last executing test programs: 10.659850689s ago: executing program 0 (id=745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f0000000140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}], 0x10) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 8.79836083s ago: executing program 0 (id=751): r0 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x1, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4) io_uring_enter(r0, 0x369a, 0x0, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000240)=[0x0, 0x3], 0x2) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000080)={0xcde}, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) recvmsg$qrtr(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x2062}, 0x1c, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="37d9291476ef"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20024000}, 0x800) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x201, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x2}) read$FUSE(r1, &(0x7f0000001680)={0x2020}, 0x2020) 7.902501244s ago: executing program 0 (id=754): unshare(0x22020600) gettid() timer_create(0x0, 0x0, 0x0) syz_clone3(&(0x7f00000005c0)={0x8000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7.597647511s ago: executing program 0 (id=759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x8, 0x1216, 0x6, 0x4, 0x3]}, &(0x7f0000000200)=0x54) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) poll(&(0x7f0000000100)=[{r4, 0x201}], 0x1, 0x80000001) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000080)=0xa) ioctl$TCSETA(r4, 0x5406, &(0x7f00000013c0)={0x4, 0x7, 0xfffd, 0x7f, 0x14, "40999f49f937a4fd"}) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0xc0045103, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x20050800) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r10 = eventfd2(0x0, 0x80001) read$eventfd(r10, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x103200, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x14318}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x20}]}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00 ', 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x51, 0x0, 0x5, {[@generic={0x13, 0x12, "6d8f9bc4ff748e86050000f3ff000000"}, @md5sig={0x13, 0x12, "788feaedd0ec2c070000000000000074"}]}}}}}}}}, 0x0) 5.891479841s ago: executing program 0 (id=770): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x3, 0x4, 0x0, &(0x7f0000000440)=""/79, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, &(0x7f0000001840)=""/242, 0xeeef0000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r4, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x10, &(0x7f0000000080)={0x40, 0x6, 0x2c, "c7823997af4aa34582f43b0efec0348be01ef18d5cdf4f8294734d9ed2ece5721dbc696d3cc10b9e2376ec12"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="40fa04"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000039c0)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="3bea96"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.415590756s ago: executing program 1 (id=774): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}]}}}]}, 0x40}}, 0x4) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) unshare(0x22020600) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r5, &(0x7f0000004340)={0x2020}, 0x96) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map=r4, 0xffffffffffffffff, 0x7}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000004c0)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000140)={{@host}, 0x1, 0x3}) syz_usb_control_io(r0, 0x0, 0x0) 3.895425633s ago: executing program 2 (id=781): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000003c0)={0x0, 0xc, 0x1, @thr={0x0, 0x0}}) mq_notify(r0, 0x0) 3.775458001s ago: executing program 2 (id=782): unshare(0x22020600) gettid() timer_create(0x0, 0x0, 0x0) syz_clone3(&(0x7f00000005c0)={0x8000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x58) 3.592015163s ago: executing program 2 (id=783): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000240), 0x500) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000280)={{0xa9, 0xa}, {0x2, 0x3}, 0x6, 0x0, 0x9}) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05000000d400", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4044844) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9"}, 0x3c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) close(0x4) 3.535956102s ago: executing program 4 (id=784): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x29, 0x5f, 0xd, 0x401, 0x5f, @mcast1, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8000, 0x2f00, 0xfffff800, 0xc6}}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x200, 0x4d, 0x205190, 0xfffff884, 0xb289, 0xc}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r2, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x2003}) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0xfef, 0xc, 0x8, 0x7}, 0x8) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1a}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'nicvf0\x00', {0x3}, 0x2}) 3.353464287s ago: executing program 2 (id=785): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x40880) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a40", @ANYRES32=r1, @ANYBLOB="14000200"/14], 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r4], 0x2c}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000203c0)={0x0, 0x0, &(0x7f0000020380)={&(0x7f00000201c0)={0x40, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe700}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x840) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0xe0000000000000, 0xfefffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3b}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '.\xfa\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3.349900399s ago: executing program 4 (id=786): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x76, '\x00', 0x6}, {0x1, 0x7f, 0x7, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0xbe, 0x9, 0x1, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0xa, 0x2, 0x0, '\x00', 0xff}, {0xd, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x4, 0x4, 0xfd, '\x00', 0x8}, {0xb, 0x0, 0x9, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x0, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x96, 0xc0, '\x00', 0x2}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0x8, 0x2, '\x00', 0x1}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xdf, '\x00', 0x47}]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.100415438s ago: executing program 4 (id=788): r0 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x1, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4) io_uring_enter(r0, 0x369a, 0x0, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000240)=[0x0, 0x3], 0x2) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000080)={0xcde}, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) recvmsg$qrtr(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x2062}, 0x1c, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="37d9291476ef"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20024000}, 0x800) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r9 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd375031ba5ae65e31f00e641832d29ed658b91f349b801b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126fceb6cca68972ac02bc7d3cbca85e30a02db8f48b9eb10526d0c7ade3391d6c844fb8b2fb70ec826465726fb78cc47db9636d337038f016d27c2eb3fa0da403214d11f3b3ea42b8b183e9226665de1fa1c808ad8ea5bf3080b0ad7d12050000001c1428f0e17612738a97fdc8ddffb031b71347213264d4f6972a888ba9fa77efede5bdbaf65fb32eddedeb421fa7f60c35d68372e2c80561588ec11456f5e53b7bdcf72d3e0272f1b22399ec78d37acac485e5375f1b654c70f0a1ae81f5940cddaac33005a8b457", 0x201, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x2}) read$FUSE(r1, &(0x7f0000001680)={0x2020}, 0x2020) 3.012541579s ago: executing program 2 (id=789): r0 = syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000040), 0x4) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0xa7ff) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x98, 0xf4, 0xbf, 0x20, 0x2c42, 0x16f8, 0x7d12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x6f, 0xe4, 0x14}}]}}]}}, 0x0) 2.781508459s ago: executing program 0 (id=790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x1c}}, 0x8000) socket(0x2, 0xa, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/136, 0x88}], 0x1, &(0x7f00000001c0)=""/20, 0x14}, 0x7}, {{&(0x7f0000000680)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/51, 0x33}, {&(0x7f0000000740)=""/58, 0x3a}, {&(0x7f0000000880)=""/63, 0x3f}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/81, 0x51}], 0x7, &(0x7f0000000ac0)=""/100, 0x64}, 0x3}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000b40)=""/153, 0x99}, {&(0x7f0000000c00)=""/216, 0xd8}, {&(0x7f0000000d00)=""/130, 0x82}, {&(0x7f0000000dc0)=""/167, 0xa7}], 0x4, &(0x7f0000000ec0)=""/234, 0xea}, 0x878e8000}], 0x3, 0x2, 0x0) capset(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008894}, 0x20004450) sendmsg$NFT_BATCH(r3, 0x0, 0x0) socket(0x1e, 0x4, 0x0) fcntl$getown(r2, 0x9) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0xa0002) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x38802, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x400c4152, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000200)={0x1, 0x7f}) syz_usb_connect(0x2, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000875ac908651918004dd90102030109023f00010700a00c09046d040503a4430209050903200006070a09050c00400005067f0905030b00020005060905020000020e7f050905af77"], 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) 2.503390905s ago: executing program 3 (id=792): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x27, 0x2, 0x1dd880, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x403, 0x4, 0x8, 0xfff}}, 0x20) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18}, 0x18) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0xffffffffffffffda, 0x7, {0xfffffffffffffffe, 0x0, 0x0, {0xffffffffffffffff, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0x0, 0x10, 0x0, 0x0, 0xc000, 0xbca2, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r1, 0x0, 0x20000) 2.263087098s ago: executing program 3 (id=793): unshare(0x22020600) gettid() timer_create(0x0, 0x0, 0x0) syz_clone3(&(0x7f00000005c0)={0x8000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x58) 2.261117289s ago: executing program 4 (id=794): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setuid(0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x300000e, 0x5, 0x100) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x74d, 0x0, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/204, 0xcc}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000002c0)=""/57, 0x20}, {&(0x7f0000000340)=""/32, 0x20}], 0x5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000051b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mq_open(0x0, 0x0, 0x1a0, 0x0) unshare(0x6a040000) r4 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x212500, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 2.031252391s ago: executing program 1 (id=795): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000240), 0x500) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000280)={{0xa9, 0xa}, {0x2, 0x3}, 0x6, 0x0, 0x9}) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05000000d400", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4044844) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9"}, 0x3c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) close(0x4) 2.030524421s ago: executing program 3 (id=796): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a140)="c6cfdab7e6f83fe5e44dd3a8d886a720a29cfb7e50ef99fcf38be6c3b9a9f8c9fdb7b1332c99b85247977ad2d66a577e6f0853366c7561476cb35cf07e6fc1c21d33853a21771a8835a50d941d35a4ccb511cb67ed64259c99811f0e6f176fba1e0fa45fefe030a588f0cf64895fb12a794fd0bd176a38440328d3c6c24c85f50e95c5190eb03fb04f1eb34cae287ed75c8ca8fab2c04dc1fafa14ef93e2a721a12238700dfdabd057e94e697534e1af81921756270313d22a185c146852a5e94300bc8de9904e8c6948d5d2aed05337b9572ee74b77209c6b4710e87fa6661b19283079a46f70a538d96f484b63171bdc3622fcbab6d9bafeaacd755923209c07b8c2f39c04ea713020bcd9e6f1120ea3fbc8dd0b55986c05aa0c0b13ad52f250e9505ba53a887ed7c857e0f56282d6dd5932930efe384bbb198c50aae4b9a65e6a6ccc2904a9121a28df865011c39a54fb0f890cc1f7ef5f5172754f1c2aa8e8acf8c754f22efa88ffea91f2a14133e0a7a8a06bc80d042ce1affa2ebc74b49b48169404b33c62915e54c554d10bc432ec988f7081a8690335d58d0a819d33296db1377af876d84fd557f9a2018ee91f7d39819fc72b0a9bbdd05d6efe6cc459cd42e16f955dcb1a6a2b8b2a71b3a7e1bfa82816abf8c7d3688d53decbc480eaa3821cef557290284d9c504a63768852e15b39841ef3648f14c7edab006a30c7bd518f300df6ff307c0740150dddfdab1e408edb96b2e6ed612b0bc2fca570fa1813d86160a766fe6c11cdbc7a67014fa7645b4b1d3aad378bcce27aa4725ecf7675b2682cc5a15673136e7181ed5ef122017dc72df65af147dcb9ac702f8a6a2eb3f6824ba7db3c32fa4bfbf63dcd45e42a49b6edee22856fc2a43aeb6a3eea91dbd53a231b559ca7b38564853be3bdee7f820966faa916ed4fd335159328f8b727ba068b0ade0e11c9f2c2af4d5244f5d49f9c9f94105a6fe4c71112bcacf9c3dd2861d06cb3fa6b2159bc2028e513298b594ca7da60f4ed30edd7b066c23ca7d9b7d9555b47e687b43b7b5ca3210d939e34dd3d176d8b3d3d2f32f28518aa8b5169362fee4a4ede7d3d218db0ecc3de14789344df20188d907093bbf621fe67ab2a1f29221b2ec334dadc15345fc829005f4f81fc13ad0f5590742295812a7f2108cbbbc37387a7d4174592bf4f94f272306942e6c44b23e96d92911ef416b4159e81b19f267aad20c2aabf7fd285330cbf4c1bb8ac86493e0ef84de88eb7953fcf833e6cc5ebdd50b706bcc148971d24e9d3736ed66e28f75e6a1e2c9a4e2abba887b27815d2f5739fe5f8afe7240841337bfe7a69308186180fed5736fe3cbc2892cb991d0f4400d66952459c54a16448f06fd49995aa65501631d5c42e2abd8f0d890a6bbe49b384bfe27599afd536493981be5f7dbb15bfbc198fcd8ebfca182c53156742e237df31c1dca495e40cf030623a8a081e3bec3b8e5109ba05c0830ef00ff98a4419bae14762d8e0a790c1d517f1f683bb1712a6a0951f024a46efb5c2122460495fa0f4ebaae86286b8a626be2052874f947f18b0c2860ce681a33d5f4217415363fe7a6f8fca125742f03433988d88a5b8e2bf4f3079eb990b6e1ff381b7199717fb885f4f37351bf18bedbeeca351b7bfca5b791b91be0dcf8d169914c449829669e0577d1ebc4fa783d57e0c695cafae201014831a16d8fec47f22d9b79c2acc820f4dba9d1a2986731681ed1f8dd1e83bc2d491302d2f769e6b0bc470404930cad6511492b3adadc6f5073220590d1ce89a520b6d51d6903dd54360cd7047aed76e0a6cd3c3625e67b7c1636fd627aa48f1ee6dd567730c6ec19d1634f62a77f70c64736532455f0d2ae85003e7bb32f06b480a9f7fba5e6917305fd77e38f6936e49c1a3b2a07e242ccc2f9d629d7992937a035574b3efefd515096e30058cb60cc89d8565205f15e71d805ba5d1c4f7b971918e32bd81611a574fc651bc8094f7f3aef8a3ebf95aef1c062ec66e288b1d1ee17ab75723bc46b031744a25cf055c1bc8b083313e38d0fd5d60e832ef28fbff4c93d2d2ed283575a486167c7158e08fe7094d23984bdf38cf6000db39c5d0f7db72325af909b18247d8fddd89eff8831c294d52194a11dae2339938a79ae903eb63bc6e5535796e1c0416cdad01e1493a3075930a0b3b50ad904ff760bec5c6406b10808bf13251df73b4d6fd149a378ac277ccbbfddd9536abdf5c7a8d29e128a290f0d56c9635540f4c9a3ff1d3e0e2b974b50497ebd690dc9393f8b3acfd1650627db8ab784233727f997dab536f1e993980a41f510fa0128d6bf2c8445ed1578b25a36e05f7170b9fbe8ca63e1b4a7235c27f56790c4dd38168ce26358d12b143e9dbae1d01406778250f1c77c80643016ffd4a7a6703b9c3dfa4e7b51fa1d59605d57c9712159eb34c306a988ac95eeb15c3225ccd022d2ccf5f31a81009d2a25891b83e60efe8f718d6c124202f108d23e5e6c89e269890bda8e5681315db361cdf30e4269f2cb530a188f26621a8b263f22bb385d779b3c4eebd16656451087457892e15074abb1c796f0b7f635b9496f3a17220716c449c11c0e82b67b8f1ee6a2709a20676f40f2751df3d74db503db6cb73c955ae1d6983da44de4d349004f3d9db4ba40124416a67bd18d1d9b3c1e4706ddbb2099a2ae16e99c144860d46ef66bc6844963c0563fe2cb8c4049dea32ce5656fbfec6d1aff7ef48bac92c932c9787d9e4cb0c78fc3d70f730c452c20d077b4d9ea304f1b8a2967b1e7af7f05fd35f84d633bf5095b1af53a506f6f61abc99186eba707843e9db2a18fc1c6c77dd79ab9353eaad6457245709acbe9cb381d4458eb5571fa4f4df069ae668b1df2c97f91271be5fc2040031c3980c7555af2d4186875ea4599c873ffaf47aa08c27a0580ceef6251dce4cfd6eb175a1bf36c1fd750826f4e14966e6f196b68da0a524baf86f49ce8c09430554b50a0b387c02ebd59fae9caa1054cba1304aa6732f3990ce6b7bca6b65237f0fc3c79a102e2989dcf3f884002f2efe83e25a3fb217c24c4f66e0973e7ca62483bb52c943ccfbf31324f2b7938de0555a54f47256c903ab65489906c382d7d1022f7f302b186d18b5775e042ba83b874793420a6d854aaec01e3c819d0b11b51558fb9c10b1e2ff96639fb119d90f80aa302c9a6420b4b1230d79fd1e8105259c4ebf9cc3f1eac67f15bcb9d49ae537084c96994ad08214ac07db663c1bbce6499b5665fb5a949ab3d65062467824a2065a9de2f1edc243e03ad38f0ef227519de50a3dc2e8f4a38538be5557c5de56d0110a0759fe96b0e66d20fcb6066995f77fba9c7468434a53ffffffff000000008bd2ea3b1da2a1178acf50249d77757353943cd126b511098230698782ca88d018381f233f4331d3980f72f30caf915a18794de1253734b89303f25826a80ddd75a9bdf14c6f01690833190872ca5431ab92ab3dca92595983b11de0076125059234720906641119dab9c96be9c10d60fb54267bda61fcb85a491df037cd563b229eea02cd192796d36803b04691d385471a5f68bb76afafe9df28f50dcabfefc8e2eb334bcace928b8eb8f6449116fb5a0fa4a0c51e21b8b1f99308d396db60418cb5385bdf6bce7227e514f6cbc9a9fc50b79e8b0530fd51b21679ea1c404dba52811b3c9487f670e622ac7b1ce8028eadbd882d4325663d8dc4f0960c047c5f3099c90c6256bc11e8eef6b325e0f1ed00279a695f2828762f28ecacdc726aedf42064727ec100ffa74d38d47f383946b9f856e53cb939f98df1bb5af2a12810a619f205e030a302628ffb9b2cfcc2e881e239f33844a118a4de2a5c3d6b857c5105db775a61c5d54d1d82048670e8cd2c44a032904005125eb9f999e845efba3a063e3e26b06298f28799975b51118eece2b7fec02d4b888bfb90919bec287aba71296c66dcf749efa3abcddfccee6ef80d03a1638045f18fb96131cbd9a93e657c29eb74de40f433969e1988ac335bdd9c671b5b75ce6e2440be247775f9d597b4d8523c283e774ed0987e10b88e0c5616720502149db329babc91b225359927f88e0b42f02d41a4c9e0ad7c55a0d2c52cf45da6152c0c742f661b562c3a8ecff1145cac3f63fc053e1a14fe7a57742ab709581604fabe54ff13172b5049434d12f6ed9623265af643f725efea21e2ac1b82365033b9cff4158318f40c8894d2bcffdc954fcf7068c97ca2d2b1bf19b9232b918864e3f63fd59f4c8c578821ec5083e46363d9158451c5a92b425e68081b2c7572df44658a4aae41a439c6bb4bdd2f26ff2a357fa2946e5be5cd97ba25f73bbcc6c05fa966d0aa0cf2e45f22e0021468b37d5afebbfba3233e2cd4fd64e1578be72c38891224cd6c70c4cfd146df6a8142f1493772d48650f8fcbd1435ff704e02ec121e9f43de623eff8070f88a623cd395a02b6b1ffe4ea7ae7f443dc8bdac2cfaa126d4ac9d7788dc972c88fd87d3c8758853f1882532e4ff298b466e7d198daa9015127f2937544b34aaf545f39ee00d74e0e1017a30ff2edff701d53f3a13fc61b31fe7d9032a6c4a517c7527e48c0c44a2beebc9a9f9e6f989bc6c255e05bec5ff99547658143d9eb43a1d96aa5288638b4477aa1f84c59d41194335c09d9d5d660640acb84b53520482fb200ca616e1a6f486e6da3e6721479e85d0676ba142d95ecdf1acc76a49e9bf016f951d8b95adc7e8d4317ddbb28b678135a4a9b98fb8b8b5948b682ee70e04a31f7e3c49c52a11acbb29bd8152bbb4fedd2aae8e7ad5330365213d207677855e6cd72bf93502c14b11bd2f2d6e797efc2cc5bc198730e5cc51c92751ece5c167b3328a6deed4bd73c62623bb3874c9ef18e24997e3ac93b0ad9ca7ddd4c0401ec1b942cb21dfe6abfd3aefe2588ac1684bf6b37dc09d9b9d932d5534c707ef8fe0812a403e057d00955559ca3e0f7e70d3cdfab918b8d125061fd53374c97bd0c9d19e68bacb3db46974d36cb1c96b4475acaf4d46b88a578ed570ce09eb540f30cce4c3f853a9fd669ca36c36ff1f0432713f60e6d6bc789fdae7c7fcf4049e6166b63a12aaa3da6fc35d8783020ceb92f7f90082d4826735618905fc9fdbeb65990882ce130a7e5ebfcdc796ef293019925e80af5074bfed5f62833d9d98e324dd54e30e1d69a15e4beed5da9c6ec01a32978aa29cd26c5703a28e504e7c9264e0421718422b88ef90f6fb4e51c619f29b5fc2f600f88be036eaf28d7f5433715bd493ce55811901a59964f20ac0b06dc3a555eac123c40d3b397053501523a51e8b53a92bbd99ec3bdcd57904cfac3c0d7bcc6613b11a771d32f0f6c60c05449b42820c0a41f757ea1efebebb37f8ea567b2f7dcc4a67ebbdc00716a70f5fe255b9232e27ba05888e034fc50ac0934a43c84577183b83019008edbeb27546e8be7d8402a4c1852198c0e050b96129fd66247c39abff19338300fc3cbe20a395e5805d8bc64c2d87ba27264716e211ab023765e8d454b637aa1320cb18eb4a3dbfa94027a4d75a9a2cc784cbdc22694a8f7e97bd6cea5a4e26b538be9a9dde5637be2d386a85a79ed4df541ab7d0b1370d99d2cfd1f7bf1458bedd0a53f5e6972ee424ed08acb4b49db83cae427d315d1fea4e680258e73b3fc50fdb77692c8798bcda57ac0c34823d69a8ead14c41e9613813838ef80f63138cc9ba3a6b83dfc77b6aa1248678409bd96b64c0b625e88e33262fa0bbee94fec8f3bffedaf8b12d229d0f637848a1dba01892d80f5a5596d37ac1c9c54d32dec3ca56b49aa1157583074af418d0d95a5a46fc3c234814e377963dd4c9c8a5f7cc35aacc892afb9bcede477760688e06f0b2c5a702954f4532c715151eda02f78830129b2612de8fc62fb992d1ba52da164920eb1d1dbc7d1f8f16e31c763581f4c478cf7a84cf01ca904160475a1eabae393bcb852fd550374002bad1ba0827dadcf3f6a2354a3f8f67e6da4f567fe21f55cc34840e79f6af947561c79a141721f6da4625a20fb203f96bd1a3b7322a14a0ab4a38835e1f235f772a18643824cbb9f76664b1212c785055ae17e89f590fdb1b81535e1e3e8a726a9aaf67ae2a8e67eab8f32781bc21027cb1babd932d63bafe7faf48bc57820c5e32288583db4cf369a7fbb479e1e97ca67f63b1880fb33ccf2661d7af9041ea1afc0e90ee0b4b510d094268e4576584a17fcb21b3c3f68bf1e1c4748177cb4cab92df4c254e0d0759d507e5eb096861efcf1aa66805474e3bd32f7055a7d53d47f416d24a5ac7d5fc953206db3a012234d8693e0ff662457ddaf9407a7ade1fa8eaf85b6e1b1456aec3064ee858742f4e22f2d6084e3881a4783b3a9086009202eb6eb77fc1ce2236d6384cbc62c7db9cecd2fdb06f328d49c066562cf1dee863d33b48288fbb1d4d5bcafcd1b6391879e670c7189bbebafe48214d6e2b405e36192e1067eb8d0363777a174e630467673ca968ea51476b0b8a04d598f6fc593d3f3267ab37e17831dab86a67aac3ec8336c5b6e9e416b1f46d0a9e8ec6c515d86e773baa409e2afae30ea1744f2bc777af11c42f2bf6177e95245c6d601f7cb7b589ccda76a2a314dab023da8128c667a0df682f5c7bbf842a2bb51d4d842cd09d02d67444e5d8ae1f3260c4ef2da5a1c4121fdd47e953d03ff6fea10e35db2c0c110704f513b9d1c57c9da80881ced16d92faf1be60471dc4d82529ea50fd6060be18e8e6deffb15e0a0df4e36117dc22d78bd43b3fedb24cba54c2f2e3bba015bc4c817f70fc1e8b21adb04a9d8c229e9ec178fee0f35d4f169bb7dadd14f46ddc13fc62da4e21e42270a4ed0d60b4034db31ee1e13c97d8d941b2627b255d4283cf0af9044a65765ba88dcb2010fae98a6aeb0a5605d8a904d1cfa0cf8fa67a9d29670a108f014a1b21862e20d4f0f3f0cb99c97f289c657dbd08237aba2f616804ebb0e71819fa46df1a018d8336b534391596cd24b0720dd8a95e5c74b9d047da1da93d653b2aa98e67a65c3868a0c464ad24d427c3c81b41f0b2fb78f6aecd5487c29f4fd871bec21f54d22b661eeed67c866cdf057d585beace568ed52a4399dfdcc8c9a80c94f3cb92f0974b9b33ed893e8db33cf95220e03f3d28edd8b80991b0754010e7252392d1e846011defb6c46c73ee015bcb9b288f6945771af90ddd8c548eb6649efff32b0a2b36e743e46135e47fc65d1eb3f7a580104c22bbcc75ec041813cf2496a4793d17112f40333e3c874e0bcbcd889a6bb484e43632b2f9a628a461a2a5d58808b848751642b5c426c50fd82398894dc78c56ed1f0358b626cde2a0167dcb210c8ae2f6d9c95356331cf2a21ed0dfd5165bcac2681ce070f60ffffe69dd75836c4be0aa7f8630bf345a32d246c838552cbb35a6dfdb6ea54c4ecf0ad16990901b7a72280872fc807eda1de4fdce2c223fd089e0f0eac84c1e2980b9b5a032dd1294bd2eb49372f55b9b4cf4d3c1b14050bec1344d71a8316e173bd36f5917100de4dfedfff896517a04468006e5c632c8ad15521324f3abd72545b47df874a4a95d3bb30915ebcc3ed371528f89c7e943286a8cf4ff2cca3f3496ded16b139658bd5d3323ae9007b4dab665cd24e7888735de2cce7bc1b3af39a6d92d787dd237f8d72283f7aab1d99985f3783e5cb0661cadb552293f189f75e7f3fa933c775a27415a3ad22239986364ba7a582f2d9c31e7247aa8d44d5a7e8169fec65daaf62756b34dd307ebc7fbe8a8023aac1553fbf15b48a8ee3bd0c35c7ced684f667500ab2997aa75382475eb35888e72b30ad5aad3910c5ead6797f4182adce92dafc2073f1529ff5f1a42daf3c78e499039864e8e768fb11b33c0d7779e6128579d882761f9b21fcc0696da03eeb049c90b86da8dba548058f0caddb83ec9051a04f3133341e9a17a17b72ac20cd9e242fb383365f6a2f5c795087c7ee682555adadb7305bfe2886a57f3718f30f24b52d481aa35eb2c40417df5ea9d8af1b7b871ce37fb1c84402d269e3a01a5c9a00d3c7d6ff21c90d437066850ea92773288ba925294f9368b74fd1f3c4512800000006b73641507480f3db07634df10fca86bb4431664ade710d5a8894c368660c95f7a0b8ce5ffcdae136b5c8b4ed8c3b4cd9b71079dfd6d1501df9b7f1477b516f3cceecb2def619c05061502b253af7e3deccc839de56292c95a3912e809b100897a85705cf59af66e194143d13c12b6dc1a31cd15a74fe57666931e3fd6b75512d22f063c68576b1bd6a1ab6d7f4065447daee300b7d4fe330daeda866beb44eb8ed4041d0a36bfa49871e0623eb6f5d7b967e8f969985063e2fc4f4097c2a5189b10c1776713f78193c6e0e847025936b36eaa2e817ebb45c375f18350247f6586214a200f2f17536b52b8fa196d4a6a77317807075d130a77badf745a6076b1241e47942501cba893fd0db02545e49f559e9712a60ffce9f3154459c69984de49e11192266196497c81b7c5b45997c1369c8e8490b1a748985fd4c9ab8929d17a51c331dc160c8ae8d2961351ef103e3427299e4f28faff6ac1905be2814cb02511472c7232bd104ac438d846b4a727df2ed24364e061f157c2447e7d5265b1cd75797603e220a9d2e280868f3c2c56befbc6b1b1a07be1070b293adf324b3aee5140ef5f643c952726d9b770989b07f2cdea2e1d6951027e8b386faccff07b2547dd78aa85cc113b599ab168ef602e40fc097396341a8e5b97b59032110ddf114129feaed96e85237bb4bb886b287279b96234c18947ce7d2d5e92dd5c68829edd271bfccff21b87f6a061c9b43b51252add291c8f59be1a222d00fb7719664a8b89c452e78cf1d491a036107f0a521545fd96d2548735847e278065c196153028b91f59c7b70f9883f14cfb3343bb230f4af9bd51132cc62ee5459e34e77bb2983d30e65e65ab769fa0a0578bed01f33c76f4138208659a97fbbf380f1321336c14d21012f3cc4ee2101d42321f0123d51377e319e4ff4551f7f83ca62ff9448a28b6134da582f609be7dea5d70370772ef2552f12e97cf390ee2697022168d622ae0c813d86a43c25c758162ab0aadf25c84c790fb32a459997068be01325e473871cb024ff030070434d197558b8df442e1d2ad0c7b33fe021fa6cd57b7477dd76c6a802ddf405e909d48d23321e986d791b44d32d417d63638246fcdd661e6a1453d1411ec85fa0b750354aecdd4f4b90a420d2d4f67c514f15a8fe590735f660dc5eaa7f2873c7841edaf2c0d46a92fc07c6cd22fc978f74bac72e468d96ba370fb88f9a629d4de0a8a83d43c1949aae33fe24859c1bbf8663adc6936e305cf9c56aacc84e7515caf18d0d049bec2f0a484b75a8c2c23abbca66b039a52e606f08df0a3cdd2dc6449e84ce463206d2878de0e4d0f438764a0fe360e95494e9e61581001785b081254971197024460a68ec029052f2d8841dac7e714798027696067e739cd1525df28ac9514c02e25f8ea1146e356fc5941e4661cd244dccee4a1450e4334a20cb572b842d44a8431abf4d5bb82ac6b78ce3c6d394e5969c6fe8216805f6e2db2889f27849e0dd26a5a387958a36c833a8b3d861033c00ffef267e4b09350ca1b819d5c83025e4ad69328970db92520e6ce569d5632caeb6dc42c8f6f8759256ad9c1ffe8c30a92b795bf00544714c957d5d982a4e91ec7a30dfdcacbd41ceb61f208e5442f7f7ce19ba2f0dddf50020ed1c271afe5007277e2496c3bc7f3101d6fa7f0ea2627a99de0c441a11c6afbb721037dcfc897fc5d9e0ed644b9c3aee328bc2beb3801d2bf43b1e360759c1056c74a63aa33cb6e5933b7a0b4f654113ea5830de7e8374e939e4c794be77f1f0c1e1bcedc8f584a56db0c38b6c8da60bad62b41d754d9b6cbf3379374a6126db0ef1ee2da5862acaf117408ad26c66ec8ee4f9f1844fb4cc64bc61212b303c7c622f05d29b7fd540bdc253bc948d373886e5cd4dc9bc1b551dfc514f12cc64ecc3b276ab43a4adc2142fea9c5ecf983b0841729d1771b51c2ff787ac2439f305ca3fe31cdbe24f034fcd3d41141cc0ed5cdd82e3171be1381ad4f0bf81b3be200524c98cad5a3dee3ee618c97d0678c7b4fbf729dbc2baaa2385fb63e6b906b08681c19d55200924c0edb4c3b48463fd9c2ac86510ce1e0a641def11e9e7b7fa74a629895221b06a15c995cafe55dee6c06e01b34f4f18e5ffeb76ffb412277bdfa4cee10823a1e55832c3d1d19ba5b84560668b33fafc672cfba1a85c60c61c45bd562506d9d28542c4b4795ed011a8005862f7add9dc2533dd29d0ddd534eb0a3b537b391c423b527b3ae4ce0c829a6efcf8671e9e5224df6ed6c1f20452cb46cd578a620788f9af325d45825ced3043ef3693ffebf7b881518ba2c71587251edf150772ae1e24f4415f9d9307151b8fbcb83d0da908f4b6c762b777dc406991353e962f181bc06e892ff9e49e557639dafd09b291f79720b866e46bcf14d5bd1ed15a468a8996ecec8ce3d9890fb45c96804dddfe5b7280c0e30934f129e14b344506f70d484eea40baac63b89dc71b030a6c8149ffca2434c773bffe76bbf2e778f0034666970a96bf336ee5240e765ea3715382bd8fe19c5ce5a8814717d87d4d6304a3b0d6581a6fed44975ef8a8186c19a513f5c6c0610acbd31fd58e2cb683162464cf7f50ade879461ee91f433b09d1febe058c101a0ff96cbffd547c2beab15ca343cfe592ea435f980ff03e0aeadcc80d64383d287997a6a937fc22221cec2a1aa6e8dfc1dc6e0f2e02060a18c09957376a72e165728acddf73873a958f43bcd2e9c6c71a83f744bf14c75f5e8308523a7d39bcbfd832c6597b2928b07630ae50540bb71b44b5b4040a1d172fabe8dbfb96a99e7498b12dcc8ed9e43fb36c202d019b4fbe11f715f5de76bede175c22d8355323eb004c5021d892fbe48fa7b6bf382eb03d0e447a38c63bb7fa1154c2cdf08a1cf5fa95ec75a5aa9037ebf8916cb78e6da650016a0c7ed34290e25e2122be24e4373c49c4fc81c39ec1a1ce4b658e1b80562bf911a1f6a5fc2e69d2554d4abf5ad79d9c9b7d9ac8c4122c11f590a35dcee3fbe185027832b4e2a71ebc591a60bb874b36b415b455bd942fe1a69a92b70ce1a1c867c85138449529cab5f63feab609a2ba3344191c416d8409b59962bcee1c4a40874069e28432fcade20f07c9259dec75fb978a6b84b6e8f50fdb341c7c19f55a8fa389cf085f44661c9618d56d32be0bdb3b2928fc2c372e86ea109afaee022bb832e80e869c7cb1053921b862b27599d3665f7fabfd6436743ea893ec43e4e4daa598127df8ee3249be4668d717117a038f0e734a894457df4c64dd76a9d9d42efc29f2311085c9e6fcef385f40af94f283edca078797e96b79719875aed3900252c3acc6a92e23083b3fa24057d9ebf7886df99d652e7d18cbd445560a0afc81bf7c011777837f94b32094fa1bc99472cc2a40bff245abb27d3f628b1b649fd00", 0x2000, &(0x7f0000000700)={&(0x7f0000000280)={0x50, 0x0, 0xd, {0x7, 0x2b, 0xfffffffe, 0x800000, 0x0, 0x6, 0xe9f, 0xffffffff, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000060c0)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_fuse_handle_req(r0, &(0x7f000000e0c0)="f1187c2666e938b0d719606210914a175384a7d8bfa08a4ce1a6704c4c59dca5bd31c2e0daaec1bf1788b64cc764755c8227d255c9fcb56cddc8d23a8719578a528df745f0862275073dd2c88521736ffbb58e980e9803aa1406002487d226af95eedef88d3c768b748c28d604cd82f416f3c4f2071aac0274092945c94a4911345f1fb12c47fd864cef58c44ad5fb5348fea8246b3604a4c9c9a827e4aae4f7677d023169ef281c43f5341372d459170f25365fa911efb58b1a0c883d98677cce26aed7f8410a54aee36c963dd8f82fe532fd73594ee6f83265b5fbf2507319d73f87cb6d2050a7b1e001ec563d4170d9ca49e019c1f34a3f6a29e4adc72fcc343bb15caaa44814a11a621d682070b253354508d7b97b1439ad827954b305797e4de400c046ff93c99fa15125daa8b53581ae5392373621d5beffde817abdd5f4feb80aef8cbec83ad2a830c773ae907c19f5385e77e3adc425fc5d8dfd53312af6cb6556f8e3d871add2dc48a37fc05c65f32149a0ac179386d1016590ed19baede89d890902306e3ca40ddf9ea5f54b51cab0b6bc1bdddea7e6a64746cef6ecebedc1c51c670b0af450099c4052caf1eb0d4137a74f41f101a604fe08ef524e12f8f831c30e15da0947f6f584ae2ad96de45e3143f5a9dbce67edbdf5904a0ca1db282fb70dbec4870f6aeba8a74b24900d7c5a0758afadc26ac6f93695eeec1611d7a1123098420302ac2ecfb31bd545695b61c9f36663cf7ce86cd7ac350670893acf0d065fab2dc2ea43505b261393d285fbceaebe30e0d1fbf8baacb9eaf9f6ca84c598c5604fd4b11412a027760671956d312a4cd2e2dd54100519a0a8f93f5b229728bac624870cefd815a6b6d1ce8b06e045c47ee2f91e3524493df21f46cdd00a60c39f49d29965dbed6f408c42b29a3f76e0f840762b273628f7834397bb37d931231ab16f6cc7bbb5ca17fe83fc5ac8c67b120b19d8dbc3ef054e7490851bbf11c4cd19d8aad281fc054613050013dec6821e034f10413f96e289f81f10a52fc941992692b2c3b849d949b5c6465f335cd7876caff414d0a00ec927c2766c83249ca5e2d5dc9a524ea5142375bae891c8bcb34e8b4044964b8141841c619c6b1da249cf65b9c16506926804e4e388b60638c46128b43ab76a32659a5e3fa64c75609e31cc2738392a868434d9108c7710d72f8a34827943ded46328621b39b646cb663500467580b76cd6ee0217149dac6168499edcbff45193f49bd28fd105740f641f341ff8ded97ebea072d805062b35819f28541423b0e16ef996323f5907b0b2a0703e9fd5c6a511787cf6321a87f648170efd691aede0c178e0daf53da03829e4e7617b5b834c6b4196d926c7d7a54b9f1b3d3bc09bb7f22fb18f09150e34bec2102eafe634e13454a9d5cdc10da8e880cddaf892af35c437768b62c73f67ccd8764c34669a91f9d669fa1ebcc4159e4be7d4e589a59cb70c1ba77ef7a6a2c6fa4481c5f2c025ee26e24ea59215f971b1bd22af51af1334432d149a9574cac0d4cb145de1038fc37317b947fffb232209f8c65dce28179c950c7b23bd1052db323662512c5fb41acc84c4e42d1daa9be21e6c1d22b6bedd5f28d2241afc578e2a33e12d1b1b6427c620ce5d80c4a5ef351b2cdaa598c478b56bf79d9dcb8b8556503c66b44b27e8df8e046469a5da9390f58144b8766f9f51d39e8d5bd44e1ad024fed57ec1a3b18f04e6bb3b011f1b23031d85c498766cb10f66e3868a76ef1e388018292fdc4435e14bcf7ff6067535ee3764d8deb725cc0fe0afffe4285958ec9595ae5c5cb04834d15429435272e5b0510f246ce806895b85ba2f81912f76f6b955e28febafbd0c2e854479c4a6150b85c05bd54a1d0d37877e6fd3ae20046380dbf82bf9c8fa8a8d48f76cfc376fc9e0e4fdf0ccb785e9833c6c9ba006f7e59318ac733c3a1250f40ceb7ac3a167727bf89daea038372e212f02cf677a009cdfd224b41fc3c142b0882a53c1b9b7de6e99974d80ff8506c71ad3e063d7bc5c5366042b1cf952c6f76fad74fb16b9d9c9804589ae4f4afbc7bbaa340c1093d76a01fb254c5ea168e83b39bd3c97b8ace4f32612b63e841fd6eb304a663e4f43fcfb5f435716df89146d0ebc0c1517734ca4c90b9dd5db6820a4d730a9a7e6748d0d2b7def30a1c242fa36f52c3f685555b0828e1dd59023290ef4626d3759462cad9371d72a9c63824c91d5cc304ab43279f199811a604c164493794986b643ba6bf53d0a9ec7e304488b18bb2eedde5c128b2ef0303f85ed54875e38d4adbbfd477e8fe9a2217f084000813aecedcccb1dbe482b4856b9ceecb28d40bde5e8376eb8c29dc71b85d4b345fc411937234b318238e962f0d5dd46fdf5149685cb3c4f9c2710f4173f4ec616f7036ccf83ba228e1cc7b205cde9b57f00502d4d1c2af6dffaa37ad30fe0f5d955cfee2e00f48cb7ba02ab86748d0238914c66ca9ad9ff0e8bf2705e527c56b0d63a9b5a7b1da19424bc0c81d627b1389a42626654d901eff0f37d64e0cc894ab2c4399c67b846839a1c40033f4f9ecf8410fc63672ad471253fadd976df6510137d903a76ccf14509dd8839024608d707c4eb69cbcd5ba9cdddb7fbac1c963a99ef6e75eea8924aad62d6aea792042cb372131a83730a6ee7de386410d91697dad01d85ffcb22b3679573fea63a38c192b1b1e3a722adacaaf8e855843e1366763456c86ba9934302e0abfea2044386f31c457cb7ff445d7b00e3ed7d1dd4b2f92c845f65af3a3f68de96dd9b7bba62b7fefb52639b6796ca56d902f9dad52f42a1b79fc814c8a58033daa9f43ee3c540cfd08b0ed21941d67dc3ee37fcb855fa4a03453833714d8f8abf83256c503713adf7f8aee122cdb01d0ed27945d42633b0fc3b2fd51f8a9d403e792c9b77be56c257110669b46bd0f8bea9ec7b895b0b1bc9a9485a51e72763c3ccaf6210af7652ccd437722b359d20bc124e7055c5e41ddc5eb66f966647a3b91f1c51f3c6e340d6e203fcd30f39dd0398f0a1c9fa58f2da697033f5988cbc6e5c8e1fce7904112964b2ac5f938b9132d680f3cb0d8ec2fb65162113462ec459356bc9d28d9efdeb9983d79ed04da1a78f02ea8f5b42210a23d9c98a734dab4069dad2a532ebced93f5dad2ec9290b0016e6db7c3c9ca3ebc71d805aafc113ac93d1e68c637000879fd736cd8a42474e607da884df065a06f4d64054512a396d99cb7dfaad6a91cfce8288cf995e83a1ffd2ec83483a807c7ab3d0703e956222dbbc2fc5d57661fd186626b41a2e18144d592174cc8e45f1580593206e6d7c7f3236eeb41aa772e663834768dc21a4c216490612e6e912ad48f1d90650f1a9a29239ffa8f00747833038b75e8759c50799eba59ba58a1ddd3d9b49806e2c7ae143e88f704d0a5556429445a41ad83a95e43bf32fe2f6954ca030a3f2697014cb351c89cbd3d2792cc73371cae124e5c0055201036c7c0c73d94215214b33234f4e21071743cd553b8d96e3387151860f5143f16980020954d80b7f60955f9c09a6501e9d0eee4d8793e9ca2d04a8aa6831d2e54c0397c6c9f2486b79d06aee46f064c02e77fc4bd7bdf31b9dcf520e26ebb7a02ff3d9eef1357dbcc83877f5613c7a8c4e3a4636d2e0161a663a946f651cb5915f0776088c3de6b59b5ed0002a1fd5f7eb316ab62fef44af65abb81f96f495f867e128e8829a3d2693e00a5b2a14a6b76dff7c1cd80e26dca00482b3055741fcc7973e33346264f268e22ee4a74fb45066eb24cdbf71ea7c69d3fe9e9ce52dcc7e9b0645474ba2a635c36a83135cd98f892c2619a5724faff0aed7e236cad81184dd05dc5645c7e7ad52ef76d615255b2936bc40f0ea017035a8bfacc18c7bc52ec0e29d70126a6e912c6d06856a12ec2792738a9a1c2b2bd1e9b39db4fd115bc901e0d3fba472ea0182604cc9e73cc772117d49dbf41c7098076e20867d8eeb7b927701bd5cd21bc2b32e4ee2ab86f143770b4718f7c9ebdd32fdef6170ca284d4102360242f4d007fdcdd8fcfbb90e7d9b693fb1101dec0fa152a7417f70003159ca3633299cae4035793aa7668df47b09e0fad406e278a6105bbd2b9a523c1a8fdb394b9de39d3d9e1ce9d9ba717014dbe59855a92ff2375a3a3477c8bd22cde51e5bbb738b92ef4f3781e605c24e7140b2504b59328cb8e20c5c5d19acca392bbf60194e6257f674df0f99945132d78c76f182f2eb52058a908abf568352d50a7aa4d061380cc58cea53f166a753ffc4a51e90a0f46104decd9eaa77d48300f2c7901465effda4fdb0e70f7ede3541890732d4ff10eef7745ca362eb336febc2609f50f237eac6d4950593bfefe0718ae3bbf227ddd524178b39ce4341e68e4c1e5c65b506b73965c5e6ba8e7472d3b573d41b4e458c97d1f0164376cb24fdc38bce00df871938e65f46c3df4fc20e574581d6631d759c316af7f7709e05e9dc465b87234029ae78f071d892d5e7ab7fab90cbaba55acb3e654a18a5f0bf79d6e471d53b5fca51085a65534dbfa953379c4d4a0022f03da76fce767cfe2930992935ea897fc56dc23d377004d119c9b648986e402b035b7927e567db9019c915c0ab54e6e45435336e37d974a7ea3dfad73915badda2e0c32b87391e3226ef0509ec6a33462a246e62e0fb83065db0270c6c026415dfac7be0e7b1e790631347665e789ce6be41e7ea32b987465ca6a803508a52626d92858156920f841da0532854cd5c966f02911d10a4e12f687801d7b87891e0d7a1ed0279e3cbea3d73b3886e798d39460ef71ebafd803e3d367a0c67c31d502021a796e6c351caca55865902dea97edf28ca7f4da37d62e17df5245e52510e1d5bac6851e1a2bb2228aeb6add3c07bad5798176145d1b46d5ae3169581f2286f6ca3b09ce4c44df0031d6ed077e6af6226b6e21634037079331094fd3bcd0126d5c88069d1c240eba9a4ef943552dd69a2786301a0d94ba5f4afad155583d81cae6f68e600979674d05c5593ada14dccf11745118dfb6da366a15655469cc0fe0d31cabff9a84e40896f8726bb64bb0c548b8b7a7c031967ef8a38e85063eeeb48d271aa893cda1c66204cd3b2c35e27fa7dd972bc396283e24671b9f4c1bd9a4dcf30c8887864305b3f92ec1e678f85d552d411f8c2012bc77ae55d6d8a7c31bb6a9b80a530ef2900961a5c59fa0716f5b6ac2aa5b231005539414b2abb7ea3f7b4044e91e463f02e9c51891458084782209323f856148ed89c83d2fc194c127e47ae5bd711f5b130e6b21775090c6156cbe9737b33865b48489f4533945c4b9491add986d3095956796c1b217bf6b09ec63958fca7a9ec6b5435bb3fdbaca8a7520c7ba79098c47cd9208351b54e292509d4bc33bf40eaac6caa9f94d0918a7461e6bb8e8b259d3d90d641dec6612dc14b683ac4cbc217f6d108f666e66817867c70f3550d1ce37daf358cce35b8231fb70a4b1e302718163e5a628e8f653eeb25041290ef5f5289ec33dcec3bece209afaf2c4c8ed6145768ac945034473b01b63986f9882514722dd85df95448be18a59c5408ec8c95d203e7a4aebc68999c760d3f3929d0d28f7d8d0ea7c02a813515c5a82fc04cdcf20654c91af430aa34859a77eeca938842600afc6035605a0a9c01acdb164f2b2c3d4d7534c5292d08edb1adc446fedce1a14b7defb274051614de5157e8b5864f7ad8bf6d2f98515c07171afbb8c9d29a2202087bba880441bf68084d5bfdf3a7926ea2767a24bacdd5a6b98080b044071b3c21854333b84156771bbffe0458aed18e110ee0ec37f542b53afd04b76bbce6653d49434f0a8fe97d11cca1b211922bc48b0fa7526693889d0ae2b5a5f7746bd20803db5c57563137910efe92c6f4e0417978ac3af913d46fa9d49acf5f84de8e67f90b409bc78c30b58913f0149eab1629c1e8409190894f2591e208f3b61ed699670de4621675e9ca789cadb219013682d0655b785065dd4d2193f0a81b84f27330aa7a06fc09979239eff65b0327bd7887dd671bc4a51ca7dcca404fc24699a7703bdb1fe4b5175760f682531523ed75396e556b391b627035bbd9e323a004ec1875771b72f02af7711046a16e1df4fe22c8cc064bef1a401a430d2ed959aae3ab82db7a86b74821ed07dcf98ca76070b6e18fc749ef2ffeeec9585bd21aedaf8c05918bfd2f9ab1e1a6f023c0f2a2a418f5ecf711526525a165652eeab3ae16405ed177706844d1ca239f52641e0a66d89565d0b83cedc51d337496b2c5318cd5f44e6122c617387f85c3a6f76dc4d437e45f790c5f489bd56e56b8fa1e3111806429cd4ccf871b887ab9d8ee379f4cdd23bdbc476428ff912adcf7a84810c81943a778e57bbc3690911b5e046988dc85b7ccd09b7fc061f9259369601252aaeb4863d8d57796f1f4518130c911d1a331953663ef8a80fec491308297ccea77691fe14820aca10c6719c205988802791a54348222d6a34d9bf656696f396b27cfdea9d5b0e36838640d68ebe3be9ad72450232b66a5db274087e7a350a7d6abd95adf2557ee93154a966aab798b45c2fb1d5fa1f92db67a5bb2819e580dc15955249065189e4d1621c4517a67a76da14090a90b4da7272f57acc4228b49a1e5dc30002c11d03df9b60c382c026fac97ca1e389d6bb2af95494c2775b789988860478cb1e0a0e8e6a5b823fcaf6f8a031983408624a301bfad96784c9fe217e0c656cff8b65b3897a966c5ab572d269e30124ee813ac08ecec1aa40b73a3149e0647a00c612c0910878a079b5c163029435356473beced7fbc6ded2ee3e313082501fa91dc3ff05e4be525212ab350dceb9ac95c4f1db5399ea008b8609cb0c0f1a1319b9de77bbff478c197b9318005cf401a84f49499808fc403ea3ff9e1874d5ebe7997a0c03d977542c1877348da98f1d05641c9debd0dbba6b14ce8a83ac11de52ba7451cd1bb75f58ecc32676b3d00a76ce09e5695380ecc2e73f44ece11f77238d39696572e46761c7d5e638e94693591b70fffd8ab98b3294fc2614e3ce314a4947d0515baeab18ca4a23d479fa0a55d2950082cb770dbc34e138e9469f218a657dcdfee84cac9131cf6ad38000630aaf3fad747cb1dfc777188bafc927e7371ae2be48772afc09b6837784c8365c0ac6caac7de7ede4202ba8d28b18e6d20a217c30776f97546dc65822ff02be3be42f6043f828927ddcd693a7b691f9312aed70b5346cab9ff0d21e8783677bd71cd1b5e4975e588e121a90cdb6b4d3219effc8a868dd110f5cdfc119c121c84c2ad04189f84cec8f7d98d71ebb1f9793af002e2d645d7cfc03e3a4f61c28ff69f08024a93b8c712df64c83859374ae6d5575048d7baa3a0fab0ec0ecc731e3523d9deaebed7de16e9c6c453093de8738f8d7f4a244a6f15432cb494855c6c9b840d514af760c73b88099a66fc926b2f05befc766729f109ea436bbbb5ce2513fe654d7e0b379b49ed555cbddb8a690132417a31f48e530449ffe71d1f851acb1bdf245ec02dd39925782511c0d8930f17a14c54906d96a2daf27144914135cef344451982b50c71c1e5bf7d63f646fbdb749e2e9ce8e84ed334fb90d9ab7c6e7b265bdff840606ec572b035877e7d18cad3fa246ed000ec243d38da351fbea47a54dbea0942fbbf3fd9b00f19c21417159eedf477eb6af4ea228cde4ed64cc2d6890db81c74e5e08720dbea0f5364c1923cef7e0a883188a99896483d2977646bc9ebe9c8667fa68b3aa9cd961ad1dcaeba799eec564d20d771390c2ea12eb8cad0575d08320515c790155dcf477952c72c536e1bb2d6bdca553b02d23992129ce65d520c9f38bd385e37b98ac6c6974bd1fce4d53a7d11666ab3c04b6ff39f93ea50790aa027062d99c1486c5c692eefb05c29737b178526c91b62595f79396d40f2558148dd72652806ffd9fb334e744a2025070780d684dedb6db564fc76a5cf6f75766806e5c644bdb58c6c2aefe02a523f676aef200a3ea928810be43ec4367ec203edae43eedecb608cc48cde469217e36002b8419ba55ce00044a6d3590ba22c77001347c1545d07486d6a5f70ad9561fee62ee4eda80953218711d68ead9b38f3ef1012a952a572b38a5c90536754717799777574874b45e0b39e938ab2d31823bb1f44f965e225be271b69a9ccb32da2df01c65401df771f5e3e195ac977e627e3c4b522928d95391c1f6869ec2e340caf3f336e246d042da8fbe9702980babbb45067d82abebdfe34e3832c123575c479b66a33e22e47a5d8f7ee3c40fb538a3bb7a08ec13017f4c58f7ef769b7597f7252c8b6d0e4bbcefe0e32b4c1c92c5da2506d2be19bb6f71e662fb81f016404c96c50e4ad61dd3ba73746ce0489136d3b0414992f506900151bfbdf118a0e2f998f893560225da2c19280238cab9a986c747a265b22c0d6473f8248f83a3e155f4ee67cbde536b3c4dce586cc8d8ea15e55f3569ede91d29f9fdbaa88d20909f3dc3450e22ddb91722ed6e42f515db47259b74e25966408f4cab33177a74a038daf0967864330fc0be9f1f2b685cfa288bf89e72fecefca841fd0564a47826e586b6d4eb8dacbbfb0808a3255d5f69a8c56ca6e17f2041eff85aaa4eac86c1008d428d91237ec5e2cedad5383703ea7ca8e7dfb483ffd8e1f2abe1a90af170660f881f6cac3025087d72b6454bbc3f8b7308a27ee8a6e8294955903b0a69f66dbb4b6d7dfa2e726ebbdf91908990b042bd09ae9a6f6cd39a4d626f62b2efd8e85c02adeb492a9c97a4e883cd2660b570d0cf5b13c60fb58d60f07ca43b2b3a21843f85801c8d824d2bee451b86db0a61b45142a397372a3deb3bc10d80bf4f9907f5f3200c65f9cb6dd6411284ad5f7b837cb121c42b99f1e517569fc12b2606cb3f45daa0597a8aec824bfd4a31e4b17d5715ec48e8b9e666a5a9f881884b5d06cad31f1830d76db5bae7ef1833b727f6a15c0f32b8e561b41d4f286c74c901201ca52b95dd2b7bc930f5c7702eb282f4dce8dbb37f5137996967a07b0131da890e27edbbf5f5bcd3885889277d6faca161a138460fd1e70ef41179389c87338eb9eae94f2b8167e7e0683836b6153b7428ce1969da01b096eea0b4e7d5d85bb96037c17ee9ca630921367f17eb83845264fec0ecc866e58f845f2f32be57ea9d5c2c595f82efa6608c4c8946f0f56f3856fdaf3b8c0f78a017604521c727a136c2ac28c16ae19da2482c199eb7930fda5198f8269c774b8b2bd769c377a6f86416c2c3579e57a329e74021597aa1ed4e6da50806bdbdee831101cfa13b97e99fd512e43fa414f7b4cf1262c16b9e30ac4c34b108355ac16b6053751fb8c2f4eb4bbf7edcfbd0184f2250344e47bbfe9ca50f0e91e65c78270c58603c20679d739b454d1ec3301fd6b884d00d7539bdd3178126aca8ae37b9d8ecfcf14e62e653864d3ee4f1fae9ffb2197ed8a2455c90359b6a09910b79c2822f04bf07b6a27e01c9f1883fbcd08b7c26d7c8c25271338914cbc157dbbd0efada31709841831c71c1aaf111d0d46845d9aaeb7249dae34fdb050047ac38fbf0b746f33d6ea0baa5d4f7ddadeacb5831b7f9d5e219e4bae55d0b8594f52f0011badef967afef02884ce212c3341c340ee8fdca78e887b7bf2a98c31d1bb8a3969b8b4c939c362cd3edc19598fae9ccd82c88aabbad4c4ae278aa1b59d2003375cc932210f4a636af6c3126f200c8a7ac82d8226f244661ac6d73aa76edb53fa5b2216f645e873de27fbf580c7148fa72f992a220d1d4f499779e25c8b996c580a1165848d23088a6369957841653e291c7f520a8665997bf958ff7da53bef74eea85e3a1a3657945513137351cd4aab8499f23718abb8f66dd7d60e9775639e32ca1e8faacdb8f6b66d0b1b714af355773f1aed034f2e4cdaa17bac308dfd889bf123762b5c894de392a3081af84195438fdfd1868e2d978bf3ec1df5e81b9f8f6afdfbe3dc344f2a6dbf550080e403690d2ca7cfc0244014939aa79a8b3a0933e2bbc226385e3e4188a1ba2b37c34e02fd28c31f2c48d1a83294da501ab012d1d5e5fd26cd41ee71b4a150cf784486f9f6b5ab510cf07cf9792dd9e4d8bf48f06464fc957885d346fc501f21a07ac7fc71b9c01519cf4d2fa766d15eaf459fc429ace3a1a61ba078da7324ac06e65d7f36271f6898e8ccd673edeb25571c44606d7bde39d5195472e727bc7e2a2d1578328cdaf90400a7843f31793ad33d0f32885bf9b1f0e56d4a3ec40a1094e0ecec32a1712b88ff3008213795ffece882254753011c6988931fc9f19b5ad0891e20887b47ccf460e303842bb4c0b62163868e805b3bae6e4937a476e7eafe9fde0d0cf62223f714c69be6833c10d06f91a78016b1c00087415ac4a5b7b5e10f98a3e19adf60d56d5bee918c1c7ebbf7cfc37130ffae2ad7a620250c7387069ecc926f34069b717b97bf2a0ef0a2bf796034e88d30aa4235744a1aa5601ba718add8cd0cf38411f4787cd22e21dbacd9e480b13af38477a70d2a4800f680fa7cc8684fd467b86555422b1a901144b03e4327b2573769cb02de90e8e30df7afd2e571e2946d23a0efe02bac8e9698d12589378e28d1c36ce328a27abff98eca7b6da95daa681700397ce62c9b50a47cedeafd51b62e953413639a9d9978fb3e1604027751da66b5e481ec1e4697d64a4477c67ec2967e2389b6f716f77c810a62a5fd78c69907f4a4dc210db30d5d000000002c9c81f0dbeecb33a702f4860426e7d1c26d1a00ee4c62e3d671d545b26aab8ac758c53cea2250ed929aa715bf513a5fa242b78ddbc263990c42025ba2a52e368f6a18e2cfc0a6047e7f0e7187c3e36d61905cf0c1824a08e5c240ec56b04c909390322ce24f35001e8d5a599ffadbe2a8755920cc488f40be225110310d4e9e4d4cfa34f953c6f6cc6a5f8a89373739dc5da9445947fb58bec2c8e5b7f8c349d6df29e6a87336dd7bccb036139922faf14f3eeb92ba12d0084b1da8d36a3f9656414c0f32a1b2575a5147568ad96c2125701fc67d00e9d78788bfd0188276727d568bb0800a576913dbc5c1035fbcaa5359bc9b7fca0ef528903250be1a942e59727789ec61ee1ae617c3a23d3a89044a9ec729ef0cf7ec6a3d01e06e864c2e24c38a8389826c2cd471cca5cfd18a34050f24b99dcd26d418465a5e3623d7c9dffe7e65fc25f90710f42d00fb81b33a2db18d0ff7955c8d87ba8fdfe1186b638312505c7810dd0ead9c7722fcef542d2a73f107993e3ec78d3a0b15506ebd4d13a72384f77268b44c32a957aefda0bed253e76cb09012f104bd0c1f04e96b1fc60d08eb79ce9216fe1fde6ffe65d09056c9643ada21ef080b9da75c10f71ad334e4d3b5d3a0e55bd1ffcc18259cd28f6bbdfab16575cdcce86c95f894cd001e795cdaeac95c90d1ba94806ea2fdf45906eb7a2ba0613503f7aa7397e78c964ad3251d297ea76d88b4221efccb2c00", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000020000, {0x7, 0x2b, 0x2000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.80629479s ago: executing program 3 (id=797): r0 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x1, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4) io_uring_enter(r0, 0x369a, 0x0, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000240)=[0x0, 0x3], 0x2) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000080)={0xcde}, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) recvmsg$qrtr(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x2062}, 0x1c, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="37d9291476ef"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20024000}, 0x800) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r9 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x2}) read$FUSE(r1, &(0x7f0000001680)={0x2020}, 0x2020) 1.757340735s ago: executing program 4 (id=798): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x9}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6077fd480051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e", 0x7a}, {&(0x7f0000000700)="ce2ede98d4a7e4b9a7938b050ddf51835e71aa0857d0f79d3ce502000000b5cc4397be", 0x23}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e34000000000000000d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da24c3341e27416f38e3251fe082c8f8ff2308cd2f7dc846c93e62a8d53d22fcabce47b5531463290c970dccfaa7da3e4ee56136f44b991100e3db7c750c3ccb3e01d6598d53d05ca7503d7430f3ff2b79ab629faa1dfb2d0899dd807d28174305bd600e50112aa4d0ec230a89b3078bb60a198e5a7169d91005cda3fc9870956d72773bd700", 0xc8}, {0x0}], 0x4, 0x0, 0x0, 0x4004845}], 0x1, 0x48800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a7b000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000100)="b8050000000f01c10f46a789000000c4c1777ca103000000b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3f}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000740)={[0x9, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x2, 0x8000000000001, 0x3, 0x1, 0x9, 0x8, 0x4d1f, 0xfffffffffffffffd, 0xbd9], 0xdddd1000, 0x184310}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0x401) listen(r6, 0x0) shutdown(r6, 0x0) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0xca, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r8, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0xcb58631aa5fae61c) 1.756229111s ago: executing program 1 (id=799): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x40880) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a40", @ANYRES32=r1, @ANYBLOB="14000200"/14], 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r4], 0x2c}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000203c0)={0x0, 0x0, &(0x7f0000020380)={&(0x7f00000201c0)={0x40, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe700}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x840) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0xe0000000000000, 0xfefffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3b}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '.\xfa\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.450977715s ago: executing program 2 (id=800): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x10, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xfff2}, {0xa, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0xff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44044}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setxattr$incfs_metadata(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)="e69ff33139c4dc1fb737ae5e2e3b1a6b4456a37d34e48ff750a9bc3f2cc8f74fdc176b4ce416c6", 0x27, 0x2) open_by_handle_at(r6, &(0x7f0000002580)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00'], 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000004c0)={0x1, 0x3}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000240), 0x5046591a, 0x109040) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c643c, &(0x7f0000000300)={0x0, 0x1000000}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x10, &(0x7f0000000400)=ANY=[], 0x0, 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5500000018007fd500fe01b2a4a280930a46000000a843089100fe801100080008000c00085540002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x20000004) r8 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)=""/247, &(0x7f0000000800)=""/212, &(0x7f00000001c0)=""/192, 0x60000}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x80) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000480)={0x2, 0x0, [{0x994, 0x0, 0x7}, {0x3c4, 0x0, 0x280000000000}]}) 1.343716968s ago: executing program 1 (id=801): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_getsetattr(r0, &(0x7f00000001c0)={0x0, 0x1, 0x7, 0x5}, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000100)='./file0\x00', 0xf) close_range(r4, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x80}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r10, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="20002abd7000fddbdf257400000008000300", @ANYRES32=r12, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x81) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRES32=r11, @ANYRESDEC=r5, @ANYBLOB="285270f06b2ef5fdf5e82e078d61f7756d45440e3d06615523fa83e7b2f7509e117f55a69d8d70f070fb439b67c0cfa906dbb7c7bb6f68a761b07b5875863ba2050f2ace1696b6ffc1ada4"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.06319389s ago: executing program 3 (id=802): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 874.65681ms ago: executing program 3 (id=803): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "ec5a5d58fa9f4eb1", "056560dde5e571ae9922ea8974093e1f9a7a3d4837caa729f4ad09cd9d87074d", "e545cf1d", "5812fb67aabb0cb0"}, 0x38) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$USBDEVFS_REAPURB(r1, 0x4008550d, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$netlink(0x10, 0x3, 0xe) r4 = dup3(r3, r2, 0x0) bind$inet(r2, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x80000000, 0x2110, 0x400, 0x8000, 0x2, 0xffff, 0x0, 0x0, 0x40, 0x80000000}}, 0x50) sendto$inet(r2, 0x0, 0x0, 0x877f, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000040)) r5 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r5, 0x1, 0x4d, 0x0, &(0x7f0000001480)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x100) fallocate(r6, 0x3, 0x2, 0x8000c62) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000340)={&(0x7f00000000c0)=[{0x21, 0x200, 0x2, &(0x7f0000000140)="aa46"}, {0x1c, 0x1, 0x0, 0x0}], 0x2}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x337c, 0x4) 603.720838ms ago: executing program 4 (id=804): syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa4180c20000000800460000280000000000119078000000000000000007"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100004000000100010000000000", @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r1, 0x0, r3, 0x0, 0x10d00, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xb9) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fchown(r7, 0xee01, 0x0) r8 = mq_open(&(0x7f0000000000)='+&@@$\x00', 0x40, 0x20, &(0x7f00000000c0)={0x0, 0x5, 0x64, 0x61ecdc31}) mq_timedreceive(r8, &(0x7f0000000100)=""/146, 0x92, 0x1, &(0x7f00000001c0)={0x0, 0x989680}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000000c0)={0x0, 0x3, '\x00', [@generic={0x5, 0x1b, "d61baa248c8aa44668dc9f075966a9962af0a6d3eab2f93a12d50a"}]}, 0x28) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 265.167001ms ago: executing program 1 (id=805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r7 = add_key$keyring(&(0x7f0000002400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r7, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) keyctl$setperm(0x5, r7, 0x18000000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 0s ago: executing program 1 (id=806): unshare(0x22020600) gettid() timer_create(0x0, 0x0, 0x0) syz_clone3(&(0x7f00000005c0)={0x8000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x58) kernel console output (not intermixed with test programs): x10/0x10 [ 175.735429][ T7576] ? ksys_write+0x22a/0x250 [ 175.735446][ T7576] ? exc_page_fault+0x82/0x100 [ 175.735468][ T7576] ? __pfx_ksys_write+0x10/0x10 [ 175.735490][ T7576] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 175.735511][ T7576] __do_fast_syscall_32+0x1f7/0x570 [ 175.735529][ T7576] ? rcu_is_watching+0x15/0xb0 [ 175.735544][ T7576] ? do_fast_syscall_32+0x34/0x80 [ 175.735565][ T7576] do_fast_syscall_32+0x34/0x80 [ 175.735582][ T7576] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.735600][ T7576] RIP: 0023:0xf7f57539 [ 175.735615][ T7576] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 175.735629][ T7576] RSP: 002b:00000000f540455c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 175.735646][ T7576] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 175.735657][ T7576] RDX: 0000000000000001 RSI: 0000000020080058 RDI: 0000000000000000 [ 175.735667][ T7576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.735675][ T7576] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 175.735683][ T7576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.735709][ T7576] [ 176.034020][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.405662][ T5896] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 176.480385][ T5896] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 176.534578][ T5896] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 176.546914][ T5896] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 176.559496][ T5896] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 176.572405][ T5896] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 176.637102][ T5896] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 176.694948][ T5896] usb 1-1: USB disconnect, device number 22 [ 177.166732][ T5896] usb 4-1: USB disconnect, device number 27 [ 177.294706][ T24] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 177.343879][ T6200] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 177.476319][ T24] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 177.544365][ T24] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.545820][ T6200] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.565539][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 177.572797][ T6200] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 177.572904][ T24] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 177.583307][ T6200] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 177.600314][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.648761][ T24] usb 1-1: config 0 descriptor?? [ 177.661260][ T6200] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 177.729431][ T6200] usb 3-1: Manufacturer: syz [ 177.750554][ T6200] usb 3-1: config 0 descriptor?? [ 177.896006][ T5833] ath6kl: Failed to submit usb control message: -71 [ 177.904091][ T5833] ath6kl: unable to send the bmi data to the device: -71 [ 177.912706][ T5833] ath6kl: Unable to send get target info: -71 [ 177.934668][ T5833] ath6kl: Failed to init ath6kl core: -71 [ 177.954689][ T5833] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 178.007900][ T5833] usb 5-1: USB disconnect, device number 25 [ 178.120851][ T24] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 178.169959][ T24] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 178.178377][ T24] hid-steam 0003:28DE:1102.0009: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 178.254240][ T24] hid-steam 0003:28DE:1102.0009: Steam Controller 'XXXXXXXXXX' connected [ 178.273562][ T24] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0009/input/input15 [ 178.376675][ T24] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 178.392903][ T24] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 178.431452][ T24] hid-steam 0003:28DE:1102.000A: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 178.843625][ T7630] netlink: 'syz.1.512': attribute type 10 has an invalid length. [ 178.851836][ T7630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.512'. [ 178.862524][ T7630] ipvlan1: entered promiscuous mode [ 178.868560][ T7630] ipvlan1: entered allmulticast mode [ 178.874035][ T7630] veth0_vlan: entered allmulticast mode [ 178.883632][ T7630] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 178.952393][ T30] audit: type=1326 audit(1764873897.747:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 179.071122][ T5833] usb 1-1: USB disconnect, device number 23 [ 179.140726][ T5833] hid-steam 0003:28DE:1102.0009: Steam Controller 'XXXXXXXXXX' disconnected [ 179.163688][ T30] audit: type=1326 audit(1764873897.777:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 179.198393][ T7636] FAULT_INJECTION: forcing a failure. [ 179.198393][ T7636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.214117][ T7636] CPU: 1 UID: 0 PID: 7636 Comm: syz.4.516 Not tainted syzkaller #0 PREEMPT(full) [ 179.214136][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.214143][ T7636] Call Trace: [ 179.214147][ T7636] [ 179.214152][ T7636] dump_stack_lvl+0x189/0x250 [ 179.214176][ T7636] ? __pfx____ratelimit+0x10/0x10 [ 179.214191][ T7636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.214201][ T7636] ? __pfx__printk+0x10/0x10 [ 179.214220][ T7636] should_fail_ex+0x414/0x560 [ 179.214236][ T7636] _copy_to_user+0x31/0xb0 [ 179.214247][ T7636] simple_read_from_buffer+0xe1/0x170 [ 179.214264][ T7636] proc_fail_nth_read+0x1b3/0x220 [ 179.214279][ T7636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.214293][ T7636] ? rw_verify_area+0x2a6/0x4d0 [ 179.214305][ T7636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.214318][ T7636] vfs_read+0x200/0xa30 [ 179.214330][ T7636] ? fdget_pos+0x247/0x320 [ 179.214340][ T7636] ? __pfx___mutex_lock+0x10/0x10 [ 179.214351][ T7636] ? __pfx_vfs_read+0x10/0x10 [ 179.214363][ T7636] ? __fget_files+0x2a/0x420 [ 179.214374][ T7636] ? __fget_files+0x3a0/0x420 [ 179.214382][ T7636] ? __fget_files+0x2a/0x420 [ 179.214395][ T7636] ksys_read+0x145/0x250 [ 179.214408][ T7636] ? __pfx_ksys_read+0x10/0x10 [ 179.214421][ T7636] ? __do_fast_syscall_32+0xbe/0x570 [ 179.214433][ T7636] __do_fast_syscall_32+0x1f7/0x570 [ 179.214443][ T7636] ? rcu_is_watching+0x15/0xb0 [ 179.214454][ T7636] ? do_fast_syscall_32+0x34/0x80 [ 179.214466][ T7636] do_fast_syscall_32+0x34/0x80 [ 179.214476][ T7636] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.214487][ T7636] RIP: 0023:0xf7f76539 [ 179.214499][ T7636] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 179.214507][ T7636] RSP: 002b:00000000f5466590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 179.214523][ T7636] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5466620 [ 179.214530][ T7636] RDX: 000000000000000f RSI: 00000000f7406ff4 RDI: 0000000000000000 [ 179.214535][ T7636] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 179.214541][ T7636] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 179.214546][ T7636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.214561][ T7636] [ 179.221758][ T30] audit: type=1326 audit(1764873897.777:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 179.645006][ T30] audit: type=1326 audit(1764873897.777:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 180.012956][ T30] audit: type=1326 audit(1764873897.777:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 180.093871][ T30] audit: type=1326 audit(1764873897.777:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 180.162008][ T5968] usb 3-1: USB disconnect, device number 23 [ 180.208838][ T30] audit: type=1326 audit(1764873897.777:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 180.272583][ T30] audit: type=1326 audit(1764873897.777:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 180.294609][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.313053][ T30] audit: type=1326 audit(1764873897.777:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 180.394064][ T30] audit: type=1326 audit(1764873897.777:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 180.600601][ T7648] cgroup: fork rejected by pids controller in /syz0 [ 180.764342][ T5833] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 180.882940][ T7761] syzkaller1: entered promiscuous mode [ 180.888864][ T7761] syzkaller1: entered allmulticast mode [ 180.897132][ T7761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.521'. [ 180.911159][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.521'. [ 180.934174][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 180.941148][ T5833] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 180.956305][ T5833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.979939][ T5833] usb 3-1: config 0 has no interface number 0 [ 180.986493][ T5833] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 181.079214][ T7766] fuse: Bad value for 'fd' [ 181.115081][ T5833] usb 3-1: config 0 interface 8 has no altsetting 0 [ 181.142264][ T5833] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 181.170870][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.192756][ T5833] usb 3-1: Product: syz [ 181.192820][ T7766] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 181.198386][ T5833] usb 3-1: Manufacturer: syz [ 181.210915][ T5833] usb 3-1: SerialNumber: syz [ 181.223423][ T5833] usb 3-1: config 0 descriptor?? [ 181.231421][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.407969][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.124053][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 182.214276][ T5968] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 182.374694][ T5968] usb 1-1: Using ep0 maxpacket: 8 [ 182.382817][ T5968] usb 1-1: config 1 interface 0 has no altsetting 0 [ 182.392082][ T5968] usb 1-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 182.401316][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.409482][ T5968] usb 1-1: Product: syz [ 182.415183][ T5968] usb 1-1: SerialNumber: syz [ 182.541378][ T7908] fuse: Unknown parameter 'bX' [ 182.704366][ T5968] usbhid 1-1:1.0: can't add hid device: -71 [ 182.713992][ T5968] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 182.992161][ T5968] usb 1-1: USB disconnect, device number 24 [ 183.330598][ T7918] FAULT_INJECTION: forcing a failure. [ 183.330598][ T7918] name failslab, interval 1, probability 0, space 0, times 0 [ 183.344662][ T7918] CPU: 0 UID: 0 PID: 7918 Comm: syz.1.532 Not tainted syzkaller #0 PREEMPT(full) [ 183.344685][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.344695][ T7918] Call Trace: [ 183.344703][ T7918] [ 183.344710][ T7918] dump_stack_lvl+0x189/0x250 [ 183.344733][ T7918] ? __pfx____ratelimit+0x10/0x10 [ 183.344759][ T7918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.344775][ T7918] ? __pfx__printk+0x10/0x10 [ 183.344802][ T7918] ? __pfx___might_resched+0x10/0x10 [ 183.344817][ T7918] ? fs_reclaim_acquire+0x7d/0x100 [ 183.344844][ T7918] should_fail_ex+0x414/0x560 [ 183.344872][ T7918] should_failslab+0xa8/0x100 [ 183.344897][ T7918] __kmalloc_cache_noprof+0x6f/0x6f0 [ 183.344917][ T7918] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 183.344937][ T7918] ? sctp_association_new+0x89/0x25c0 [ 183.344953][ T7918] ? __asan_memcpy+0x40/0x70 [ 183.344975][ T7918] sctp_association_new+0x89/0x25c0 [ 183.344992][ T7918] ? sctp_do_bind+0x65a/0x940 [ 183.345012][ T7918] ? __ipv6_addr_type+0x247/0x2f0 [ 183.345039][ T7918] sctp_connect_new_asoc+0x2c5/0x690 [ 183.345059][ T7918] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 183.345073][ T7918] ? __local_bh_enable_ip+0x12d/0x1c0 [ 183.345096][ T7918] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 183.345111][ T7918] ? security_sctp_bind_connect+0x7e/0x2e0 [ 183.345137][ T7918] sctp_sendmsg+0x155c/0x2810 [ 183.345172][ T7918] ? __pfx_sctp_sendmsg+0x10/0x10 [ 183.345193][ T7918] ? aa_sk_perm+0x15f/0x920 [ 183.345212][ T7918] ? aa_sk_perm+0x7ee/0x920 [ 183.345233][ T7918] ? __pfx_aa_sk_perm+0x10/0x10 [ 183.345253][ T7918] ? sock_rps_record_flow+0x19/0x410 [ 183.345276][ T7918] ? inet_sendmsg+0x2f4/0x370 [ 183.345300][ T7918] __sock_sendmsg+0x19c/0x270 [ 183.345327][ T7918] __sys_sendto+0x3bd/0x520 [ 183.345346][ T7918] ? __pfx___sys_sendto+0x10/0x10 [ 183.345361][ T7918] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 183.345398][ T7918] ? __fget_files+0x3a0/0x420 [ 183.345425][ T7918] ? ksys_write+0x22a/0x250 [ 183.345444][ T7918] ? exc_page_fault+0x82/0x100 [ 183.345468][ T7918] ? __pfx_ksys_write+0x10/0x10 [ 183.345491][ T7918] __ia32_sys_sendto+0xdd/0x100 [ 183.345512][ T7918] __do_fast_syscall_32+0x1f7/0x570 [ 183.345530][ T7918] ? rcu_is_watching+0x15/0xb0 [ 183.345547][ T7918] ? do_fast_syscall_32+0x34/0x80 [ 183.345568][ T7918] do_fast_syscall_32+0x34/0x80 [ 183.345586][ T7918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.345605][ T7918] RIP: 0023:0xf7f24539 [ 183.345620][ T7918] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 183.345634][ T7918] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 183.345652][ T7918] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 183.345663][ T7918] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 183.345673][ T7918] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 183.345682][ T7918] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 183.345692][ T7918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.345719][ T7918] [ 184.014218][ T5833] ath6kl: Failed to submit usb control message: -71 [ 184.031130][ T5833] ath6kl: unable to send the bmi data to the device: -71 [ 184.038937][ T5833] ath6kl: Unable to send get target info: -71 [ 184.061542][ T5833] ath6kl: Failed to init ath6kl core: -71 [ 184.073914][ T24] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 184.090628][ T5833] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 184.144399][ T7927] FAULT_INJECTION: forcing a failure. [ 184.144399][ T7927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.176197][ T7924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.533'. [ 184.188586][ T5833] usb 3-1: USB disconnect, device number 24 [ 184.213680][ T7927] CPU: 0 UID: 0 PID: 7927 Comm: syz.2.535 Not tainted syzkaller #0 PREEMPT(full) [ 184.213703][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.213713][ T7927] Call Trace: [ 184.213720][ T7927] [ 184.213728][ T7927] dump_stack_lvl+0x189/0x250 [ 184.213755][ T7927] ? __pfx____ratelimit+0x10/0x10 [ 184.213776][ T7927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.213792][ T7927] ? __pfx__printk+0x10/0x10 [ 184.213812][ T7927] ? __might_fault+0xb0/0x130 [ 184.213842][ T7927] should_fail_ex+0x414/0x560 [ 184.213868][ T7927] _copy_from_iter+0x1cd/0x1630 [ 184.213896][ T7927] ? __build_skb_around+0x22d/0x3c0 [ 184.213919][ T7927] ? __pfx__copy_from_iter+0x10/0x10 [ 184.213938][ T7927] ? __alloc_skb+0x2f1/0x430 [ 184.213957][ T7927] ? __pfx___alloc_skb+0x10/0x10 [ 184.213976][ T7927] ? netlink_sendmsg+0x642/0xb30 [ 184.213995][ T7927] ? skb_put+0x11b/0x210 [ 184.214015][ T7927] netlink_sendmsg+0x6b2/0xb30 [ 184.214043][ T7927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.214066][ T7927] ? __import_iovec+0x5d4/0x7f0 [ 184.214081][ T7927] ? aa_sock_msg_perm+0xf1/0x1b0 [ 184.214101][ T7927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.214122][ T7927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.214143][ T7927] __sock_sendmsg+0x21c/0x270 [ 184.214169][ T7927] ____sys_sendmsg+0x505/0x820 [ 184.214193][ T7927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.214217][ T7927] ? kstrtouint+0x6e/0xe0 [ 184.214244][ T7927] ___sys_sendmsg+0x21f/0x2a0 [ 184.214266][ T7927] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.214291][ T7927] ? rcu_read_lock_any_held+0xb3/0x120 [ 184.214344][ T7927] ? __fget_files+0x2a/0x420 [ 184.214358][ T7927] ? __fget_files+0x3a0/0x420 [ 184.214384][ T7927] __sys_sendmsg+0x164/0x220 [ 184.214405][ T7927] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.214433][ T7927] ? __pfx_ksys_write+0x10/0x10 [ 184.214457][ T7927] ? __do_fast_syscall_32+0xbe/0x570 [ 184.214478][ T7927] __do_fast_syscall_32+0x1f7/0x570 [ 184.214496][ T7927] ? rcu_is_watching+0x15/0xb0 [ 184.214513][ T7927] ? do_fast_syscall_32+0x34/0x80 [ 184.214535][ T7927] do_fast_syscall_32+0x34/0x80 [ 184.214551][ T7927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.214570][ T7927] RIP: 0023:0xf703d539 [ 184.214585][ T7927] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 184.214599][ T7927] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 184.214617][ T7927] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 184.214629][ T7927] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.214638][ T7927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.214648][ T7927] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 184.214657][ T7927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.214683][ T7927] [ 184.275873][ T24] usb 4-1: device descriptor read/64, error -71 [ 184.334972][ T7929] tipc: Cannot configure node identity twice [ 184.602379][ T7929] tipc: Cannot configure node identity twice [ 184.652159][ T7930] syzkaller0: entered promiscuous mode [ 184.661315][ T7930] syzkaller0: entered allmulticast mode [ 184.672332][ T5969] syzkaller0: tun_net_xmit 48 [ 184.698373][ T7928] syzkaller0: create flow: hash 2923107017 index 1 [ 184.764160][ T24] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 184.847399][ T7928] syzkaller0: delete flow: hash 2923107017 index 1 [ 184.933968][ T24] usb 4-1: device descriptor read/64, error -71 [ 185.057521][ T24] usb usb4-port1: attempt power cycle [ 185.062029][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 185.414032][ T24] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 185.456676][ T24] usb 4-1: device descriptor read/8, error -71 [ 185.753887][ T24] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 185.874537][ T24] usb 4-1: device descriptor read/8, error -71 [ 185.989565][ T24] usb usb4-port1: unable to enumerate USB device [ 186.702667][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'. [ 186.714856][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'. [ 187.143899][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 187.300973][ T7975] debugfs: '!' already exists in 'ieee80211' [ 187.315055][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 187.323088][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 187.338386][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.353989][ T24] usb 3-1: config 0 has no interface number 0 [ 187.363531][ T24] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 187.385248][ T24] usb 3-1: config 0 interface 8 has no altsetting 0 [ 187.395188][ T24] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 187.404914][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.412955][ T24] usb 3-1: Product: syz [ 187.417765][ T24] usb 3-1: Manufacturer: syz [ 187.422704][ T24] usb 3-1: SerialNumber: syz [ 187.436622][ T24] usb 3-1: config 0 descriptor?? [ 188.251784][ T7992] netlink: 'syz.3.554': attribute type 12 has an invalid length. [ 188.259851][ T7992] netlink: 'syz.3.554': attribute type 29 has an invalid length. [ 188.303912][ T7992] netlink: 148 bytes leftover after parsing attributes in process `syz.3.554'. [ 188.445502][ T7992] GUP no longer grows the stack in syz.3.554 (7992): 80005000-80008000 (80004000) [ 188.456726][ T7992] CPU: 1 UID: 0 PID: 7992 Comm: syz.3.554 Not tainted syzkaller #0 PREEMPT(full) [ 188.456752][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.456762][ T7992] Call Trace: [ 188.456773][ T7992] [ 188.456780][ T7992] dump_stack_lvl+0x189/0x250 [ 188.456808][ T7992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.456828][ T7992] ? __pfx__printk+0x10/0x10 [ 188.456847][ T7992] ? find_vma+0xe7/0x160 [ 188.456879][ T7992] __get_user_pages+0x2470/0x2a00 [ 188.456922][ T7992] ? __gup_longterm_locked+0xc63/0x1660 [ 188.456940][ T7992] ? down_read_killable+0x1bc/0x350 [ 188.456965][ T7992] __gup_longterm_locked+0xde4/0x1660 [ 188.457003][ T7992] ? gup_fast_fallback+0x1b86/0x22d0 [ 188.457026][ T7992] gup_fast_fallback+0x1d65/0x22d0 [ 188.457080][ T7992] ? __pfx_gup_fast_fallback+0x10/0x10 [ 188.457097][ T7992] ? futex_unqueue+0x22/0x240 [ 188.457128][ T7992] ? futex_unqueue+0x22/0x240 [ 188.457157][ T7992] ? is_valid_gup_args+0x11f/0x200 [ 188.457174][ T7992] ? get_user_pages_fast+0x4d/0xb0 [ 188.457189][ T7992] get_futex_key+0x93a/0x1660 [ 188.457217][ T7992] ? __pfx_get_futex_key+0x10/0x10 [ 188.457239][ T7992] ? __pfx_futex_wake_mark+0x10/0x10 [ 188.457267][ T7992] futex_wake_op+0x132/0xd70 [ 188.457296][ T7992] ? futex_wait+0x285/0x360 [ 188.457315][ T7992] ? __pfx_futex_wake_op+0x10/0x10 [ 188.457356][ T7992] do_futex+0x3bd/0x420 [ 188.457371][ T7992] ? __fget_files+0x2a/0x420 [ 188.457387][ T7992] ? __fget_files+0x3a0/0x420 [ 188.457402][ T7992] ? __pfx_do_futex+0x10/0x10 [ 188.457418][ T7992] ? fdget+0x184/0x1e0 [ 188.457440][ T7992] __se_sys_futex_time32+0x360/0x3e0 [ 188.457463][ T7992] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 188.457488][ T7992] ? __ia32_sys_futex_time32+0x21/0xf0 [ 188.457510][ T7992] __do_fast_syscall_32+0x1f7/0x570 [ 188.457526][ T7992] ? rcu_is_watching+0x15/0xb0 [ 188.457543][ T7992] ? do_fast_syscall_32+0x34/0x80 [ 188.457566][ T7992] do_fast_syscall_32+0x34/0x80 [ 188.457583][ T7992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.457601][ T7992] RIP: 0023:0xf7f57539 [ 188.457617][ T7992] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 188.457632][ T7992] RSP: 002b:00000000f542555c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 188.457651][ T7992] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 0000000000000005 [ 188.457669][ T7992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080004000 [ 188.457678][ T7992] RBP: 00000000a3020000 R08: 0000000000000000 R09: 0000000000000000 [ 188.457688][ T7992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 188.457698][ T7992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.457727][ T7992] [ 188.733601][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.130092][ T8007] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 189.151426][ T8007] netlink: 'syz.0.558': attribute type 7 has an invalid length. [ 189.174733][ T8007] netlink: 'syz.0.558': attribute type 8 has an invalid length. [ 189.398674][ T8015] netlink: 'syz.4.560': attribute type 29 has an invalid length. [ 189.781340][ T8021] tipc: Enabling of bearer rejected, failed to enable media [ 189.939477][ T24] ath6kl: Failed to submit usb control message: -71 [ 189.949771][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 189.970872][ T24] ath6kl: Unable to send get target info: -71 [ 189.985707][ T24] ath6kl: Failed to init ath6kl core: -71 [ 189.993159][ T24] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 190.063297][ T24] usb 3-1: USB disconnect, device number 25 [ 190.104459][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 190.276852][ T9] usb 4-1: config 1 has an invalid interface number: 179 but max is 1 [ 190.288194][ T9] usb 4-1: config 1 has an invalid interface number: 61 but max is 1 [ 190.343479][ T9] usb 4-1: config 1 has an invalid interface number: 201 but max is 1 [ 190.372603][ T9] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 190.413356][ T9] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 190.433327][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'. [ 190.453856][ T9] usb 4-1: config 1 has no interface number 0 [ 190.459986][ T9] usb 4-1: config 1 has no interface number 1 [ 190.478655][ T9] usb 4-1: config 1 has no interface number 2 [ 190.494121][ T9] usb 4-1: config 1 interface 179 altsetting 6 endpoint 0xC has an invalid bInterval 128, changing to 7 [ 190.514272][ T9] usb 4-1: config 1 interface 179 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 190.528091][ T9] usb 4-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 190.539033][ T9] usb 4-1: config 1 interface 179 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 190.551260][ T9] usb 4-1: config 1 interface 179 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 190.575102][ T9] usb 4-1: config 1 interface 179 altsetting 6 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 190.618128][ T9] usb 4-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 190.640756][ T9] usb 4-1: config 1 interface 179 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 190.681585][ T9] usb 4-1: config 1 interface 179 altsetting 6 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 190.721110][ T9] usb 4-1: config 1 interface 179 altsetting 6 has an endpoint descriptor with address 0x37, changing to 0x7 [ 190.734415][ T48] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 190.751376][ T9] usb 4-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 190.774690][ T9] usb 4-1: too many endpoints for config 1 interface 61 altsetting 252: 66, using maximum allowed: 30 [ 190.806723][ T9] usb 4-1: config 1 interface 61 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 190.833750][ T9] usb 4-1: config 1 interface 201 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 190.845004][ T9] usb 4-1: config 1 interface 201 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 190.852855][ T8043] can: request_module (can-proto-0) failed. [ 190.869608][ T9] usb 4-1: config 1 interface 201 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 190.902669][ T9] usb 4-1: config 1 interface 201 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 190.937115][ T9] usb 4-1: config 1 interface 179 has no altsetting 0 [ 190.943838][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 190.952324][ T48] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.958021][ T9] usb 4-1: config 1 interface 61 has no altsetting 0 [ 190.962876][ T48] usb 2-1: config 0 has no interface number 0 [ 190.967989][ T8051] fuse: Unknown parameter 'bX' [ 190.974602][ T48] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.983839][ T9] usb 4-1: config 1 interface 201 has no altsetting 0 [ 190.992418][ T48] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.009426][ T48] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 191.018812][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.029296][ T9] usb 4-1: New USB device found, idVendor=07b8, idProduct=420a, bcdDevice=37.0c [ 191.040218][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.042257][ T48] usb 2-1: config 0 descriptor?? [ 191.058843][ T9] usb 4-1: Product: syz [ 191.073403][ T9] usb 4-1: Manufacturer: 䀔噦鵻ᣘ匲䂍걎꽦蝏킉혁睹ᔴ㻣污༟ὅ脅灓认庈ඖ൤튆䌳 ᄠᐺ놬는꿦ₔ挫纵ꄝ꙱횭햱磍瞇ή蓒崲ミᰢᆍ뷗蜴᳧ࡳ⨷臅ⰽ猤浊⫬᭐ၴ೏ᣋ堂ݲ蜠಩袍뵘ꣷ힨ꖂ➧賩۪粽ⷤ똄悒  [ 191.124523][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 191.133854][ T9] usb 4-1: SerialNumber: syz [ 191.202855][ T8054] tipc: Enabled bearer , priority 0 [ 191.283921][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 191.295043][ T24] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 191.305292][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.325310][ T24] usb 1-1: config 0 has no interface number 0 [ 191.331785][ T24] usb 1-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 191.345594][ T24] usb 1-1: config 0 interface 8 has no altsetting 0 [ 191.355300][ T24] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 191.366006][ T9] asix 4-1:1.179: probe with driver asix failed with error -22 [ 191.367366][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.382027][ T24] usb 1-1: Product: syz [ 191.389175][ T24] usb 1-1: Manufacturer: syz [ 191.394941][ T24] usb 1-1: SerialNumber: syz [ 191.430348][ T24] usb 1-1: config 0 descriptor?? [ 191.472211][ T48] holtek_mouse 0003:04D9:A081.000B: unknown global tag 0xe [ 191.480586][ T48] holtek_mouse 0003:04D9:A081.000B: item 0 2 1 14 parsing failed [ 191.496239][ T48] holtek_mouse 0003:04D9:A081.000B: hid parse failed: -22 [ 191.498074][ T9] asix 4-1:1.61: probe with driver asix failed with error -22 [ 191.504783][ T48] holtek_mouse 0003:04D9:A081.000B: probe with driver holtek_mouse failed with error -22 [ 191.523950][ T9] asix 4-1:1.201: probe with driver asix failed with error -22 [ 191.543538][ T9] usb 4-1: USB disconnect, device number 32 [ 191.554572][ T5960] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 191.724148][ T5960] usb 5-1: device descriptor read/64, error -71 [ 191.739418][ T48] usb 2-1: USB disconnect, device number 18 [ 191.964189][ T5960] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 192.093928][ T5960] usb 5-1: device descriptor read/64, error -71 [ 192.181467][ T8063] futex_wake_op: syz.3.575 tries to shift op by 32; fix this program [ 192.210726][ T5960] usb usb5-port1: attempt power cycle [ 192.454444][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 192.575278][ T5960] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 192.604707][ T5960] usb 5-1: device descriptor read/8, error -71 [ 192.615604][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 192.632865][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 192.643854][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.652085][ T9] usb 4-1: Product: syz [ 192.656554][ T9] usb 4-1: Manufacturer: syz [ 192.661682][ T9] usb 4-1: SerialNumber: syz [ 192.677056][ T9] usb 4-1: config 0 descriptor?? [ 192.687661][ T9] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 192.864839][ T48] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 192.872725][ T5960] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 192.905017][ T5960] usb 5-1: device descriptor read/8, error -71 [ 192.906810][ T8063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.922778][ T8063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.012247][ T9] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 193.023916][ T48] usb 2-1: device descriptor read/64, error -71 [ 193.047878][ T5960] usb usb5-port1: unable to enumerate USB device [ 193.303876][ T48] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 193.315608][ T8090] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 193.330480][ T8090] netlink: 'syz.2.578': attribute type 7 has an invalid length. [ 193.338812][ T8090] netlink: 'syz.2.578': attribute type 8 has an invalid length. [ 193.493940][ T48] usb 2-1: device descriptor read/64, error -71 [ 193.605660][ T48] usb usb2-port1: attempt power cycle [ 193.924908][ T24] ath6kl: Failed to submit usb control message: -71 [ 193.938633][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 193.957695][ T24] ath6kl: Unable to send get target info: -71 [ 193.969905][ T24] ath6kl: Failed to init ath6kl core: -71 [ 193.991288][ T24] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 194.013877][ T48] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 194.047291][ T48] usb 2-1: device descriptor read/8, error -71 [ 194.055240][ T24] usb 1-1: USB disconnect, device number 25 [ 194.129465][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'. [ 194.150798][ T8095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'. [ 194.212668][ T8095] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 194.283423][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.302790][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.314034][ T48] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 194.344446][ T48] usb 2-1: device descriptor read/8, error -71 [ 194.474158][ T48] usb usb2-port1: unable to enumerate USB device [ 194.484240][ T5833] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 194.613865][ T5833] usb 5-1: device descriptor read/64, error -71 [ 194.653886][ T48] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 194.683958][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 194.807822][ T48] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 194.817041][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.825098][ T48] usb 1-1: Product: syz [ 194.829349][ T48] usb 1-1: Manufacturer: syz [ 194.834151][ T48] usb 1-1: SerialNumber: syz [ 194.840477][ T48] usb 1-1: config 0 descriptor?? [ 194.843830][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 194.855421][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 194.867500][ T5833] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 194.894283][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.904069][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.912430][ T9] usb 3-1: Manufacturer: င [ 194.920855][ T9] usb 3-1: SerialNumber: syz [ 195.003841][ T5833] usb 5-1: device descriptor read/64, error -71 [ 195.025659][ T48] usb 4-1: USB disconnect, device number 33 [ 195.067847][ T5960] usb 1-1: USB disconnect, device number 26 [ 195.114592][ T5833] usb usb5-port1: attempt power cycle [ 195.475228][ T5833] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 195.504791][ T5833] usb 5-1: device descriptor read/8, error -71 [ 195.603895][ T6200] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 195.677397][ T9] cdc_ncm 3-1:1.0: bind() failure [ 195.698387][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 195.721144][ T9] cdc_ncm 3-1:1.1: bind() failure [ 195.750583][ T9] usb 3-1: USB disconnect, device number 26 [ 195.771532][ T5833] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 195.779323][ T6200] usb 4-1: Using ep0 maxpacket: 8 [ 195.791820][ T6200] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 195.824031][ T6200] usb 4-1: config 0 has no interface number 0 [ 195.834473][ T5833] usb 5-1: device descriptor read/8, error -71 [ 195.848297][ T6200] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 195.871459][ T6200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.895733][ T6200] usb 4-1: config 0 descriptor?? [ 195.954176][ T5833] usb usb5-port1: unable to enumerate USB device [ 196.353975][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 196.360068][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 196.366767][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 196.372812][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 196.376787][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 197.825785][ T5968] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 198.128182][ T8168] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 198.140500][ T5968] usb 5-1: Using ep0 maxpacket: 32 [ 198.149092][ T5968] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 198.163900][ T5968] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.188377][ T8170] netlink: 'syz.2.590': attribute type 7 has an invalid length. [ 198.196735][ T8170] netlink: 'syz.2.590': attribute type 8 has an invalid length. [ 198.237231][ T5968] usb 5-1: config 0 has no interface number 0 [ 198.257850][ T5968] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 198.287278][ T5968] usb 5-1: config 0 interface 8 has no altsetting 0 [ 198.327236][ T5968] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 198.343555][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.370270][ T5968] usb 5-1: Product: syz [ 198.383835][ T5968] usb 5-1: Manufacturer: syz [ 198.401232][ T5968] usb 5-1: SerialNumber: syz [ 198.412169][ T5968] usb 5-1: config 0 descriptor?? [ 198.739304][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 199.094351][ T5833] usb 4-1: USB disconnect, device number 34 [ 199.413843][ T48] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 199.569092][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 199.578772][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.591795][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.602981][ T48] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 199.625240][ T48] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 199.635853][ T8199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.648434][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.695078][ T48] usb 1-1: config 0 descriptor?? [ 200.774358][ T5968] ath6kl: Failed to submit usb control message: -71 [ 200.796570][ T5968] ath6kl: unable to send the bmi data to the device: -71 [ 200.808628][ T5968] ath6kl: Unable to send get target info: -71 [ 200.824535][ T5968] ath6kl: Failed to init ath6kl core: -71 [ 200.831946][ T5968] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 200.918894][ T5968] usb 5-1: USB disconnect, device number 34 [ 201.163566][ T8222] netlink: 116 bytes leftover after parsing attributes in process `syz.4.600'. [ 201.213966][ T5960] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 201.583297][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 201.606414][ T5960] usb 4-1: config 6 has an invalid interface number: 223 but max is 0 [ 201.624293][ T5960] usb 4-1: config 6 has no interface number 0 [ 201.639344][ T8234] openvswitch: netlink: Key type 31 is not supported [ 201.644165][ T5960] usb 4-1: config 6 interface 223 has no altsetting 0 [ 201.698001][ T5960] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=ba.fb [ 201.719788][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.745359][ T5960] usb 4-1: Product: syz [ 201.756559][ T8234] FAULT_INJECTION: forcing a failure. [ 201.756559][ T8234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.790466][ T8234] CPU: 1 UID: 0 PID: 8234 Comm: syz.2.602 Not tainted syzkaller #0 PREEMPT(full) [ 201.790491][ T8234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.790502][ T8234] Call Trace: [ 201.790509][ T8234] [ 201.790516][ T8234] dump_stack_lvl+0x189/0x250 [ 201.790541][ T8234] ? __pfx____ratelimit+0x10/0x10 [ 201.790569][ T8234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.790587][ T8234] ? __pfx__printk+0x10/0x10 [ 201.790620][ T8234] should_fail_ex+0x414/0x560 [ 201.790647][ T8234] _copy_to_user+0x31/0xb0 [ 201.790665][ T8234] __copy_siginfo_to_user32+0xa2/0x110 [ 201.790683][ T8234] ? __pfx___copy_siginfo_to_user32+0x10/0x10 [ 201.790700][ T8234] ? get_sigframe+0x596/0x7d0 [ 201.790731][ T8234] ? posixtimer_deliver_signal+0x305/0x410 [ 201.790756][ T8234] ia32_setup_rt_frame+0x6b0/0xb70 [ 201.790798][ T8234] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 201.790831][ T8234] arch_do_signal_or_restart+0x409/0x7a0 [ 201.790856][ T8234] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 201.790889][ T8234] ? exit_to_user_mode_loop+0x55/0x4f0 [ 201.790917][ T8234] exit_to_user_mode_loop+0x87/0x4f0 [ 201.790933][ T8234] ? rcu_is_watching+0x15/0xb0 [ 201.790953][ T8234] ? asm_int80_emulation+0x1a/0x20 [ 201.790984][ T8234] do_int80_emulation+0x2c6/0x410 [ 201.791009][ T8234] ? clear_bhb_loop+0x60/0xb0 [ 201.791025][ T8234] ? clear_bhb_loop+0x60/0xb0 [ 201.791045][ T8234] asm_int80_emulation+0x1a/0x20 [ 201.791060][ T8234] RIP: 0023:0xf703d537 [ 201.791075][ T8234] Code: 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 201.791090][ T8234] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 201.791108][ T8234] RAX: 0000000000000174 RBX: 000000000000000a RCX: 0000000080000000 [ 201.791119][ T8234] RDX: 0000000000000123 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.791130][ T8234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.791139][ T8234] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 201.791148][ T8234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.791175][ T8234] [ 202.006640][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.072693][ T5960] usb 4-1: Manufacturer: syz [ 202.078584][ T5960] usb 4-1: SerialNumber: syz [ 202.205135][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 202.299942][ T5960] hdpvr 4-1:6.223: Could not find bulk-in endpoint [ 202.306766][ T5960] hdpvr 4-1:6.223: probe with driver hdpvr failed with error -12 [ 202.332515][ T5960] usb 4-1: USB disconnect, device number 35 [ 202.555560][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 202.813947][ T48] usbhid 1-1:0.0: can't add hid device: -71 [ 202.814281][ T8261] tipc: Enabling of bearer rejected, failed to enable media [ 202.819990][ T48] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 202.894715][ T48] usb 1-1: USB disconnect, device number 27 [ 202.910949][ T8257] syzkaller0: entered promiscuous mode [ 202.929450][ T8257] syzkaller0: entered allmulticast mode [ 202.965353][ T8265] openvswitch: netlink: Tunnel attr 152 out of range max 16 [ 203.182108][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.611'. [ 203.276071][ T8278] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 203.295448][ T8278] netlink: 'syz.3.609': attribute type 7 has an invalid length. [ 203.305845][ T8278] netlink: 'syz.3.609': attribute type 8 has an invalid length. [ 203.384260][ T48] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 203.396156][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 203.563846][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 203.571879][ T48] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 203.581136][ T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.595175][ T24] usb 2-1: config 1 has an invalid interface number: 179 but max is 1 [ 203.603506][ T24] usb 2-1: config 1 has an invalid interface number: 61 but max is 1 [ 203.620542][ T48] usb 1-1: config 0 has no interface number 0 [ 203.629094][ T24] usb 2-1: config 1 has an invalid interface number: 201 but max is 1 [ 203.643026][ T48] usb 1-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 203.666995][ T24] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 203.701755][ T48] usb 1-1: config 0 interface 8 has no altsetting 0 [ 203.710206][ T24] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 203.741232][ T48] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 203.759946][ T24] usb 2-1: config 1 has no interface number 0 [ 203.771627][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.784831][ T24] usb 2-1: config 1 has no interface number 1 [ 203.794056][ T48] usb 1-1: Product: syz [ 203.798433][ T24] usb 2-1: config 1 has no interface number 2 [ 203.806382][ T48] usb 1-1: Manufacturer: syz [ 203.812027][ T24] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0xC has an invalid bInterval 128, changing to 7 [ 203.824119][ T48] usb 1-1: SerialNumber: syz [ 203.832855][ T48] usb 1-1: config 0 descriptor?? [ 203.838734][ T24] usb 2-1: config 1 interface 179 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 203.893256][ T24] usb 2-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 204.012801][ T24] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 204.079338][ T24] usb 2-1: config 1 interface 179 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 204.143872][ T24] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 204.180853][ T24] usb 2-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 204.195320][ T24] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 204.206869][ T24] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 204.219249][ T24] usb 2-1: config 1 interface 179 altsetting 6 has an endpoint descriptor with address 0x37, changing to 0x7 [ 204.433146][ T24] usb 2-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 204.674279][ T24] usb 2-1: too many endpoints for config 1 interface 61 altsetting 252: 66, using maximum allowed: 30 [ 204.728062][ T24] usb 2-1: config 1 interface 61 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 204.772829][ T24] usb 2-1: config 1 interface 201 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 204.815110][ T24] usb 2-1: config 1 interface 201 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 204.862917][ T24] usb 2-1: config 1 interface 201 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 204.905822][ T24] usb 2-1: config 1 interface 201 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 204.954905][ T24] usb 2-1: config 1 interface 179 has no altsetting 0 [ 204.980928][ T24] usb 2-1: config 1 interface 61 has no altsetting 0 [ 205.003269][ T24] usb 2-1: config 1 interface 201 has no altsetting 0 [ 205.028898][ T24] usb 2-1: New USB device found, idVendor=07b8, idProduct=420a, bcdDevice=37.0c [ 205.038127][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.053725][ T24] usb 2-1: Product: syz [ 205.066249][ T24] usb 2-1: Manufacturer: 䀔噦鵻ᣘ匲䂍걎꽦蝏킉혁睹ᔴ㻣污༟ὅ脅灓认庈ඖ൤튆䌳 ᄠᐺ놬는꿦ₔ挫纵ꄝ꙱횭햱磍瞇ή蓒崲ミᰢᆍ뷗蜴᳧ࡳ⨷臅ⰽ猤浊⫬᭐ၴ೏ᣋ堂ݲ蜠಩袍뵘ꣷ힨ꖂ➧賩۪粽ⷤ똄悒  [ 205.093968][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.141665][ T24] usb 2-1: SerialNumber: syz [ 205.409488][ T24] asix 2-1:1.179: probe with driver asix failed with error -22 [ 205.469093][ T24] asix 2-1:1.61: probe with driver asix failed with error -22 [ 205.517125][ T24] asix 2-1:1.201: probe with driver asix failed with error -22 [ 205.577810][ T24] usb 2-1: USB disconnect, device number 23 [ 205.735080][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 206.063840][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 206.129690][ T48] ath6kl: Failed to submit usb control message: -71 [ 206.165959][ T48] ath6kl: unable to send the bmi data to the device: -71 [ 206.207164][ T48] ath6kl: Unable to send get target info: -71 [ 206.234149][ T8337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.623'. [ 206.244184][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 206.260402][ T48] ath6kl: Failed to init ath6kl core: -71 [ 206.276928][ T9] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 206.292835][ T9] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 206.302444][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.303505][ T48] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 206.333211][ T9] usb 5-1: Product: syz [ 206.341528][ T9] usb 5-1: Manufacturer: syz [ 206.350088][ T9] usb 5-1: SerialNumber: syz [ 206.374122][ T48] usb 1-1: USB disconnect, device number 28 [ 206.418641][ T9] usb 5-1: config 0 descriptor?? [ 206.440178][ T9] cdc_ether 5-1:0.0: skipping garbage [ 206.460642][ T9] usb 5-1: bad CDC descriptors [ 206.491324][ T9] usb 5-1: unsupported MDLM descriptors [ 206.557822][ T8344] netlink: 5 bytes leftover after parsing attributes in process `syz.1.627'. [ 206.568059][ T8342] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 207.431991][ T8351] netlink: 76 bytes leftover after parsing attributes in process `syz.3.629'. [ 207.496074][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 207.503827][ T8364] tipc: Enabling of bearer rejected, failed to enable media [ 207.610856][ T8364] syzkaller0: entered promiscuous mode [ 207.610881][ T8364] syzkaller0: entered allmulticast mode [ 207.780661][ T8375] fuse: Unknown parameter 'bX' [ 207.823866][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 207.913912][ T5833] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 207.976061][ T9] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 207.985169][ T9] usb 3-1: config 0 has no interface number 0 [ 207.993086][ T9] usb 3-1: config 0 interface 122 has no altsetting 0 [ 208.007340][ T48] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 208.016387][ T9] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 208.026173][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.034833][ T9] usb 3-1: Product: syz [ 208.039215][ T9] usb 3-1: Manufacturer: syz [ 208.044552][ T9] usb 3-1: SerialNumber: syz [ 208.056884][ T9] usb 3-1: config 0 descriptor?? [ 208.063841][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 208.070657][ T5833] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 208.079199][ T5833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.092975][ T5833] usb 4-1: config 0 has no interface number 0 [ 208.103504][ T5833] usb 4-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 208.120820][ T5833] usb 4-1: config 0 interface 8 has no altsetting 0 [ 208.134096][ T5833] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 208.143486][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.155039][ T5833] usb 4-1: Product: syz [ 208.159328][ T5833] usb 4-1: Manufacturer: syz [ 208.164379][ T5833] usb 4-1: SerialNumber: syz [ 208.185502][ T48] usb 2-1: config 1 has an invalid interface number: 179 but max is 1 [ 208.185644][ T5833] usb 4-1: config 0 descriptor?? [ 208.193745][ T48] usb 2-1: config 1 has an invalid interface number: 61 but max is 1 [ 208.207344][ T48] usb 2-1: config 1 has an invalid interface number: 201 but max is 1 [ 208.222609][ T48] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 208.239224][ T48] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 208.249203][ T48] usb 2-1: config 1 has no interface number 0 [ 208.257286][ T48] usb 2-1: config 1 has no interface number 1 [ 208.264355][ T48] usb 2-1: config 1 has no interface number 2 [ 208.271127][ T48] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0xC has an invalid bInterval 128, changing to 7 [ 208.290652][ T48] usb 2-1: config 1 interface 179 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 208.312272][ T48] usb 2-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 208.326314][ T48] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 208.338032][ T48] usb 2-1: config 1 interface 179 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 208.351528][ T48] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 208.363156][ T48] usb 2-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 208.374455][ T48] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 208.385967][ T48] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 208.397735][ T48] usb 2-1: config 1 interface 179 altsetting 6 has an endpoint descriptor with address 0x37, changing to 0x7 [ 208.409996][ T48] usb 2-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 208.421429][ T48] usb 2-1: too many endpoints for config 1 interface 61 altsetting 252: 66, using maximum allowed: 30 [ 208.458882][ T48] usb 2-1: config 1 interface 61 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 208.492025][ T24] usb 5-1: USB disconnect, device number 35 [ 208.586101][ T48] usb 2-1: config 1 interface 201 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 208.629856][ T48] usb 2-1: config 1 interface 201 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 208.647810][ T48] usb 2-1: config 1 interface 201 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 208.678765][ T8380] fuse: Unknown parameter 'bX' [ 208.689284][ T48] usb 2-1: config 1 interface 201 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 208.767874][ T48] usb 2-1: config 1 interface 179 has no altsetting 0 [ 208.778420][ T48] usb 2-1: config 1 interface 61 has no altsetting 0 [ 208.786501][ T48] usb 2-1: config 1 interface 201 has no altsetting 0 [ 208.827767][ T48] usb 2-1: New USB device found, idVendor=07b8, idProduct=420a, bcdDevice=37.0c [ 208.838136][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.849818][ T48] usb 2-1: Product: syz [ 208.857855][ T48] usb 2-1: Manufacturer: 䀔噦鵻ᣘ匲䂍걎꽦蝏킉혁睹ᔴ㻣污༟ὅ脅灓认庈ඖ൤튆䌳 ᄠᐺ놬는꿦ₔ挫纵ꄝ꙱횭햱磍瞇ή蓒崲ミᰢᆍ뷗蜴᳧ࡳ⨷臅ⰽ猤浊⫬᭐ၴ೏ᣋ堂ݲ蜠಩袍뵘ꣷ힨ꖂ➧賩۪粽ⷤ똄悒  [ 208.886222][ T48] usb 2-1: SerialNumber: syz [ 209.165524][ T48] asix 2-1:1.179: probe with driver asix failed with error -22 [ 209.209993][ T48] asix 2-1:1.61: probe with driver asix failed with error -22 [ 209.304686][ T48] asix 2-1:1.201: probe with driver asix failed with error -22 [ 209.341648][ T48] usb 2-1: USB disconnect, device number 24 [ 210.236521][ T8391] FAULT_INJECTION: forcing a failure. [ 210.236521][ T8391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.249767][ T8391] CPU: 1 UID: 0 PID: 8391 Comm: syz.0.639 Not tainted syzkaller #0 PREEMPT(full) [ 210.249796][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.249806][ T8391] Call Trace: [ 210.249813][ T8391] [ 210.249819][ T8391] dump_stack_lvl+0x189/0x250 [ 210.249844][ T8391] ? __pfx____ratelimit+0x10/0x10 [ 210.249867][ T8391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.249892][ T8391] ? __pfx__printk+0x10/0x10 [ 210.249924][ T8391] should_fail_ex+0x414/0x560 [ 210.249951][ T8391] _copy_to_user+0x31/0xb0 [ 210.249970][ T8391] video_usercopy+0xd93/0x13f0 [ 210.250000][ T8391] ? __pfx___video_do_ioctl+0x10/0x10 [ 210.250018][ T8391] ? __pfx_video_usercopy+0x10/0x10 [ 210.250054][ T8391] ? __fget_files+0x2a/0x420 [ 210.250072][ T8391] v4l2_ioctl+0x18d/0x1e0 [ 210.250093][ T8391] v4l2_compat_ioctl32+0x1d7/0x260 [ 210.250120][ T8391] __ia32_compat_sys_ioctl+0x543/0x840 [ 210.250143][ T8391] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 210.250163][ T8391] ? __fget_files+0x3a0/0x420 [ 210.250184][ T8391] ? fput+0xa0/0xd0 [ 210.250201][ T8391] ? ksys_write+0x22a/0x250 [ 210.250220][ T8391] ? exc_page_fault+0x82/0x100 [ 210.250244][ T8391] ? __pfx_ksys_write+0x10/0x10 [ 210.250268][ T8391] ? __do_fast_syscall_32+0xbe/0x570 [ 210.250289][ T8391] __do_fast_syscall_32+0x1f7/0x570 [ 210.250307][ T8391] ? rcu_is_watching+0x15/0xb0 [ 210.250324][ T8391] ? do_fast_syscall_32+0x34/0x80 [ 210.250346][ T8391] do_fast_syscall_32+0x34/0x80 [ 210.250363][ T8391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.250382][ T8391] RIP: 0023:0xf7fa1539 [ 210.250402][ T8391] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 210.250416][ T8391] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 210.250434][ T8391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008561c [ 210.250446][ T8391] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.250456][ T8391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.250465][ T8391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 210.250475][ T8391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.250501][ T8391] [ 210.263923][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 210.273179][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.509696][ T6200] usb 3-1: USB disconnect, device number 27 [ 210.518661][ T6200] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 210.686795][ T5833] ath6kl: Failed to submit usb control message: -71 [ 210.694783][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 210.712401][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.734527][ T5833] ath6kl: unable to send the bmi data to the device: -71 [ 210.741603][ T5833] ath6kl: Unable to send get target info: -71 [ 210.747814][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.760249][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 210.778253][ T5833] ath6kl: Failed to init ath6kl core: -71 [ 210.785380][ T5833] ath6kl_usb 4-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 210.794600][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.794806][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 210.815065][ T9] usb 2-1: config 0 descriptor?? [ 210.848045][ T5833] usb 4-1: USB disconnect, device number 36 [ 211.186910][ T8416] fuse: Unknown parameter 'bX' [ 211.226236][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 211.238213][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 211.323326][ T9] usb 2-1: USB disconnect, device number 25 [ 211.635821][ T5833] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 212.046583][ T5833] usb 5-1: device descriptor read/64, error -71 [ 212.313862][ T5833] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 212.484408][ T5968] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 212.573943][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 212.623962][ T5833] usb 5-1: device descriptor read/64, error -71 [ 212.653901][ T5968] usb 4-1: Using ep0 maxpacket: 8 [ 212.719738][ T5968] usb 4-1: config 162 has an invalid interface number: 197 but max is 1 [ 212.728665][ T5968] usb 4-1: config 162 has an invalid interface number: 143 but max is 1 [ 212.738702][ T5968] usb 4-1: config 162 has no interface number 0 [ 212.744301][ T5833] usb usb5-port1: attempt power cycle [ 212.783856][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 212.790533][ T9] usb 2-1: config 162 has an invalid interface number: 197 but max is 1 [ 212.799450][ T9] usb 2-1: config 162 has an invalid interface number: 143 but max is 1 [ 212.814323][ T5968] usb 4-1: config 162 has no interface number 1 [ 212.824522][ T9] usb 2-1: config 162 has no interface number 0 [ 212.837410][ T9] usb 2-1: config 162 has no interface number 1 [ 212.855706][ T9] usb 2-1: config 162 interface 197 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 212.870679][ T9] usb 2-1: config 162 interface 143 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 212.929073][ T9] usb 2-1: config 162 interface 143 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 212.941561][ T5968] usb 4-1: config 162 interface 197 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 212.960630][ T5968] usb 4-1: config 162 interface 143 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 212.987574][ T5968] usb 4-1: config 162 interface 143 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 213.016497][ T5968] usb 4-1: config 162 interface 143 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 213.103985][ T5833] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 213.115177][ T9] usb 2-1: config 162 interface 143 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 213.127730][ T5968] usb 4-1: config 162 interface 143 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 213.150164][ T9] usb 2-1: config 162 interface 143 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 213.160894][ T9] usb 2-1: config 162 interface 143 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 213.174364][ T9] usb 2-1: config 162 interface 197 has no altsetting 0 [ 213.181331][ T9] usb 2-1: config 162 interface 143 has no altsetting 0 [ 213.195054][ T5833] usb 5-1: device descriptor read/8, error -71 [ 213.216393][ T9] usb 2-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 213.229772][ T5968] usb 4-1: config 162 interface 143 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 213.285746][ T5968] usb 4-1: config 162 interface 197 has no altsetting 0 [ 213.315516][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.324835][ T9] usb 2-1: Product: syz [ 213.329200][ T9] usb 2-1: Manufacturer: syz [ 213.334151][ T9] usb 2-1: SerialNumber: syz [ 213.386803][ T5968] usb 4-1: config 162 interface 143 has no altsetting 0 [ 213.420091][ T5968] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 213.430031][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.438496][ T5968] usb 4-1: Product: syz [ 213.442986][ T5968] usb 4-1: Manufacturer: syz [ 213.453284][ T5968] usb 4-1: SerialNumber: syz [ 213.454082][ T5833] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 213.564563][ T5833] usb 5-1: device descriptor read/8, error -71 [ 213.569532][ T5837] Bluetooth: hci0: unexpected event for opcode 0x204e [ 213.583840][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.599786][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.704066][ T5833] usb usb5-port1: unable to enumerate USB device [ 213.717961][ T5837] Bluetooth: hci5: HCI Read Local Supported Commands not supported [ 213.729775][ T9] usb 2-1: USB disconnect, device number 26 [ 213.738616][ T5834] Bluetooth: hci5: sending frame failed (-19) [ 213.749928][ T5837] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 213.857676][ T5837] Bluetooth: hci1: unexpected event for opcode 0x204e [ 213.868347][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.878260][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.078362][ T5837] Bluetooth: hci5: HCI Read Local Supported Commands not supported [ 214.089926][ T5837] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 214.104892][ T5968] usb 4-1: USB disconnect, device number 37 [ 214.239695][ T8447] FAULT_INJECTION: forcing a failure. [ 214.239695][ T8447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.283854][ T8447] CPU: 0 UID: 0 PID: 8447 Comm: syz.3.655 Not tainted syzkaller #0 PREEMPT(full) [ 214.283878][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.283889][ T8447] Call Trace: [ 214.283896][ T8447] [ 214.283902][ T8447] dump_stack_lvl+0x189/0x250 [ 214.283924][ T8447] ? __pfx____ratelimit+0x10/0x10 [ 214.283952][ T8447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.283969][ T8447] ? __pfx__printk+0x10/0x10 [ 214.284002][ T8447] should_fail_ex+0x414/0x560 [ 214.284027][ T8447] _copy_to_user+0x31/0xb0 [ 214.284046][ T8447] simple_read_from_buffer+0xe1/0x170 [ 214.284073][ T8447] proc_fail_nth_read+0x1b3/0x220 [ 214.284098][ T8447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.284121][ T8447] ? rw_verify_area+0x2a6/0x4d0 [ 214.284139][ T8447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.284161][ T8447] vfs_read+0x200/0xa30 [ 214.284179][ T8447] ? fdget_pos+0x247/0x320 [ 214.284198][ T8447] ? __pfx___mutex_lock+0x10/0x10 [ 214.284215][ T8447] ? __pfx_vfs_read+0x10/0x10 [ 214.284235][ T8447] ? __fget_files+0x2a/0x420 [ 214.284254][ T8447] ? __fget_files+0x3a0/0x420 [ 214.284268][ T8447] ? __fget_files+0x2a/0x420 [ 214.284290][ T8447] ksys_read+0x145/0x250 [ 214.284312][ T8447] ? __pfx_ksys_read+0x10/0x10 [ 214.284335][ T8447] ? __do_fast_syscall_32+0xbe/0x570 [ 214.284356][ T8447] __do_fast_syscall_32+0x1f7/0x570 [ 214.284373][ T8447] ? rcu_is_watching+0x15/0xb0 [ 214.284391][ T8447] ? do_fast_syscall_32+0x34/0x80 [ 214.284412][ T8447] do_fast_syscall_32+0x34/0x80 [ 214.284438][ T8447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.284458][ T8447] RIP: 0023:0xf7f57539 [ 214.284471][ T8447] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 214.284486][ T8447] RSP: 002b:00000000f5446590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 214.284504][ T8447] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5446620 [ 214.284515][ T8447] RDX: 000000000000000f RSI: 00000000f73e6ff4 RDI: 0000000000000000 [ 214.284526][ T8447] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 214.284536][ T8447] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 214.284545][ T8447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.284572][ T8447] [ 215.293874][ T6200] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 215.300546][ T8471] trusted_key: encrypted_key: insufficient parameters specified [ 215.473908][ T6200] usb 3-1: Using ep0 maxpacket: 8 [ 215.483099][ T6200] usb 3-1: config 162 has an invalid interface number: 197 but max is 1 [ 215.497044][ T6200] usb 3-1: config 162 has an invalid interface number: 143 but max is 1 [ 215.505827][ T6200] usb 3-1: config 162 has no interface number 0 [ 215.512588][ T6200] usb 3-1: config 162 has no interface number 1 [ 215.537803][ T6200] usb 3-1: config 162 interface 197 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 215.552044][ T6200] usb 3-1: config 162 interface 143 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 215.567525][ T6200] usb 3-1: config 162 interface 143 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 215.581329][ T6200] usb 3-1: config 162 interface 143 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 215.595806][ T6200] usb 3-1: config 162 interface 143 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 215.615152][ T6200] usb 3-1: config 162 interface 143 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 215.630975][ T6200] usb 3-1: config 162 interface 197 has no altsetting 0 [ 215.722389][ T6200] usb 3-1: config 162 interface 143 has no altsetting 0 [ 215.764602][ T6200] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 215.780653][ T6200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.798088][ T8482] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.667'. [ 215.828023][ T6200] usb 3-1: Product: syz [ 215.833902][ T6200] usb 3-1: Manufacturer: syz [ 215.856188][ T6200] usb 3-1: SerialNumber: syz [ 216.084972][ T5837] Bluetooth: hci4: unexpected event for opcode 0x204e [ 216.096219][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.114217][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.162494][ T5837] Bluetooth: hci5: HCI Read Local Supported Commands not supported [ 216.176406][ T5837] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 216.195636][ T6200] usb 3-1: USB disconnect, device number 28 [ 216.574393][ T48] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 216.737007][ T48] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 216.745540][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.759591][ T5968] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 216.802100][ T48] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 216.816434][ T48] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 216.828773][ T48] usb 5-1: Manufacturer: syz [ 216.837237][ T48] usb 5-1: config 0 descriptor?? [ 216.923891][ T5968] usb 2-1: Using ep0 maxpacket: 16 [ 216.959971][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.992233][ T5968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.010361][ T5968] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 217.044799][ T48] rc_core: IR keymap rc-hauppauge not found [ 217.062463][ T48] Registered IR keymap rc-empty [ 217.071308][ T5968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.084321][ T48] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 217.102056][ T5968] usb 2-1: config 0 descriptor?? [ 217.138447][ T48] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 217.165060][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 217.236777][ T48] usb 5-1: USB disconnect, device number 40 [ 217.533881][ T6200] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 217.663959][ T6200] usb 4-1: device descriptor read/64, error -71 [ 217.703914][ T48] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 217.843924][ T5833] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 217.854090][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 217.861689][ T48] usb 3-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 217.874946][ T48] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.887449][ T48] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.897011][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.905149][ T48] usb 3-1: Product: syz [ 217.909548][ T48] usb 3-1: Manufacturer: syz [ 217.913929][ T6200] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 217.914331][ T48] usb 3-1: SerialNumber: syz [ 217.945678][ T5968] usb 2-1: language id specifier not provided by device, defaulting to English [ 218.019068][ T5833] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 218.031288][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.040661][ T5833] usb 1-1: Product: syz [ 218.046475][ T5833] usb 1-1: Manufacturer: syz [ 218.051144][ T5833] usb 1-1: SerialNumber: syz [ 218.055910][ T6200] usb 4-1: device descriptor read/64, error -71 [ 218.146522][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.157375][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.168683][ T48] usb 3-1: 0:2 : does not exist [ 218.177078][ T6200] usb usb4-port1: attempt power cycle [ 218.187649][ T5968] letsketch 0003:6161:4D15.000C: Device info:   [ 218.199102][ T48] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 218.242690][ T48] usb 3-1: USB disconnect, device number 29 [ 218.417814][ T5968] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 218.426800][ T5968] letsketch 0003:6161:4D15.000C: probe with driver letsketch failed with error -71 [ 218.440874][ T5968] usb 2-1: USB disconnect, device number 27 [ 218.477756][ T5833] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 218.494012][ T5833] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 218.543886][ T6200] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 218.564731][ T6200] usb 4-1: device descriptor read/8, error -71 [ 218.603860][ T48] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 218.753890][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 218.766557][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 218.777795][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.787698][ T48] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 218.797839][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.808252][ T48] usb 5-1: config 0 descriptor?? [ 218.814013][ T6200] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 218.846193][ T6200] usb 4-1: device descriptor read/8, error -71 [ 218.955553][ T6200] usb usb4-port1: unable to enumerate USB device [ 218.995573][ T5877] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 218.999918][ T8535] syzkaller0: entered promiscuous mode [ 219.008797][ T8535] syzkaller0: entered allmulticast mode [ 219.156099][ T5877] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 219.165623][ T5877] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 219.175330][ T5877] usb 3-1: config 1 has no interface number 1 [ 219.181656][ T5877] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 219.195043][ T5877] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.209074][ T5877] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.218498][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.226644][ T5877] usb 3-1: Product: syz [ 219.231080][ T5877] usb 3-1: Manufacturer: syz [ 219.236017][ T5877] usb 3-1: SerialNumber: syz [ 219.376474][ T48] nintendo 0003:057E:200E.000D: unknown main item tag 0x0 [ 219.384661][ T48] nintendo 0003:057E:200E.000D: unknown main item tag 0x0 [ 219.392121][ T48] nintendo 0003:057E:200E.000D: unknown main item tag 0x0 [ 219.401830][ T48] nintendo 0003:057E:200E.000D: unknown main item tag 0x0 [ 219.409800][ T48] nintendo 0003:057E:200E.000D: unknown main item tag 0x0 [ 219.443021][ T48] nintendo 0003:057E:200E.000D: hidraw0: USB HID v80.04 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 219.458365][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 219.501114][ T5877] usb 3-1: 2:1 : unsupported format bits 0x40 [ 219.534589][ T48] nintendo 0003:057E:200E.000D: Failed charging grip handshake [ 219.564128][ T5877] usb 3-1: USB disconnect, device number 30 [ 219.573216][ T48] nintendo 0003:057E:200E.000D: Failed to initialize controller; ret=-110 [ 219.655527][ T48] nintendo 0003:057E:200E.000D: probe - fail = -110 [ 219.659868][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.664394][ T48] nintendo 0003:057E:200E.000D: probe with driver nintendo failed with error -110 [ 220.561784][ T8521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.578503][ T8521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.648550][ T5833] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 220.677764][ T5833] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 220.688655][ T5833] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 220.699513][ T5833] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 220.718181][ T5833] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 220.733080][ T5833] usb 1-1: USB disconnect, device number 29 [ 220.907126][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 221.035043][ T8542] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 221.042481][ T8542] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 221.135464][ T24] usb 5-1: USB disconnect, device number 41 [ 221.485510][ T8572] loop6: detected capacity change from 0 to 524287999 [ 221.532541][ T8575] netlink: 52 bytes leftover after parsing attributes in process `syz.3.696'. [ 221.556571][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.773880][ T5833] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 221.845308][ T8586] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 221.851856][ T8586] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 221.864155][ T8586] vhci_hcd vhci_hcd.0: Device attached [ 221.876399][ T8588] vhci_hcd: connection closed [ 221.877833][ T5969] vhci_hcd: stop threads [ 221.887423][ T5969] vhci_hcd: release socket [ 221.891917][ T5969] vhci_hcd: disconnect device [ 221.938621][ T5833] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 221.947846][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.956316][ T5833] usb 1-1: Product: syz [ 221.960557][ T5833] usb 1-1: Manufacturer: syz [ 221.965623][ T5833] usb 1-1: SerialNumber: syz [ 221.979561][ T5833] usb 1-1: config 0 descriptor?? [ 221.990550][ T5833] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 222.470355][ T5833] sonixb 1-1:0.0: Error reading register 00: -71 [ 222.492130][ T5833] usb 1-1: USB disconnect, device number 30 [ 222.632610][ T8595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.703'. [ 222.676209][ T8595] tipc: Cannot configure node identity twice [ 222.702522][ T8595] tipc: Cannot configure node identity twice [ 222.912268][ T8607] netlink: 40 bytes leftover after parsing attributes in process `syz.3.707'. [ 223.184111][ T5833] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 223.353867][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 223.434948][ T5833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 223.442561][ T5833] usb 4-1: can't read configurations, error -61 [ 223.456586][ T8620] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 223.474078][ T8620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.595560][ T5833] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 223.783871][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 223.791493][ T5833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 223.822156][ T5833] usb 4-1: can't read configurations, error -61 [ 223.831706][ T5833] usb usb4-port1: attempt power cycle [ 224.064122][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 224.193929][ T5833] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 224.223208][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 224.249107][ T5833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 224.264267][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 224.330211][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.351758][ T8634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.717'. [ 224.361637][ T5833] usb 4-1: can't read configurations, error -61 [ 224.364921][ T8634] tipc: Cannot configure node identity twice [ 224.374940][ T8634] tipc: Cannot configure node identity twice [ 224.396446][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.431856][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 224.472412][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 224.507181][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.540695][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 224.562856][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 224.572241][ T5833] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 224.580180][ T9] usb 1-1: Manufacturer: syz [ 224.587849][ T9] usb 1-1: config 0 descriptor?? [ 224.614203][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 224.741067][ T5833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 224.758562][ T5833] usb 4-1: can't read configurations, error -61 [ 224.774315][ T5833] usb usb4-port1: unable to enumerate USB device [ 224.898611][ T8623] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20004 [ 225.374917][ T8648] hub 9-0:1.0: USB hub found [ 225.402341][ T8648] hub 9-0:1.0: 1 port detected [ 225.539706][ T8654] syzkaller0: entered promiscuous mode [ 225.545430][ T8654] syzkaller0: entered allmulticast mode [ 225.599503][ T8653] FAULT_INJECTION: forcing a failure. [ 225.599503][ T8653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.613292][ T8653] CPU: 0 UID: 0 PID: 8653 Comm: syz.4.721 Not tainted syzkaller #0 PREEMPT(full) [ 225.613307][ T8653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.613314][ T8653] Call Trace: [ 225.613318][ T8653] [ 225.613322][ T8653] dump_stack_lvl+0x189/0x250 [ 225.613338][ T8653] ? __pfx____ratelimit+0x10/0x10 [ 225.613353][ T8653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.613371][ T8653] ? __pfx__printk+0x10/0x10 [ 225.613392][ T8653] should_fail_ex+0x414/0x560 [ 225.613408][ T8653] _copy_to_user+0x31/0xb0 [ 225.613419][ T8653] simple_read_from_buffer+0xe1/0x170 [ 225.613436][ T8653] proc_fail_nth_read+0x1b3/0x220 [ 225.613451][ T8653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.613464][ T8653] ? rw_verify_area+0x2a6/0x4d0 [ 225.613476][ T8653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.613489][ T8653] vfs_read+0x200/0xa30 [ 225.613503][ T8653] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 225.613514][ T8653] ? __pfx_vfs_read+0x10/0x10 [ 225.613524][ T8653] ? count_memcg_event_mm+0x21/0x260 [ 225.613538][ T8653] ? do_compat_pselect+0x27e/0x2d0 [ 225.613553][ T8653] ? count_memcg_event_mm+0x21/0x260 [ 225.613568][ T8653] ksys_read+0x145/0x250 [ 225.613580][ T8653] ? __pfx_ksys_read+0x10/0x10 [ 225.613594][ T8653] ? __do_fast_syscall_32+0xbe/0x570 [ 225.613606][ T8653] __do_fast_syscall_32+0x1f7/0x570 [ 225.613616][ T8653] ? rcu_is_watching+0x15/0xb0 [ 225.613626][ T8653] ? do_fast_syscall_32+0x34/0x80 [ 225.613638][ T8653] do_fast_syscall_32+0x34/0x80 [ 225.613648][ T8653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.613659][ T8653] RIP: 0023:0xf7f76539 [ 225.613668][ T8653] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 225.613677][ T8653] RSP: 002b:00000000f5466590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 225.613688][ T8653] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5466620 [ 225.613694][ T8653] RDX: 000000000000000f RSI: 00000000f7406ff4 RDI: 0000000000000000 [ 225.613700][ T8653] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 225.613705][ T8653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 225.613710][ T8653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.613724][ T8653] [ 226.253844][ T48] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 226.403970][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 226.411546][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.425213][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.435455][ T5877] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 226.446452][ T48] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 226.456934][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.476613][ T48] usb 3-1: config 0 descriptor?? [ 226.600731][ T5877] usb 2-1: config 1 has an invalid interface number: 179 but max is 1 [ 226.615041][ T5877] usb 2-1: config 1 has an invalid interface number: 61 but max is 1 [ 226.633903][ T5877] usb 2-1: config 1 has an invalid interface number: 201 but max is 1 [ 226.652430][ T5877] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 226.664018][ T9] rc_core: IR keymap rc-hauppauge not found [ 226.670596][ T5877] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 226.681139][ T5877] usb 2-1: config 1 has no interface number 0 [ 226.683853][ T9] Registered IR keymap rc-empty [ 226.693702][ T5877] usb 2-1: config 1 has no interface number 1 [ 226.700859][ T5877] usb 2-1: config 1 has no interface number 2 [ 226.707292][ T5877] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0xC has an invalid bInterval 128, changing to 7 [ 226.712627][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.719123][ T5877] usb 2-1: config 1 interface 179 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 226.739358][ T5877] usb 2-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 226.750601][ T5877] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 226.753972][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.762316][ T5877] usb 2-1: config 1 interface 179 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 226.780348][ T5877] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 226.793864][ T5877] usb 2-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 226.795687][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 226.805362][ T5877] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 226.830036][ T5877] usb 2-1: config 1 interface 179 altsetting 6 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 226.841664][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22 [ 226.844080][ T5877] usb 2-1: config 1 interface 179 altsetting 6 has an endpoint descriptor with address 0x37, changing to 0x7 [ 226.866703][ T5877] usb 2-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 226.878836][ T5877] usb 2-1: too many endpoints for config 1 interface 61 altsetting 252: 66, using maximum allowed: 30 [ 226.884243][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.924126][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.962306][ T5877] usb 2-1: config 1 interface 61 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 226.988637][ T5877] usb 2-1: config 1 interface 201 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 226.992633][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.000732][ T5877] usb 2-1: config 1 interface 201 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 227.022306][ T5877] usb 2-1: config 1 interface 201 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 227.034904][ T8668] netlink: 44 bytes leftover after parsing attributes in process `syz.4.726'. [ 227.052660][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.726'. [ 227.062424][ T5877] usb 2-1: config 1 interface 201 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 227.063885][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.080388][ T5877] usb 2-1: config 1 interface 179 has no altsetting 0 [ 227.090604][ T5877] usb 2-1: config 1 interface 61 has no altsetting 0 [ 227.108926][ T48] usb 3-1: language id specifier not provided by device, defaulting to English [ 227.126604][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.147053][ T5877] usb 2-1: config 1 interface 201 has no altsetting 0 [ 227.166929][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.174803][ T5877] usb 2-1: New USB device found, idVendor=07b8, idProduct=420a, bcdDevice=37.0c [ 227.193988][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.204452][ T5877] usb 2-1: Product: syz [ 227.208675][ T5877] usb 2-1: Manufacturer: 䀔噦鵻ᣘ匲䂍걎꽦蝏킉혁睹ᔴ㻣污༟ὅ脅灓认庈ඖ൤튆䌳 ᄠᐺ놬는꿦ₔ挫纵ꄝ꙱횭햱磍瞇ή蓒崲ミᰢᆍ뷗蜴᳧ࡳ⨷臅ⰽ猤浊⫬᭐ၴ೏ᣋ堂ݲ蜠಩袍뵘ꣷ힨ꖂ➧賩۪粽ⷤ똄悒  [ 227.238564][ T5877] usb 2-1: SerialNumber: syz [ 227.241329][ T8674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.729'. [ 227.256210][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.274986][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.277041][ T8672] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.728'. [ 227.297315][ T8674] tipc: Cannot configure node identity twice [ 227.303386][ T8674] tipc: Cannot configure node identity twice [ 227.337240][ T48] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 227.354953][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.366694][ T48] letsketch 0003:6161:4D15.000E: probe with driver letsketch failed with error -71 [ 227.394057][ T48] usb 3-1: USB disconnect, device number 31 [ 227.403941][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.445958][ T9] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 227.456304][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 227.477323][ T5877] asix 2-1:1.179: probe with driver asix failed with error -22 [ 227.482606][ T9] usb 1-1: USB disconnect, device number 31 [ 227.544368][ T5877] asix 2-1:1.61: probe with driver asix failed with error -22 [ 227.582752][ T5877] asix 2-1:1.201: probe with driver asix failed with error -22 [ 227.607304][ T8678] l2tp_ppp: sess 2/0: no socket in recv [ 227.626885][ T5877] usb 2-1: USB disconnect, device number 28 [ 227.777693][ T8682] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 227.804396][ T8682] CPU: 0 UID: 0 PID: 8682 Comm: syz.0.733 Not tainted syzkaller #0 PREEMPT(full) [ 227.804423][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.804434][ T8682] Call Trace: [ 227.804442][ T8682] [ 227.804449][ T8682] dump_stack_lvl+0x189/0x250 [ 227.804478][ T8682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.804498][ T8682] ? __pfx__printk+0x10/0x10 [ 227.804526][ T8682] ? kernfs_path_from_node+0x2f/0x290 [ 227.804549][ T8682] ? kernfs_path_from_node+0x250/0x290 [ 227.804570][ T8682] ? kernfs_path_from_node+0x2f/0x290 [ 227.804596][ T8682] sysfs_warn_dup+0x8e/0xa0 [ 227.804618][ T8682] sysfs_do_create_link_sd+0xc0/0x110 [ 227.804644][ T8682] device_add_class_symlinks+0x1cf/0x240 [ 227.804668][ T8682] device_add+0x475/0xb50 [ 227.804690][ T8682] wiphy_register+0x1d2e/0x2d20 [ 227.804731][ T8682] ? __pfx_wiphy_register+0x10/0x10 [ 227.804754][ T8682] ? __pfx_netdev_run_todo+0x10/0x10 [ 227.804774][ T8682] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 227.804798][ T8682] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 227.804822][ T8682] ieee80211_register_hw+0x3473/0x40d0 [ 227.804858][ T8682] ? ieee80211_register_hw+0x13d1/0x40d0 [ 227.804889][ T8682] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 227.804907][ T8682] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 227.804936][ T8682] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 227.804960][ T8682] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 227.804992][ T8682] ? __hrtimer_setup+0x181/0x200 [ 227.805012][ T8682] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 227.805035][ T8682] mac80211_hwsim_new_radio+0x2f8b/0x5240 [ 227.805092][ T8682] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 227.805115][ T8682] ? __kmalloc_node_track_caller_noprof+0x58b/0x810 [ 227.805140][ T8682] ? kstrndup+0xbf/0x160 [ 227.805167][ T8682] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 227.805199][ T8682] ? __pfx___nla_validate_parse+0x10/0x10 [ 227.805231][ T8682] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 227.805263][ T8682] ? rcu_is_watching+0x15/0xb0 [ 227.805288][ T8682] ? __nla_parse+0x40/0x60 [ 227.805307][ T8682] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 227.805330][ T8682] genl_family_rcv_msg_doit+0x215/0x300 [ 227.805361][ T8682] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 227.805394][ T8682] ? bpf_lsm_capable+0x9/0x20 [ 227.805412][ T8682] ? security_capable+0x7e/0x2e0 [ 227.805437][ T8682] genl_rcv_msg+0x60e/0x790 [ 227.805461][ T8682] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.805477][ T8682] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 227.805518][ T8682] netlink_rcv_skb+0x208/0x470 [ 227.805540][ T8682] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.805558][ T8682] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.805599][ T8682] ? down_read+0x274/0x2e0 [ 227.805616][ T8682] ? genl_rcv+0xd/0x40 [ 227.805641][ T8682] genl_rcv+0x28/0x40 [ 227.805664][ T8682] netlink_unicast+0x82f/0x9e0 [ 227.805693][ T8682] ? __pfx_netlink_unicast+0x10/0x10 [ 227.805715][ T8682] ? netlink_sendmsg+0x642/0xb30 [ 227.805734][ T8682] ? skb_put+0x11b/0x210 [ 227.805758][ T8682] netlink_sendmsg+0x805/0xb30 [ 227.805790][ T8682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.805811][ T8682] ? __import_iovec+0x5d4/0x7f0 [ 227.805826][ T8682] ? aa_sock_msg_perm+0xf1/0x1b0 [ 227.805844][ T8682] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.805863][ T8682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.805884][ T8682] __sock_sendmsg+0x21c/0x270 [ 227.805913][ T8682] ____sys_sendmsg+0x505/0x820 [ 227.805940][ T8682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.805968][ T8682] ? __pfx_futex_wake_mark+0x10/0x10 [ 227.805996][ T8682] ___sys_sendmsg+0x21f/0x2a0 [ 227.806019][ T8682] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.806048][ T8682] ? futex_wait+0x285/0x360 [ 227.806096][ T8682] ? __fget_files+0x2a/0x420 [ 227.806109][ T8682] ? __fget_files+0x3a0/0x420 [ 227.806132][ T8682] __sys_sendmsg+0x164/0x220 [ 227.806155][ T8682] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.806194][ T8682] ? __do_fast_syscall_32+0xbe/0x570 [ 227.806217][ T8682] __do_fast_syscall_32+0x1f7/0x570 [ 227.806236][ T8682] ? rcu_is_watching+0x15/0xb0 [ 227.806255][ T8682] ? do_fast_syscall_32+0x34/0x80 [ 227.806279][ T8682] do_fast_syscall_32+0x34/0x80 [ 227.806297][ T8682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.806318][ T8682] RIP: 0023:0xf7fa1539 [ 227.806334][ T8682] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 227.806356][ T8682] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 227.806375][ T8682] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 227.806387][ T8682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.806398][ T8682] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.806408][ T8682] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 227.806418][ T8682] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.806449][ T8682] [ 228.347852][ T8687] veth0: entered promiscuous mode [ 228.352925][ T8687] veth0: entered allmulticast mode [ 228.363372][ T8687] netlink: 'syz.1.735': attribute type 9 has an invalid length. [ 228.800498][ T8695] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.740'. [ 228.845455][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 228.907019][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 229.107628][ T8708] netlink: 20 bytes leftover after parsing attributes in process `syz.4.743'. [ 229.213880][ T5877] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 229.223870][ T917] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 229.282727][ T8710] bond1: entered promiscuous mode [ 229.290074][ T8710] bond1: entered allmulticast mode [ 229.306353][ T8710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.343858][ T5877] usb 3-1: device descriptor read/64, error -71 [ 229.375432][ T917] usb 2-1: config 0 has no interfaces? [ 229.383007][ T917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.406950][ T917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.433251][ T917] usb 2-1: Product: syz [ 229.443416][ T917] usb 2-1: Manufacturer: syz [ 229.454445][ T917] usb 2-1: SerialNumber: syz [ 229.494849][ T917] usb 2-1: config 0 descriptor?? [ 229.583854][ T5877] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 229.775215][ T6200] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 229.786589][ T25] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 229.858881][ T9] usb 2-1: USB disconnect, device number 29 [ 229.875031][ T5877] usb 3-1: device descriptor read/64, error -71 [ 229.957617][ T6200] usb 5-1: config 1 has an invalid interface number: 179 but max is 1 [ 229.972044][ T6200] usb 5-1: config 1 has an invalid interface number: 61 but max is 1 [ 229.985798][ T5877] usb usb3-port1: attempt power cycle [ 229.990988][ T6200] usb 5-1: config 1 has an invalid interface number: 201 but max is 1 [ 230.011311][ T6200] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 230.032030][ T6200] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 230.044002][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 230.062400][ T6200] usb 5-1: config 1 has no interface number 0 [ 230.072490][ T6200] usb 5-1: config 1 has no interface number 1 [ 230.315256][ T6200] usb 5-1: config 1 has no interface number 2 [ 230.333642][ T6200] usb 5-1: config 1 interface 179 altsetting 6 endpoint 0xC has an invalid bInterval 128, changing to 7 [ 230.355704][ T5877] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 230.363951][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 230.379132][ T10] usb 4-1: config 162 has an invalid interface number: 197 but max is 1 [ 230.389007][ T10] usb 4-1: config 162 has an invalid interface number: 143 but max is 1 [ 230.420223][ T5877] usb 3-1: device descriptor read/8, error -71 [ 230.426565][ T6200] usb 5-1: config 1 interface 179 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 230.439001][ T10] usb 4-1: config 162 has no interface number 0 [ 230.445379][ T10] usb 4-1: config 162 has no interface number 1 [ 230.462044][ T6200] usb 5-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 230.514078][ T10] usb 4-1: config 162 interface 197 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 230.528332][ T6200] usb 5-1: config 1 interface 179 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 230.591246][ T10] usb 4-1: config 162 interface 143 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 230.617751][ T6200] usb 5-1: config 1 interface 179 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 230.628943][ T10] usb 4-1: config 162 interface 143 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 230.642576][ T6200] usb 5-1: config 1 interface 179 altsetting 6 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 230.656416][ T10] usb 4-1: config 162 interface 143 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 230.668584][ T6200] usb 5-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 230.679946][ T10] usb 4-1: config 162 interface 143 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 230.690507][ T6200] usb 5-1: config 1 interface 179 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 230.702781][ T10] usb 4-1: config 162 interface 143 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 230.724002][ T5877] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 230.726074][ T6200] usb 5-1: config 1 interface 179 altsetting 6 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 230.745411][ T10] usb 4-1: config 162 interface 197 has no altsetting 0 [ 230.752534][ T10] usb 4-1: config 162 interface 143 has no altsetting 0 [ 230.765041][ T6200] usb 5-1: config 1 interface 179 altsetting 6 has an endpoint descriptor with address 0x37, changing to 0x7 [ 230.778305][ T6200] usb 5-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 230.790477][ T6200] usb 5-1: too many endpoints for config 1 interface 61 altsetting 252: 66, using maximum allowed: 30 [ 230.792261][ T5877] usb 3-1: device descriptor read/8, error -71 [ 230.802753][ T10] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 230.841457][ T6200] usb 5-1: config 1 interface 61 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 230.858219][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.885341][ T10] usb 4-1: Product: syz [ 230.894283][ T6200] usb 5-1: config 1 interface 201 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 230.914360][ T10] usb 4-1: Manufacturer: syz [ 230.921069][ T10] usb 4-1: SerialNumber: syz [ 230.928565][ T6200] usb 5-1: config 1 interface 201 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 230.942976][ T6200] usb 5-1: config 1 interface 201 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 230.973954][ T6200] usb 5-1: config 1 interface 201 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 230.997528][ T6200] usb 5-1: config 1 interface 179 has no altsetting 0 [ 231.005846][ T5877] usb usb3-port1: unable to enumerate USB device [ 231.007680][ T6200] usb 5-1: config 1 interface 61 has no altsetting 0 [ 231.034130][ T6200] usb 5-1: config 1 interface 201 has no altsetting 0 [ 231.050136][ T6200] usb 5-1: New USB device found, idVendor=07b8, idProduct=420a, bcdDevice=37.0c [ 231.062322][ T6200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.071580][ T6200] usb 5-1: Product: syz [ 231.076319][ T6200] usb 5-1: Manufacturer: 䀔噦鵻ᣘ匲䂍걎꽦蝏킉혁睹ᔴ㻣污༟ὅ脅灓认庈ඖ൤튆䌳 ᄠᐺ놬는꿦ₔ挫纵ꄝ꙱횭햱磍瞇ή蓒崲ミᰢᆍ뷗蜴᳧ࡳ⨷臅ⰽ猤浊⫬᭐ၴ೏ᣋ堂ݲ蜠಩袍뵘ꣷ힨ꖂ➧賩۪粽ⷤ똄悒  [ 231.103719][ T6200] usb 5-1: SerialNumber: syz [ 231.188696][ T5837] Bluetooth: hci1: unexpected event for opcode 0x204e [ 231.192678][ T8724] input: syz1 as /devices/virtual/input/input23 [ 231.266882][ T8724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.280352][ T8724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.322616][ T6200] asix 5-1:1.179: probe with driver asix failed with error -22 [ 231.396293][ T5837] Bluetooth: hci5: HCI Read Local Supported Commands not supported [ 231.407459][ T5837] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 231.414295][ T6200] asix 5-1:1.61: probe with driver asix failed with error -22 [ 231.425083][ T10] usb 4-1: USB disconnect, device number 46 [ 231.473962][ T6200] asix 5-1:1.201: probe with driver asix failed with error -22 [ 231.560167][ T6200] usb 5-1: USB disconnect, device number 42 [ 232.076302][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 232.116300][ T8753] netlink: 20 bytes leftover after parsing attributes in process `syz.4.756'. [ 232.165082][ T8748] binder: 8747:8748 unknown command 0 [ 232.170512][ T8748] binder: 8747:8748 ioctl c0306201 80000080 returned -22 [ 232.198753][ T8748] binder: 8747:8748 ioctl c0306201 80000180 returned -14 [ 232.215892][ T8748] binder: 8747:8748 ioctl c0306201 80000300 returned -11 [ 232.321102][ T8757] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 232.382556][ T8760] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.762'. [ 232.811667][ T8773] syzkaller0: entered promiscuous mode [ 232.844761][ T8773] syzkaller0: entered allmulticast mode [ 233.234106][ T5960] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 233.420495][ T5960] usb 4-1: config 1 has an invalid interface number: 179 but max is 1 [ 233.435507][ T8756] lo: entered promiscuous mode [ 233.454432][ T5960] usb 4-1: config 1 has an invalid interface number: 61 but max is 1 [ 233.472825][ T8756] lo: entered allmulticast mode [ 233.483685][ T8756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.499459][ T5960] usb 4-1: config 1 has an invalid interface number: 201 but max is 1 [ 233.521749][ T5960] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 233.553958][ T5960] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 233.566612][ T5960] usb 4-1: config 1 has no interface number 0 [ 233.580905][ T5960] usb 4-1: config 1 has no interface number 1 [ 233.590412][ T5960] usb 4-1: config 1 has no interface number 2 [ 233.608439][ T5960] usb 4-1: config 1 interface 179 altsetting 6 endpoint 0xC has an invalid bInterval 128, changing to 7 [ 233.644009][ T5960] usb 4-1: config 1 interface 179 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 233.669948][ T5960] usb 4-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 233.711145][ T5960] usb 4-1: config 1 interface 179 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 233.743507][ T5960] usb 4-1: config 1 interface 179 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 233.799653][ T5960] usb 4-1: config 1 interface 179 altsetting 6 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 233.817855][ T5960] usb 4-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 233.839054][ T5960] usb 4-1: config 1 interface 179 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 233.850553][ T5960] usb 4-1: config 1 interface 179 altsetting 6 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 233.880123][ T5960] usb 4-1: config 1 interface 179 altsetting 6 has an endpoint descriptor with address 0x37, changing to 0x7 [ 233.922448][ T5960] usb 4-1: config 1 interface 179 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 233.935387][ T5960] usb 4-1: too many endpoints for config 1 interface 61 altsetting 252: 66, using maximum allowed: 30 [ 233.951397][ T5960] usb 4-1: config 1 interface 61 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 233.966486][ T5960] usb 4-1: config 1 interface 201 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 233.978404][ T5960] usb 4-1: config 1 interface 201 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 233.989627][ T5960] usb 4-1: config 1 interface 201 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 234.000740][ T5960] usb 4-1: config 1 interface 201 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 234.015149][ T5960] usb 4-1: config 1 interface 179 has no altsetting 0 [ 234.021984][ T5960] usb 4-1: config 1 interface 61 has no altsetting 0 [ 234.029705][ T5960] usb 4-1: config 1 interface 201 has no altsetting 0 [ 234.039560][ T5960] usb 4-1: New USB device found, idVendor=07b8, idProduct=420a, bcdDevice=37.0c [ 234.051941][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.060396][ T5960] usb 4-1: Product: syz [ 234.064935][ T5960] usb 4-1: Manufacturer: 䀔噦鵻ᣘ匲䂍걎꽦蝏킉혁睹ᔴ㻣污༟ὅ脅灓认庈ඖ൤튆䌳 ᄠᐺ놬는꿦ₔ挫纵ꄝ꙱횭햱磍瞇ή蓒崲ミᰢᆍ뷗蜴᳧ࡳ⨷臅ⰽ猤浊⫬᭐ၴ೏ᣋ堂ݲ蜠಩袍뵘ꣷ힨ꖂ➧賩۪粽ⷤ똄悒  [ 234.091625][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.100273][ T5960] usb 4-1: SerialNumber: syz [ 234.154220][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 234.200773][ T8797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.772'. [ 234.212662][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 234.264603][ T8797] tipc: Cannot configure node identity twice [ 234.292310][ T8797] tipc: Cannot configure node identity twice [ 234.324126][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 234.340517][ T24] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 234.357274][ T5960] asix 4-1:1.179: probe with driver asix failed with error -22 [ 234.374202][ T24] usb 1-1: config 0 has no interface number 0 [ 234.395918][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 234.418488][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.431932][ T5960] asix 4-1:1.61: probe with driver asix failed with error -22 [ 234.449749][ T24] usb 1-1: Product: syz [ 234.458209][ T24] usb 1-1: Manufacturer: syz [ 234.468072][ T5960] asix 4-1:1.201: probe with driver asix failed with error -22 [ 234.475926][ T24] usb 1-1: SerialNumber: syz [ 234.480756][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 234.480770][ T30] audit: type=1326 audit(1764873953.277:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 234.509028][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.545694][ T24] usb 1-1: config 0 descriptor?? [ 234.571334][ T5960] usb 4-1: USB disconnect, device number 47 [ 234.583312][ T24] smsc95xx v2.0.0 [ 234.670878][ T30] audit: type=1326 audit(1764873953.277:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 234.693965][ T48] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 234.720710][ T8804] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.775'. [ 234.763844][ T30] audit: type=1326 audit(1764873953.277:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 234.816236][ T30] audit: type=1326 audit(1764873953.277:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 234.893073][ T48] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 234.903866][ T30] audit: type=1326 audit(1764873953.277:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 234.911045][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.975977][ T8806] binder: 8805:8806 unknown command 0 [ 234.981428][ T8806] binder: 8805:8806 ioctl c0306201 80000080 returned -22 [ 234.984862][ T30] audit: type=1326 audit(1764873953.277:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 234.992289][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 235.021304][ T48] usb 2-1: Product: syz [ 235.026349][ T48] usb 2-1: Manufacturer: syz [ 235.031148][ T48] usb 2-1: SerialNumber: syz [ 235.041615][ T48] usb 2-1: config 0 descriptor?? [ 235.043414][ T8806] binder: 8805:8806 ioctl c0306201 80000180 returned -14 [ 235.047003][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 235.049953][ T48] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 235.180181][ T30] audit: type=1326 audit(1764873953.277:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 235.239531][ T30] audit: type=1326 audit(1764873953.277:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 235.303894][ T30] audit: type=1326 audit(1764873953.277:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 235.403900][ T30] audit: type=1326 audit(1764873953.277:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.4.773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 236.320997][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 236.547564][ T8837] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.786'. [ 236.570085][ T8838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.785'. [ 236.632770][ T8838] tipc: Cannot configure node identity twice [ 236.638883][ T8838] tipc: Cannot configure node identity twice [ 236.652509][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.785'. [ 236.945992][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 236.973527][ T24] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 236.989315][ T24] usb 1-1: USB disconnect, device number 32 [ 237.113891][ T6200] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 237.264175][ T6200] usb 3-1: Using ep0 maxpacket: 32 [ 237.270921][ T6200] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 237.301411][ T6200] usb 3-1: config 0 has no interface number 0 [ 237.328839][ T6200] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 237.338928][ T6200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.347700][ T6200] usb 3-1: Product: syz [ 237.352080][ T6200] usb 3-1: Manufacturer: syz [ 237.357490][ T6200] usb 3-1: SerialNumber: syz [ 237.374364][ T6200] usb 3-1: config 0 descriptor?? [ 237.393985][ T24] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 237.414554][ T48] gspca_stk1135: reg_w 0x203 err -110 [ 237.421016][ T48] gspca_stk1135: serial bus timeout: status=0x00 [ 237.428063][ T48] gspca_stk1135: Sensor write failed [ 237.444198][ T48] gspca_stk1135: serial bus timeout: status=0x00 [ 237.453826][ T48] gspca_stk1135: Sensor write failed [ 237.459182][ T48] gspca_stk1135: serial bus timeout: status=0x00 [ 237.476457][ T48] gspca_stk1135: Sensor read failed [ 237.481765][ T48] gspca_stk1135: serial bus timeout: status=0x00 [ 237.488476][ T48] gspca_stk1135: Sensor read failed [ 237.493744][ T48] gspca_stk1135: Detected sensor type unknown (0x0) [ 237.514071][ T48] gspca_stk1135: serial bus timeout: status=0x00 [ 237.520549][ T48] gspca_stk1135: Sensor read failed [ 237.530693][ T48] gspca_stk1135: serial bus timeout: status=0x00 [ 237.540822][ T48] gspca_stk1135: Sensor read failed [ 237.550965][ T48] gspca_stk1135: serial bus timeout: status=0x00 [ 237.558563][ T48] gspca_stk1135: Sensor write failed [ 237.569064][ T24] usb 1-1: config 7 has an invalid interface number: 109 but max is 0 [ 237.585943][ T48] gspca_stk1135: serial bus timeout: status=0x00 [ 237.588992][ T6200] f81534a_ctrl 3-1:0.88: failed to set register 0x116: -5 [ 237.592385][ T24] usb 1-1: config 7 has no interface number 0 [ 237.611139][ T48] gspca_stk1135: Sensor write failed [ 237.619618][ T48] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 237.624438][ T6200] f81534a_ctrl 3-1:0.88: failed to enable ports: -5 [ 237.630948][ T24] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 237.653954][ T6200] f81534a_ctrl 3-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 237.667881][ T48] usb 2-1: USB disconnect, device number 30 [ 237.686344][ T24] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 237.700661][ T24] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 237.720469][ T24] usb 1-1: config 7 interface 109 altsetting 4 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 237.738064][ T6200] usb 3-1: USB disconnect, device number 36 [ 237.760811][ T24] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 237.787031][ T24] usb 1-1: config 7 interface 109 altsetting 4 endpoint 0x8F has invalid wMaxPacketSize 0 [ 237.822911][ T24] usb 1-1: config 7 interface 109 has no altsetting 0 [ 237.840252][ T24] usb 1-1: New USB device found, idVendor=1965, idProduct=0018, bcdDevice=d9.4d [ 237.861649][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'. [ 237.870830][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.891108][ T24] usb 1-1: Product: syz [ 237.899324][ T24] usb 1-1: Manufacturer: syz [ 237.907151][ T24] usb 1-1: SerialNumber: syz [ 237.951185][ T8852] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 238.122456][ T8875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.799'. [ 238.181815][ T8875] tipc: Cannot configure node identity twice [ 238.202406][ T8875] tipc: Cannot configure node identity twice [ 238.277686][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 238.624236][ T48] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 238.791779][ T48] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 238.803468][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.812787][ T48] usb 3-1: Product: syz [ 238.818284][ T48] usb 3-1: Manufacturer: syz [ 238.823286][ T48] usb 3-1: SerialNumber: syz [ 238.839555][ T48] usb 3-1: config 0 descriptor?? [ 238.854179][ T48] hub 3-1:0.0: bad descriptor, ignoring hub [ 238.874166][ T48] hub 3-1:0.0: probe with driver hub failed with error -5 [ 239.117730][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'. [ 239.151009][ T48] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 239.174855][ T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 239.191650][ T48] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 239.202096][ T48] usb 3-1: media controller created [ 239.223896][ T10] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 239.248597][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.263616][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 239.342942][ T48] DVB: Unable to find symbol dib7000p_attach() [ 239.349649][ T48] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 239.397211][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 239.423871][ T10] usb 4-1: config 0 has no interface number 0 [ 239.430456][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 239.450060][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.468456][ T48] rc_core: IR keymap rc-dib0700-rc5 not found [ 239.476426][ T48] Registered IR keymap rc-empty [ 239.482243][ T48] dvb-usb: could not initialize remote control. [ 239.488887][ T48] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 239.491963][ T10] usb 4-1: config 0 descriptor?? [ 239.528515][ T10] usb 4-1: selecting invalid altsetting 1 [ 239.535466][ T5968] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 239.555995][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 239.576262][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 239.676285][ T10] DVB: Unable to find symbol cx22700_attach() [ 239.702563][ T5968] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 239.711521][ T5968] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 239.722682][ T5968] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 239.744653][ T5968] usb 5-1: config 220 has no interface number 2 [ 239.771244][ T8891] ------------[ cut here ]------------ [ 239.777259][ T8891] usb 3-1: BOGUS control dir, pipe 80002580 doesn't match bRequestType c0 [ 239.785884][ T8891] WARNING: drivers/usb/core/urb.c:414 at 0x0, CPU#1: syz.3.803/8891 [ 239.794098][ T8891] Modules linked in: [ 239.794133][ T10] DVB: Unable to find symbol tda10046_attach() [ 239.794143][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 239.812601][ T8891] CPU: 1 UID: 0 PID: 8891 Comm: syz.3.803 Not tainted syzkaller #0 PREEMPT(full) [ 239.821934][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.832171][ T8891] RIP: 0010:usb_submit_urb+0x112e/0x1890 [ 239.838085][ T8891] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 99 f2 ff ff 89 e9 [ 239.857837][ T8891] RSP: 0018:ffffc900050b7660 EFLAGS: 00010246 [ 239.863970][ T8891] RAX: 0000000000000000 RBX: ffff8881473ad600 RCX: 0000000080002580 [ 239.871969][ T8891] RDX: ffff8880752ebda0 RSI: ffffffff8c12edc0 RDI: ffffffff8f8d4cc0 [ 239.880155][ T8891] RBP: 1ffff1100e942164 R08: 00000000000000c0 R09: 0000000000000000 [ 239.888679][ T8891] R10: ffffc900050b7760 R11: fffff52000a16ef8 R12: ffff888077b58100 [ 239.896894][ T8891] R13: ffff888074a10b20 R14: 0000000080002580 R15: ffff8880752ebda0 [ 239.904979][ T8891] FS: 0000000000000000(0000) GS:ffff8881261a6000(0063) knlGS:00000000f5446b40 [ 239.914020][ T8891] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 239.920678][ T8891] CR2: 00007fa5f9b70fd2 CR3: 0000000032ca0000 CR4: 00000000003526f0 [ 239.928792][ T8891] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.936891][ T8891] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 239.945002][ T8891] Call Trace: [ 239.948330][ T8891] [ 239.951309][ T8891] ? __init_swait_queue_head+0xa9/0x150 [ 239.957369][ T8891] usb_start_wait_urb+0x114/0x4c0 [ 239.962451][ T8891] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 239.968112][ T8891] usb_control_msg+0x232/0x3e0 [ 239.972928][ T8891] dib0700_i2c_xfer+0xba7/0xf70 [ 239.977900][ T8891] __i2c_transfer+0x871/0x20e0 [ 239.982714][ T8891] ? lockdep_hardirqs_on+0x98/0x140 [ 239.988026][ T8891] ? __pfx___i2c_transfer+0x10/0x10 [ 239.993235][ T8891] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 239.998648][ T8891] ? i2c_transfer+0x120/0x3a0 [ 240.003328][ T8891] i2c_transfer+0x25b/0x3a0 [ 240.007887][ T8891] ? __pfx_i2c_transfer+0x10/0x10 [ 240.012913][ T8891] ? _copy_from_user+0x94/0xb0 [ 240.017710][ T8891] i2cdev_ioctl_rdwr+0x460/0x740 [ 240.022666][ T8891] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 240.027823][ T8891] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 240.033458][ T8891] ? __fget_files+0x3a0/0x420 [ 240.038214][ T8891] ? __fget_files+0x2a/0x420 [ 240.042805][ T8891] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 240.048395][ T8891] __ia32_compat_sys_ioctl+0x543/0x840 [ 240.053914][ T8891] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 240.059955][ T8891] ? __secure_computing+0xe2/0x2a0 [ 240.065208][ T8891] __do_fast_syscall_32+0x1f7/0x570 [ 240.070449][ T8891] ? rcu_is_watching+0x15/0xb0 [ 240.075258][ T8891] ? do_fast_syscall_32+0x34/0x80 [ 240.080288][ T8891] do_fast_syscall_32+0x34/0x80 [ 240.085225][ T8891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.091570][ T8891] RIP: 0023:0xf7f57539 [ 240.095769][ T8891] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 240.115687][ T8891] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 240.124162][ T8891] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000707 [ 240.132158][ T8891] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.140195][ T8891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.148194][ T8891] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 240.156207][ T8891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.164209][ T8891] [ 240.167244][ T8891] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 240.174505][ T8891] CPU: 1 UID: 0 PID: 8891 Comm: syz.3.803 Not tainted syzkaller #0 PREEMPT(full) [ 240.183679][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.193714][ T8891] Call Trace: [ 240.197016][ T8891] [ 240.199998][ T8891] dump_stack_lvl+0x99/0x250 [ 240.204588][ T8891] ? __asan_memcpy+0x40/0x70 [ 240.209159][ T8891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.214337][ T8891] ? __pfx__printk+0x10/0x10 [ 240.218920][ T8891] vpanic+0x237/0x6d0 [ 240.222883][ T8891] ? __pfx_vpanic+0x10/0x10 [ 240.227365][ T8891] ? is_bpf_text_address+0x292/0x2b0 [ 240.232634][ T8891] ? is_bpf_text_address+0x26/0x2b0 [ 240.237820][ T8891] panic+0xb9/0xc0 [ 240.241522][ T8891] ? __pfx_panic+0x10/0x10 [ 240.245927][ T8891] __warn+0x317/0x4b0 [ 240.249894][ T8891] __report_bug+0x288/0x500 [ 240.254389][ T8891] ? __pfx___report_bug+0x10/0x10 [ 240.259400][ T8891] ? stack_depot_save_flags+0x422/0x850 [ 240.264933][ T8891] report_bug_entry+0x16a/0x220 [ 240.269772][ T8891] ? usb_submit_urb+0x112e/0x1890 [ 240.274778][ T8891] ? usb_submit_urb+0x1133/0x1890 [ 240.279786][ T8891] handle_bug+0xca/0x200 [ 240.284036][ T8891] exc_invalid_op+0x1a/0x50 [ 240.288519][ T8891] asm_exc_invalid_op+0x1a/0x20 [ 240.293346][ T8891] RIP: 0010:usb_submit_urb+0x112e/0x1890 [ 240.299031][ T8891] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 99 f2 ff ff 89 e9 [ 240.318799][ T8891] RSP: 0018:ffffc900050b7660 EFLAGS: 00010246 [ 240.324867][ T8891] RAX: 0000000000000000 RBX: ffff8881473ad600 RCX: 0000000080002580 [ 240.332825][ T8891] RDX: ffff8880752ebda0 RSI: ffffffff8c12edc0 RDI: ffffffff8f8d4cc0 [ 240.340782][ T8891] RBP: 1ffff1100e942164 R08: 00000000000000c0 R09: 0000000000000000 [ 240.348740][ T8891] R10: ffffc900050b7760 R11: fffff52000a16ef8 R12: ffff888077b58100 [ 240.356694][ T8891] R13: ffff888074a10b20 R14: 0000000080002580 R15: ffff8880752ebda0 [ 240.364663][ T8891] ? __init_swait_queue_head+0xa9/0x150 [ 240.370195][ T8891] usb_start_wait_urb+0x114/0x4c0 [ 240.375219][ T8891] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 240.380766][ T8891] usb_control_msg+0x232/0x3e0 [ 240.385518][ T8891] dib0700_i2c_xfer+0xba7/0xf70 [ 240.390364][ T8891] __i2c_transfer+0x871/0x20e0 [ 240.395120][ T8891] ? lockdep_hardirqs_on+0x98/0x140 [ 240.400301][ T8891] ? __pfx___i2c_transfer+0x10/0x10 [ 240.405481][ T8891] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 240.410834][ T8891] ? i2c_transfer+0x120/0x3a0 [ 240.415499][ T8891] i2c_transfer+0x25b/0x3a0 [ 240.420007][ T8891] ? __pfx_i2c_transfer+0x10/0x10 [ 240.425022][ T8891] ? _copy_from_user+0x94/0xb0 [ 240.429770][ T8891] i2cdev_ioctl_rdwr+0x460/0x740 [ 240.434696][ T8891] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 240.439790][ T8891] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 240.445405][ T8891] ? __fget_files+0x3a0/0x420 [ 240.450058][ T8891] ? __fget_files+0x2a/0x420 [ 240.454628][ T8891] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 240.460152][ T8891] __ia32_compat_sys_ioctl+0x543/0x840 [ 240.465591][ T8891] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 240.471562][ T8891] ? __secure_computing+0xe2/0x2a0 [ 240.476660][ T8891] __do_fast_syscall_32+0x1f7/0x570 [ 240.481840][ T8891] ? rcu_is_watching+0x15/0xb0 [ 240.486665][ T8891] ? do_fast_syscall_32+0x34/0x80 [ 240.491668][ T8891] do_fast_syscall_32+0x34/0x80 [ 240.496497][ T8891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.502821][ T8891] RIP: 0023:0xf7f57539 [ 240.506869][ T8891] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 240.526456][ T8891] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 240.534851][ T8891] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000707 [ 240.542803][ T8891] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.550749][ T8891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.558697][ T8891] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 240.566643][ T8891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.574612][ T8891] [ 240.578181][ T8891] Kernel Offset: disabled [ 240.582504][ T8891] Rebooting in 86400 seconds..