last executing test programs: 13.087858662s ago: executing program 2 (id=4155): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7=\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 10.923568959s ago: executing program 3 (id=4160): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_clone3(&(0x7f0000000600)={0x200000000, 0x0, &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/202, 0xca, &(0x7f00000004c0)=""/250, &(0x7f00000005c0), 0x0, {r2}}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x1, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="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", 0x38d}, {&(0x7f00000009c0)="f6c90cdedc37cdb39eae133fb46bb0b986be85321a17fc6e8ea85f018f6e81d55fa08f68960887cd420ea0c8ec111c66ec2c3baa2e4800207807a82a4559bad7736a5423c2d786f76c4aea14258d0bef41454167a1d439b5d9cfb6c508cd6b2fbbc751c26b5d345d2afa25b68d5d26612cc4af16ff3084f83682ac9b1e4dec81ac3bec3d01ca9c55e546bb09bdbc0534b04938b7a47cc4aa9f754b42d9012c35374c5576d7a1e7d5e64ced4d846135f8173ba207da142ad73646af1fcf1ec66859f0d2cf9fa2e6dbf733425eeb9b05ff7b1a3bfff2130084f8d175354899c362361d83c3025aa3df6db80e6187ca5ddc3a288a5405", 0xf5}, {&(0x7f0000000180)="1b0ad65e03f9915bfddf26c24e848a70b9d041082765acf5bbcc6657aea857184012783975c51c2f", 0x28}, {&(0x7f00000010c0)="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", 0x2bc}], 0x4}}], 0x2, 0x4048884) 10.227898777s ago: executing program 2 (id=4162): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) write$nci(r0, 0x0, 0x4) 8.966917296s ago: executing program 2 (id=4167): msgsnd(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x3f9, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001480)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x49823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x4000004) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000ddc0)={0x2020}, 0x2020) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000440)) r5 = socket(0x200000100000011, 0x3, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1b, "5660010000000000000005000000ed5100000000000000010000000000007e00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r8}) close_range(r5, r8, 0x0) sendmsg$inet6(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="0bcfcc8b8f9e41dc2f59741c32dbbd98de411e97aa2a306f1fb091e7e8994029d76ccf27f73ec6fdda0475062dcdfc62858ee49dbed0fc7986da5df5ce69096275e3a0e5346985d7178021807642b01d2b5d5b3e9ed8794182b0792e1e2618b9a4fcd955d46ece7ce99cc7326dbeb249090d8d2b45759a56ce35bad7f6bcfdd6bac5db16528bf678a21c26bca3d55d0ab9f8820efaeb3f8e965501aef3a2a22ed60f1b777b3af0df007039e022af0306693b3d25d65a55b864a61403e9744f56f6a71d", 0xc3}, {&(0x7f0000000480)="24c751e6bd3906db3d411c2532e0b6e4ef65ca7cd609ab2a9e7907acb79eb0fc25432c0be758675d2a204ecfa174b9807e5f717a2faddda0a5a189eac119e58b4d37c0ca2e2187a97d27df6907224ebf2d24c70c4d5c60b58905089e38acc9f42c90e67d0f511430ad03a2037771f26aad15c2960fa27ea00231ed200cf0f13ae2287f0fb389ff952d4d783337a3d44949423eed7f45b3a02f66b1305d1178a8a43acd9c2d78503d688e9078df615db1fb39f56b5325060db3a2d3dfc95135b40f940dd0d4fdeb", 0xc7}, {0x0}], 0x3, &(0x7f00000006c0)=ANY=[@ANYRES32], 0x5c}, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 7.769136067s ago: executing program 3 (id=4171): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='update defauut u\x00er:({]{t%@\x00'], 0x1c, 0xfffffffffffffff9) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'u'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d01, 0x0, 0xffffffffffffffff}]}) r7 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upd'], 0x1a, 0xffffffffffffffff) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 7.032078655s ago: executing program 2 (id=4173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x8fc3, 0x10000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, &(0x7f0000002900)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000ac0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000a80)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000080)={0x2, 0x1b, 0xfa00, {0x0, {0xa, 0x4e24, 0x802, @empty, 0x1}, r4}}, 0x30) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x1db2}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @broadcast=0xac141436}}) open(0x0, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x1, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) socket$unix(0x1, 0x2, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 6.248388188s ago: executing program 1 (id=4177): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) write$nci(r0, 0x0, 0x4) 6.044748563s ago: executing program 1 (id=4178): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0xc79c59394d69f4e3, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r7 = socket(0xa, 0x3, 0xff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a3100000000140004800800024081b140bb080001400000000414000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r7, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5e54e574da9388a6dc628a600b17cbe584d2e73c68141965", 0x18}], 0x1}}], 0x1, 0x8804) r9 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r9, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x9, 0x8, 0x56595559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) 5.445850893s ago: executing program 1 (id=4179): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = creat(0x0, 0xecf86c37d53049cc) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7=\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 5.391899891s ago: executing program 0 (id=4180): syz_usb_connect(0x6, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x0, 0x7f, 0x54, 0xcc}}]}}]}}, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x8, 0x6, 0x1, 0xff, 0x2}, 0x4e, &(0x7f00000000c0)={0x5, 0xf, 0x4e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x7, 0x4, 0x80}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "d16c87defc2daec3dcc1d32d7a242194"}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x100, 0xf0f, 0x325b, [0xff00c0, 0xff0000, 0x0, 0x3f00, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x10, 0x1, 0x3ff, 0x10}]}, 0x2, [{0x62, &(0x7f0000000440)=ANY=[@ANYBLOB="62033e835a67d013927ac83630e819fda758d6afe2676bcbb30d294aae7c4d332513fb5fd544b935d10f92cebc1714ff56a2d5cba262c9cb208ab38fe40642efd2f4f4c24333601457ec2b3e1e1551f6351ab70cce899f4e538b6bf85599ee17be8b3d0963d0c27de2892ae9ec80397d4a575831161967e5be90b9676dc4f0199659723dd5d46662fe10ece60383115c0ac1f7956edeb2619ccdfb21b58676859eaeb8072bcaf6cb7aa69f119725ffcbaf1822afd4dd"]}, {0xa3, &(0x7f0000000300)=@string={0xa3, 0x3, "dcbc400cb8acde4d471919c55ca6c0656cbd893a0f65f5cb1ffd9b3564eda3ef03ff89d7cc4727bb37e6304568b87e2b7c251a1e4ae35e6ac656d4966f09bac6e72a546bd7e465c0cd30a3b1b75020ed70eb0cc6bcd6ee14413d018c956c97acea1efeaecef923daab8910076800852e76ad5b7120427e7da4ed911c1692b4bf870f059d051b5d5a22521f62c4ac4721f745e2413764366b39190cffd0e5ed84c4"}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x2, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r2 = epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0x9058, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x10, 0x0, 0xffffffffffffffff, &(0x7f0000000500), &(0x7f00000002c0)='./file0\x00', 0x1}) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0xff, 0x1, 0xfffffffffffffff7, 0x4, 0x955, 0x1, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000000}) dup(0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r7 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000140)={0x0, 0x1e, 0x4, @tid=r7}, &(0x7f00000000c0)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000180)=[{0x0, 0xed}], 0x1, 0x6, 0x6) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x8, 0x4, [0x8001, 0x6, 0x4, 0x1]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000600)={r9, 0x2}, 0x8) set_mempolicy(0x0, &(0x7f0000000240)=0x2e, 0xeae) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 5.144007456s ago: executing program 1 (id=4181): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_clone3(&(0x7f0000000600)={0x200000000, 0x0, &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/202, 0xca, &(0x7f00000004c0)=""/250, &(0x7f00000005c0), 0x0, {r2}}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x1, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="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", 0x38d}, {&(0x7f00000009c0)="f6c90cdedc37cdb39eae133fb46bb0b986be85321a17fc6e8ea85f018f6e81d55fa08f68960887cd420ea0c8ec111c66ec2c3baa2e4800207807a82a4559bad7736a5423c2d786f76c4aea14258d0bef41454167a1d439b5d9cfb6c508cd6b2fbbc751c26b5d345d2afa25b68d5d26612cc4af16ff3084f83682ac9b1e4dec81ac3bec3d01ca9c55e546bb09bdbc0534b04938b7a47cc4aa9f754b42d9012c35374c5576d7a1e7d5e64ced4d846135f8173ba207da142ad73646af1fcf1ec66859f0d2cf9fa2e6dbf733425eeb9b05ff7b1a3bfff2130084f8d175354899c362361d83c3025aa3df6db80e6187ca5ddc3a288a5405", 0xf5}, {&(0x7f0000000180)="1b0ad65e03f9915bfddf26c24e848a70b9d041082765acf5bbcc6657aea857184012783975c51c2f", 0x28}, {&(0x7f00000010c0)="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", 0x2bc}], 0x4}}], 0x2, 0x4048884) 4.539896175s ago: executing program 3 (id=4182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000feff05000300fe000000050002"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x40040c0) 4.276156865s ago: executing program 3 (id=4183): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8947, &(0x7f0000000000)={'vlan0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSABS0(r4, 0x401845c0, 0x0) lseek(r3, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, @vifc_lcl_ifindex=r5, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x11, 0x2, 0x300) sendmsg$inet(r6, 0x0, 0x0) unshare(0x42000000) r7 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.662007782s ago: executing program 2 (id=4184): syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x513, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5005, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x50, 0xd, [{{0x9, 0x4, 0x0, 0x32, 0x2, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0xffff, 0x8, 0x1, {0x22, 0x704}}, {{{0x9, 0x5, 0x81, 0x3, 0x3f7, 0x1, 0xe}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x7, 0x80, 0x4, 0x40, 0x1}, 0xc5, &(0x7f0000000080)={0x5, 0xf, 0xc5, 0x3, [@ptm_cap={0x3}, @generic={0xb6, 0x10, 0x8, "6196c6470807ae8c8ac1a4159ac69a6017246038d087a7046c337ab122c71c4b019c3f9a539e14f50ed692767606de3c35e66d9efebc0db30fb72e3443a2501e0e44da1556428d975c29b36bb237547fafd5ecf131e4acc493bb32247e9bd50a76e39b3671f264adb1544885f96dc6db164f768032626c351a58b0fcb009e82c209d2f862aada4bd667aa91bd58d6f5b0e292de8380c4cb928299fa57a1f48907e0ad97e1301b791242d98093e9c8a482cc3a7"}, @ext_cap={0x7, 0x10, 0x2, 0x13, 0x0, 0x5, 0x4}]}, 0x2, [{0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "455b523db662f4c7ee952ad8962a2c2bfb0a153a36999d0104177438"}}, {0xe, &(0x7f00000001c0)=@string={0xe, 0x3, "5c07f228069dc8559e761cbb"}}]}) 3.366348859s ago: executing program 4 (id=4185): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x0, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0xfe, 0xfffff034}, {0x80000006}]}, 0x8) syz_emit_ethernet(0x46, &(0x7f0000000780)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @dccp_packet={0xa, 0x6, "4f24e1", 0x10, 0x21, 0xff, @local, @loopback, {[], {{0x4e24, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x9, 0x0, "2b146d", 0x3, "f5d9f6"}}}}}}}, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x1a, r3, 0x1, 0xc, 0x6, @local}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3.31163915s ago: executing program 0 (id=4186): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0x4404, @private=0xa010101}, 0x10, 0x0, 0x15, 0x0, 0x0, 0x300}, 0xc4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000c00), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYRES16], 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100200012f57fff7ec0a5eb1c"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x1c) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xa1a) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x8a8282) pipe(&(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)) fanotify_init(0x200, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) unshare(0x68040200) pselect6(0x40, &(0x7f00000000c0)={0xe, 0x3, 0x5, 0x1000, 0xd79, 0xd, 0x6, 0x7}, &(0x7f0000000100)={0x5, 0xf, 0x7fff, 0x6, 0x4, 0x8, 0x1ff, 0x3}, 0x0, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x10, 0x7]}, 0x8}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="a61d9c94665a3ab62c285ca4862b93788772d71b7dd642fd1c1dd5f0eaf7fb384cf797af0a83798d79ef689f092ffeb1997547c9ea5efa11fb5b400c5b4864e0b72f5b609f8383219cb711d122022a824bc9fb5ef2f786f1c15bc8aabf41ecfef7e64a"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000010000100000000002806000000000000000a50000000060a09040000000000000000020000052400048020000180070001006374000014000280080002400000001008000640000000100900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a0410b8efb27f71cbba45e78d66b746648dbbe3721f81a1802f7fed36553b92168735c20fa3516478898380e054444579826a4f2f7e3774c5"], 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2.836227783s ago: executing program 4 (id=4187): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) unshare(0x26020480) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, 0x0, 0x2c, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128052ecbfcdadec36f315148600010067741d6eb9009c2eee53b0a2aed8a9c1ce2f4f8abf84a2e5833e5db0598320376f6c346a80b338623689a526b65e53d76fe29cd464", @ANYBLOB="3718fa148b636089a59aa685ad8fe720fb0af30f5c80288ed5c9a9be7fb6c631a7c35704469c154b6478c2682225f8d175642f192452f954fa1cd699df35aa48938caeca63f710721892b42c93c8377c51656dd67d1a5534b72c31f877bf609722708c62722b05ce458e08b364de61e23d8939ad44ed2e956b6383319f39070773ba75f26f693b428a3d2399f1728e42e95cfaf025c060a5aa68b8078b168c043318a6ea575a4a4261e4ff806db980831352a06c4b27c6a70fa6f7c289ff0b8321c300d03cad00", @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0xba01}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = fcntl$getown(r0, 0x9) sched_setattr(r5, &(0x7f0000000280)={0x38, 0x5, 0x20000000, 0x80000001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xffffff98, 0x80000001}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r7, 0x0, 0xa, 0x0) 2.825243925s ago: executing program 1 (id=4188): bpf$MAP_CREATE(0xc00000000000018, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x61c040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0}) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r4, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x44400, 0x44) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) dup3(r7, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc5, 0x5d, 0x22, 0x8, 0xf65e, 0x3868, 0xc617, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3f, 0x0, 0x0, 0x8, 0x3, 0x50}}]}}]}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r8, &(0x7f000000b4c0)=[{{&(0x7f0000000900)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000003500)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f000000b140)=[@ip_ttl={{0x10, 0x0, 0x34}}], 0x10}}], 0x2, 0x0) 2.634462769s ago: executing program 3 (id=4189): r0 = socket$inet6(0xa, 0x5, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0xc048aec8, &(0x7f00000005c0)={0xffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@empty, 0x0, 0x0, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x20, 0x301, 0x70ad2b, 0x25dfdbfb, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x8044080) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x5e20, 0x0, @empty, 0xffffff5c}, 0x1c) listen(r0, 0x50) (async) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = openat$iommufd(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, &(0x7f0000000200)="a4ef6643dfc5fd0e15d4e3ac72169b1dd43862be9574f32befb551356146594f018c965b79393a2f1a61b236f8ad768aec5a6575ab6e55e8d5a33c11b06c87aab1d31b7e75685f3fd85e9a578d463b217800699f6690623f5efbc57acf27b5927f81dbcbcff36628f15aedb4b5c93f55f0db44e431f9b95f5a810460108de269954e081743ade5896943e1947b632b04"}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r7, 0x0, 0x5, 0x55, &(0x7f00000002c0)="def5ab691e8d4cc63b6a01bcce27c03802fdd5ab6d3423964899eb21762c30754e8a2e6510af8df88d9a8f1e64916c929daa7bbeda2f5712d240a907f1420fe76e8e54c15038826de48783aeefdd04da38516f8cca"}) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) (async) listen(r5, 0x50) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0xea, 0xb0, 0xef, 0x10, 0x110a, 0x1251, 0x4d10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb, 0x4, 0x10, 0x4, [{{0x9, 0x4, 0xca, 0x8, 0x0, 0xfd, 0xa4, 0xa, 0x7}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}}) r8 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000040)=0x9) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x10) 2.196172609s ago: executing program 0 (id=4190): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) close(r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x144}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0xd, 0x76, 0x0, 0x1, [@generic="37c6a8289529b86d0c"]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) dup(0xffffffffffffffff) 1.938897524s ago: executing program 4 (id=4191): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = creat(0x0, 0xecf86c37d53049cc) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7=\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 1.850327286s ago: executing program 4 (id=4192): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000001008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 1.704087409s ago: executing program 4 (id=4193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x1, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000014c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0xffff, 0x14}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x3, 0x22, 0xfc0, 0x68, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010102, @remote}, {0x11, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, "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"}}}}, 0xfce) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x0, 0x157) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000440)=""/252) r5 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000100)=0x21) r6 = gettid() r7 = syz_clone3(&(0x7f00000005c0)={0x8000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r6], 0x1}, 0x58) timer_create(0x3, &(0x7f0000000000)={0x0, 0xa, 0x0, @tid=r6}, &(0x7f0000000040)) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7f}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="010000006b0100614b32e920feffffff00000000e6", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r7, @ANYRES64=0x0, @ANYBLOB="000000000196797685812e4322d151fb4458146fd1d5382da84f83ecd051f00b268c1d4b8438207ca674acb65fddd86fd622f8e70751e4b6b3e2ca53743de2640bc08f5c35a351c70f4d9d4c91a0a0328be2af41dfaee01ddaa1e2c0fd258755de0eff48d998239228ea326768978ad4df9c17433468ef26a2c314fc147260ad112ed3acae2c3b044f71bb0addedbf11907c1f20a379828fe23a57d4c074811df3c09d2ad14fd7b732cc5e05cbe045b2a414c698b1bf72561c922809839db7d1219bac399553753cdbca6cc232bd076a906f74630d85aadb73e7"], 0x48}, 0x1, 0x0, 0x0, 0x20044004}, 0x2000c000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x940c, 0x3002, 0xc8, 0x2c0, 0x1f8, 0x3d8, 0x3d8, 0x1f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xe}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x4, 0x4, 0x6, 'syz1\x00', 'syz0\x00', {0x1a0000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x31c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ffffffff00000000000000000000000000000004001000000a0060803b000000", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) 1.335092915s ago: executing program 0 (id=4194): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) socketpair(0x2c, 0x3, 0x217, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1a, 0x6, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0xfffc, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x401}, @timestamp], 0x8) sendto$inet(r0, &(0x7f0000000780)="1ede55aa6d3e592729", 0x9, 0x4008041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.190527316s ago: executing program 3 (id=4195): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_clone3(&(0x7f0000000600)={0x200000000, 0x0, &(0x7f0000000340), &(0x7f0000000380), {0x15}, &(0x7f00000003c0)=""/202, 0xca, &(0x7f00000004c0)=""/250, &(0x7f00000005c0), 0x0, {r2}}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x1, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="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", 0x389}, {&(0x7f00000009c0)="f6c90cdedc37cdb39eae133fb46bb0b986be85321a17fc6e8ea85f018f6e81d55fa08f68960887cd420ea0c8ec111c66ec2c3baa2e4800207807a82a4559bad7736a5423c2d786f76c4aea14258d0bef41454167a1d439b5d9cfb6c508cd6b2fbbc751c26b5d345d2afa25b68d5d26612cc4af16ff3084f83682ac9b1e4dec81ac3bec3d01ca9c55e546bb09bdbc0534b04938b7a47cc4aa9f754b42d9012c35374c5576d7a1e7d5e64ced4d846135f8173ba207da142ad73646af1fcf1ec66859f0d2cf9fa2e6dbf733425eeb9b05ff7b1a3bfff2130084f8d175354899c362361d83c3025aa3df6db80e6187ca5ddc3a288a5405", 0xf5}, {&(0x7f0000000180)="1b0ad65e03f9915bfddf26c24e848a70b9d041082765acf5bbcc6657aea857184012783975c51c2f", 0x28}, {&(0x7f00000010c0)="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", 0x2bc}], 0x4}}], 0x2, 0x4048884) 1.064242647s ago: executing program 1 (id=4196): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000000c0)=[{0x1, 0xc401, 0x22, &(0x7f0000000040)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0x4, 0x1011, 0x1000, &(0x7f00000004c0)="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"}], 0x2}) 528.05461ms ago: executing program 0 (id=4197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 232.726168ms ago: executing program 0 (id=4198): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x20004000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff07000000000000000100000000000000b60200000000000007000000000000003b00000003000000010000000000000032fcffffffffffff00400000000000000500000000000000ff7f000000000000000100000000000005000000050000000600000000800000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="030000411d873a7318c07b0002000000000000009902f5a500002a000001"], 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) clock_nanosleep(0x3, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x2, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000200)=""/86, 0x56}, {&(0x7f00000004c0)=""/199, 0xc7}, {0x0}, {&(0x7f0000000140)=""/184, 0xb8}], 0x5}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x2010, 0xffffffffffffffff, 0x0) 136.122873ms ago: executing program 4 (id=4199): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df9666edd7a13cf1cb25fdc448a5", 0xb4}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef861e58b6956a4637c63f887490dbb3f389052a3342ca8de76c2bfe07bc19e9fb5182edf928524e30405f0dca1dc44c50a9382fdeb5b80e54ef8d74271ddd46d5f1334631495a3da56f6a674565cb9ce9f5a69dcc37b24895e51ec5d51ccd7bc70feaf3ca1912369ada1abc5cb415fb2175bfe30c6d48e7efe", 0xe9}], 0x2) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x7, 0xfffffffd, 0xb830, 0x2, 0x4, 0x0, 0x7], [0x20000000, 0xca0, 0x2, 0x6, 0x75, 0x0, 0x5], [0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x9]], '\x00', [{0x0, 0x0, 0x0, 0x1, 0x1}, {0x97f, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5, 0x4}, {0x0, 0x9}, {}, {}, {}, {0x2000, 0x2}, {}, {0x0, 0x6}, {0x5}], '\x00', 0x20004b1}) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) r5 = syz_open_procfs(r4, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r5, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r6, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) timer_create(0x3, 0x0, &(0x7f00000000c0)) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x0, r5) pipe2$watch_queue(&(0x7f0000002240), 0x80) 0s ago: executing program 2 (id=4200): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000800) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000640)=""/144, 0x90) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000540)=""/74, 0x4a}, {&(0x7f00000016c0)=""/227, 0xe3}], 0x4}, 0x0) syz_io_uring_setup(0x6496, &(0x7f00000002c0)={0x0, 0x1ce7, 0x10100, 0x3, 0x400000}, 0x0, &(0x7f0000000000)) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x86) kernel console output (not intermixed with test programs): 1120.538859][ T30] audit: type=1326 audit(1760902808.786:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18707 comm="syz.3.3743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1120.571277][ T30] audit: type=1326 audit(1760902808.786:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18707 comm="syz.3.3743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1120.598330][ T30] audit: type=1326 audit(1760902808.786:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18707 comm="syz.3.3743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1120.626350][ T30] audit: type=1326 audit(1760902808.786:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18707 comm="syz.3.3743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1120.663795][ T5898] pn533_usb 5-1:79.237: NFC: Could not find bulk-in or bulk-out endpoint [ 1120.719193][ T5898] usb 5-1: USB disconnect, device number 14 [ 1123.174735][ T5913] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1123.376525][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 1123.385873][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.405843][ T5913] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1123.437144][ T5913] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1123.464460][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.487691][ T5913] usb 2-1: Product: syz [ 1123.491884][ T5913] usb 2-1: Manufacturer: syz [ 1123.525357][ T5913] usb 2-1: SerialNumber: syz [ 1123.555018][ T5913] usb 2-1: config 0 descriptor?? [ 1124.064319][T14225] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1124.227657][T14225] usb 5-1: Using ep0 maxpacket: 16 [ 1124.241295][T14225] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1124.250354][T14225] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1124.408531][T14225] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1124.424246][T14225] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1124.438602][T14225] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1124.448719][T14225] usb 5-1: config 0 has no interface number 0 [ 1124.455379][T14225] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1124.466849][T14225] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1124.477522][T14225] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1124.555499][T14225] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1124.569389][T14225] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1124.576828][T14225] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1124.587267][T14225] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1124.596682][T14225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.615550][T14225] usb 5-1: Product: syz [ 1124.636423][T14225] usb 5-1: Manufacturer: syz [ 1124.828576][T14225] usb 5-1: SerialNumber: syz [ 1124.866878][T14225] usb 5-1: config 0 descriptor?? [ 1124.880575][T14225] usb 5-1: selecting invalid altsetting 2 [ 1125.543062][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1125.543082][ T30] audit: type=1326 audit(1760902813.966:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.3.3758" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1125.582203][T18755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3754'. [ 1125.614409][ T30] audit: type=1326 audit(1760902813.996:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.3.3758" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1125.670955][ T30] audit: type=1326 audit(1760902813.996:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.3.3758" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1125.695168][ T30] audit: type=1326 audit(1760902814.006:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.3.3758" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1125.721518][ T30] audit: type=1326 audit(1760902814.006:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.3.3758" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1125.746932][ T30] audit: type=1326 audit(1760902814.006:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.3.3758" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1125.777383][ T30] audit: type=1326 audit(1760902814.006:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.3.3758" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1125.800047][ C0] vkms_vblank_simulate: vblank timer overrun [ 1125.811408][ T30] audit: type=1326 audit(1760902814.006:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.3.3758" exe="/root/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1125.845081][ T30] audit: type=1326 audit(1760902814.006:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.3.3758" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1125.872344][ T30] audit: type=1326 audit(1760902814.026:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18773 comm="syz.3.3758" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1125.923156][T18786] syzkaller0: entered promiscuous mode [ 1125.938285][T18786] syzkaller0: entered allmulticast mode [ 1125.957771][ T5913] usb 2-1: USB disconnect, device number 103 [ 1126.021220][T18786] loop2: detected capacity change from 0 to 7 [ 1126.028936][T18786] Dev loop2: unable to read RDB block 7 [ 1126.049448][T18786] loop2: unable to read partition table [ 1126.056309][T18786] loop2: partition table beyond EOD, truncated [ 1126.063855][T18786] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1127.104253][ T5913] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1127.275911][ T5913] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 1127.284427][ T5913] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1127.367745][ T5913] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1127.378745][ T5912] usb 5-1: USB disconnect, device number 15 [ 1127.459866][ T5913] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 1127.474484][ T5913] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1127.485446][ T5913] usb 4-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 1127.499137][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.514423][ T5913] usb 4-1: Product: syz [ 1127.519531][ T5913] usb 4-1: Manufacturer: syz [ 1127.706015][T18802] hub 1-0:1.0: USB hub found [ 1127.713035][T18802] hub 1-0:1.0: 1 port detected [ 1127.814245][ T5913] usb 4-1: SerialNumber: syz [ 1127.909585][ T5913] usb 4-1: config 0 descriptor?? [ 1127.922268][T18795] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1128.135956][ T5913] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 1128.353058][ T5913] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 1128.412653][ T5913] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 1128.452736][ T5913] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 1128.494966][ T5913] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1128.519197][ T5913] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 1128.528840][ T5913] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 1128.584581][ T5913] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1128.653910][ T5913] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 1128.753560][ T5913] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 1128.887919][ T5913] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1129.069332][ T5913] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 1129.135493][ T5913] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 1129.182050][T18809] FAULT_INJECTION: forcing a failure. [ 1129.182050][T18809] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.204854][T18809] CPU: 1 UID: 0 PID: 18809 Comm: syz.3.3770 Not tainted syzkaller #0 PREEMPT(full) [ 1129.204893][T18809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1129.204908][T18809] Call Trace: [ 1129.204917][T18809] [ 1129.204927][T18809] dump_stack_lvl+0x189/0x250 [ 1129.204956][T18809] ? __pfx____ratelimit+0x10/0x10 [ 1129.204991][T18809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1129.205014][T18809] ? __pfx__printk+0x10/0x10 [ 1129.205033][T18809] ? vsnprintf+0x386/0xf00 [ 1129.205064][T18809] ? __pfx_snprintf+0x10/0x10 [ 1129.205099][T18809] should_fail_ex+0x414/0x560 [ 1129.205141][T18809] should_failslab+0xa8/0x100 [ 1129.205172][T18809] __kmalloc_noprof+0xcb/0x7f0 [ 1129.205196][T18809] ? aa_label_asxprint+0x70/0x130 [ 1129.205236][T18809] aa_label_asxprint+0x70/0x130 [ 1129.205273][T18809] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 1129.205303][T18809] audit_log_subj_ctx+0xfa/0x510 [ 1129.205332][T18809] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 1129.205365][T18809] ? apparmor_current_getlsmprop_subj+0xdd/0x190 [ 1129.205394][T18809] audit_log_task_context+0x8c/0xd0 [ 1129.205419][T18809] ? __pfx_audit_log_task_context+0x10/0x10 [ 1129.205445][T18809] ? audit_log_start+0x7f4/0xa20 [ 1129.205474][T18809] audit_log_task+0x190/0x3c0 [ 1129.205499][T18809] ? __pfx_audit_log_task+0x10/0x10 [ 1129.205523][T18809] ? __pfx___cant_migrate+0x10/0x10 [ 1129.205553][T18809] ? percpu_ref_put+0x1e/0x230 [ 1129.205590][T18809] audit_seccomp+0x86/0x190 [ 1129.205615][T18809] __seccomp_filter+0xce4/0x1e10 [ 1129.205664][T18809] ? __pfx___seccomp_filter+0x10/0x10 [ 1129.205701][T18809] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1129.205738][T18809] ? _copy_from_user+0x94/0xb0 [ 1129.205770][T18809] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1129.205813][T18809] ? rcu_is_watching+0x15/0xb0 [ 1129.205847][T18809] ? __secure_computing+0xe2/0x2a0 [ 1129.205892][T18809] syscall_trace_enter+0xaa/0x160 [ 1129.205924][T18809] __do_fast_syscall_32+0x99/0x2b0 [ 1129.205950][T18809] ? lockdep_hardirqs_on+0x9c/0x150 [ 1129.205978][T18809] do_fast_syscall_32+0x34/0x80 [ 1129.206002][T18809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1129.206029][T18809] RIP: 0023:0xf7fb4539 [ 1129.206048][T18809] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1129.206068][T18809] RSP: 002b:00000000f54a6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1129.206092][T18809] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54a6620 [ 1129.206108][T18809] RDX: 000000000000000f RSI: 00000000f7445ff4 RDI: 0000000000000000 [ 1129.206122][T18809] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1129.206134][T18809] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1129.206148][T18809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1129.206181][T18809] [ 1129.234757][ T5913] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1130.069030][ T5913] usb 4-1: USB disconnect, device number 122 [ 1130.098767][T18812] usb usb8: usbfs: process 18812 (syz.4.3767) did not claim interface 0 before use [ 1130.305520][ T5913] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1130.429010][ T5913] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1130.500400][ T5913] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1130.786615][T18827] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1130.854291][ T5827] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1131.015559][ T5913] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1131.064720][ T5913] keyspan 4-1:0.0: device disconnected [ 1131.434473][ T5913] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1131.905655][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 1131.960163][ T5913] usb 4-1: config 242 has an invalid interface number: 219 but max is 0 [ 1131.968715][ T5913] usb 4-1: config 242 has no interface number 0 [ 1131.976656][ T5913] usb 4-1: config 242 interface 219 altsetting 129 bulk endpoint 0x2 has invalid maxpacket 8 [ 1131.994194][ T5913] usb 4-1: config 242 interface 219 has no altsetting 0 [ 1132.004737][ T5913] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=62.a4 [ 1132.033503][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.054545][ T5913] usb 4-1: Product: syz [ 1132.058767][ T5913] usb 4-1: Manufacturer: syz [ 1132.078050][ T5913] usb 4-1: SerialNumber: syz [ 1132.121408][T18825] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1132.416631][ T5913] usbserial_generic 4-1:242.219: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1132.450571][ T5913] usbserial_generic 4-1:242.219: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1132.461867][ T5913] usbserial_generic 4-1:242.219: generic converter detected [ 1132.477223][ T5913] usb 4-1: generic converter now attached to ttyUSB0 [ 1132.527775][ T5913] usb 4-1: USB disconnect, device number 123 [ 1132.588732][ T5913] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1132.598894][ T5913] usbserial_generic 4-1:242.219: device disconnected [ 1133.804191][ T5827] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1133.974200][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 1133.989956][ T5827] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.000993][ T5827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1134.010330][T18851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3779'. [ 1134.023321][T18851] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1134.043968][T18859] hub 1-0:1.0: USB hub found [ 1134.049190][T18859] hub 1-0:1.0: 1 port detected [ 1134.068772][ T5827] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1134.079192][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.090975][T18853] fuse: Unknown parameter ' ' [ 1134.107675][ T5827] usb 4-1: Product: syz [ 1134.123653][ T5827] usb 4-1: Manufacturer: syz [ 1134.138619][ T5827] usb 4-1: SerialNumber: syz [ 1134.700910][T18848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.732681][T18876] hub 1-0:1.0: USB hub found [ 1134.744899][T18876] hub 1-0:1.0: 1 port detected [ 1134.784808][T18848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.034165][ T5912] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1135.224215][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 1135.231707][ T5912] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1135.242853][ T5912] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1135.368891][ T5912] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1135.368956][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1135.372774][ T5912] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=ee.ed [ 1135.372807][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.372830][ T5912] usb 5-1: Product: syz [ 1135.372849][ T5912] usb 5-1: Manufacturer: syz [ 1135.372868][ T5912] usb 5-1: SerialNumber: syz [ 1135.546727][ T5912] usb 5-1: config 0 descriptor?? [ 1135.828076][T18868] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1135.954232][ T5898] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1136.058687][ T5912] usb 5-1: ucan: probing device on interface #0 [ 1136.067919][ T5912] usb 5-1: ucan: invalid EP count (0) [ 1136.079336][ T5912] usb 5-1: ucan: probe failed; try to update the device firmware [ 1136.093416][ T5912] usb 5-1: USB disconnect, device number 16 [ 1136.104377][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 1136.132393][T10774] udevd[10774]: setting mode of /dev/bus/usb/005/016 to 020664 failed: No such file or directory [ 1136.154668][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1136.165770][T10774] udevd[10774]: setting owner of /dev/bus/usb/005/016 to uid=0, gid=0 failed: No such file or directory [ 1136.177166][ T5898] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1136.190395][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1136.225153][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1136.239458][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1136.252142][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1136.268571][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1136.272583][ T5898] usb 1-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4 [ 1136.289190][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.297734][ T5898] usb 1-1: Product: syz [ 1136.303359][ T5898] usb 1-1: Manufacturer: syz [ 1136.308092][ T5898] usb 1-1: SerialNumber: syz [ 1136.327474][ T5898] usb 1-1: config 0 descriptor?? [ 1136.486576][ T5827] usb 4-1: 0:2 : does not exist [ 1136.496969][ T5827] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1136.547666][ T5827] usb 4-1: USB disconnect, device number 124 [ 1136.870252][T18906] FAULT_INJECTION: forcing a failure. [ 1136.870252][T18906] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.887801][T18906] CPU: 0 UID: 0 PID: 18906 Comm: syz.4.3793 Not tainted syzkaller #0 PREEMPT(full) [ 1136.887832][T18906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1136.887846][T18906] Call Trace: [ 1136.887856][T18906] [ 1136.887867][T18906] dump_stack_lvl+0x189/0x250 [ 1136.887890][T18906] ? __pfx____ratelimit+0x10/0x10 [ 1136.887924][T18906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1136.887949][T18906] ? __pfx__printk+0x10/0x10 [ 1136.887967][T18906] ? __sock_sendmsg+0x21c/0x270 [ 1136.887994][T18906] ? __do_fast_syscall_32+0xb6/0x2b0 [ 1136.888016][T18906] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1136.888041][T18906] should_fail_ex+0x414/0x560 [ 1136.888077][T18906] should_failslab+0xa8/0x100 [ 1136.888110][T18906] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1136.888134][T18906] ? skb_clone+0x212/0x3a0 [ 1136.888161][T18906] skb_clone+0x212/0x3a0 [ 1136.888180][T18906] __netlink_deliver_tap+0x404/0x850 [ 1136.888213][T18906] ? netlink_deliver_tap+0x2e/0x1b0 [ 1136.888250][T18906] netlink_deliver_tap+0x19c/0x1b0 [ 1136.888285][T18906] netlink_sendskb+0x68/0x140 [ 1136.888317][T18906] netlink_unicast+0x397/0x9e0 [ 1136.888344][T18906] ? __asan_memcpy+0x40/0x70 [ 1136.888383][T18906] ? __pfx_netlink_unicast+0x10/0x10 [ 1136.888426][T18906] nfnetlink_rcv+0x2309/0x2590 [ 1136.888494][T18906] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1136.888542][T18906] ? ref_tracker_free+0x63a/0x7d0 [ 1136.888597][T18906] ? __netlink_deliver_tap+0x807/0x850 [ 1136.888630][T18906] ? netlink_deliver_tap+0x2e/0x1b0 [ 1136.888682][T18906] netlink_unicast+0x82f/0x9e0 [ 1136.888722][T18906] ? __pfx_netlink_unicast+0x10/0x10 [ 1136.888754][T18906] ? netlink_sendmsg+0x642/0xb30 [ 1136.888785][T18906] ? skb_put+0x11b/0x210 [ 1136.888823][T18906] netlink_sendmsg+0x805/0xb30 [ 1136.888868][T18906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.888904][T18906] ? __import_iovec+0x5d4/0x7f0 [ 1136.888931][T18906] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1136.888959][T18906] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1136.888988][T18906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.889021][T18906] __sock_sendmsg+0x21c/0x270 [ 1136.889052][T18906] ____sys_sendmsg+0x505/0x830 [ 1136.889081][T18906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1136.889122][T18906] ___sys_sendmsg+0x21f/0x2a0 [ 1136.889147][T18906] ? __pfx____sys_sendmsg+0x10/0x10 [ 1136.889210][T18906] ? __fget_files+0x2a/0x420 [ 1136.889237][T18906] ? __fget_files+0x3a0/0x420 [ 1136.889277][T18906] __sys_sendmsg+0x164/0x220 [ 1136.889301][T18906] ? __pfx___sys_sendmsg+0x10/0x10 [ 1136.889333][T18906] ? __pfx_ksys_write+0x10/0x10 [ 1136.889361][T18906] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1136.889396][T18906] ? lockdep_hardirqs_on+0x9c/0x150 [ 1136.889420][T18906] __do_fast_syscall_32+0xb6/0x2b0 [ 1136.889445][T18906] ? lockdep_hardirqs_on+0x9c/0x150 [ 1136.889471][T18906] do_fast_syscall_32+0x34/0x80 [ 1136.889494][T18906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1136.889521][T18906] RIP: 0023:0xf7fb4539 [ 1136.889542][T18906] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1136.889560][T18906] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1136.889583][T18906] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1136.889598][T18906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1136.889609][T18906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1136.889621][T18906] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1136.889634][T18906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1136.889665][T18906] [ 1137.704205][ T5912] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1137.754197][ T5913] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1137.854611][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 1137.862520][ T5912] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1137.870837][ T5912] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1137.881932][ T5912] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 1137.893465][ T5912] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 1137.905308][ T5912] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1137.918567][ T5912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1137.925332][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 1137.932871][ T5913] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1137.941536][ T5913] usb 5-1: config 0 has no interface number 0 [ 1137.948583][ T5913] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1137.956867][ T5912] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1137.966172][ T5912] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1137.974982][ T5912] usb 2-1: Product: syz [ 1137.979438][ T5912] usb 2-1: Manufacturer: syz [ 1137.984201][ T5912] usb 2-1: SerialNumber: syz [ 1137.990394][ T5913] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1138.000838][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.010138][ T5912] usb 2-1: config 0 descriptor?? [ 1138.016218][ T5913] usb 5-1: Product: syz [ 1138.021132][T18910] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1138.028481][ T5913] usb 5-1: Manufacturer: syz [ 1138.035214][ T5912] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1138.045140][ T5913] usb 5-1: SerialNumber: syz [ 1138.053232][ T5913] usb 5-1: config 0 descriptor?? [ 1138.062646][ T5912] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1138.072751][ T5913] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1138.085393][ T5913] em28xx 5-1:0.89: Video interface 89 found: bulk [ 1138.254610][ T5912] usb 2-1: USB disconnect, device number 105 [ 1138.254720][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 1138.279750][ T5912] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1138.688370][ T5913] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1138.721832][ T5898] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1138.779546][ T5898] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1138.819407][T11821] udevd[11821]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1138.828808][ T5898] usb 1-1: USB disconnect, device number 94 [ 1138.903144][T10844] udevd[10844]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1139.173848][ T5827] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1139.468695][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 1139.492006][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.583609][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.620208][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1139.627887][ T5913] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1139.673579][ T5913] em28xx 5-1:0.89: board has no eeprom [ 1139.734206][ T5913] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1139.741463][ T5913] em28xx 5-1:0.89: analog set to bulk mode. [ 1139.748263][ T9] em28xx 5-1:0.89: Registering V4L2 extension [ 1139.776597][ T5913] usb 5-1: USB disconnect, device number 17 [ 1139.794209][ T5913] em28xx 5-1:0.89: Disconnecting em28xx [ 1139.843014][T18926] hub 1-0:1.0: USB hub found [ 1139.848135][T18926] hub 1-0:1.0: 1 port detected [ 1139.873858][ T5827] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1139.916812][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.950320][ T9] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1139.960702][ T9] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1139.969098][ T9] em28xx 5-1:0.89: No AC97 audio processor [ 1140.021676][ T9] usb 5-1: Decoder not found [ 1140.035556][ T9] em28xx 5-1:0.89: failed to create media graph [ 1140.043878][ T9] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1140.048618][ T5827] usb 4-1: config 0 descriptor?? [ 1140.111090][ T5827] usb 4-1: can't set config #0, error -71 [ 1140.124502][ T5827] usb 4-1: USB disconnect, device number 125 [ 1140.397173][ T9] em28xx 5-1:0.89: Registering snapshot button... [ 1140.509797][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input54 [ 1140.572403][T18935] hub 1-0:1.0: USB hub found [ 1140.577998][T18935] hub 1-0:1.0: 1 port detected [ 1140.637152][ T9] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1140.820905][ T5913] em28xx 5-1:0.89: Closing input extension [ 1141.157166][ T5913] em28xx 5-1:0.89: Deregistering snapshot button [ 1141.246828][ T5913] em28xx 5-1:0.89: Freeing device [ 1142.893868][T18951] usb usb8: usbfs: process 18951 (syz.0.3806) did not claim interface 0 before use [ 1143.244557][ T5913] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1143.424381][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 1143.433053][ T5913] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1143.443011][ T5913] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1143.555423][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1143.644399][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1143.684244][ T5913] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1143.744234][ T5913] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1143.774605][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.023571][ T5913] usb 4-1: usb_control_msg returned -32 [ 1144.036884][ T5913] usbtmc 4-1:16.0: can't read capabilities [ 1144.564770][T18976] ptrace attach of "./syz-executor exec"[15973] was attempted by "./syz-executor exec"[18976] [ 1144.958256][T18981] hub 1-0:1.0: USB hub found [ 1144.963374][T18981] hub 1-0:1.0: 1 port detected [ 1146.083158][ T9] usb 4-1: USB disconnect, device number 126 [ 1146.174544][ T5913] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1146.336529][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.354157][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.398325][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1146.425264][ T5913] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1146.440660][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.466911][ T5913] usb 5-1: config 0 descriptor?? [ 1146.973424][ T5913] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1147.306390][ T5891] usb 5-1: USB disconnect, device number 18 [ 1147.317391][T19021] plantronics 0003:047F:FFFF.001D: usb_submit_urb(ctrl) failed: -19 [ 1147.731846][T19027] loop9: detected capacity change from 0 to 7 [ 1147.750362][T19027] Dev loop9: unable to read RDB block 7 [ 1147.762104][T19027] loop9: unable to read partition table [ 1147.776808][T19027] loop9: partition table beyond EOD, truncated [ 1147.801089][T19027] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1149.596971][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1149.596991][ T30] audit: type=1326 audit(1760902838.026:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19033 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1149.682830][ T30] audit: type=1326 audit(1760902838.026:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19033 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1149.706858][ T30] audit: type=1326 audit(1760902838.026:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19033 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1149.811900][ T30] audit: type=1326 audit(1760902838.066:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19033 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1149.863098][ T30] audit: type=1326 audit(1760902838.066:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19033 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1149.985645][ T30] audit: type=1326 audit(1760902838.106:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19033 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1150.049583][ T5827] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1150.083963][ T30] audit: type=1326 audit(1760902838.106:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19033 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1150.122382][ T30] audit: type=1326 audit(1760902838.136:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19033 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1150.154017][ T30] audit: type=1326 audit(1760902838.136:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19033 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1150.203255][ T30] audit: type=1326 audit(1760902838.136:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19033 comm="syz.4.3826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1150.244566][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 1150.256996][ T5827] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1150.269739][ T5827] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1150.302642][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.318737][ T5827] usb 1-1: Product: syz [ 1150.326568][ T5827] usb 1-1: Manufacturer: syz [ 1150.334354][ T5827] usb 1-1: SerialNumber: syz [ 1150.460753][ T5827] usb 1-1: config 0 descriptor?? [ 1152.299734][T19083] ip6gretap1: entered promiscuous mode [ 1152.312405][T19083] ip6gretap1: entered allmulticast mode [ 1152.984794][ T5891] usb 1-1: USB disconnect, device number 95 [ 1153.204209][ T5913] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 1153.585817][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1153.606332][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1153.613979][ T5913] usb 4-1: can't read configurations, error -71 [ 1153.764757][T19105] fuse: Bad value for 'fd' [ 1155.375243][T19105] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3841'. [ 1155.757454][T19126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3846'. [ 1156.062384][T19135] 8021q: VLANs not supported on lo [ 1156.114220][ T5891] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1156.265790][ T5891] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1156.304311][ T5913] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1156.305050][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.324263][ T5891] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1156.383671][ T5891] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1156.402578][ T5891] usb 4-1: Manufacturer: syz [ 1156.420025][ T5891] usb 4-1: config 0 descriptor?? [ 1156.478696][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 1156.499549][ T5913] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1156.516179][ T5891] rc_core: IR keymap rc-hauppauge not found [ 1156.537183][ T5913] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1156.549581][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.554236][ T5891] Registered IR keymap rc-empty [ 1156.569505][ T5913] usb 2-1: Product: syz [ 1156.573925][ T5913] usb 2-1: Manufacturer: syz [ 1156.576521][ T5891] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1156.609475][ T5913] usb 2-1: SerialNumber: syz [ 1156.614736][ T5891] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input57 [ 1156.630547][ T5913] usb 2-1: config 0 descriptor?? [ 1156.673325][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1156.690552][T19130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.709291][T19130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.858404][T19153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.911178][T19153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.216020][ T9] usb 4-1: USB disconnect, device number 3 [ 1157.600279][T19167] hub 1-0:1.0: USB hub found [ 1157.606760][T19167] hub 1-0:1.0: 1 port detected [ 1159.013769][ T10] usb 2-1: USB disconnect, device number 106 [ 1159.687347][T19191] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1159.784906][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1160.877718][T19216] netlink: 'syz.0.3870': attribute type 1 has an invalid length. [ 1160.991944][T19216] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1161.404864][T19230] netlink: 'syz.0.3873': attribute type 9 has an invalid length. [ 1161.467922][T19230] netlink: 'syz.0.3873': attribute type 6 has an invalid length. [ 1161.686515][T19242] hub 1-0:1.0: USB hub found [ 1161.694349][T19242] hub 1-0:1.0: 1 port detected [ 1163.467236][T19263] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3882'. [ 1163.520360][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1163.520381][ T30] audit: type=1326 audit(1760902851.946:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19264 comm="syz.0.3883" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 1163.644407][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1163.660010][T19268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3884'. [ 1163.804999][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1163.819667][ T9] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1163.834977][ T9] usb 5-1: config 2 has no interface number 0 [ 1163.842077][ T9] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1163.861080][ T9] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1163.870818][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.883866][ T9] usb 5-1: Product: syz [ 1163.888818][ T9] usb 5-1: Manufacturer: syz [ 1163.893781][ T9] usb 5-1: SerialNumber: syz [ 1163.936455][ T9] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1164.264170][ T5891] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1164.350403][T19284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.357854][T19284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.519968][T19284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.539473][T19284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1164.702758][T19284] hsr0: left allmulticast mode [ 1164.707896][T19284] hsr_slave_0: left allmulticast mode [ 1164.713622][T19284] hsr_slave_1: left allmulticast mode [ 1164.721399][T19284] macsec1: left allmulticast mode [ 1164.737769][T15272] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.746919][T15272] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.764550][T15272] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.773614][T15272] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.909356][ T5891] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1164.928573][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.954242][ T5891] usb 4-1: Product: syz [ 1164.958584][ T5891] usb 4-1: Manufacturer: syz [ 1164.963221][ T5891] usb 4-1: SerialNumber: syz [ 1164.990692][ T5891] usb 4-1: config 0 descriptor?? [ 1165.010825][ T5891] ch341 4-1:0.0: ch341-uart converter detected [ 1165.210010][T19277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.220338][T19277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.603108][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3888'. [ 1166.100410][ T5891] usb 4-1: failed to receive control message: -110 [ 1166.109208][ T5891] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1166.324215][ T10] usb 5-1: USB disconnect, device number 20 [ 1166.874240][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1167.065438][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.092326][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1167.114322][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 1167.123606][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.159408][ T10] usb 5-1: config 0 descriptor?? [ 1167.321729][T19320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3899'. [ 1167.335019][ T30] audit: type=1326 audit(1760902855.736:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz.2.3899" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1167.380311][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'. [ 1167.465591][ T30] audit: type=1326 audit(1760902855.736:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz.2.3899" exe="/root/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1167.742719][ T30] audit: type=1326 audit(1760902855.736:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz.2.3899" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1167.769438][T19310] syz_tun: entered promiscuous mode [ 1167.794431][ T30] audit: type=1326 audit(1760902855.736:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz.2.3899" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1167.796362][T19310] vlan2: entered promiscuous mode [ 1167.816774][ T30] audit: type=1326 audit(1760902855.736:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz.2.3899" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1167.846448][ T30] audit: type=1326 audit(1760902855.736:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz.2.3899" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1167.916963][ T5913] usb 4-1: USB disconnect, device number 4 [ 1167.979589][ T30] audit: type=1326 audit(1760902855.736:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz.2.3899" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1168.061652][ T30] audit: type=1326 audit(1760902855.736:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz.2.3899" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1168.091895][ T5913] ch341 4-1:0.0: device disconnected [ 1168.213497][ T30] audit: type=1326 audit(1760902855.736:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz.2.3899" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1169.332519][T19341] FAULT_INJECTION: forcing a failure. [ 1169.332519][T19341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.355563][T19341] CPU: 0 UID: 0 PID: 19341 Comm: syz.3.3905 Not tainted syzkaller #0 PREEMPT(full) [ 1169.355596][T19341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1169.355611][T19341] Call Trace: [ 1169.355620][T19341] [ 1169.355630][T19341] dump_stack_lvl+0x189/0x250 [ 1169.355661][T19341] ? __pfx____ratelimit+0x10/0x10 [ 1169.355698][T19341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1169.355722][T19341] ? __pfx__printk+0x10/0x10 [ 1169.355758][T19341] should_fail_ex+0x414/0x560 [ 1169.355800][T19341] _copy_to_user+0x31/0xb0 [ 1169.355834][T19341] simple_read_from_buffer+0xe1/0x170 [ 1169.355867][T19341] proc_fail_nth_read+0x1b3/0x220 [ 1169.355906][T19341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1169.355945][T19341] ? rw_verify_area+0x2a6/0x4d0 [ 1169.355967][T19341] ? __lock_acquire+0xab9/0xd20 [ 1169.355993][T19341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1169.356029][T19341] vfs_read+0x200/0xa30 [ 1169.356051][T19341] ? fdget_pos+0x247/0x320 [ 1169.356084][T19341] ? __pfx___mutex_lock+0x10/0x10 [ 1169.356110][T19341] ? __pfx_vfs_read+0x10/0x10 [ 1169.356134][T19341] ? __fget_files+0x2a/0x420 [ 1169.356175][T19341] ? __fget_files+0x3a0/0x420 [ 1169.356202][T19341] ? __fget_files+0x2a/0x420 [ 1169.356241][T19341] ksys_read+0x145/0x250 [ 1169.356267][T19341] ? __pfx_ksys_read+0x10/0x10 [ 1169.356295][T19341] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1169.356321][T19341] ? lockdep_hardirqs_on+0x9c/0x150 [ 1169.356348][T19341] __do_fast_syscall_32+0xb6/0x2b0 [ 1169.356383][T19341] do_fast_syscall_32+0x34/0x80 [ 1169.356407][T19341] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1169.356434][T19341] RIP: 0023:0xf7fb4539 [ 1169.356453][T19341] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1169.356471][T19341] RSP: 002b:00000000f5464590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1169.356495][T19341] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5464620 [ 1169.356510][T19341] RDX: 000000000000000f RSI: 00000000f7445ff4 RDI: 0000000000000000 [ 1169.356523][T19341] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1169.356535][T19341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1169.356549][T19341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1169.356582][T19341] [ 1169.902309][ T5913] usb 5-1: USB disconnect, device number 21 [ 1170.314412][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1170.443781][T19352] kernel profiling enabled (shift: 63) [ 1170.449472][T19352] profiling shift: 63 too large [ 1170.540659][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1170.560789][ T10] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1170.597615][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.640436][ T10] usb 4-1: Product: syz [ 1170.660722][ T10] usb 4-1: Manufacturer: syz [ 1170.678272][ T10] usb 4-1: SerialNumber: syz [ 1170.801190][ T10] usb 4-1: config 0 descriptor?? [ 1170.829259][T19358] fuse: Unknown parameter 'fd}-J>VMg{jA' [ 1171.278527][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1171.502501][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1171.543324][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1171.570873][ T10] usb 4-1: media controller created [ 1171.608542][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1171.653565][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 1171.662542][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1171.673451][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1171.697007][ T10] usb 4-1: USB disconnect, device number 5 [ 1172.061834][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1172.747334][T19380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3917'. [ 1172.757627][T19380] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3917'. [ 1172.802825][T19380] batadv1: entered promiscuous mode [ 1172.812932][T19380] batadv1: entered allmulticast mode [ 1172.884187][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1173.034240][ T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1173.041957][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1173.059472][ T10] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1173.087024][ T10] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1173.119371][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1173.133105][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1173.161028][ T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=ee.ed [ 1173.170433][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.178969][ T10] usb 4-1: Product: syz [ 1173.183253][ T10] usb 4-1: Manufacturer: syz [ 1173.189033][ T9] usb 2-1: device descriptor read/64, error -71 [ 1173.200413][ T10] usb 4-1: SerialNumber: syz [ 1173.225943][ T10] usb 4-1: config 0 descriptor?? [ 1173.449885][ T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1173.500798][T19377] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1173.526494][T19377] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1173.540354][T19377] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1173.549127][T19377] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1173.558666][T19377] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1173.594194][ T9] usb 2-1: device descriptor read/64, error -71 [ 1173.611330][T19377] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 1173.644223][ T5827] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1173.682373][T19377] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1173.698071][T19377] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 1173.735914][T19377] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 1173.746764][T19377] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 1173.763586][ T9] usb usb2-port1: attempt power cycle [ 1173.814309][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 1173.828024][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1173.838074][ T5827] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1173.871585][ T5827] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1173.974409][ T5827] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1173.984499][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.001973][ T5827] usb 5-1: Product: syz [ 1174.014280][ T5827] usb 5-1: Manufacturer: syz [ 1174.024188][ T5827] usb 5-1: SerialNumber: syz [ 1174.037777][ T5827] usb 5-1: config 0 descriptor?? [ 1174.055307][T19397] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1174.077608][ T5827] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 1174.093155][ T5827] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 1174.099856][ T5827] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 1174.105932][ T5827] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 1174.112384][ T5827] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 1174.124538][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1174.145585][ T9] usb 2-1: device descriptor read/8, error -71 [ 1174.331168][T19397] netlink: 'syz.4.3921': attribute type 5 has an invalid length. [ 1174.392369][T19397] ip6erspan0: entered promiscuous mode [ 1174.557005][ T10] usb 4-1: ucan: probing device on interface #0 [ 1174.564175][ T10] usb 4-1: ucan: invalid EP count (0) [ 1174.574340][ T9] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1174.585668][ T10] usb 4-1: ucan: probe failed; try to update the device firmware [ 1174.666511][ T9] usb 2-1: device descriptor read/8, error -71 [ 1174.705569][ T10] usb 4-1: USB disconnect, device number 6 [ 1174.825307][ T9] usb usb2-port1: unable to enumerate USB device [ 1176.073321][ T5491] mcba_usb 5-1:0.0 can0: bit-timing not yet defined [ 1176.186037][T19434] vlan3: entered allmulticast mode [ 1176.191656][T19434] bridge0: port 3(vlan3) entered blocking state [ 1176.199298][T19434] bridge0: port 3(vlan3) entered disabled state [ 1176.209860][T19434] vlan3: entered promiscuous mode [ 1176.422949][T19438] netlink: 'syz.2.3930': attribute type 7 has an invalid length. [ 1176.461769][T19438] netlink: 'syz.2.3930': attribute type 5 has an invalid length. [ 1176.592866][T19438] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3930'. [ 1176.995670][ T5827] usb 5-1: USB disconnect, device number 22 [ 1177.005965][ T5827] mcba_usb 5-1:0.0 can0: device disconnected [ 1177.314585][ T5898] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1177.378918][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.385500][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.688393][ T5898] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1177.704168][ T5898] usb 1-1: config 0 has no interface number 0 [ 1177.714930][ T5898] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1177.725348][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.733441][ T5898] usb 1-1: Product: syz [ 1177.738211][ T5898] usb 1-1: Manufacturer: syz [ 1177.742847][ T5898] usb 1-1: SerialNumber: syz [ 1177.845412][ T5898] usb 1-1: config 0 descriptor?? [ 1178.038992][T19461] fuse: Bad value for 'fd' [ 1178.333897][T19468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.346994][T19469] loop6: detected capacity change from 0 to 524287999 [ 1178.387210][T19469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.396138][T19469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.404837][T19469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.415823][T19469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.424514][T19469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.433905][T19469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.525052][T19468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.604457][T19469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.612566][T19469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.685321][T19469] ldm_validate_partition_table(): Disk read failed. [ 1178.805925][T19469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.859148][T19469] Buffer I/O error on dev loop6, logical block 0, async page read [ 1178.868173][T19469] Dev loop6: unable to read RDB block 0 [ 1178.877951][T19469] loop6: unable to read partition table [ 1178.885687][T19469] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1178.887040][T10774] ldm_validate_partition_table(): Disk read failed. [ 1179.004944][T10774] Dev loop6: unable to read RDB block 0 [ 1179.011408][T10774] loop6: unable to read partition table [ 1179.854315][ T5827] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1180.021795][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1180.048268][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.060374][ T5827] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1180.070474][ T5827] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1180.078913][ T5827] usb 2-1: Manufacturer: syz [ 1180.086625][ T5827] usb 2-1: config 0 descriptor?? [ 1180.194269][T14225] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1180.344567][T14225] usb 4-1: Using ep0 maxpacket: 8 [ 1180.356166][T14225] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1180.384513][T14225] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1180.410810][T14225] usb 4-1: config 0 has no interface number 0 [ 1180.418765][ T5898] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1180.429870][T14225] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 1180.441995][ T5898] uvcvideo 1-1:0.64: No valid video chain found. [ 1180.452144][ T5898] usb 1-1: USB disconnect, device number 96 [ 1180.462044][T14225] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 1180.478203][T14225] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1180.492913][T14225] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1180.505315][T14225] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1180.523181][T14225] usb 4-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1180.539485][T14225] usb 4-1: Product: syz [ 1180.549884][T14225] usb 4-1: SerialNumber: syz [ 1180.561430][T14225] usb 4-1: config 0 descriptor?? [ 1180.759229][T19504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3943'. [ 1180.807351][T14225] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input58 [ 1180.880719][T19506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3944'. [ 1180.903209][T19506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3944'. [ 1180.944739][T19506] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1181.102103][T19508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3945'. [ 1181.354668][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1181.540787][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1181.552661][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.569072][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1181.597419][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.621533][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1181.645798][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.698458][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 1181.715582][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1181.734869][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 1181.746988][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 1181.764684][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1181.924249][T14225] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1182.096928][T14225] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1182.179768][T14225] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1182.199775][T14225] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1182.214361][ T5827] usbhid 2-1:0.0: can't add hid device: -71 [ 1182.221694][ T5827] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1182.239419][T14225] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1182.254414][ T5827] usb 2-1: USB disconnect, device number 111 [ 1182.260750][ T5891] usb 5-1: USB disconnect, device number 23 [ 1182.267952][T14225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.279664][T14225] usb 1-1: Product: ࠁ [ 1182.284818][T14225] usb 1-1: Manufacturer: 䰌岸疃鶡慛れੈṸ锻ۀ囄ඣ돓聯Ꮌᢽᥭ㩊鴓꩘鿼吕थ꡷皵吒Ἀ阍枙᭦諺ʦ髡펍 [ 1182.311547][T14225] usb 1-1: SerialNumber: 網㆙滗㱈쨑獛㱙䀏ꡛ잱獈뺍鷠꛲꡴쫽ᐟ궠œ잇愻쮈颎᪏鱰얼怗〠矸ꆒ굿⹄壜엕䕾䳉겼ᩊ蘢蛂璨䀛筜敠﹔嘼쭩ꯘ囷鹷዗ [ 1182.380862][T14225] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 1182.394269][T14225] usb 1-1: no configuration chosen from 1 choice [ 1182.975201][ C1] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1182.988487][ T5827] usb 4-1: USB disconnect, device number 7 [ 1183.213925][T19534] fuse: Bad value for 'group_id' [ 1183.224282][T19534] fuse: Bad value for 'group_id' [ 1183.714771][T19540] loop6: detected capacity change from 0 to 524287999 [ 1183.725323][T11821] buffer_io_error: 23 callbacks suppressed [ 1183.725344][T11821] Buffer I/O error on dev loop6, logical block 0, async page read [ 1183.739953][T11821] Buffer I/O error on dev loop6, logical block 0, async page read [ 1183.748293][T11821] Buffer I/O error on dev loop6, logical block 0, async page read [ 1183.759280][T11821] Buffer I/O error on dev loop6, logical block 0, async page read [ 1183.767577][T11821] Buffer I/O error on dev loop6, logical block 0, async page read [ 1183.778140][T11821] Buffer I/O error on dev loop6, logical block 0, async page read [ 1183.824122][T11821] Buffer I/O error on dev loop6, logical block 0, async page read [ 1183.852110][T11821] Buffer I/O error on dev loop6, logical block 0, async page read [ 1183.870689][T11821] ldm_validate_partition_table(): Disk read failed. [ 1183.897410][T11821] Buffer I/O error on dev loop6, logical block 0, async page read [ 1183.911292][T11821] Buffer I/O error on dev loop6, logical block 0, async page read [ 1183.938690][T11821] Dev loop6: unable to read RDB block 0 [ 1183.968791][T11821] loop6: unable to read partition table [ 1183.999993][T19540] ldm_validate_partition_table(): Disk read failed. [ 1184.024671][T19540] Dev loop6: unable to read RDB block 0 [ 1184.050355][T19540] loop6: unable to read partition table [ 1184.128460][T19540] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1184.155811][T19541] ldm_validate_partition_table(): Disk read failed. [ 1184.163081][T19541] Dev loop6: unable to read RDB block 0 [ 1184.169682][T19541] loop6: unable to read partition table [ 1184.194908][T19541] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1184.499343][ T9] usb 1-1: USB disconnect, device number 97 [ 1185.196245][T19555] fuse: Bad value for 'user_id' [ 1185.206707][T19555] fuse: Bad value for 'user_id' [ 1185.704441][ T10] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1185.766460][T19564] FAULT_INJECTION: forcing a failure. [ 1185.766460][T19564] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.779912][T19564] CPU: 0 UID: 0 PID: 19564 Comm: syz.2.3960 Not tainted syzkaller #0 PREEMPT(full) [ 1185.779941][T19564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1185.779955][T19564] Call Trace: [ 1185.779965][T19564] [ 1185.779975][T19564] dump_stack_lvl+0x189/0x250 [ 1185.780004][T19564] ? __pfx____ratelimit+0x10/0x10 [ 1185.780048][T19564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1185.780071][T19564] ? __pfx__printk+0x10/0x10 [ 1185.780096][T19564] ? __pfx___might_resched+0x10/0x10 [ 1185.780127][T19564] ? fs_reclaim_acquire+0x7d/0x100 [ 1185.780159][T19564] should_fail_ex+0x414/0x560 [ 1185.780199][T19564] should_failslab+0xa8/0x100 [ 1185.780228][T19564] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1185.780252][T19564] ? skb_clone+0x212/0x3a0 [ 1185.780280][T19564] skb_clone+0x212/0x3a0 [ 1185.780301][T19564] ? nfnetlink_rcv+0x4ba/0x2590 [ 1185.780332][T19564] nfnetlink_rcv+0x4ec/0x2590 [ 1185.780364][T19564] ? is_bpf_text_address+0x26/0x2b0 [ 1185.780403][T19564] ? unwind_get_return_address+0x4d/0x90 [ 1185.780436][T19564] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1185.780459][T19564] ? arch_stack_walk+0xfc/0x150 [ 1185.780505][T19564] ? stack_trace_save+0x9c/0xe0 [ 1185.780527][T19564] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1185.780593][T19564] ? __lock_acquire+0xab9/0xd20 [ 1185.780633][T19564] ? netlink_deliver_tap+0x2e/0x1b0 [ 1185.780691][T19564] netlink_unicast+0x82f/0x9e0 [ 1185.780729][T19564] ? __pfx_netlink_unicast+0x10/0x10 [ 1185.780761][T19564] ? netlink_sendmsg+0x642/0xb30 [ 1185.780791][T19564] ? skb_put+0x11b/0x210 [ 1185.780827][T19564] netlink_sendmsg+0x805/0xb30 [ 1185.780870][T19564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1185.780911][T19564] ? __import_iovec+0x5d4/0x7f0 [ 1185.780937][T19564] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1185.780964][T19564] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1185.780993][T19564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1185.781027][T19564] __sock_sendmsg+0x21c/0x270 [ 1185.781063][T19564] ____sys_sendmsg+0x505/0x830 [ 1185.781092][T19564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1185.781131][T19564] ___sys_sendmsg+0x21f/0x2a0 [ 1185.781156][T19564] ? __pfx____sys_sendmsg+0x10/0x10 [ 1185.781216][T19564] ? __fget_files+0x2a/0x420 [ 1185.781243][T19564] ? __fget_files+0x3a0/0x420 [ 1185.781282][T19564] __sys_sendmsg+0x164/0x220 [ 1185.781306][T19564] ? __pfx___sys_sendmsg+0x10/0x10 [ 1185.781337][T19564] ? __pfx_ksys_write+0x10/0x10 [ 1185.781365][T19564] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1185.781391][T19564] ? lockdep_hardirqs_on+0x9c/0x150 [ 1185.781417][T19564] __do_fast_syscall_32+0xb6/0x2b0 [ 1185.781443][T19564] ? lockdep_hardirqs_on+0x9c/0x150 [ 1185.781470][T19564] do_fast_syscall_32+0x34/0x80 [ 1185.781495][T19564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1185.781522][T19564] RIP: 0023:0xf7f17539 [ 1185.781542][T19564] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1185.781561][T19564] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1185.781585][T19564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1185.781601][T19564] RDX: 0000000004040080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1185.781615][T19564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1185.781627][T19564] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1185.781641][T19564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1185.781673][T19564] [ 1186.120557][ C0] vkms_vblank_simulate: vblank timer overrun [ 1186.264244][T14225] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1186.292406][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1186.301619][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.310003][ T10] usb 1-1: Product: syz [ 1186.314283][ T10] usb 1-1: Manufacturer: syz [ 1186.318909][ T10] usb 1-1: SerialNumber: syz [ 1186.341946][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1186.436418][T14225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1186.440848][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1186.461341][T14225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.529054][T14225] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1186.543034][T14225] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1186.554196][T14225] usb 4-1: Manufacturer: syz [ 1186.568699][T14225] usb 4-1: config 0 descriptor?? [ 1186.634201][ T5913] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1186.724280][ T5827] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1186.798236][ T5912] usb 1-1: USB disconnect, device number 98 [ 1186.825656][ T5913] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.844906][ T5913] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1186.854950][ T5913] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1186.866302][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.887863][ T5827] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1186.897923][ T5827] usb 2-1: config 0 has no interface number 0 [ 1186.910210][ T5827] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1186.921959][ T5827] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1186.937487][ T5827] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1186.947045][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.956195][ T5827] usb 2-1: Product: syz [ 1186.964623][ T5827] usb 2-1: Manufacturer: syz [ 1186.969338][ T5827] usb 2-1: SerialNumber: syz [ 1186.982345][ T5827] usb 2-1: config 0 descriptor?? [ 1186.998044][T19574] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1187.009086][ T5827] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1187.023516][T14225] usbhid 4-1:0.0: can't add hid device: -71 [ 1187.029720][T14225] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1187.048221][T14225] usb 4-1: USB disconnect, device number 8 [ 1187.059423][ T5827] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1187.257413][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1187.534671][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1187.542316][ T10] ath9k_htc: Failed to initialize the device [ 1187.552796][ T5912] usb 1-1: ath9k_htc: USB layer deinitialized [ 1187.974581][T14225] usb 2-1: USB disconnect, device number 112 [ 1187.994866][T14225] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1188.028256][T19584] fuse: Bad value for 'group_id' [ 1188.037362][T19584] fuse: Bad value for 'group_id' [ 1188.050022][T14225] cyberjack 2-1:0.69: device disconnected [ 1188.450913][T19590] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3965'. [ 1188.944206][T14225] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1189.104221][T14225] usb 4-1: Using ep0 maxpacket: 8 [ 1189.122263][T14225] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1189.148409][T14225] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1189.174837][T14225] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1189.185914][T14225] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1189.197500][T14225] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1189.211043][T14225] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1189.220425][T14225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.370019][ T5891] usb 5-1: USB disconnect, device number 24 [ 1190.328969][T14225] usb 4-1: usb_control_msg returned -32 [ 1190.358201][T14225] usbtmc 4-1:16.0: can't read capabilities [ 1190.368873][T19605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.447418][T19605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.876828][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1191.069519][T19621] binder: 19620:19621 ioctl 40086602 80000080 returned -22 [ 1191.074528][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1191.113780][ T10] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1191.160727][ T10] usb 5-1: config 2 has no interface number 0 [ 1191.180226][ T10] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1191.241446][ T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1191.309885][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.331917][ T10] usb 5-1: Product: syz [ 1191.341985][ T10] usb 5-1: Manufacturer: syz [ 1191.353510][ T10] usb 5-1: SerialNumber: syz [ 1191.378494][ T10] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1191.724336][ T10] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1193.243533][T19649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3981'. [ 1193.286630][T19649] binder_alloc: 19648: binder_alloc_buf size -136 failed, no address space [ 1193.297915][T19649] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 1193.443083][ T9] usb 5-1: USB disconnect, device number 25 [ 1194.006970][T19660] FAULT_INJECTION: forcing a failure. [ 1194.006970][T19660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1194.055028][T19660] CPU: 0 UID: 0 PID: 19660 Comm: syz.4.3983 Not tainted syzkaller #0 PREEMPT(full) [ 1194.055061][T19660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1194.055075][T19660] Call Trace: [ 1194.055089][T19660] [ 1194.055099][T19660] dump_stack_lvl+0x189/0x250 [ 1194.055128][T19660] ? __pfx____ratelimit+0x10/0x10 [ 1194.055165][T19660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1194.055188][T19660] ? __pfx__printk+0x10/0x10 [ 1194.055208][T19660] ? irqentry_exit+0x74/0x90 [ 1194.055246][T19660] should_fail_ex+0x414/0x560 [ 1194.055289][T19660] _copy_from_iter+0x1de/0x1790 [ 1194.055324][T19660] ? rcu_is_watching+0x15/0xb0 [ 1194.055361][T19660] ? kmalloc_reserve+0xbd/0x290 [ 1194.055394][T19660] ? __pfx__copy_from_iter+0x10/0x10 [ 1194.055423][T19660] ? __build_skb_around+0x262/0x3f0 [ 1194.055460][T19660] ? netlink_sendmsg+0x642/0xb30 [ 1194.055491][T19660] ? skb_put+0x11b/0x210 [ 1194.055527][T19660] netlink_sendmsg+0x6b2/0xb30 [ 1194.055579][T19660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.055617][T19660] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1194.055645][T19660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1194.055673][T19660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.055708][T19660] __sock_sendmsg+0x21c/0x270 [ 1194.055740][T19660] sock_write_iter+0x279/0x360 [ 1194.055769][T19660] ? __pfx_sock_write_iter+0x10/0x10 [ 1194.055818][T19660] do_iter_readv_writev+0x623/0x8c0 [ 1194.055853][T19660] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1194.055877][T19660] ? common_file_perm+0x1b5/0x230 [ 1194.055906][T19660] ? bpf_lsm_file_permission+0x9/0x20 [ 1194.055937][T19660] ? security_file_permission+0x75/0x290 [ 1194.055970][T19660] ? rw_verify_area+0x255/0x4d0 [ 1194.055999][T19660] vfs_writev+0x31a/0x960 [ 1194.056034][T19660] ? __lock_acquire+0xab9/0xd20 [ 1194.056064][T19660] ? __pfx_vfs_writev+0x10/0x10 [ 1194.056111][T19660] ? __fget_files+0x2a/0x420 [ 1194.056144][T19660] ? __fget_files+0x3a0/0x420 [ 1194.056170][T19660] ? __fget_files+0x2a/0x420 [ 1194.056205][T19660] do_writev+0x14d/0x2d0 [ 1194.056238][T19660] ? __pfx_do_writev+0x10/0x10 [ 1194.056273][T19660] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1194.056299][T19660] ? lockdep_hardirqs_on+0x9c/0x150 [ 1194.056326][T19660] __do_fast_syscall_32+0xb6/0x2b0 [ 1194.056353][T19660] ? lockdep_hardirqs_on+0x9c/0x150 [ 1194.056380][T19660] do_fast_syscall_32+0x34/0x80 [ 1194.056406][T19660] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1194.056433][T19660] RIP: 0023:0xf7fb4539 [ 1194.056454][T19660] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1194.056474][T19660] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1194.056497][T19660] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 1194.056513][T19660] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1194.056526][T19660] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1194.056539][T19660] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1194.056552][T19660] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1194.056593][T19660] [ 1194.953945][T19668] FAULT_INJECTION: forcing a failure. [ 1194.953945][T19668] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.970922][T19670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1194.992787][T19668] CPU: 1 UID: 0 PID: 19668 Comm: syz.1.3987 Not tainted syzkaller #0 PREEMPT(full) [ 1194.992818][T19668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1194.992832][T19668] Call Trace: [ 1194.992841][T19668] [ 1194.992851][T19668] dump_stack_lvl+0x189/0x250 [ 1194.992884][T19668] ? __pfx____ratelimit+0x10/0x10 [ 1194.992919][T19668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1194.992943][T19668] ? __pfx__printk+0x10/0x10 [ 1194.992972][T19668] ? __pfx___might_resched+0x10/0x10 [ 1194.993009][T19668] should_fail_ex+0x414/0x560 [ 1194.993050][T19668] should_failslab+0xa8/0x100 [ 1194.993082][T19668] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1194.993107][T19668] ? __alloc_skb+0x112/0x2d0 [ 1194.993147][T19668] __alloc_skb+0x112/0x2d0 [ 1194.993184][T19668] netlink_ack+0x146/0xa50 [ 1194.993213][T19668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1194.993238][T19668] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1194.993268][T19668] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1194.993315][T19668] netlink_rcv_skb+0x28c/0x470 [ 1194.993345][T19668] ? __lock_acquire+0xab9/0xd20 [ 1194.993376][T19668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1194.993403][T19668] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1194.993466][T19668] ? down_read+0x1ad/0x2e0 [ 1194.993497][T19668] genl_rcv+0x28/0x40 [ 1194.993519][T19668] netlink_unicast+0x82f/0x9e0 [ 1194.993559][T19668] ? __pfx_netlink_unicast+0x10/0x10 [ 1194.993592][T19668] ? netlink_sendmsg+0x642/0xb30 [ 1194.993623][T19668] ? skb_put+0x11b/0x210 [ 1194.993660][T19668] netlink_sendmsg+0x805/0xb30 [ 1194.993705][T19668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.993742][T19668] ? __import_iovec+0x5d4/0x7f0 [ 1194.993770][T19668] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1194.993798][T19668] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1194.993828][T19668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.993863][T19668] __sock_sendmsg+0x21c/0x270 [ 1194.993895][T19668] ____sys_sendmsg+0x505/0x830 [ 1194.993924][T19668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1194.993965][T19668] ___sys_sendmsg+0x21f/0x2a0 [ 1194.993991][T19668] ? __pfx____sys_sendmsg+0x10/0x10 [ 1194.994051][T19668] ? __fget_files+0x2a/0x420 [ 1194.994079][T19668] ? __fget_files+0x3a0/0x420 [ 1194.994115][T19668] __sys_sendmsg+0x164/0x220 [ 1194.994139][T19668] ? __pfx___sys_sendmsg+0x10/0x10 [ 1194.994170][T19668] ? __pfx_ksys_write+0x10/0x10 [ 1194.994197][T19668] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1194.994225][T19668] ? lockdep_hardirqs_on+0x9c/0x150 [ 1194.994251][T19668] __do_fast_syscall_32+0xb6/0x2b0 [ 1194.994277][T19668] ? lockdep_hardirqs_on+0x9c/0x150 [ 1194.994304][T19668] do_fast_syscall_32+0x34/0x80 [ 1194.994329][T19668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1194.994356][T19668] RIP: 0023:0xf7f41539 [ 1194.994377][T19668] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1194.994397][T19668] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1194.994422][T19668] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1194.994446][T19668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1194.994460][T19668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1194.994473][T19668] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1194.994487][T19668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1194.994520][T19668] [ 1195.372180][T19672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1195.702392][T19592] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 1195.740482][ T9] usb 4-1: USB disconnect, device number 9 [ 1195.754281][T14225] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1195.906645][T14225] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1195.918042][T14225] usb 1-1: config 0 has no interface number 0 [ 1195.925552][T14225] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1195.952341][T14225] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1195.982526][T14225] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1195.995324][T14225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.012006][T14225] usb 1-1: Product: syz [ 1196.039406][T14225] usb 1-1: Manufacturer: syz [ 1196.054200][ T5891] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1196.074462][T14225] usb 1-1: SerialNumber: syz [ 1196.095230][T14225] usb 1-1: config 0 descriptor?? [ 1196.184175][ T5891] usb 5-1: device descriptor read/64, error -71 [ 1196.305293][T19672] netlink: 'syz.0.3990': attribute type 10 has an invalid length. [ 1196.320424][T19672] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1196.403851][T19672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.415507][T19672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.434266][T14225] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 1196.441552][T14225] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1196.456429][T14225] usb 1-1: USB disconnect, device number 99 [ 1196.464127][ T5891] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1196.626378][ T5891] usb 5-1: device descriptor read/64, error -71 [ 1196.656476][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3993'. [ 1196.667920][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3993'. [ 1196.754456][ T5891] usb usb5-port1: attempt power cycle [ 1196.884172][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1197.164350][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1197.174241][ T5891] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1197.205092][ T10] usb 4-1: config 4 has an invalid interface number: 151 but max is 2 [ 1197.214883][ T5891] usb 5-1: device descriptor read/8, error -71 [ 1197.215173][ T10] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1197.233111][ T10] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 1197.267376][ T10] usb 4-1: config 4 has an invalid interface number: 93 but max is 2 [ 1197.295734][ T10] usb 4-1: config 4 has an invalid interface number: 143 but max is 2 [ 1197.307671][ T10] usb 4-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 1197.325076][ T10] usb 4-1: config 4 has no interface number 0 [ 1197.351530][ T10] usb 4-1: config 4 has no interface number 1 [ 1197.379844][ T10] usb 4-1: config 4 has no interface number 2 [ 1197.444440][ T10] usb 4-1: config 4 interface 151 altsetting 8 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1197.462394][ T10] usb 4-1: config 4 interface 151 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1197.474209][ T5891] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1197.490601][ T10] usb 4-1: config 4 interface 151 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 1197.505067][ T5891] usb 5-1: device descriptor read/8, error -71 [ 1197.505390][ T10] usb 4-1: config 4 interface 151 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1197.522805][ T10] usb 4-1: config 4 interface 151 altsetting 8 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1197.536355][ T10] usb 4-1: config 4 interface 151 altsetting 8 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1197.547766][ T10] usb 4-1: config 4 interface 151 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1197.560211][ T10] usb 4-1: config 4 interface 151 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1197.573610][ T10] usb 4-1: config 4 interface 151 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1197.585787][ T10] usb 4-1: config 4 interface 151 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 1197.601230][ T10] usb 4-1: config 4 interface 151 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 1197.631990][ T10] usb 4-1: config 4 interface 151 altsetting 8 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1197.634502][ T5891] usb usb5-port1: unable to enumerate USB device [ 1197.643255][ T10] usb 4-1: config 4 interface 151 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 1197.661727][ T10] usb 4-1: config 4 interface 151 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 1197.676023][ T10] usb 4-1: config 4 interface 93 altsetting 181 bulk endpoint 0x7 has invalid maxpacket 16 [ 1197.686541][ T10] usb 4-1: config 4 interface 93 altsetting 181 has a duplicate endpoint with address 0x4, skipping [ 1197.698672][ T10] usb 4-1: config 4 interface 143 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1197.715732][ T10] usb 4-1: config 4 interface 151 has no altsetting 0 [ 1197.722892][ T10] usb 4-1: config 4 interface 93 has no altsetting 0 [ 1197.731192][ T10] usb 4-1: config 4 interface 143 has no altsetting 0 [ 1197.752701][ T10] usb 4-1: New USB device found, idVendor=19d2, idProduct=ffcc, bcdDevice=bc.ef [ 1197.762525][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.771063][ T10] usb 4-1: Manufacturer:  [ 1197.780357][ T10] usb 4-1: SerialNumber: 㿍ᛴ࿒멋⛣ᩳÉ즙쪜쪪⮾書숽滕ꥪ䠆瞉슀嵴氅ɴ⫰頖笊᳛酨㡄率쫟뾯㮐呷秞❈劙籹 [ 1197.817686][T19687] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1198.423857][T19714] openvswitch: netlink: IP tunnel attribute has 641 unknown bytes. [ 1199.629048][ T5891] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1199.641499][ T10] option 4-1:4.151: GSM modem (1-port) converter detected [ 1199.822183][ T10] usb 4-1: USB disconnect, device number 10 [ 1199.992391][ T10] option 4-1:4.151: device disconnected [ 1201.869406][T19752] vti0: entered promiscuous mode [ 1201.898386][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1201.974270][T19752] vti0: entered allmulticast mode [ 1202.016084][ T5891] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1202.095255][T19758] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4011'. [ 1202.124580][ T5891] usb 5-1: can't read configurations, error -71 [ 1204.226785][T19782] netlink: 'syz.4.4018': attribute type 29 has an invalid length. [ 1206.584368][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1206.734233][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1206.746068][ T10] usb 4-1: config 0 has no interfaces? [ 1206.756319][ T10] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0125, bcdDevice=81.d1 [ 1206.770039][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.789671][ T10] usb 4-1: Product: syz [ 1206.798305][ T10] usb 4-1: Manufacturer: syz [ 1206.808373][ T10] usb 4-1: SerialNumber: syz [ 1207.238743][ T10] usb 4-1: config 0 descriptor?? [ 1208.853100][ T9] usb 4-1: USB disconnect, device number 11 [ 1209.137897][T19836] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4033'. [ 1209.442811][T19841] tipc: Started in network mode [ 1209.447977][T19841] tipc: Node identity f23973c095e2, cluster identity 4711 [ 1209.455701][T19841] tipc: Enabled bearer , priority 0 [ 1209.463454][T19841] syzkaller0: entered promiscuous mode [ 1209.469418][T19841] syzkaller0: entered allmulticast mode [ 1209.659425][T19840] tipc: Resetting bearer [ 1209.686807][T19840] tipc: Disabling bearer [ 1210.108163][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1210.108209][ T30] audit: type=1326 audit(1760902898.536:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1210.263064][ T30] audit: type=1326 audit(1760902898.536:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1210.459531][T19864] input: syz0 as /devices/virtual/input/input61 [ 1210.505046][ T30] audit: type=1326 audit(1760902898.546:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1210.586541][ T30] audit: type=1326 audit(1760902898.546:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1210.634155][ T9] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 1210.800194][ T30] audit: type=1326 audit(1760902898.546:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1210.822528][ T9] usb 4-1: device descriptor read/64, error -71 [ 1210.856504][ T30] audit: type=1326 audit(1760902898.546:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1210.894176][ T30] audit: type=1326 audit(1760902898.566:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1210.933345][ T30] audit: type=1326 audit(1760902898.566:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1210.959177][ T30] audit: type=1326 audit(1760902898.566:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1210.959180][T19871] netlink: 'syz.1.4043': attribute type 12 has an invalid length. [ 1210.959230][ T30] audit: type=1326 audit(1760902898.566:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1211.027677][T19871] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.4043'. [ 1211.084145][ T9] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 1211.417269][ T9] usb 4-1: device descriptor read/64, error -71 [ 1211.562252][ T9] usb usb4-port1: attempt power cycle [ 1211.924186][ T9] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 1211.965045][ T9] usb 4-1: device descriptor read/8, error -71 [ 1212.084853][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4049'. [ 1212.205695][ T9] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 1212.255093][ T9] usb 4-1: device descriptor read/8, error -71 [ 1212.265522][T14225] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1212.384877][ T9] usb usb4-port1: unable to enumerate USB device [ 1212.430386][T14225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1212.442094][T14225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.453760][T14225] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1212.463320][T14225] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1212.471794][T14225] usb 5-1: Manufacturer: syz [ 1212.479681][T14225] usb 5-1: config 0 descriptor?? [ 1212.903468][T14225] cougar 0003:060B:700A.001E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1213.129087][T14225] usb 5-1: USB disconnect, device number 32 [ 1213.450066][T19911] fido_id[19911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1214.054190][ T5898] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1214.234178][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 1214.247123][ T5898] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1214.265894][ T5898] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1214.275336][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.283576][ T5898] usb 4-1: Product: syz [ 1214.288771][ T5898] usb 4-1: Manufacturer: syz [ 1214.293552][ T5898] usb 4-1: SerialNumber: syz [ 1214.318205][ T5898] usb 4-1: config 0 descriptor?? [ 1214.424420][T14225] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1214.624194][T14225] usb 5-1: device descriptor read/64, error -71 [ 1214.864172][T14225] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1214.995572][T14225] usb 5-1: device descriptor read/64, error -71 [ 1215.119719][T14225] usb usb5-port1: attempt power cycle [ 1215.398033][ T5898] usb 4-1: USB disconnect, device number 16 [ 1215.418481][T19936] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4062'. [ 1215.464376][T14225] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1215.485003][T14225] usb 5-1: device descriptor read/8, error -71 [ 1215.784223][T14225] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1215.844168][T14225] usb 5-1: device descriptor read/8, error -71 [ 1215.914721][T19944] 8021q: VLANs not supported on xfrm0 [ 1215.978633][T14225] usb usb5-port1: unable to enumerate USB device [ 1217.812453][T19967] trusted_key: encrypted_key: insufficient parameters specified [ 1218.535150][T19975] loop2: detected capacity change from 0 to 7 [ 1218.546165][T19975] Dev loop2: unable to read RDB block 7 [ 1218.564822][T19975] loop2: unable to read partition table [ 1218.585909][T19975] loop2: partition table beyond EOD, truncated [ 1218.608700][T19975] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1219.394204][ T5898] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1219.602593][T19987] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4077'. [ 1219.612678][T19987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4077'. [ 1219.629758][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 1219.642585][ T5898] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1219.663825][ T5898] usb 2-1: config 0 has no interface number 0 [ 1219.680650][ T5898] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1219.721961][ T5898] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1219.752330][ T5898] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1219.766772][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1219.844211][ T5898] usb 2-1: Product: syz [ 1219.855800][ T5898] usb 2-1: SerialNumber: syz [ 1219.875357][ T5898] usb 2-1: config 0 descriptor?? [ 1219.906731][ T5898] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1219.924322][ T5898] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input62 [ 1220.097702][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1220.140445][T19996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4079'. [ 1220.151319][T19996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4079'. [ 1221.454564][ T5898] usb 2-1: USB disconnect, device number 115 [ 1221.662434][ T5898] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1222.053079][T20012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4084'. [ 1222.173070][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4085'. [ 1222.193786][T20018] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1222.234519][T14225] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1222.416291][T14225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1222.434097][T14225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.466604][T14225] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1222.486244][T14225] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1222.494990][T14225] usb 5-1: Manufacturer: syz [ 1222.517062][T14225] usb 5-1: config 0 descriptor?? [ 1222.945216][T20030] netlink: 'syz.3.4089': attribute type 1 has an invalid length. [ 1222.983473][T20030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1223.027277][T20032] bond1: entered allmulticast mode [ 1223.132088][T14225] cougar 0003:060B:700A.001F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1223.331164][ T10] usb 5-1: USB disconnect, device number 37 [ 1223.819548][T20037] fido_id[20037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1224.531308][T20045] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4092'. [ 1225.474623][T20060] create_pit_timer: 66 callbacks suppressed [ 1225.474644][T20060] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1225.498789][T20060] kvm: pic: level sensitive irq not supported [ 1225.499267][T20060] kvm: pic: non byte read [ 1226.064233][T14225] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 1226.276679][T14225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1226.288272][T14225] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1226.325398][T14225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1226.422279][T14225] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1226.447597][T14225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.466014][T14225] usb 2-1: Product: syz [ 1226.473192][T14225] usb 2-1: Manufacturer: syz [ 1226.486868][T14225] usb 2-1: SerialNumber: syz [ 1226.529678][T14225] usb 2-1: config 0 descriptor?? [ 1226.587703][T20060] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1226.604336][T20060] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1226.614612][T14225] usb 2-1: ucan: probing device on interface #0 [ 1226.836243][T14225] usb 2-1: ucan: could not read protocol version, ret=-71 [ 1226.938971][T14225] usb 2-1: ucan: probe failed; try to update the device firmware [ 1227.038817][T14225] usb 2-1: USB disconnect, device number 116 [ 1227.884138][ T5913] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1228.086954][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 1228.115937][ T5913] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1228.142780][ T5913] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1228.188938][ T5913] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1228.238907][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1228.264366][ T5913] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1228.284609][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1228.304624][ T5913] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1228.356627][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.454234][ T5913] usb 4-1: config 0 descriptor?? [ 1228.781945][ T5913] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1228.840385][ T5913] usb 4-1: USB disconnect, device number 17 [ 1228.884520][ T5913] usblp0: removed [ 1229.344361][ T5913] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1229.427840][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1229.427855][ T30] audit: type=1326 audit(1760902917.856:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20109 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1229.457852][ T30] audit: type=1326 audit(1760902917.886:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20109 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1229.484321][ T30] audit: type=1326 audit(1760902917.886:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20109 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1229.754129][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 1229.836991][ T5913] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1229.851131][ T5913] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1229.866055][ T30] audit: type=1326 audit(1760902917.906:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20109 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1229.889241][ T30] audit: type=1326 audit(1760902917.906:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20109 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1229.911823][ T30] audit: type=1326 audit(1760902917.906:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20109 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1229.939631][ T30] audit: type=1326 audit(1760902918.156:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20109 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1229.961890][ T30] audit: type=1326 audit(1760902918.156:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20109 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1229.985399][ T30] audit: type=1326 audit(1760902918.156:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20109 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1230.007951][ T30] audit: type=1326 audit(1760902918.156:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20109 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 1230.100462][ T5913] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1230.128754][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1230.201524][ T5913] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1230.244250][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1230.344351][ T5913] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1230.384364][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.429778][ T5913] usb 4-1: config 0 descriptor?? [ 1230.824992][ T5913] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1230.853377][ T5913] usb 4-1: USB disconnect, device number 18 [ 1230.870705][ T5913] usblp0: removed [ 1230.901214][T20131] binder: 20130:20131 unknown command 0 [ 1230.912367][T20131] binder: 20130:20131 ioctl c0306201 800001c0 returned -22 [ 1230.955359][T20131] bond1: option min_links: invalid value (18446744073709551608) [ 1230.963437][T20131] bond1: option min_links: allowed values 0 - 2147483647 [ 1231.075026][T20131] bond1 (unregistering): Released all slaves [ 1232.144166][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1232.365005][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1232.424357][ T10] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 1232.424381][ T10] usb 4-1: config 2 has no interface number 0 [ 1232.424412][ T10] usb 4-1: config 2 interface 31 has no altsetting 0 [ 1232.427532][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1232.427565][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.434185][ T10] usb 4-1: Product: syz [ 1232.434207][ T10] usb 4-1: Manufacturer: syz [ 1232.434225][ T10] usb 4-1: SerialNumber: syz [ 1232.588314][ T10] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 1232.622747][T20152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'. [ 1232.622768][T20152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'. [ 1232.624564][T20152] futex_wake_op: syz.1.4118 tries to shift op by -1; fix this program [ 1232.631376][T20152] netlink: 264 bytes leftover after parsing attributes in process `syz.1.4118'. [ 1232.832479][T20157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4117'. [ 1232.832514][T20157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4117'. [ 1233.003462][T20159] loop9: detected capacity change from 0 to 7 [ 1233.011018][T20159] Dev loop9: unable to read RDB block 7 [ 1233.018159][T20159] loop9: unable to read partition table [ 1233.053419][T20159] loop9: partition table beyond EOD, truncated [ 1233.104589][T20159] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1233.151878][T20162] fuse: blksize only supported for fuseblk [ 1233.916393][T20171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4122'. [ 1234.077695][ T5913] usb 4-1: USB disconnect, device number 19 [ 1234.461011][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 1234.461030][ T30] audit: type=1326 audit(1760902922.886:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.0.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1234.839083][T20186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4126'. [ 1234.914412][ T30] audit: type=1326 audit(1760902922.886:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.0.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1235.074182][ T30] audit: type=1326 audit(1760902923.146:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.0.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1235.096523][ T30] audit: type=1326 audit(1760902923.146:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.0.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1235.120240][ T30] audit: type=1326 audit(1760902923.146:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.0.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1235.219245][ T30] audit: type=1326 audit(1760902923.146:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.0.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1235.361508][ T30] audit: type=1326 audit(1760902923.146:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.0.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1235.468070][ T30] audit: type=1326 audit(1760902923.236:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.0.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1235.554268][ T30] audit: type=1326 audit(1760902923.236:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.0.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1235.604252][ T30] audit: type=1326 audit(1760902923.236:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20174 comm="syz.0.4124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1235.642794][T20171] syz.1.4122 (20171): drop_caches: 2 [ 1235.724195][T14225] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1235.874254][T14225] usb 5-1: Using ep0 maxpacket: 8 [ 1235.892190][T14225] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 1236.433889][T14225] usb 5-1: config 6 has no interface number 0 [ 1236.527102][T20203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4129'. [ 1236.618982][T14225] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1236.664473][T14225] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1236.696267][T14225] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1236.722130][T14225] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1236.746476][T14225] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1236.757035][T14225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.769955][T14225] usb 5-1: Product: syz [ 1236.786266][T14225] usb 5-1: Manufacturer: syz [ 1236.836280][T14225] usb 5-1: SerialNumber: syz [ 1237.504665][T14225] hso 5-1:6.2: Failed to find BULK IN ep [ 1238.847854][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.856025][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.093186][T20219] FAULT_INJECTION: forcing a failure. [ 1239.093186][T20219] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.142746][T20219] CPU: 1 UID: 0 PID: 20219 Comm: syz.3.4134 Not tainted syzkaller #0 PREEMPT(full) [ 1239.142780][T20219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1239.142826][T20219] Call Trace: [ 1239.142836][T20219] [ 1239.142848][T20219] dump_stack_lvl+0x189/0x250 [ 1239.142876][T20219] ? __pfx____ratelimit+0x10/0x10 [ 1239.142912][T20219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1239.142935][T20219] ? __pfx__printk+0x10/0x10 [ 1239.142974][T20219] should_fail_ex+0x414/0x560 [ 1239.143015][T20219] should_failslab+0xa8/0x100 [ 1239.143046][T20219] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1239.143071][T20219] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1239.143092][T20219] ? sctp_add_bind_addr+0x8c/0x370 [ 1239.143112][T20219] ? sctp_add_bind_addr+0xb0/0x370 [ 1239.143138][T20219] sctp_add_bind_addr+0x8c/0x370 [ 1239.143166][T20219] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1239.143193][T20219] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1239.143215][T20219] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1239.143243][T20219] ? sctp_v4_is_any+0x35/0x60 [ 1239.143265][T20219] ? sctp_copy_one_addr+0x93/0x360 [ 1239.143292][T20219] sctp_bind_addr_copy+0xb3/0x3c0 [ 1239.143316][T20219] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1239.143353][T20219] sctp_connect_new_asoc+0x2e0/0x690 [ 1239.143386][T20219] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1239.143412][T20219] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1239.143450][T20219] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1239.143481][T20219] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1239.143517][T20219] sctp_sendmsg+0x155c/0x2810 [ 1239.143558][T20219] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1239.143589][T20219] ? aa_sk_perm+0x81e/0x950 [ 1239.143612][T20219] ? _copy_from_user+0x94/0xb0 [ 1239.143646][T20219] ? __pfx_aa_sk_perm+0x10/0x10 [ 1239.143673][T20219] ? sock_rps_record_flow+0x19/0x410 [ 1239.143707][T20219] ? inet_sendmsg+0x2f4/0x370 [ 1239.143742][T20219] __sock_sendmsg+0x19c/0x270 [ 1239.143775][T20219] ____sys_sendmsg+0x52d/0x830 [ 1239.143812][T20219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1239.143853][T20219] ___sys_sendmsg+0x21f/0x2a0 [ 1239.143877][T20219] ? __pfx____sys_sendmsg+0x10/0x10 [ 1239.143901][T20219] ? __lock_acquire+0xab9/0xd20 [ 1239.143965][T20219] ? __fget_files+0x2a/0x420 [ 1239.143992][T20219] ? __fget_files+0x3a0/0x420 [ 1239.144030][T20219] __sys_sendmmsg+0x28e/0x430 [ 1239.144058][T20219] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1239.144077][T20219] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1239.144129][T20219] ? ksys_write+0x22a/0x250 [ 1239.144152][T20219] ? exc_page_fault+0x82/0x100 [ 1239.144175][T20219] ? __pfx_ksys_write+0x10/0x10 [ 1239.144207][T20219] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1239.144246][T20219] __do_fast_syscall_32+0xb6/0x2b0 [ 1239.144271][T20219] ? lockdep_hardirqs_on+0x9c/0x150 [ 1239.144297][T20219] do_fast_syscall_32+0x34/0x80 [ 1239.144322][T20219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1239.144347][T20219] RIP: 0023:0xf7fb4539 [ 1239.144366][T20219] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1239.144384][T20219] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1239.144407][T20219] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001380 [ 1239.144423][T20219] RDX: 0000000024924ae0 RSI: 0000000000000040 RDI: 0000000000000000 [ 1239.144436][T20219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1239.144449][T20219] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1239.144462][T20219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1239.144495][T20219] [ 1239.869039][ T5898] usb 5-1: USB disconnect, device number 38 [ 1240.318301][T20236] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1241.104161][ T5912] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1242.514515][T14225] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1242.634737][ T5898] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1242.714226][T14225] usb 2-1: Using ep0 maxpacket: 8 [ 1242.721776][T14225] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1242.736512][T14225] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1242.754184][T14225] usb 2-1: config 1 has no interface number 1 [ 1242.761230][T14225] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1242.819836][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 232, changing to 4 [ 1242.835490][T14225] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1242.854437][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 2606, setting to 1023 [ 1242.876525][T14225] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1242.894318][T14225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.906736][ T5898] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1242.916703][T14225] usb 2-1: Product: syz [ 1242.920999][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.929565][T14225] usb 2-1: Manufacturer: syz [ 1242.934319][T14225] usb 2-1: SerialNumber: syz [ 1242.940285][ T5898] usb 5-1: Product: syz [ 1242.955814][ T5898] usb 5-1: Manufacturer: syz [ 1242.962593][ T5898] usb 5-1: SerialNumber: syz [ 1242.979886][ T5898] usb 5-1: config 0 descriptor?? [ 1243.286687][T14225] usb 2-1: 2:1: cannot set freq 15828157 to ep 0x82 [ 1243.402327][T14225] usb 2-1: USB disconnect, device number 117 [ 1243.444160][ T5912] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1243.525834][T10758] udevd[10758]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1243.597991][ T5912] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 1243.598029][ T5912] usb 4-1: config 0 has no interface number 0 [ 1243.601126][ T5912] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1243.680187][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.692805][ T5898] em28xx 5-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 1243.738690][ T5912] usb 4-1: Product: syz [ 1243.743018][ T5912] usb 4-1: Manufacturer: syz [ 1243.748450][ T5912] usb 4-1: SerialNumber: syz [ 1243.759579][ T5912] usb 4-1: config 0 descriptor?? [ 1243.783880][ T5912] usb-storage 4-1:0.20: USB Mass Storage device detected [ 1243.804392][ T5912] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1243.827775][ T5898] em28xx 5-1:0.0: Device initialization failed. [ 1243.842529][ T5898] em28xx 5-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 1243.873539][ T5898] usb 5-1: USB disconnect, device number 39 [ 1243.986506][T20262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.996332][T20262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.006853][T20267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.017456][T20267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.083976][T20267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.093984][T20268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.103308][T20268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.107762][T20267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.642403][T20277] fuse: Unknown parameter 'group_id00000000000000000000' [ 1246.016792][ T5912] usb 4-1: USB disconnect, device number 21 [ 1246.213914][T20304] pim6reg: entered allmulticast mode [ 1246.245987][T20304] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1246.484458][ T5898] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1246.611831][T20314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4156'. [ 1246.641291][T20314] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4156'. [ 1246.834185][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 1246.842336][ T5898] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1246.883752][ T5898] usb 1-1: config 2 has no interface number 0 [ 1246.912929][ T5898] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1247.111184][ T5898] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1247.111763][T20316] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4158'. [ 1247.150695][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.183729][ T5898] usb 1-1: Product: syz [ 1247.188337][ T5898] usb 1-1: Manufacturer: syz [ 1247.209990][ T5898] usb 1-1: SerialNumber: syz [ 1247.240415][ T5898] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 1248.949821][T20333] fuse: Bad value for 'user_id' [ 1248.955108][T20333] fuse: Bad value for 'user_id' [ 1249.035680][ T5912] usb 1-1: USB disconnect, device number 100 [ 1249.281405][T20341] input: syz0 as /devices/virtual/input/input63 [ 1250.298046][T20349] input: syz0 as /devices/virtual/input/input64 [ 1250.427139][T20351] FAULT_INJECTION: forcing a failure. [ 1250.427139][T20351] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.463900][T20351] CPU: 0 UID: 0 PID: 20351 Comm: syz.4.4166 Not tainted syzkaller #0 PREEMPT(full) [ 1250.463930][T20351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1250.463944][T20351] Call Trace: [ 1250.463953][T20351] [ 1250.463963][T20351] dump_stack_lvl+0x189/0x250 [ 1250.463991][T20351] ? __pfx____ratelimit+0x10/0x10 [ 1250.464032][T20351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1250.464056][T20351] ? __pfx__printk+0x10/0x10 [ 1250.464092][T20351] ? __io_read+0x14f8/0x1500 [ 1250.464120][T20351] should_fail_ex+0x414/0x560 [ 1250.464160][T20351] should_failslab+0xa8/0x100 [ 1250.464191][T20351] __kmalloc_noprof+0xcb/0x7f0 [ 1250.464215][T20351] ? io_cache_alloc_new+0x40/0x100 [ 1250.464253][T20351] io_cache_alloc_new+0x40/0x100 [ 1250.464286][T20351] io_arm_apoll+0x474/0x910 [ 1250.464319][T20351] ? __pfx_io_arm_apoll+0x10/0x10 [ 1250.464348][T20351] ? __io_issue_sqe+0x1f9/0x4b0 [ 1250.464369][T20351] ? io_file_get_normal+0x101/0x2f0 [ 1250.464392][T20351] ? io_arm_poll_handler+0x207/0x2a0 [ 1250.464425][T20351] io_queue_async+0x175/0x240 [ 1250.464455][T20351] io_submit_sqes+0xe78/0x1e60 [ 1250.464511][T20351] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1250.464556][T20351] ? ksys_write+0x1cb/0x250 [ 1250.464581][T20351] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1250.464602][T20351] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1250.464627][T20351] ? __pfx_vfs_write+0x10/0x10 [ 1250.464652][T20351] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1250.464681][T20351] ? __fget_files+0x3a0/0x420 [ 1250.464715][T20351] ? fput+0xa0/0xd0 [ 1250.464745][T20351] ? ksys_write+0x22a/0x250 [ 1250.464767][T20351] ? exc_page_fault+0x82/0x100 [ 1250.464788][T20351] ? __pfx_ksys_write+0x10/0x10 [ 1250.464814][T20351] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1250.464840][T20351] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 1250.464866][T20351] __do_fast_syscall_32+0xb6/0x2b0 [ 1250.464892][T20351] ? lockdep_hardirqs_on+0x9c/0x150 [ 1250.464918][T20351] do_fast_syscall_32+0x34/0x80 [ 1250.464942][T20351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1250.464968][T20351] RIP: 0023:0xf7fb4539 [ 1250.464987][T20351] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1250.465005][T20351] RSP: 002b:00000000f548555c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 1250.465027][T20351] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047bc [ 1250.465040][T20351] RDX: 0000000003000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1250.465054][T20351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1250.465066][T20351] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1250.465079][T20351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1250.465118][T20351] [ 1251.064807][T20358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4168'. [ 1252.184685][T20378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4172'. [ 1253.055538][T20389] fuse: Bad value for 'user_id' [ 1253.060913][T20389] fuse: Bad value for 'user_id' [ 1256.325150][T20430] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1256.403640][T20432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4187'. [ 1256.745180][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 1256.745201][ T30] audit: type=1804 audit(1760902945.176:4385): pid=20444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4188" name="/newroot/263/file1" dev="fuse" ino=1 res=1 errno=0 [ 1256.904286][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1256.987812][ T5891] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1257.027218][T20447] fuse: Bad value for 'user_id' [ 1257.032255][T20447] fuse: Bad value for 'user_id' [ 1257.084268][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1257.093643][ T9] usb 4-1: config 11 has an invalid interface number: 202 but max is 0 [ 1257.103094][ T9] usb 4-1: config 11 has no interface number 0 [ 1257.109484][ T9] usb 4-1: config 11 interface 202 has no altsetting 0 [ 1257.119772][ T9] usb 4-1: New USB device found, idVendor=110a, idProduct=1251, bcdDevice=4d.10 [ 1257.128938][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.137052][ T9] usb 4-1: Product: syz [ 1257.141295][ T9] usb 4-1: Manufacturer: syz [ 1257.146172][ T9] usb 4-1: SerialNumber: syz [ 1257.155678][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 1257.162942][ T5891] usb 2-1: config 0 has an invalid interface number: 63 but max is 0 [ 1257.172215][ T5891] usb 2-1: config 0 has no interface number 0 [ 1257.178954][ T5891] usb 2-1: New USB device found, idVendor=f65e, idProduct=3868, bcdDevice=c6.17 [ 1257.188906][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.210876][ T5891] usb 2-1: config 0 descriptor?? [ 1257.243735][ T5891] usb-storage 2-1:0.63: USB Mass Storage device detected [ 1257.367307][ T9] mxuport 4-1:11.202: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1257.388704][ T9] mxuport 4-1:11.202: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1257.399282][ T9] mxuport 4-1:11.202: probe with driver mxuport failed with error -71 [ 1257.415224][ T9] usb 4-1: USB disconnect, device number 22 [ 1257.452637][ T5891] usb 2-1: USB disconnect, device number 118 [ 1257.677377][T20459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1257.937946][T20461] tipc: Started in network mode [ 1257.956061][T20461] tipc: Node identity 4, cluster identity 4711 [ 1257.962448][T20461] tipc: Node number set to 4 [ 1258.658190][ T5891] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1258.840830][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 1258.908251][ T5891] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1258.929211][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.976417][ T5891] usb 2-1: Product: syz [ 1258.980643][ T5891] usb 2-1: Manufacturer: syz [ 1258.985533][ T5891] usb 2-1: SerialNumber: syz [ 1259.012315][ T5891] usb 2-1: config 0 descriptor?? [ 1259.461673][T20480] hub 1-0:1.0: USB hub found [ 1259.474263][T20480] hub 1-0:1.0: 1 port detected [ 1259.568229][ T5891] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1259.610436][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1259.900758][T20467] ------------[ cut here ]------------ [ 1259.906724][T20467] memcpy: detected field-spanning write (size 4096) of single field "st->data" at drivers/media/usb/dvb-usb/dtv5100.c:58 (size 80) [ 1260.189250][T20467] WARNING: CPU: 1 PID: 20467 at drivers/media/usb/dvb-usb/dtv5100.c:58 dtv5100_i2c_msg+0x2ac/0x330 [ 1260.200221][T20467] Modules linked in: [ 1260.204750][T20467] CPU: 1 UID: 0 PID: 20467 Comm: syz.1.4196 Not tainted syzkaller #0 PREEMPT(full) [ 1260.214275][T20467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1260.224439][T20467] RIP: 0010:dtv5100_i2c_msg+0x2ac/0x330 [ 1260.230028][T20467] Code: d1 e8 d8 5c 0b fa c6 05 1c 33 d3 07 01 90 b9 50 00 00 00 48 c7 c7 e0 7b 32 8c 4c 89 e6 48 c7 c2 60 7c 32 8c e8 c5 79 ce f9 90 <0f> 0b 90 90 e9 34 ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e2 fe ff [ 1260.249765][T20467] RSP: 0018:ffffc9000ff6f8a0 EFLAGS: 00010246 [ 1260.256067][T20467] RAX: dd4b062c6f0c5d00 RBX: ffff88802fb10000 RCX: 0000000000080000 [ 1260.264314][T20467] RDX: ffffc9000be3b000 RSI: 00000000000054be RDI: 00000000000054bf [ 1260.272298][T20467] RBP: 0000000000000102 R08: 0000000000000003 R09: 0000000000000004 [ 1260.280311][T20467] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: 0000000000001000 [ 1260.288355][T20467] R13: ffff8880543d4300 R14: 00000000000000c7 R15: 0000000080007700 [ 1260.296403][T20467] FS: 0000000000000000(0000) GS:ffff888125e0d000(0063) knlGS:00000000f5436b40 [ 1260.305575][T20467] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1260.312304][T20467] CR2: 0000000080000100 CR3: 0000000047562000 CR4: 00000000003526f0 [ 1260.320338][T20467] Call Trace: [ 1260.323628][T20467] [ 1260.326669][T20467] dtv5100_i2c_xfer+0x269/0x3c0 [ 1260.331902][T20467] __i2c_transfer+0x874/0x2170 [ 1260.336798][T20467] ? lockdep_hardirqs_on+0x9c/0x150 [ 1260.342019][T20467] ? __pfx___i2c_transfer+0x10/0x10 [ 1260.347385][T20467] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1260.352815][T20467] ? i2c_transfer+0x120/0x3a0 [ 1260.357538][T20467] i2c_transfer+0x25b/0x3a0 [ 1260.362070][T20467] ? __pfx_i2c_transfer+0x10/0x10 [ 1260.367172][T20467] ? _copy_from_user+0x94/0xb0 [ 1260.371973][T20467] i2cdev_ioctl_rdwr+0x460/0x740 [ 1260.376984][T20467] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 1260.382122][T20467] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1260.387938][T20467] ? __fget_files+0x3a0/0x420 [ 1260.392635][T20467] ? __fget_files+0x2a/0x420 [ 1260.397289][T20467] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1260.402947][T20467] __ia32_compat_sys_ioctl+0x543/0x840 [ 1260.408486][T20467] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1260.414667][T20467] ? __se_sys_futex_time32+0x360/0x3e0 [ 1260.420146][T20467] ? __pfx_do_sys_openat2+0x10/0x10 [ 1260.425512][T20467] ? rcu_is_watching+0x15/0xb0 [ 1260.430312][T20467] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1260.437072][T20467] ? lockdep_hardirqs_on+0x9c/0x150 [ 1260.442301][T20467] __do_fast_syscall_32+0xb6/0x2b0 [ 1260.447510][T20467] ? lockdep_hardirqs_on+0x9c/0x150 [ 1260.452737][T20467] do_fast_syscall_32+0x34/0x80 [ 1260.457660][T20467] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1260.464128][T20467] RIP: 0023:0xf7f41539 [ 1260.468244][T20467] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1260.487928][T20467] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1260.496451][T20467] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 1260.504574][T20467] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1260.512568][T20467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1260.520608][T20467] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1260.528676][T20467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1260.536754][T20467] [ 1260.539808][T20467] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1260.547101][T20467] CPU: 1 UID: 0 PID: 20467 Comm: syz.1.4196 Not tainted syzkaller #0 PREEMPT(full) [ 1260.556491][T20467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1260.566554][T20467] Call Trace: [ 1260.569849][T20467] [ 1260.572807][T20467] dump_stack_lvl+0x99/0x250 [ 1260.577526][T20467] ? __asan_memcpy+0x40/0x70 [ 1260.582149][T20467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1260.587358][T20467] ? __pfx__printk+0x10/0x10 [ 1260.591974][T20467] vpanic+0x237/0x6d0 [ 1260.595974][T20467] ? __pfx_vpanic+0x10/0x10 [ 1260.600503][T20467] panic+0xb9/0xc0 [ 1260.604242][T20467] ? __pfx_panic+0x10/0x10 [ 1260.608690][T20467] __warn+0x31b/0x4b0 [ 1260.612685][T20467] ? dtv5100_i2c_msg+0x2ac/0x330 [ 1260.617641][T20467] ? dtv5100_i2c_msg+0x2ac/0x330 [ 1260.622596][T20467] report_bug+0x2be/0x4f0 [ 1260.627113][T20467] ? dtv5100_i2c_msg+0x2ac/0x330 [ 1260.632141][T20467] ? dtv5100_i2c_msg+0x2ac/0x330 [ 1260.637100][T20467] ? dtv5100_i2c_msg+0x2ae/0x330 [ 1260.642048][T20467] handle_bug+0x84/0x160 [ 1260.646312][T20467] exc_invalid_op+0x1a/0x50 [ 1260.650853][T20467] asm_exc_invalid_op+0x1a/0x20 [ 1260.655711][T20467] RIP: 0010:dtv5100_i2c_msg+0x2ac/0x330 [ 1260.661295][T20467] Code: d1 e8 d8 5c 0b fa c6 05 1c 33 d3 07 01 90 b9 50 00 00 00 48 c7 c7 e0 7b 32 8c 4c 89 e6 48 c7 c2 60 7c 32 8c e8 c5 79 ce f9 90 <0f> 0b 90 90 e9 34 ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e2 fe ff [ 1260.680917][T20467] RSP: 0018:ffffc9000ff6f8a0 EFLAGS: 00010246 [ 1260.687096][T20467] RAX: dd4b062c6f0c5d00 RBX: ffff88802fb10000 RCX: 0000000000080000 [ 1260.695083][T20467] RDX: ffffc9000be3b000 RSI: 00000000000054be RDI: 00000000000054bf [ 1260.703072][T20467] RBP: 0000000000000102 R08: 0000000000000003 R09: 0000000000000004 [ 1260.711055][T20467] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: 0000000000001000 [ 1260.719038][T20467] R13: ffff8880543d4300 R14: 00000000000000c7 R15: 0000000080007700 [ 1260.727043][T20467] dtv5100_i2c_xfer+0x269/0x3c0 [ 1260.732010][T20467] __i2c_transfer+0x874/0x2170 [ 1260.736799][T20467] ? lockdep_hardirqs_on+0x9c/0x150 [ 1260.742038][T20467] ? __pfx___i2c_transfer+0x10/0x10 [ 1260.747303][T20467] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1260.752702][T20467] ? i2c_transfer+0x120/0x3a0 [ 1260.757401][T20467] i2c_transfer+0x25b/0x3a0 [ 1260.761969][T20467] ? __pfx_i2c_transfer+0x10/0x10 [ 1260.767041][T20467] ? _copy_from_user+0x94/0xb0 [ 1260.771828][T20467] i2cdev_ioctl_rdwr+0x460/0x740 [ 1260.776798][T20467] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 1260.781928][T20467] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1260.787576][T20467] ? __fget_files+0x3a0/0x420 [ 1260.792310][T20467] ? __fget_files+0x2a/0x420 [ 1260.796922][T20467] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1260.802490][T20467] __ia32_compat_sys_ioctl+0x543/0x840 [ 1260.808053][T20467] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1260.814133][T20467] ? __se_sys_futex_time32+0x360/0x3e0 [ 1260.819628][T20467] ? __pfx_do_sys_openat2+0x10/0x10 [ 1260.824896][T20467] ? rcu_is_watching+0x15/0xb0 [ 1260.829715][T20467] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1260.836412][T20467] ? lockdep_hardirqs_on+0x9c/0x150 [ 1260.841636][T20467] __do_fast_syscall_32+0xb6/0x2b0 [ 1260.846761][T20467] ? lockdep_hardirqs_on+0x9c/0x150 [ 1260.851972][T20467] do_fast_syscall_32+0x34/0x80 [ 1260.856961][T20467] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1260.863326][T20467] RIP: 0023:0xf7f41539 [ 1260.867412][T20467] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1260.887032][T20467] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1260.895559][T20467] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 1260.903540][T20467] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1260.911555][T20467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1260.919535][T20467] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1260.927546][T20467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1260.935546][T20467] [ 1260.938902][T20467] Kernel Offset: disabled [ 1260.943273][T20467] Rebooting in 86400 seconds..