741][ T24] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 476.552569][ T10] usb 2-1: Product: syz [ 476.722369][ T10] usb 2-1: Manufacturer: syz [ 476.727069][ T10] usb 2-1: SerialNumber: syz [ 476.735834][ T10] usb 2-1: config 0 descriptor?? [ 476.946170][ T10] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 477.185225][ T24] usb 2-1: USB disconnect, device number 42 [ 478.636100][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1096'. [ 478.899336][ T5920] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 479.049741][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 479.057339][ T5920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.068530][ T5920] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 479.087404][ T5920] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 479.111277][ T5920] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.121357][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.131668][ T5920] usb 2-1: Product: syz [ 479.137521][ T5920] usb 2-1: Manufacturer: syz [ 479.144463][ T5920] usb 2-1: SerialNumber: syz [ 479.160795][ T5920] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 479.175885][ T5920] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 479.183382][ T5920] cdc_ncm 2-1:1.0: bind() failure [ 479.381866][ T24] usb 2-1: USB disconnect, device number 43 [ 479.399321][ T89] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 479.566492][ T89] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 479.578641][ T89] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.594819][ T89] usb 1-1: Product: syz [ 479.599559][ T89] usb 1-1: Manufacturer: syz [ 479.604196][ T89] usb 1-1: SerialNumber: syz [ 479.720159][ T89] usb 1-1: config 0 descriptor?? [ 480.286525][ T5920] usb 5-1: USB disconnect, device number 62 [ 480.510035][ T89] usb 1-1: USB disconnect, device number 31 [ 480.763897][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.069367][ T5920] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 481.227188][ T5920] usb 5-1: device descriptor read/64, error -71 [ 481.543364][ T5920] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 481.667170][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 481.682927][ T5920] usb 5-1: device descriptor read/64, error -71 [ 481.827147][ T5920] usb usb5-port1: attempt power cycle [ 482.739353][ T5920] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 483.010087][ T5920] usb 5-1: device descriptor read/8, error -71 [ 483.342249][ T5920] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 483.385042][ T5920] usb 5-1: device descriptor read/8, error -71 [ 483.557147][ T5920] usb usb5-port1: unable to enumerate USB device [ 483.973431][T10223] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1112'. [ 484.211874][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'. [ 484.433697][ T5920] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 484.640026][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 484.647877][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.663558][ T5920] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 484.677210][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.815905][ T5920] usb 5-1: config 0 descriptor?? [ 484.874243][ T5920] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 484.994947][T10235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1117'. [ 485.099318][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 485.109776][ T5920] gspca_vc032x: reg_r err -32 [ 485.122829][ T5920] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 485.284888][ T24] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 485.300283][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.321163][ T24] usb 2-1: Product: syz [ 485.333357][ T24] usb 2-1: Manufacturer: syz [ 485.338553][ T24] usb 2-1: SerialNumber: syz [ 485.348993][ T24] usb 2-1: config 0 descriptor?? [ 485.374724][T10242] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1119'. [ 485.384325][T10242] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1119'. [ 485.394488][T10242] netlink: 'syz.3.1119': attribute type 3 has an invalid length. [ 485.404127][T10242] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1119'. [ 486.042103][ T10] usb 2-1: USB disconnect, device number 44 [ 486.099498][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.680889][T10259] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1123'. [ 486.779353][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1123'. [ 486.788882][T10259] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1123'. [ 486.820478][ T10] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 486.840526][ T10] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 487.873735][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 488.046733][ T10] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 488.092519][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 488.112480][ T10] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.147408][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 488.162703][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.196713][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 488.217428][ T10] usb 1-1: invalid MIDI out EP 0 [ 488.513287][ T10] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 488.778827][ T24] usb 5-1: USB disconnect, device number 67 [ 490.068647][T10271] delete_channel: no stack [ 490.074702][ T24] usb 1-1: USB disconnect, device number 32 [ 490.322925][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1130'. [ 490.549367][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 490.973506][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 491.064203][ T24] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 491.081461][ T24] usb 1-1: config 0 has no interface number 1 [ 491.105359][ T24] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 491.134828][ T24] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 491.178552][ T24] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 491.306840][ T24] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 491.473589][ T24] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 491.524739][T10306] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 491.568562][T10306] [U] J"—e:ÀÆ" [ 491.597175][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 491.651515][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 30768, setting to 1024 [ 491.729772][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 491.856998][T10308] sit1: entered allmulticast mode [ 491.888070][ T24] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 491.938671][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.953066][ T24] usb 1-1: Product: syz [ 491.958272][ T24] usb 1-1: Manufacturer: syz [ 491.966938][ T24] usb 1-1: SerialNumber: syz [ 492.033589][ T24] usb 1-1: config 0 descriptor?? [ 492.104465][T10296] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.132172][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 492.186334][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 492.449677][ T24] usb 1-1: USB disconnect, device number 33 [ 492.738809][T10316] udevd[10316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.090433][T10320] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 493.219456][ T5923] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 493.484780][ T5923] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 493.496554][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.544187][ T5923] usb 3-1: Product: syz [ 493.548517][ T5923] usb 3-1: Manufacturer: syz [ 493.562479][ T5923] usb 3-1: SerialNumber: syz [ 493.573356][ T5923] usb 3-1: config 0 descriptor?? [ 493.673936][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'. [ 493.804535][ T5923] usb 3-1: USB disconnect, device number 54 [ 494.860259][ T89] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 495.027571][ T89] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 495.038888][ T89] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 495.094618][ T89] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.119351][ T89] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 495.148650][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.172643][ T89] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 495.181876][ T89] usb 1-1: invalid MIDI out EP 0 [ 495.253458][ T89] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 495.453311][T10316] udevd[10316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.411289][T10358] FAULT_INJECTION: forcing a failure. [ 497.411289][T10358] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 497.429311][T10358] CPU: 0 UID: 0 PID: 10358 Comm: syz.4.1149 Not tainted syzkaller #0 PREEMPT(full) [ 497.429339][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.429350][T10358] Call Trace: [ 497.429358][T10358] [ 497.429366][T10358] dump_stack_lvl+0x189/0x250 [ 497.429397][T10358] ? __pfx____ratelimit+0x10/0x10 [ 497.429423][T10358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.429448][T10358] ? __pfx__printk+0x10/0x10 [ 497.429471][T10358] ? fs_reclaim_acquire+0x7d/0x100 [ 497.429506][T10358] should_fail_ex+0x414/0x560 [ 497.429540][T10358] prepare_alloc_pages+0x213/0x610 [ 497.429567][T10358] __alloc_frozen_pages_noprof+0x123/0x370 [ 497.429590][T10358] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 497.429606][T10358] ? __free_frozen_pages+0x65e/0xd30 [ 497.429648][T10358] alloc_pages_mpol+0x232/0x4a0 [ 497.429675][T10358] alloc_pages_noprof+0xa9/0x190 [ 497.429697][T10358] get_free_pages_noprof+0xf/0x80 [ 497.429717][T10358] vcs_write+0xf3/0x1260 [ 497.429740][T10358] ? __lock_acquire+0xab9/0xd20 [ 497.429757][T10358] ? iovec_from_user+0x87/0x250 [ 497.429801][T10358] ? __pfx_vcs_write+0x10/0x10 [ 497.429824][T10358] ? bpf_lsm_file_permission+0x9/0x20 [ 497.429853][T10358] ? iov_iter_iovec_advance+0x1e0/0x290 [ 497.429884][T10358] vfs_writev+0x4b6/0x960 [ 497.429909][T10358] ? __pfx_vcs_write+0x10/0x10 [ 497.429936][T10358] ? __pfx_vfs_writev+0x10/0x10 [ 497.429973][T10358] ? __fget_files+0x2a/0x420 [ 497.429997][T10358] ? __fget_files+0x3a0/0x420 [ 497.430014][T10358] ? __fget_files+0x2a/0x420 [ 497.430043][T10358] do_writev+0x14d/0x2d0 [ 497.430066][T10358] ? __pfx_do_writev+0x10/0x10 [ 497.430090][T10358] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 497.430120][T10358] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.430151][T10358] __do_fast_syscall_32+0xb6/0x2b0 [ 497.430170][T10358] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.430202][T10358] do_fast_syscall_32+0x34/0x80 [ 497.430219][T10358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 497.430241][T10358] RIP: 0023:0xf708d539 [ 497.430260][T10358] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 497.430276][T10358] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 497.430299][T10358] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000c40 [ 497.430313][T10358] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000000 [ 497.430325][T10358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.430336][T10358] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 497.430347][T10358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.430379][T10358] [ 498.752635][ T5923] usb 1-1: USB disconnect, device number 34 [ 498.768545][T10341] delete_channel: no stack [ 499.026169][T10379] netlink: 'syz.2.1153': attribute type 7 has an invalid length. [ 500.519598][ T5923] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 500.813696][ T5923] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 500.853810][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.919321][ T5923] usb 3-1: Product: syz [ 500.930831][ T5923] usb 3-1: Manufacturer: syz [ 500.953490][ T5923] usb 3-1: SerialNumber: syz [ 500.985265][ T5923] usb 3-1: config 0 descriptor?? [ 501.256460][ T24] usb 3-1: USB disconnect, device number 55 [ 501.320163][ T89] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 501.482954][ T89] usb 4-1: device descriptor read/64, error -71 [ 501.776422][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.783941][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.799399][ T89] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 502.048258][ T89] usb 4-1: device descriptor read/64, error -71 [ 502.179825][ T89] usb usb4-port1: attempt power cycle [ 502.319820][T10419] fuse: Bad value for 'fd' [ 502.736248][ T5923] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 502.809311][ T89] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 502.835332][ T5923] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 502.855482][ T89] usb 4-1: device descriptor read/8, error -71 [ 502.994721][T10423] fido_id[10423]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 503.139440][ T89] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 503.189931][ T89] usb 4-1: device descriptor read/8, error -71 [ 503.299608][ T89] usb usb4-port1: unable to enumerate USB device [ 503.839361][ T89] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 504.007019][ T89] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 504.020363][ T89] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 504.037042][ T89] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.050801][ T89] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 504.060885][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.106028][ T89] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.114343][ T89] usb 1-1: invalid MIDI out EP 0 [ 504.427784][ T7492] udevd[7492]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.532249][ T89] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 504.856712][T10444] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1169'. [ 504.865886][T10444] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1169'. [ 504.874965][T10444] netlink: 'syz.2.1169': attribute type 3 has an invalid length. [ 504.882972][T10444] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1169'. [ 505.134177][T10446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.794022][T10450] netlink: 'syz.4.1171': attribute type 10 has an invalid length. [ 505.866661][T10450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.098078][T10452] bond_slave_0: entered promiscuous mode [ 506.104040][T10452] bond_slave_1: entered promiscuous mode [ 506.109856][T10452] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 506.247252][T10452] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 506.280972][T10452] bond1: (slave macvlan5): Enslaving as a backup interface with an up link [ 507.019328][ T5923] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 507.204421][ T5923] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 507.238536][ T89] usb 1-1: USB disconnect, device number 35 [ 507.256285][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.270849][ T5923] usb 5-1: Product: syz [ 507.299062][ T5923] usb 5-1: Manufacturer: syz [ 507.319153][ T5923] usb 5-1: SerialNumber: syz [ 507.339025][T10428] delete_channel: no stack [ 507.360666][ T5923] usb 5-1: config 0 descriptor?? [ 507.499703][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 507.531375][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'. [ 507.622329][T10473] sit1: entered allmulticast mode [ 507.751549][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 507.781380][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.877880][ T24] usb 4-1: config 0 descriptor?? [ 507.923010][ T24] cp210x 4-1:0.0: cp210x converter detected [ 507.961942][ T984] usb 5-1: USB disconnect, device number 68 [ 508.126711][ T24] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 508.175431][ T24] cp210x 4-1:0.0: querying part number failed [ 508.209109][ T24] usb 4-1: cp210x converter now attached to ttyUSB0 [ 510.291076][ T5887] usb 4-1: USB disconnect, device number 48 [ 510.408854][ T5887] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 510.453419][ T5887] cp210x 4-1:0.0: device disconnected [ 510.929381][ T5887] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 511.269471][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 511.306766][ T5887] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 511.328199][ T5887] usb 4-1: config 0 has no interface number 0 [ 511.341329][ T5887] usb 4-1: too many endpoints for config 0 interface 27 altsetting 170: 224, using maximum allowed: 30 [ 511.354448][ T5887] usb 4-1: config 0 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 224 [ 511.368318][ T5887] usb 4-1: config 0 interface 27 has no altsetting 0 [ 511.378429][ T5887] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 511.387956][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.410619][ T5887] usb 4-1: Product: syz [ 511.492083][ T5887] usb 4-1: Manufacturer: syz [ 511.508967][ T5887] usb 4-1: SerialNumber: syz [ 511.522375][ T5887] usb 4-1: config 0 descriptor?? [ 512.310399][T10519] fuse: Bad value for 'fd' [ 512.349906][ T5920] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 512.385230][ T5920] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 512.675371][T10523] fido_id[10523]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 512.742446][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 513.000567][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1189'. [ 513.106298][ T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 513.143811][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 513.205380][ T9] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.285888][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 513.385468][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.547574][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 513.578035][ T9] usb 2-1: invalid MIDI out EP 0 [ 514.001793][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 514.137878][ T5887] peak_usb 4-1:0.27 can0: unable to request usb[type=0 value=1] err=-71 [ 514.216687][ T5887] peak_usb 4-1:0.27: unable to read PCAN-USB Pro firmware info (err -71) [ 515.191189][ T5887] peak_usb 4-1:0.27: probe with driver peak_usb failed with error -71 [ 515.257604][ T5887] usb 4-1: USB disconnect, device number 49 [ 515.521889][T10546] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1194'. [ 515.719864][ T89] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 515.881754][ T984] usb 2-1: USB disconnect, device number 45 [ 515.925090][T10520] delete_channel: no stack [ 516.441077][ T89] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 516.459329][ T5920] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 516.467343][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.516817][ T89] usb 3-1: Product: syz [ 516.526209][ T89] usb 3-1: Manufacturer: syz [ 516.536207][ T89] usb 3-1: SerialNumber: syz [ 516.557580][ T89] usb 3-1: config 0 descriptor?? [ 516.611581][ T5920] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 516.638389][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.690569][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.708714][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 516.736222][ T5920] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 516.750442][ T5920] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 516.765761][ T5920] usb 1-1: Manufacturer: syz [ 516.805547][ T5920] usb 1-1: config 0 descriptor?? [ 516.821728][ T89] usb 3-1: USB disconnect, device number 56 [ 517.236406][ T5920] appleir 0003:05AC:8243.0021: unknown main item tag 0x0 [ 517.301873][ T5920] appleir 0003:05AC:8243.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 517.759978][T10560] program syz.0.1197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.205112][T10560] vlan0: entered promiscuous mode [ 518.219342][ T5887] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 518.376952][ T5887] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 518.386486][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.406744][ T5887] usb 2-1: Product: syz [ 518.417044][ T5887] usb 2-1: Manufacturer: syz [ 518.423003][ T5887] usb 2-1: SerialNumber: syz [ 518.468239][ T5887] usb 2-1: config 0 descriptor?? [ 518.795360][ T5887] usb 2-1: USB disconnect, device number 46 [ 519.236696][T10574] fuse: Unknown parameter 'úåpfŽ[' [ 519.332389][ T10] usb 1-1: USB disconnect, device number 36 [ 519.977978][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1202'. [ 521.158331][T10599] netlink: 'syz.0.1209': attribute type 10 has an invalid length. [ 521.818634][T10604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.999416][T10604] binder: 10598:10604 ioctl 40187542 0 returned -22 [ 522.029020][T10604] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 522.089835][T10604] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 522.169839][ T68] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 522.194817][T10604] bond2: (slave macvlan5): Enslaving as an active interface with an up link [ 522.269317][ T5923] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 522.325245][ T1533] bond2: (slave macvlan5): link status up again after 0 ms [ 522.587700][ T1533] bond2: (slave macvlan5): failed to get link speed/duplex [ 522.626344][ T1533] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 522.691466][ T5923] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 522.740777][ T1533] bond2: (slave macvlan5): failed to get link speed/duplex [ 522.756558][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.779979][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.799336][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 522.846891][ T5923] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 522.869492][ T3939] bond2: (slave macvlan5): failed to get link speed/duplex [ 522.909419][ T5923] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 522.928043][ T5923] usb 5-1: Manufacturer: syz [ 522.961529][ T5923] usb 5-1: config 0 descriptor?? [ 523.028931][ T3939] bond2: (slave macvlan5): failed to get link speed/duplex [ 523.161159][ T68] bond2: (slave macvlan5): failed to get link speed/duplex [ 523.289724][ T3469] bond2: (slave macvlan5): failed to get link speed/duplex [ 523.407062][ T68] bond2: (slave macvlan5): failed to get link speed/duplex [ 523.416756][ T5923] appleir 0003:05AC:8243.0022: unknown main item tag 0x0 [ 523.451819][ T5923] appleir 0003:05AC:8243.0022: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 523.619634][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 523.804812][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 523.816424][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.869472][ T9] usb 1-1: Product: syz [ 523.887930][ T9] usb 1-1: Manufacturer: syz [ 523.921131][ T9] usb 1-1: SerialNumber: syz [ 523.974391][T10622] program syz.4.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.998749][ T9] usb 1-1: config 0 descriptor?? [ 524.263576][ T9] usb 1-1: USB disconnect, device number 37 [ 525.437411][T10637] Unknown status report in ack skb [ 525.486089][T10637] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1217'. [ 525.648422][ T5920] usb 5-1: USB disconnect, device number 69 [ 527.490068][ T50] net_ratelimit: 25 callbacks suppressed [ 527.490093][ T50] bond2: (slave macvlan5): failed to get link speed/duplex [ 527.619345][ T5920] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 527.699599][ T50] bond2: (slave macvlan5): failed to get link speed/duplex [ 527.867710][ T50] bond2: (slave macvlan5): failed to get link speed/duplex [ 527.984909][ T5920] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 528.028165][ T5920] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 528.047095][ T5920] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.062946][ T5920] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 528.072924][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.088801][ T7157] bond2: (slave macvlan5): failed to get link speed/duplex [ 528.139173][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.218162][ T5920] usb 3-1: invalid MIDI out EP 0 [ 528.518957][ T7157] bond2: (slave macvlan5): failed to get link speed/duplex [ 528.899440][ T3469] bond2: (slave macvlan5): failed to get link speed/duplex [ 529.002299][ T5920] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 529.128496][ T7492] udevd[7492]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.135252][ T3939] bond2: (slave macvlan5): failed to get link speed/duplex [ 529.390654][ T50] bond2: (slave macvlan5): failed to get link speed/duplex [ 529.509872][ T3939] bond2: (slave macvlan5): failed to get link speed/duplex [ 529.659637][ T50] bond2: (slave macvlan5): failed to get link speed/duplex [ 529.949434][ T9] usb 3-1: USB disconnect, device number 57 [ 529.969766][T10658] delete_channel: no stack [ 530.103252][T10678] FAULT_INJECTION: forcing a failure. [ 530.103252][T10678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.156600][T10678] CPU: 1 UID: 0 PID: 10678 Comm: syz.3.1228 Not tainted syzkaller #0 PREEMPT(full) [ 530.156636][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.156647][T10678] Call Trace: [ 530.156655][T10678] [ 530.156662][T10678] dump_stack_lvl+0x189/0x250 [ 530.156694][T10678] ? __pfx____ratelimit+0x10/0x10 [ 530.156718][T10678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.156741][T10678] ? __pfx__printk+0x10/0x10 [ 530.156760][T10678] ? __might_fault+0xb0/0x130 [ 530.156795][T10678] should_fail_ex+0x414/0x560 [ 530.156828][T10678] _copy_from_user+0x2d/0xb0 [ 530.156853][T10678] smc_setsockopt+0x3b8/0xab0 [ 530.156885][T10678] ? __pfx_smc_setsockopt+0x10/0x10 [ 530.156908][T10678] ? aa_sock_opt_perm+0xff/0x1b0 [ 530.156936][T10678] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 530.156955][T10678] ? __pfx_smc_setsockopt+0x10/0x10 [ 530.156983][T10678] do_sock_setsockopt+0x17c/0x1b0 [ 530.157006][T10678] __ia32_sys_setsockopt+0x13f/0x1b0 [ 530.157029][T10678] __do_fast_syscall_32+0xb6/0x2b0 [ 530.157046][T10678] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.157075][T10678] do_fast_syscall_32+0x34/0x80 [ 530.157090][T10678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 530.157111][T10678] RIP: 0023:0xf7f43539 [ 530.157127][T10678] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 530.157141][T10678] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 530.157160][T10678] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 530.157172][T10678] RDX: 000000000000048a RSI: 0000000080000500 RDI: 000000000000000c [ 530.157184][T10678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 530.157193][T10678] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 530.157203][T10678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 530.157233][T10678] [ 530.393684][T10684] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1227'. [ 530.402929][T10684] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1227'. [ 530.412878][T10684] netlink: 'syz.4.1227': attribute type 3 has an invalid length. [ 530.420988][T10684] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1227'. [ 531.550871][T10694] usb usb8: usbfs: process 10694 (syz.3.1230) did not claim interface 0 before use [ 532.099414][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 532.122667][T10698] FAULT_INJECTION: forcing a failure. [ 532.122667][T10698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.167901][T10698] CPU: 0 UID: 0 PID: 10698 Comm: syz.0.1231 Not tainted syzkaller #0 PREEMPT(full) [ 532.167931][T10698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.167943][T10698] Call Trace: [ 532.167951][T10698] [ 532.167961][T10698] dump_stack_lvl+0x189/0x250 [ 532.167992][T10698] ? __pfx____ratelimit+0x10/0x10 [ 532.168019][T10698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.168044][T10698] ? __pfx__printk+0x10/0x10 [ 532.168078][T10698] should_fail_ex+0x414/0x560 [ 532.168112][T10698] _copy_to_user+0x31/0xb0 [ 532.168140][T10698] simple_read_from_buffer+0xe1/0x170 [ 532.168174][T10698] proc_fail_nth_read+0x1b3/0x220 [ 532.168202][T10698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 532.168230][T10698] ? rw_verify_area+0x2a6/0x4d0 [ 532.168255][T10698] ? __lock_acquire+0xab9/0xd20 [ 532.168272][T10698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 532.168297][T10698] vfs_read+0x200/0xa30 [ 532.168331][T10698] ? fdget_pos+0x247/0x320 [ 532.168354][T10698] ? __pfx___mutex_lock+0x10/0x10 [ 532.168383][T10698] ? __pfx_vfs_read+0x10/0x10 [ 532.168410][T10698] ? __fget_files+0x2a/0x420 [ 532.168434][T10698] ? __fget_files+0x3a0/0x420 [ 532.168450][T10698] ? __fget_files+0x2a/0x420 [ 532.168479][T10698] ksys_read+0x145/0x250 [ 532.168508][T10698] ? __pfx_ksys_read+0x10/0x10 [ 532.168537][T10698] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 532.168566][T10698] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.168596][T10698] __do_fast_syscall_32+0xb6/0x2b0 [ 532.168614][T10698] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.168645][T10698] do_fast_syscall_32+0x34/0x80 [ 532.168663][T10698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.168686][T10698] RIP: 0023:0xf7f02539 [ 532.168703][T10698] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 532.168719][T10698] RSP: 002b:00000000f53f6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 532.168741][T10698] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f6620 [ 532.168754][T10698] RDX: 000000000000000f RSI: 00000000f7396ff4 RDI: 0000000000000000 [ 532.168771][T10698] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 532.168782][T10698] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 532.168793][T10698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.168825][T10698] [ 532.406415][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.622510][ T3469] net_ratelimit: 16 callbacks suppressed [ 532.622530][ T3469] bond2: (slave macvlan5): failed to get link speed/duplex [ 532.635831][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 532.645564][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 532.655305][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.741011][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 532.754910][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 532.822952][ T9] usb 4-1: Product: syz [ 532.841391][ T9] usb 4-1: Manufacturer: syz [ 532.865263][ T9] usb 4-1: SerialNumber: syz [ 532.886086][ T3469] bond2: (slave macvlan5): failed to get link speed/duplex [ 533.029434][ T3469] bond2: (slave macvlan5): failed to get link speed/duplex [ 533.146327][ T1533] bond2: (slave macvlan5): failed to get link speed/duplex [ 533.278401][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 533.301431][ T1533] bond2: (slave macvlan5): failed to get link speed/duplex [ 533.302867][ T9] usb 4-1: USB disconnect, device number 50 [ 533.481221][ T50] bond2: (slave macvlan5): failed to get link speed/duplex [ 533.598339][ T9] usblp0: removed [ 533.600427][ T3939] bond2: (slave macvlan5): failed to get link speed/duplex [ 533.729616][ T3939] bond2: (slave macvlan5): failed to get link speed/duplex [ 533.846270][ T3469] bond2: (slave macvlan5): failed to get link speed/duplex [ 534.001141][ T1533] bond2: (slave macvlan5): failed to get link speed/duplex [ 537.430055][T10755] veth1_macvtap: left promiscuous mode [ 537.437662][T10755] macsec0: entered promiscuous mode [ 537.451190][T10755] veth1_macvtap: entered promiscuous mode [ 537.457480][T10755] macsec0: left promiscuous mode [ 537.712509][ T3469] net_ratelimit: 20 callbacks suppressed [ 537.712534][ T3469] bond2: (slave macvlan5): failed to get link speed/duplex [ 538.131462][ T68] bond2: (slave macvlan5): failed to get link speed/duplex [ 538.260377][ T3469] bond2: (slave macvlan5): failed to get link speed/duplex [ 538.575866][ T68] bond2: (slave macvlan5): failed to get link speed/duplex [ 538.712622][ T68] bond2: (slave macvlan5): failed to get link speed/duplex [ 538.839353][ T7157] bond2: (slave macvlan5): failed to get link speed/duplex [ 539.019339][ T7157] bond2: (slave macvlan5): failed to get link speed/duplex [ 539.129345][ T5887] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 539.139341][ T68] bond2: (slave macvlan5): failed to get link speed/duplex [ 539.188034][T10766] usb usb8: usbfs: process 10766 (syz.2.1250) did not claim interface 0 before use [ 539.291131][ T68] bond2: (slave macvlan5): failed to get link speed/duplex [ 539.331092][ T5887] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 539.343953][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.363294][ T5887] usb 1-1: Product: syz [ 539.392380][ T5887] usb 1-1: Manufacturer: syz [ 539.406564][ T5887] usb 1-1: SerialNumber: syz [ 539.417239][ T5887] usb 1-1: config 0 descriptor?? [ 539.426622][ T5887] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 539.433416][ T68] bond2: (slave macvlan5): failed to get link speed/duplex [ 539.528786][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 539.702975][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 539.713777][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 539.873264][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 539.910010][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 540.030237][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 540.039556][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 540.047647][ T9] usb 3-1: Product: syz [ 540.059860][ T9] usb 3-1: Manufacturer: syz [ 540.078289][ T9] usb 3-1: SerialNumber: syz [ 540.116896][ T10] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 540.198973][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 540.277759][ T10] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 540.337383][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 540.385516][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 540.405971][ T9] usb 3-1: USB disconnect, device number 58 [ 540.430076][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.468235][ T9] usblp0: removed [ 540.704301][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 540.712263][ T10] usb 2-1: invalid MIDI out EP 0 [ 540.820736][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 540.987393][T10318] udevd[10318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.072462][ T5887] gspca_sunplus: reg_w_riv err -71 [ 541.078335][ T5887] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 541.136078][ T5887] usb 1-1: USB disconnect, device number 38 [ 542.661273][ T10] usb 2-1: USB disconnect, device number 47 [ 542.678312][T10775] delete_channel: no stack [ 542.796424][ T50] net_ratelimit: 25 callbacks suppressed [ 542.796446][ T50] bond2: (slave macvlan5): failed to get link speed/duplex [ 542.953608][ T50] bond2: (slave macvlan5): failed to get link speed/duplex [ 543.256956][ T50] bond2: (slave macvlan5): failed to get link speed/duplex [ 543.621729][ T3939] bond2: (slave macvlan5): failed to get link speed/duplex [ 543.799380][ T3939] bond2: (slave macvlan5): failed to get link speed/duplex [ 543.929826][ T3469] bond2: (slave macvlan5): failed to get link speed/duplex [ 544.173032][ T7157] bond2: (slave macvlan5): failed to get link speed/duplex [ 544.329709][ T3939] bond2: (slave macvlan5): failed to get link speed/duplex [ 544.449372][ T7157] bond2: (slave macvlan5): failed to get link speed/duplex [ 544.571235][ T7157] bond2: (slave macvlan5): failed to get link speed/duplex [ 546.184850][T10835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1269'. [ 546.409074][T10838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1268'. [ 546.460969][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 546.580608][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 546.764203][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 546.773615][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.789309][ T24] usb 1-1: Product: syz [ 546.800010][ T24] usb 1-1: Manufacturer: syz [ 546.815704][ T24] usb 1-1: SerialNumber: syz [ 546.845519][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 547.162054][ T5920] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 547.774619][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 547.875182][T10842] bond0: (slave wlan1): Releasing backup interface [ 547.953764][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 547.968066][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.974265][T10842] ------------[ cut here ]------------ [ 547.981815][T10842] WARNING: CPU: 0 PID: 10842 at net/mac80211/iface.c:861 ieee80211_teardown_sdata+0xd2/0x140 [ 547.992370][T10842] Modules linked in: [ 547.996505][T10842] CPU: 0 UID: 0 PID: 10842 Comm: syz.0.1271 Not tainted syzkaller #0 PREEMPT(full) [ 548.006121][T10842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.016604][T10842] RIP: 0010:ieee80211_teardown_sdata+0xd2/0x140 [ 548.023072][T10842] Code: f7 48 89 df 31 f6 31 d2 e8 0b 9b 00 00 48 81 c3 10 18 00 00 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 94 bb 00 00 e8 3f a5 03 f7 90 <0f> 0b 90 4c 8d bb 30 0a 00 00 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 [ 548.042768][T10842] RSP: 0018:ffffc9001b87f050 EFLAGS: 00010287 [ 548.048957][T10842] RAX: ffffffff8abc5ed1 RBX: ffff888059190d80 RCX: 0000000000080000 [ 548.057451][T10842] RDX: ffffc9000b8c2000 RSI: 000000000001e9e7 RDI: 000000000001e9e8 [ 548.065528][T10842] RBP: ffffc9001b87f1f0 R08: ffffffff8f7ceb77 R09: 1ffffffff1ef9d6e [ 548.073848][T10842] R10: dffffc0000000000 R11: ffffffff8abcbe10 R12: dffffc0000000000 [ 548.081907][T10842] R13: ffff888059190c18 R14: ffff888059191a08 R15: ffff888059190000 [ 548.090086][T10842] FS: 0000000000000000(0000) GS:ffff88812613b000(0063) knlGS:00000000f53f6b40 [ 548.099137][T10842] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 548.105937][T10842] CR2: 000000008057f000 CR3: 00000000591a8000 CR4: 00000000003526f0 [ 548.114275][T10842] Call Trace: [ 548.117599][T10842] [ 548.120612][T10842] ? __pfx_ieee80211_uninit+0x10/0x10 [ 548.126032][T10842] unregister_netdevice_many_notify+0x1cde/0x2390 [ 548.132728][T10842] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 548.139569][T10842] ? __pfx_call_rcu+0x10/0x10 [ 548.144286][T10842] unregister_netdevice_queue+0x33c/0x380 [ 548.150422][T10842] ? kernfs_remove_by_name_ns+0xee/0x130 [ 548.156110][T10842] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 548.162484][T10842] _cfg80211_unregister_wdev+0x165/0x590 [ 548.168144][T10842] ieee80211_if_remove+0x256/0x310 [ 548.173541][T10842] ieee80211_del_iface+0x19/0x30 [ 548.178565][T10842] cfg80211_remove_virtual_intf+0x231/0x3f0 [ 548.184608][T10842] genl_family_rcv_msg_doit+0x215/0x300 [ 548.190325][T10842] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 548.196640][T10842] ? bpf_lsm_capable+0x9/0x20 [ 548.201478][T10842] ? security_capable+0x7e/0x2e0 [ 548.206465][T10842] genl_rcv_msg+0x60e/0x790 [ 548.211061][T10842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.216120][T10842] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 548.221836][T10842] ? __pfx_nl80211_del_interface+0x10/0x10 [ 548.227660][T10842] ? __pfx_nl80211_post_doit+0x10/0x10 [ 548.233226][T10842] ? __asan_memcpy+0x40/0x70 [ 548.237931][T10842] ? __pfx_ref_tracker_free+0x10/0x10 [ 548.243382][T10842] netlink_rcv_skb+0x208/0x470 [ 548.248157][T10842] ? __lock_acquire+0xab9/0xd20 [ 548.253958][T10842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.259100][T10842] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 548.264619][T10842] ? down_read+0x1ad/0x2e0 [ 548.269095][T10842] genl_rcv+0x28/0x40 [ 548.273443][T10842] netlink_unicast+0x82f/0x9e0 [ 548.278271][T10842] ? __pfx_netlink_unicast+0x10/0x10 [ 548.283760][T10842] ? netlink_sendmsg+0x642/0xb30 [ 548.288748][T10842] ? skb_put+0x11b/0x210 [ 548.293090][T10842] netlink_sendmsg+0x805/0xb30 [ 548.297897][T10842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.303407][T10842] ? __import_iovec+0x5d4/0x7f0 [ 548.308303][T10842] ? aa_sock_msg_perm+0xf1/0x1d0 [ 548.313340][T10842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 548.318670][T10842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.324086][T10842] __sock_sendmsg+0x21c/0x270 [ 548.328869][T10842] ____sys_sendmsg+0x505/0x830 [ 548.334023][T10842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.339888][T10842] ? __pfx_futex_wake_mark+0x10/0x10 [ 548.345236][T10842] ___sys_sendmsg+0x21f/0x2a0 [ 548.349966][T10842] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.355293][T10842] ? __fget_files+0x2a/0x420 [ 548.360082][T10842] ? __fget_files+0x3a0/0x420 [ 548.364810][T10842] __sys_sendmsg+0x164/0x220 [ 548.369531][T10842] ? __pfx___sys_sendmsg+0x10/0x10 [ 548.374977][T10842] ? rcu_is_watching+0x15/0xb0 [ 548.379951][T10842] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 548.386700][T10842] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.392108][T10842] __do_fast_syscall_32+0xb6/0x2b0 [ 548.397265][T10842] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.402642][T10842] do_fast_syscall_32+0x34/0x80 [ 548.407559][T10842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 548.414231][T10842] RIP: 0023:0xf7f02539 [ 548.418338][T10842] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 548.438313][T10842] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 548.446882][T10842] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 548.454966][T10842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 548.463090][T10842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 548.471472][T10842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 548.480069][T10842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 548.488202][T10842] [ 548.491584][T10842] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 548.498954][T10842] CPU: 0 UID: 0 PID: 10842 Comm: syz.0.1271 Not tainted syzkaller #0 PREEMPT(full) [ 548.508452][T10842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.518628][T10842] Call Trace: [ 548.522016][T10842] [ 548.524997][T10842] dump_stack_lvl+0x99/0x250 [ 548.529695][T10842] ? __asan_memcpy+0x40/0x70 [ 548.534334][T10842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 548.539637][T10842] ? __pfx__printk+0x10/0x10 [ 548.544279][T10842] vpanic+0x237/0x6d0 [ 548.548306][T10842] ? __pfx_vpanic+0x10/0x10 [ 548.552875][T10842] panic+0xb9/0xc0 [ 548.556815][T10842] ? __pfx_panic+0x10/0x10 [ 548.561297][T10842] __warn+0x31b/0x4b0 [ 548.565379][T10842] ? ieee80211_teardown_sdata+0xd2/0x140 [ 548.571061][T10842] ? ieee80211_teardown_sdata+0xd2/0x140 [ 548.576768][T10842] report_bug+0x2be/0x4f0 [ 548.581159][T10842] ? ieee80211_teardown_sdata+0xd2/0x140 [ 548.586943][T10842] ? ieee80211_teardown_sdata+0xd2/0x140 [ 548.592624][T10842] ? ieee80211_teardown_sdata+0xd4/0x140 [ 548.598408][T10842] handle_bug+0x84/0x160 [ 548.602875][T10842] exc_invalid_op+0x1a/0x50 [ 548.607548][T10842] asm_exc_invalid_op+0x1a/0x20 [ 548.612435][T10842] RIP: 0010:ieee80211_teardown_sdata+0xd2/0x140 [ 548.618773][T10842] Code: f7 48 89 df 31 f6 31 d2 e8 0b 9b 00 00 48 81 c3 10 18 00 00 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 94 bb 00 00 e8 3f a5 03 f7 90 <0f> 0b 90 4c 8d bb 30 0a 00 00 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 [ 548.638415][T10842] RSP: 0018:ffffc9001b87f050 EFLAGS: 00010287 [ 548.644515][T10842] RAX: ffffffff8abc5ed1 RBX: ffff888059190d80 RCX: 0000000000080000 [ 548.652754][T10842] RDX: ffffc9000b8c2000 RSI: 000000000001e9e7 RDI: 000000000001e9e8 [ 548.660862][T10842] RBP: ffffc9001b87f1f0 R08: ffffffff8f7ceb77 R09: 1ffffffff1ef9d6e [ 548.668962][T10842] R10: dffffc0000000000 R11: ffffffff8abcbe10 R12: dffffc0000000000 [ 548.676955][T10842] R13: ffff888059190c18 R14: ffff888059191a08 R15: ffff888059190000 [ 548.685059][T10842] ? __pfx_ieee80211_uninit+0x10/0x10 [ 548.690485][T10842] ? ieee80211_teardown_sdata+0xd1/0x140 [ 548.696160][T10842] ? __pfx_ieee80211_uninit+0x10/0x10 [ 548.701572][T10842] unregister_netdevice_many_notify+0x1cde/0x2390 [ 548.708181][T10842] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 548.716147][T10842] ? __pfx_call_rcu+0x10/0x10 [ 548.720947][T10842] unregister_netdevice_queue+0x33c/0x380 [ 548.726818][T10842] ? kernfs_remove_by_name_ns+0xee/0x130 [ 548.732496][T10842] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 548.738899][T10842] _cfg80211_unregister_wdev+0x165/0x590 [ 548.744675][T10842] ieee80211_if_remove+0x256/0x310 [ 548.749827][T10842] ieee80211_del_iface+0x19/0x30 [ 548.754816][T10842] cfg80211_remove_virtual_intf+0x231/0x3f0 [ 548.760771][T10842] genl_family_rcv_msg_doit+0x215/0x300 [ 548.766348][T10842] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 548.772490][T10842] ? bpf_lsm_capable+0x9/0x20 [ 548.777195][T10842] ? security_capable+0x7e/0x2e0 [ 548.782221][T10842] genl_rcv_msg+0x60e/0x790 [ 548.786777][T10842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.791969][T10842] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 548.797393][T10842] ? __pfx_nl80211_del_interface+0x10/0x10 [ 548.803338][T10842] ? __pfx_nl80211_post_doit+0x10/0x10 [ 548.809112][T10842] ? __asan_memcpy+0x40/0x70 [ 548.813774][T10842] ? __pfx_ref_tracker_free+0x10/0x10 [ 548.819739][T10842] netlink_rcv_skb+0x208/0x470 [ 548.824736][T10842] ? __lock_acquire+0xab9/0xd20 [ 548.829699][T10842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.834778][T10842] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 548.840117][T10842] ? down_read+0x1ad/0x2e0 [ 548.844681][T10842] genl_rcv+0x28/0x40 [ 548.848719][T10842] netlink_unicast+0x82f/0x9e0 [ 548.853543][T10842] ? __pfx_netlink_unicast+0x10/0x10 [ 548.858872][T10842] ? netlink_sendmsg+0x642/0xb30 [ 548.863925][T10842] ? skb_put+0x11b/0x210 [ 548.868231][T10842] netlink_sendmsg+0x805/0xb30 [ 548.873063][T10842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.878387][T10842] ? __import_iovec+0x5d4/0x7f0 [ 548.883322][T10842] ? aa_sock_msg_perm+0xf1/0x1d0 [ 548.888308][T10842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 548.893707][T10842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.899155][T10842] __sock_sendmsg+0x21c/0x270 [ 548.903877][T10842] ____sys_sendmsg+0x505/0x830 [ 548.908782][T10842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.914120][T10842] ? __pfx_futex_wake_mark+0x10/0x10 [ 548.919447][T10842] ___sys_sendmsg+0x21f/0x2a0 [ 548.924223][T10842] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.929680][T10842] ? __fget_files+0x2a/0x420 [ 548.934310][T10842] ? __fget_files+0x3a0/0x420 [ 548.939295][T10842] __sys_sendmsg+0x164/0x220 [ 548.943933][T10842] ? __pfx___sys_sendmsg+0x10/0x10 [ 548.949275][T10842] ? rcu_is_watching+0x15/0xb0 [ 548.954281][T10842] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 548.961010][T10842] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.966338][T10842] __do_fast_syscall_32+0xb6/0x2b0 [ 548.971585][T10842] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.976812][T10842] do_fast_syscall_32+0x34/0x80 [ 548.981680][T10842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 548.988388][T10842] RIP: 0023:0xf7f02539 [ 548.992489][T10842] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 549.012449][T10842] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 549.020931][T10842] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 549.028937][T10842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 549.037079][T10842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 549.045068][T10842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 549.053039][T10842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 549.061020][T10842] [ 549.064374][T10842] Kernel Offset: disabled [ 549.068697][T10842] Rebooting in 86400 seconds..