last executing test programs: 6m19.149872028s ago: executing program 2 (id=4126): socketpair$unix(0x1, 0x2, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x2a, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x800) socket$inet6_mptcp(0xa, 0x1, 0x106) 6m17.70779043s ago: executing program 2 (id=4130): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000540)={0x1, 0x46, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x20000000, 0x0, 0x0, "b6855a32674ffa64f778ddcf29c94337"}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x3, 0x7a2d, 0x0, 0x0, 0xfffffffc, 0x4}, 0x0) syz_io_uring_setup(0x2f9f, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x4, 0x1}, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 6m17.526786962s ago: executing program 2 (id=4132): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 6m15.73713831s ago: executing program 2 (id=4137): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0x41c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, 0x0}, 0x494) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) unshare(0x400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@loopback, 0x4e20, 0x2, 0x4e22, 0x0, 0xa, 0x20, 0x0, 0x33}, {0x1ff, 0x0, 0x100000000, 0x3, 0x0, 0x10000000, 0x80000000}, {0x5, 0xc0000000, 0x6, 0x1}, 0x4, 0x6e6bbf, 0x1, 0x1}, {{@in=@local, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3504, 0x3, 0x3, 0xa, 0x1, 0xb, 0x2}}, 0xe8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 6m15.493832645s ago: executing program 2 (id=4139): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$unix(0x1, 0x1, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000"]) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x0, @broadcast}, {0x2, 0xfffd, @broadcast}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x3fce, 0x3}) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) mknod(0x0, 0x8001420, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYRES8], 0x50) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 6m13.002223708s ago: executing program 2 (id=4144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 5m57.759867321s ago: executing program 32 (id=4144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 6.347686214s ago: executing program 5 (id=5727): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) (async) open_tree(r3, 0x0, 0x1) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x10, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000280)="18", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0x7f, @rand_addr=' \x01\x00', 0x37}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000980)="f3", 0x1}], 0x1}}], 0x2, 0x4000014) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xf404}, 0x8) (async) recvmmsg(r0, &(0x7f0000007900), 0x847, 0x10162, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) gettid() (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r6, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) (async) socket(0x26, 0x3, 0xb0e3) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce", 0xb3) (async) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="021200c1d9259c9b3b281900020000007d915f0a4c695160f1c43b0ee5724270f56e6460d110810286715a0bf98fbe0d01f8723528c4a35011b1e45d160bb13b144bec0ae0f0f5dc1c51d73364b98e377eb254572a0b1f8d8ad93aad4b2887e69efa093d069c9a49ffa590a3c80f2134f18e6702336ed323c4ec382d69b58a32ebf41c626d56fe6b403c691a2fe091"], 0x10}}, 0x0) 5.684811116s ago: executing program 5 (id=5728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8], 0x1, 0x3c4210}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8], 0x1, 0x3c4210}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x400000000003, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r4 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000002c0)={0xfffffffe}, 0x4) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000002c0)={0xfffffffe}, 0x4) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getlink={0x20, 0x12, 0x2fa9ccd93d5c0297, 0x70bd25, 0x0, {0x7, 0x0, 0x0, 0x0, 0x1c}}, 0x20}}, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r3, 0x2}}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000040), 0x5, 0x145640) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x100380, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x40086602, &(0x7f0000000040)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) 5.198140304s ago: executing program 5 (id=5731): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xc, 0x8, 0x4, 0x3}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) lseek(r3, 0xffffffffffffffff, 0x1) fsmount(r3, 0x1, 0xfc) fsopen(&(0x7f00000003c0)='nilfs2\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x30}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x2c0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x4, 0x0, 'queue0\x00'}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc01c7c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000040), &(0x7f0000000280)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={r6, 0x0, &(0x7f0000000200)}) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r7, r7}, 0x0, 0x0, 0x0) keyctl$read(0xb, r7, &(0x7f0000000000)=""/2, 0x2) 5.198005258s ago: executing program 1 (id=5732): unshare(0x8040480) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setownex(r0, 0xf, 0x0) (fail_nth: 1) 5.15075035s ago: executing program 4 (id=5733): prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) 5.058912513s ago: executing program 4 (id=5734): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0x50000563) splice(r0, 0x0, r2, 0x0, 0x402000784853bb, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)='F', 0x1) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) r6 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.975256514s ago: executing program 0 (id=5735): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="25022abd7000fedbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="34007a8024000100a18fb46829f7a107be1a755c699dd054606c409cb5616a643ba90497e808187af6c44e75eeefd78bfed49e0cedb4b3b189db2ed8868b9fc9cb897722d7f5141ea5e0b89739565e14adf26294b34585507abda12919e101c16ebaf640cc2ac62ec3aa0b8e074f1b44eaeef635e98258c5eb86"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20040804) 4.712869773s ago: executing program 1 (id=5736): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket(0x200000100000011, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) timer_create(0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x3, 0x2003) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[0x0]) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)="39000000140081ae0000dc676f97daf01e2357f9ff9bffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x3a}], 0x1}, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x880}, 0x4001) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) fsopen(&(0x7f0000000100)='zonefs\x00', 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r7, r6, 0x0, 0x20000023893) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.496084982s ago: executing program 0 (id=5737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 4.322656428s ago: executing program 0 (id=5738): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xc, 0x8, 0x4, 0x3}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) lseek(r3, 0xffffffffffffffff, 0x1) fsmount(r3, 0x1, 0xfc) fsopen(&(0x7f00000003c0)='nilfs2\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x30}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x2c0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x4, 0x0, 'queue0\x00'}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc01c7c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000040), &(0x7f0000000280)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={r6, 0x0, &(0x7f0000000200)}) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r7, r7}, 0x0, 0x0, 0x0) keyctl$read(0xb, r7, &(0x7f0000000000)=""/2, 0x2) 3.204804668s ago: executing program 5 (id=5739): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') open_tree(r0, &(0x7f0000002ec0)='./mnt\x00', 0x9001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.818820021s ago: executing program 1 (id=5740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x244, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x21c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb84e, 0xe, 0x5, 0x9cc, 0xc, 0x401, 0xfffa, 0x6]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x3, 0xa}, {0x1, 0xa}, {0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x8}, {0x7, 0x5}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x6}, {0x0, 0x9}, {0x0, 0x6}, {0x4}, {0x6, 0x7}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x3}, {0x4, 0xa}, {0x4}, {0x3, 0x8}, {0x2, 0x8}, {0x7, 0x2}, {0x0, 0x4}, {0x7}, {0x1, 0x2}, {0x5, 0x8}, {0x2, 0x4}, {0x1, 0x9}, {0x2, 0x4}, {0x7, 0x9}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x3, 0x1}, {0x1, 0x4}, {0x5, 0xa}, {0x5, 0x7}, {0x2, 0xa}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x8}, {0x3, 0x1}, {0x5, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x1}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x6}, {0x1}, {0x1}, {0x6, 0xa}, {0x1, 0x2}, {0x0, 0x4}, {0x2, 0x8}, {0x1, 0x5}, {0x1, 0x5}, {0x3, 0xa}, {0x1, 0x1}, {0x4}, {0x3, 0x5}, {0x0, 0x8}, {0x1, 0x3}, {0x5, 0xa}, {0x6, 0x5}, {0x7, 0x2}, {0x5, 0x7}, {0x3, 0x8}, {0x3, 0x3}, {0x1, 0x2}, {0x1, 0x6}, {0x4, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x3, 0x8, 0x0, 0x19, 0x3, 0x6fa3]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x7}, {0x7, 0xa}, {0x4, 0x7}, {0x2, 0x2}, {0x4, 0x3}, {0x3, 0x6}, {0x2, 0x3}, {0x0, 0x7}, {0x4, 0x2}, {0x7, 0x5}, {0x3, 0x7}, {0x1, 0x6}, {0x4}, {0x0, 0x3}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfffb, 0x8, 0x4, 0x4, 0x8, 0xd, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xccb7, 0x3, 0x98, 0x8, 0x2, 0x5, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x10, 0xe68, 0x9, 0x2, 0x5, 0x8, 0x2]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x7}, {0x4, 0x1}, {0x6, 0x4}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x7}, {0x5, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x2, 0x4}, {0x2, 0x5}, {0x4, 0x5}, {0x7, 0xa}, {0x2, 0x8}, {0x6}, {0x5, 0x8}, {0x4, 0xa}, {0x7, 0xa}, {0x1, 0x6}, {0x4, 0x9}, {0x5, 0x7}, {0x3, 0x1}, {0x6, 0x4}, {0x5, 0x1}, {0x7, 0xa}, {0x6, 0x6}, {0x6, 0x8}, {0x2, 0x5}, {0x2, 0x7}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x8}, {0x4, 0x3}, {0x0, 0xa}, {0x2, 0x2}, {0x6, 0xa}, {0x5, 0x8}, {0x0, 0xa}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0xe015d9acf7c6b40c}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x2, 0x556d, 0x1, 0x5, 0x2, 0x4]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a2, 0x7fff, 0x2, 0x7, 0x13, 0x10, 0x74]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x5, 0x22, 0x2, 0xb, 0x4, 0x3, 0x1]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x18, 0x18, 0xb, 0x30, 0x2, 0x3]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x8}, {0x2, 0x2}, {0x0, 0xa}, {0x1}, {0x3, 0x2}, {0x7, 0x1}, {0x2, 0xa}, {0x6, 0x3}, {0x4, 0x7}, {0x7, 0x1}, {0x2, 0x6}, {0x7, 0x7}, {0x5, 0x4}, {0x7, 0x6}, {0x4, 0x7}, {0x5, 0x2}, {0x2, 0x8}, {0x2, 0x7}, {0x6, 0x1}, {}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0x9}, {0x2, 0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x3, 0x4}, {0x1, 0x8}, {0x2, 0x9}, {0x7, 0x7}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x7}, {0x4}, {0x0, 0xa}, {0x5, 0x9}, {0x7, 0x3}, {0x3, 0x7}, {0x7, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {0x3, 0x2}, {0x4, 0x2}, {0x7}, {0x2, 0x1}, {0x7, 0x4}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0x6}, {0x1}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0x4}, {0x4, 0x6}, {0x6, 0x9}, {0x5, 0x8}, {0x5}, {0x6, 0x8}, {0x3, 0x9}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x2}, {0x6, 0x7}, {0x1}, {0x5, 0x4}, {0x1, 0x5}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x44810}, 0x10) 2.688569785s ago: executing program 1 (id=5741): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 1) 2.618936332s ago: executing program 0 (id=5742): socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) r2 = socket(0x27, 0x1, 0x36) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000002c40), 0x10123, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x0, 0x8001, 0x0, 0x8, 0x4f, 0xfffff5fffffffffd, 0xfa11, 0x200005}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0xfe0a, &(0x7f0000000500)={&(0x7f0000000100)={0x14, 0x52, 0x101, 0x100000, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) kexec_load(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10010, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) madvise(&(0x7f0000417000/0x6000)=nil, 0x6000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000102c0)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000540)="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", 0x1000}, {}, {&(0x7f0000000140)="b77cdd8f5fd531fc24c7d5445b157bf8ae02a0fa38e555b520c21e9e4a1febbe84ff9700779085acd6d13b4600058db0d616d36902147f43", 0x38}, {&(0x7f00000002c0)="04acb3ffebedaf58acfcf891d7c757bc524f79388404b3be1d55b510959608ee44c64a1b0989525d11f28fb2802d04f50a7560b5846c216bf7fc8bef2bcca0cceda7379f846f065c449886710b2a473e6c4ccc265593b9ec4ceef31b1e62fecf30ad74e13b912fd7fa5267152dc96d5a60b6cef9e41a9716640b99fe61aa", 0x7e}, {&(0x7f0000000240)="b94e8c5e760efd5fb2866d098663ae2b2a8be98f014d77155a7b87", 0x1b}, {&(0x7f0000000340)="2be007e96a9faad4edf22bbd713dcaa2090e5e32a584e944788dceafdead9e541d5c665364809282b0d8bb692a6ce2bcb5cb210c6cd81dc56cf707d0c9d747c5c6466b8760eb6b1c3a928c74c167603fffd39ad63d94fa33d79840869a8a4465157a1355b659dddb1be7f7f26a0fedab098fb2d5b53d664ab9dc4ab38f039b2b20b2320c7cd98d8d806dc800cbf4119f08ddba661a312d2c652d517ed80e06c1", 0xa0}, {&(0x7f0000001540)="9d3cb13eb084c8c8e0a6a99f3be32ae2847ed8bb01de32ee899c862d1d7d25bb4d1aadab2625dcbab98cbceacbc38f11879c16c72a6f84d4ad762026eaf49a9ca728814a35368b10941c3a24d9b45e32693699bae0dced21b4a049a40a3e888a770e3ed1f7d916933ec76f17ba04a9504bad419ec092f7e788102019c70d2dda68ee2be3a495c4a628082b159682f10609b9e328059ede6001ab39219928aa382ec6e2620017203bfbda93c2086384c5b7575bee69cc5f6aa0b580fe05ed9f7a75562c85ae2f", 0xc6}, {&(0x7f0000001640)="1be6265bebdeafe9698a2dff1a9cba301915bf7bc28aa1560d6db943d919b27bb0b3cb71707cc8ad042bdb2d88b9521eb5ebb6303d52fda6259e31c42dddbdd62bafdf41078ab4534e12c7111987dc48237ac41d408fdde16f6c8814addb2a806164ddea70cc9ff4d21e6069447a91ca4e22c4d80f8ada2c902569253c6113862da4241bf569fa512c95a2b52c321700c0e9dbf0c65c95d1eda5a01724747393c0cb91e2778a54b1cda2f8bd44c80aaf5c296de7eab11e31863f7076bae45ffdb6d98d7428c3fcd44d08c3fa08a15ea58ab3129cb23b3f92682ff226645165cd0b329cd0c5533522bec730d916719cc3b54733eee96a6e3056022fdc5bf81ddcde802307134cd220f94070fe3bfd802587b93b44b851321469fb0dded7d605e59dfbd27547e3960d2f2a32253be1e97b53f77991b7db0328986f4715c0142d1486152ab503d8283b3b1fd1085d6d6358616f14f5bc1be06bad2ceee2f9117947571126cdacf364931ed5b741f1f78eb983fc90fd9ca2d81bcd60ace1d70d7a5cbe60c2ccb6c9f1f45dbe52ce528de0eb943365adc9bb0737036a45267df413bda95f25be1ba8e014aaa9a67e4913fd1019ede80e0833d86e5e78c81d99fe82966b47f43076fb38bb484e69dffa8e92d61ddcc4810fc46b2455973df98519367adfaf8cc7fbe4a4762c230fce1386050517af3cdb584fca43618fbf09f0a9af6332cd01389739b61c71f5c2c1d342812dfcf8473035eeb5c04bdde406c3e22688519c50bd35be5bebf79201abbc38d8b11ebf94fb1f80125df0912b4a4677ddc40f1500dd167c935b8487d814752ab5e394841b18557d4d7f67c1cd00d9a5477f3f87caffd46b0449f5db2b097fb342925d168de8574e497100d819915aa3723f6d4e6d007a6450dc47a98e349a2a2b30477590ff1fb37016938f837fab10640b9a74756d387e0f554acb7b5fad593d37376d7c654df88a508132bd535974935f74f7d759dba727ab8dbee20c982ac9d1b92f1f03bb5028c9e1b273a5410d15bf7a42f8b9eb0a1697baf74c6a2c9c19f664baa0532390b6921bcc3b3443871ac6d0a892b466ac0097e6594d03d2fa580c8c9fb4eceab66b3d5be16b7da6333f3707896c70f331c202c90ed7eda72187b03b643902f97551c41ae9b866fc2205e3e4bb8f5a4e54a3d025206b41bce23a920c4303e94785ace95db363340d93079364b78b2f64279d47bfd8bf09fe5acacf397acc8251067f6e4503b902df8599df8e2f8bd4ccee5c799c32fe5572441fc637e7df25db7d8de84c8fbe4e48c83eb245722a94d847eeab356498e0ed0f68c57baf69318818e9bd8138ae747027a194485e3b2958b18ba8263874ae4be82d165b04f574fcb4c3f50b399fb91a138788317bfcd6cdac4586873381c63221f8aaf3dfefc275f2411902ff1eca5f3f5ac3558979bbfb04a4603bc14b8548419733b3b9b79ae73f1b5f0fae77e7025590c45381d02be72271b48bc4c1650c38095d14cb0b7c345f56189a07085c06dd9b665fc82b34e69deb7ee72ab8cced02271d932197e7aa19980460e42a5beb6c466c600d7b9b23fea11edf207537778ec0038babe8c11e19e8e924a4de82eb24e31c6b89380241acf2770046ae763ab837b89e222aab55df4b4c0bc77d45cc4f092edb37c4f6a26fd8126f25a33479fdabd336618a801225c7566c03657285358fa84d46ae3d9d8d61df98ac412d28b2bafeabd5479377a2238c8140c9ce52be279b64c9046fd94c910a9e996d3ae44543cefdc27b1c8a3dc2d8150ab32dd6972d931f684d284085488be47e5fcb249c769231d1eec6b386542593f815a4f9dba00b2a8b1292420feaa91df2bb1012cc264af373848b7c0fec5266ff6a027221f8839f0c84f7864af6100fe77134f920d4ff21ff1b4ec49c30074b235ffb5307c8f8c525d5fd94abb17e5eaee8fd564378d30c15f965528e3bfc004a9d1b6ab7c6c88cf81bdcf2e01cb2f7fb9186a372d41f80a48b317793710d61b9adab98409b1b732e7d79fff9b0706d7609392706e21571df200b7b4f5936c5d359b0c780900f8bc290eea7af6c862e2b0d64cc5004c82219c900441dfba7e252af21b3c292482d37aa1381d31bc0bf7f953c1371845e8244efe0ec6734dd995de8b60222f788402856536479e8f83dadeba13c3f5da8428899d5402942c9c493f3d0f3c531bff06cfb46783f2f7b5e07a7608d27f2fb1020000f470604f6e2bdabd523995458c5f04a5237c2957486e7c69d246bcceb638fcefae9c864f9102eb1d07353e429899aba175369fd6bc896a8a73cea3a7cb27dbfbd3cb00ac12dd695ea52e708cc54dc40e188c442c7c1c1b0a9547314da939874503b48f8b6b9ff5898643fd933e7acd972cf631158381a859aaebf5d2f3c0a16279398fe105597d2f4a66e734223ed7b430a1d6d38563a0ad03f88831cbb7383ae088f99912b0daef988b06c70515a1b0aac3794fbee91c8ead9eb7a316b58e200f2cd2026883cc4618c1ca06096463b914fc579a4033d9161b3aef62eeacba868782bcf54fca31f70d6cce7aaeef1c63762a208db7606c11b83adc3dd9437ff72e89cccb0bb28d6f91eb5c257c5158fd95bd810a29050f88f1b6667511a400cd48ffa9aab7f3a149c3451ffeb54b0b70e7f325349776ffad66deae515fb77616e9da78f9064de3ba183ddf66507c51002cd275928b3e9e6a7b67831fc40d967bdf17417a9c72bc423cb4cf7b3e7188ffa9b3158089e2b3351b8383ffb3302fb9d0fff6b5c7c9815d9a176b823541208abd244175dbf3d9429381f417f571d52cdd2451a6d83f356748805501014d74f768f2441908dbc93526c5ccfed15dd8c939e1d44f6b59b3d602a7506ee5fe8d2e2f9a23e8d9d9176ec686e32123fb652b6e0a9fb3f775cee59e144be81f17bb94f18e5b2fd800a07ecc1db940ac4b8f10a545d49eb2d252874de15f5f1143f4a8146035c8b2f5064e96aa314449cb4f57c4190b6aaff7806fbb213efa87a7194704d78f3d8586adb51dc91fa4174ed86f738c2fb18dc6a40ed9b9ea9d582f7bddaaecc23ed980b3fc8c976d8068608d45708d11d3ce65fbf09400bd0f7ec8a2b9f7f87e89d918dc8e98e97375b43b51379c2ff2a693750fca7a59d62c896ed1a4e070c6a34f3244052c4dcf36aa014d0445bdd0544335428e61140ec955b98feda92150ddb2f339daae89ce0e4a889288bbf88dafb90e555f7914690b69aee4f5bf7b0767d103b35eb2088a443f87510667bf7b3942570861d5adbb155ffbbfa5cd44ee15279812d2ee165607af57429c1dfb277dd0b2f048f9c2e4be664e0c29e41e859377cf60f025f5846614af73f3d4f672ae5c8f4b2f0060b03aa8ad7454541ba34b9e891d9baa9a941d97422da0d9c1dcdf07c78dbb21ec33ce9333a25e89a419d711e9d86c39a5f7b3e0c826aa5767a7cde166e045e7e8bcd9e1b15e12f301974ad8ddeeedb70a85ceb38f95fba991a3268d8a62afd3a8e838c0cfac492ab1649a2d8312669918ab25e40f75cb7f6979dce122ec6c32fba42fb2fb0169d6bb505b92e1afbdf5f423c2c6ec255ef4fa9bed407f45668f6e050c7fc3783c3bd18917927c4370e30d141c4b9958c5f5a620df3152614d762d9abf9560120e3aa925472d1b999be3c9c5a09725189cca1eebb6446d0f6b6333275755145ebb9e62143049a9e8170ec6b1c60c4f17461bc86df0ed3b9563a776646a6491dd939e08ef4c8773ee01a5f391d4361dd8e26ee3df9ac16d7eabbfe682b33542e72f3f24e1b4dfa83659c8eb2ce00a125447946e32ccb97461264d990518f7d5704b0a9d306ac2f7a586e0192d06952119123bfe6c3742694d9a1ee5f51d65dcc6aad338df28bd2b3f8068e35d0f77a92f2fd55a62f250c191ec2073b603555fdd20a84198535d951f68f3a08c1c80304081e6e88f2ec18ed233cea2f3a29b79a61d47738474f61d0dde5002e3c947d10b046c2e881c8c9236cddab929ad7b2d4e3936bc59700175579d8b355444c0d26457cc0b0d788c7faa0aaff2831b5a1712c1be2aecaeb98e37adf5214161dfe79d0aa41c11dd3eaef9513b67d22b64e134c6c113304ef4a08a577c21caa3f1c5983543193221a38fd5c3bf5108f1cfe5c396274d090732d4305cc205fe221a77ef052a56a2c267dfe1301cbd99933e164c38662a01ba9c1a64872bc20f19c87bd945318d4b9cea1e26b5f7a043d5a409857d3ddf49fac05004e834b3039c5f937d906ca007d6e04ae6616caca1e03319f7b8d3ef3184dc392dcb92282796cb7bfa3498501f89ba4deaf751a07a7dddee5333837e33680ca07c993e5471b72221754fbeea9a01ff68ccd187383ba488f42a25c5d0c8a5af9ef8cfe675df0dacf0e8bda2b0994a92ede19a893f65074fd23c3b132c66905a2c2daffed3c55a078f6617bc4a083d2e0ef4c71bfa3dc1355823d8dc2d33a449822fdc6e5f841dc4cda72a7cf1e2619165ee007506e1500403d3c2ee78606f4d3d2bc98d7501a026e8829db503035d64324f939fe95d534669337d673e96ec7c4fe6f006de73a5d2455c57f0d41afee6318e1c0d903c63bba61f775e20d9d300d81fdcb9897479f37cebe4510d7a0b583f0bb4dec76638ef36b2bcc55e64e78f2694bf4c998cbbf287618c1706bbeaf94d6f6b54a7312f7c4bb704d1d8bae2816fc4db108ea70faee6f08f21efb575c14a4a9b7f3361e783e8dc48788e13573d3ee935c4d447b34da8140f7038c31967318b19439c79245d8a11910f3b03f6efb256d53b155bf54780541323a24b282f3c6ffc52f28650c3ad9cbd8b30bf0e4a2bed54c9ffb37592306c90075449c036704ffa8587fcff3b0306ede6c661e3e6f8f37945c94ba222686bafddfbe0ecdef747dbbc00906bb739aa30b8a1b1ccdbabd034c4d15b3d4ae373d799790bd59b65a12267d909e897170c1d6b31131f9f70890a4dc8342e3953eb628080427d52d69bdf3dc27b446fc71313315a04bcef989bcdbadce970b0ce3bed136820ccb77066b16ce62cbad23ecfd7a628c158056dc49b2d53b109ab4590f8822d6594f0a815bc7b54545b1924643e6e7bea75c5c6328f4e82cfb18af18938f880650392139045d276c47acd3560f7fea1bdaf52850d1d417b2344a047bea9e11ec4be34cab9a885b58329d39ab3e781670a47d89bc59e40c4a9a88248fd5ba81532be67170d649d05a43c69cc662270cff9e95f2f4026706485a9e023c0a99e8000f4c1c8938cb8aad08b845ea37ecc349c4b090c9746bf716aa7eb2d41568ac0dedfcbc062fc2f029280857ebc5004dd1d5557cb420f71ebf6dea64e41790f5d92b4758d710e012f2838320d26d9dae0ef9faa8e9019543f62922ce254c82634a778ef2f3c2ba718203fe9f44b931baa549d1cae606d9fe08c0f002e96c0abc117a7899389d22b69c77cbfbabcef195bf0666d1074cf35efde57d80518b54be87742b4d18b0146a4cbaef84dbe4e975d67e42a36d2ecef6f32b7023ec187feaa9cb6ecc1e051b4729a9f90575c9072abf1461df995ca273cc52210d429e5d736dcdb82132744d1b2bc2d915e8175e9cb6c6fed504cc248d4c8f1e48dcbe65b33d9612aea4883c2f998e32401b4dfe4a276f0b7189dde920490180bd871d721076cbb8768f8ea4935c22e4587eacc8749cf290bb9253cebe27834c0f20eb3a44e9d43c5a7b5d7977edb31e1ad2c384f713189bd78f6b6c75cd14aa0adbd04c5cbcdce86f25a4c29e49b19d", 0x1000}], 0x8, &(0x7f0000000440)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10, 0x80}}, {{&(0x7f0000002640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000026c0)="b1824611ae125642e48c8275b5fbc3c3df3e90787552bd26462f35699d1f48b27438295d051b40d3d3faee7eee15494b47e9f213b904fc63567d3e46dc44c664b1a4cd865d5a5e0dd9e367f937c107299597ed9df448c8b3faf06f3f87498ffcca73983b7b3fd98611b1cc2085545940775cde164340ae9af88767971d34119d58cf4615c2b1cbd1e586205a45cc50d76d12b6667c08c6c4b4416cb53eaf94b0d7f4b1b0913a129ca59a7f00eed15c4060c4b05da21cc24bd02f42587f38c3517dba0459ebe93f90cf2fe7210c5deff1f65d94f507962bf5e325f5ff9da33b2469863866f316cde0c05d8aa0ae07273cb866ea8b1434d60c3bbab39482cd", 0xfe}], 0x1, &(0x7f0000002cc0)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [r5, r5, r4]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff, r0]}}, @rights={{0xc}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x18}}], 0xd8, 0x4000000}}, {{0x0, 0x0, &(0x7f00000077c0)=[{&(0x7f0000006280)="da37258a2d26bbc35eb43d6195b403310216fd06c23b323ae24ee47382a0a51a841668e13b542548bd6650ce7c588a3926ccd0a8e412cdda51cc1b94478fd8", 0x3f}, {&(0x7f00000062c0)="ae241686edb1d661e995e056b9c881fa03562bdfa5652c232d13d4a031f3172602bcadcfc94612b69790f4deae3b4521ef71f6d4679d981bb17b01b925533b27208789905811c0d2193b6f2d80290f08a06e7eb4171720", 0x57}, {&(0x7f0000006340)="e09982933262181a5306b355d8afa8592f76", 0x12}, {&(0x7f0000006380)="f4fe11b8e95f049e355f1130a84c11d27a6737be14b1ad51167c088e02567e4412d26d22", 0x24}, {&(0x7f00000063c0)="13bd70a958415057d50b4ea41b769c19f793150dc0a82862fcea171f24bdc8113f8b50a173be4a93b678f3c2333b26fa442e8921e6cc6e4428420948ee69e2f1601fab3eca628ed6356a7308e25f4e5a1659406bac481c70bdc4364b69345db603ac002186cff47680917b5b0781fd13a34b403f0fd7ed84f12792ce7e498c0cabc3d097bbfd6c3cc5097398cb35c1d8c4af49f53dd5ab0c5e5f86f1f7dcc36ff3e1e0f2b9f674fca23dd38bc05b007f2b05ccada61bb1a521e3bb8d396ea515350ddbef385da935613cb4dbfd35f65bebeeeaec1b048ec9a87253fc7c", 0xdd}, {&(0x7f00000064c0)="c57edd31388827a5b113ec49a98518c2ce315ae63d6d8fe24cda1a55d82eef23a340a138a9e63571c92ec1fe8e228100832ff273b96ff036e570326d6ab972894a02ccd489d218b9f59672864f723ad12de010fb211f0250e6716eccc0c4350522633368133549bd60729706a00be6eabd9c978b7330265225609ec4fe510938dc4f66433cf545b0f6bcb6bd8f9e88ebc05bf1f6062584126ef0f527d6f53938d367f040423116c7bb17b1c0f43a0debc1e924654bbf2e6e53c30f35d4fe70a327a823cc96e2f02f22c641c2461d2581d643af5c4b442f9bc873e6b89e8d35524b469a143d7e7e68fcd007d114261f7b761fa2bc46", 0xf5}, {&(0x7f00000065c0)="306592dfbaa39b227e1802bf8d4df8a6efab2e00cc46b6f2ab5c0fd10fe7c36cc6a085e31d1122b0dd80ad5ba063c1ca0a6d61a4e63040aff6bc7b10662a10457a6a9c3fb3a63aa210e942d30d3b032298fe8a85731d0f4b39f25bfc4b96b13daef4a72a70af77d9068df140a36e31d4cb4ea82ce17172871b9f6cc26a6ab38dcf33dfb975bfe9faa82d45efcdc488fc5e7305ba3b9a6a01ccf15d27ec6558419b0edcda7a58b0c77611fc64b451b83a8a61b32863fdf07d675d89d70cb0753e0ac560a029d72b6e0a6d27eec8d99664d8c7ccf295225887fd6714d014b252adf35912abf6a3d3292dd765362c3fbab02c44ceed399ca1d99d8c86aaeb2a026f908f9f861ba133ca3e47b65ebab22eeb34a3fe5d157c7b5fd1c80e409538595606759c26dc8fb5a9d48c4fc8c783e365aa992c453f1e904eb6a92d53775108e3aec5fa9b128b4676bcd1acb46e0f5f71812f459a75a9012591fad65dd79c04ab94ebfb07f55313d4c916239484733b62519b3d51af8871460a60732eae33517eafe6a3815bd19516c7bdd816a89fdc7dbc90316edcf7bf6c299ba1fe5fbefb6d6c90e16f74ae23b40399c5e6fa051f4dd80d942c4db429dda8870c1e84b7a19facf82e73ed980213e19bc59d0c556dd5b0a1cb00ab10c2e80aa2f99b1fee2bbbc5778bca439f5b34d763ab51c55963496aaa16a24a7f8f94841fcd6b5bb05228a0216ca5e373d475408eccc9db01f2be87424f93c0288cf4b363ad021de92181af43d9d25c861fa308f594a42285677c1d4837e24402108cec83e89a0df71eacd89051cad37571dc9551bd6ad2f5ba05b3b6960fc13207bc965f8ef2a6943a90d6130e003d10cc803d94ba64abd042f356c3ebc74dab46bf31d9e8327b47e00202d67f5b62d2394fc6b8bc14916ffe5beb118a8ab19b808cd242ce3e40b9e556e858d0e5141699cf566c6eae3a62e0936bf716548d83f95ca65f95117dab42cd42803704dbc58e2f6b99c7b08cb58c6ded542510e5601f1eb24e5d2f07c0e33d09905b41bf950b6a165092c660a7ea8a2eca31c664aea12725348a97b61d9bfe57468491fafa4705a5808482bc14eadc8a5349cfa2d3f13cd2ca65d97a5040fd83e7e2796aec969761db5175dbb34dfa487b356ff4b40d1d0a1cc5a95775325bd52ff32e86172b3e6352b914d9c7a74bf0a77e8b66744e0e691bfba895d4654a95533cb1b0f4fd45044dbe48a5d4806f34d471247db96f9e494cd44f9c05264969f3eac85603541a4b80a2b0b65ead8a9c2e1cbe7af321f0f9f30b34669a52ac20e6ac9d16f7123d5e7ef73c4e9f2a66852ef3458e163c2bca2cc9464a3e0d757f66fe0ba8a158c373caf31a84b80d936880d1e78d4d0b9890dfc875e3dd343b5391d580e17b76e6db8a6406cfe33d9fcd3bfe38387f023406b74ff1845b15561b0f39a5748863a4c0eb1b849dd56b740bec72d24623d8ef8cb29f09395eb396d5b9c73767a5e6d3d79767722fe726f19f4fe88d8a2dd5a13a5a777163076f1271d446790f50e9e480b66e8b03babf9d05ecd23dae15acaf5e31be15c52bf0486c5d4c61ff3be98f9d35e5d7aa8893ec8ce5e6fdda3de9b1a8b14fdc31c65530b20da7cdaa9d5c7793def0f6d404814391a1d52ecb6790419d331bafa8d50a861aeef8ef34ebcfb641b75edd2a20a00662b6f56dd01db4a99dec719dd1892f017a942e31565a967abf849075168c3264396b2d4cb7ee60899c5cfc6e6164bb106ae8dc33bac79cd2514df35ae5e1381f4cde1c871c62074929aac8a4bfb43a25f89e20124fd24f58a07465895365ef814d3164c7296ee50a0456fc9830e0a3aef443f14e98d453438954632cbfc5cca1ebfac9ac9787c4982234c76e3212253081fb90a7229597ebf1cc21d7194d919ddca39baa27b0770e190b4e24a99eb817e38a7dcc38f51b5230e2b37a29af087b9cb62cef34f177bc59020f5f28eb8617d46e5e51e971d54a8cfa262a907ec19eace87d9c82b8ba67945887476c0760577385d05c46f6a6f4945748f5774f20fb2d98795f6382fa38d23d5ff4b28f6b35599f67a562cd62b8f65b35177252f863d6ecb9aceac5f9dfc693d32d7a3dd69b572334844f0c08ab0a3f0cb3cd0fee573e86a75626dbb795c55c8159f5378e5905f87c327f2fa065c821e61644e91bc054ece3af298bfd19856abbafc861db6fe74c3d0d68813158d4f77081513d730c2ec62b7f9ba36de32351ca460af3012033c17bab270e6e9f22863b965270b2f36b7f33c92724ca9da241bea6332ea4adad16490f328a5538fa3490ebfa1412c403565dc3f011e4a804cfebedd9dd46de3463ed94941ac44f54c0743e474edc2566bcfce87ebe120fa5046c8931ff913272f2618cec6b9c3b1e02e48a022ba4654345c27e71f2a60425526c0e2168988d587af9799a4d11976eb7140a7d467cf71a409c42e34b7e0b69453766ddc882ab717db96449473d8cbeb78aa832fc81673c2d52ffece04da6df26eeb588d79508453776db42f691f94c243aab79953df00ffa664c4f34d83d5239beb8a074eb9655831d3a09bf06bd9d15dfd23cfbc515da1598f5fbc80bceb5d166d2e50c4edef40af9e5463875be3016abaf2843124dfe4f49980e2e57984aeb2bfa4b8d96aa918b92839b767d6a1208ca120b22aff1de12de727e1894598ff7cdc0cb9ec20707f5a4f59744556dfc67fcabb3a57e32d9fe10851c59b3e6841b2fa7516c7f5d21f6641f7e16aa04dcc7dc85d7c39d6dd60d9c893c637ab5466c278d29ba4387f0c012fb738c45d7e7d9cd96bd29e3344385692d6a12096b9a7e173cf5035d5166799286b3b8960b069070c8e59e662e93ef193c1c03afd2e545fff7af9253f4ec0d8998f692d4e1fd281b6604a9d3c3a1bf96da5d3d2f6436ac19ed3be5cb979077a0c91ab2edce998750310a98d8c2820e2f0800029fcd5071435a0f12971c380f9ae8010474160dc28433e1d3648c659b6120c0fecd3b1ab26fa1e7b69c17467b81c9c7ae941fb931026fe4674dea97753abb0e998f02d5ceb79373e791973e1c1f47f4b0706851ff781efe3faaf1cd32743f98042878bfc7ae069eb4c5b1f354a937938af8d56dbfb28217035feadd55c08b4448b44c459b6d0fb47b704a841f1dcf14929c74ead65822a13c7f47de4d83030c58344aa6d3c6a674040817983119fe482f615d2b0fbc5e8bd129c40d62621145c5c83c0f7219a2c776d1d920f57b05a7b83ecdd5c9d0012353f7973aaf8bfa8b9d96f9336a363cce9d362b3d9a3831276fd59d1b4ab79633b8dce6d72cb9831599bd5714d1ed2ef98d434a403c7278503d8f5d84db197556907ad4498b0f86c94eaa533cfc770d0a77dcaac4db76a41752f81a60555de93625a7ab12adc8d0fd9fece65878e9a2e4cffda26db4af447b15572d18b5a0f48e39fc6cadd7111b0f007e2639b7d25d2b4c1d9efcc718ba780ec2598e6b77d749b002c4003dedb866eb2343c198b9fe0fadaef0766fd85c01c1b3c7550fad7932636d4f5d62929ce7a9eb2b6cb79723c06443863c82421b4861c631b2a37e794cf336e115a8b73557fb16e5795bb60dca0a2f4abb7182e027efc9a403ecf7f16664e4a7e7bd7fb869226e853afc56fabc66dbe7574dabff87d0747ed20101f466b1d17ab0a6c8a34331da6f1b3287ac999109435f69b26d3caca4c4e78599d3cd5fbbd73959788e7bff1074a383d2c908aa8567e1d32305199d30a77b57627cb6de3a7e695bb5d4e146b72ec7794398ce02bc3723b276e283ea6e856da9a9f33bbc927fb19cbcaf471be2a79f5c0faf072556357c47bf121f84168ce8beeab3318fd9833a5ee8d9b9454add0bfe0c5e8de5c849408206b466fb0add74c4089d655d984566b12be7f591c488950da32160c4fbab6c7da9864c58123c2be4d595636b5610b9b0c2db1f70d986f960a91c2e12a52a36bfe04bc050d183a52bddce112af40c9f7bfdc628dc3c0e3f71fbac6cd6af68c7058d934a0696595b921ff8363badb935db51b758bc1b1b5199a875f86ec96aabcaa510d2a48f067ed891127ec35516a5c17af83204e8b436012760499f39dccdb45f1f47bacde53e7484f51cff41c0166ccdafa3b0966411b1943119ed097819a28cdd44b6e4d3797e0f7751abe89464dc368b7b414183565bd8a3817e06d2bb24140cedd7796683b8d1663f82f9a0c08bce8861c9d752895fcbf52b0e399d5eb102ff2bb160aa3368e843843591daf60852035453e163565d67ec6d620005fa15f5a6fc4dbfdc3e3501325b5c31a9827d98b986cb7e4bf4fd4201e1810a53d7d16b3ae9e1c968f17038f3cd31d7a66823774636e393921c5e29ed7cc01a6b7c78d7ff88dba3911eedea2e0fd9260ccb59a1753c36320310f3b6df5d79c2e93c77f699191eeecdbecf13f4682f50de1263fffc0ce98a096235e65b1dae0d108828a2a2e7fca8eca02ef28dc52d47219a4c6dc941b63f07e2946e405bf8e7990ec16b5580172e696512a6fbe2eb67ba1fe145cf0f1f260006002ba9085aee47fd174a723820052908f02ea6023c563f2c34b2900cfd4b1ce95581da10c5e9da73e491e826917153aaebdb82d3668ca3f91486e445e3e027247601b745416cb48d6debd6eec3d94f0dff51a2a8ffe2b1a1b6c43dc1def45e384ee50957b192adf14290b83d9d57660adeb17390ba0444b1bfab258034bfd466fdcfc5d9957a17286ed8de4140c0075724fc8f4a1405801ca75fcd914c64389ec20f4af20b85928a75e0eecd4f735ee7e688194ab48a7b9aff531609f3a5e72e68ec42070d5a869ef2aebf4cdd6c2f344003f78512bbad8c85eecb7e230be85d9cda5f6474960e2627e0b8d0d80f9b99018da47b09b21c755f79c3119b327f030d889e6aac551384c4f218749f26a5d89713aa6c5e719409780f7c7620d53b2a305177453c1923f48b53fa4ad9e28a916e4b9eda5285004740933498bdf682053f1df46fdddea54585f2ca9a2ab659a634ed52622dd5d091c4f96717304630aae5a3d221afd19ed5b6c3b2143a4578170ab4258b51515238bfcbf18215f0e1c6d6d4dc81ca5863f6b4bfd6d6e1def23d4e4053fb6a7071207b722c3223a41664be1169f24a19ff96124e5b1a5028a26ea0f46aa723b40710232e67b94c9b675b29e7699a5407624d06393df8d35b9657665bb973dfb3c2aa1639e4a3df70898e5e2d80b8a07d3726638576a621b52ad648caea388b816168c89c1dee02dc1f8e4fe1eb1e3ef3ee946cf993e2ff69f04f1602f0ceba8b687684c0fe01ffa888dabff330587a6ff9bcac1af6791f0d75691dbe16a58c5db370615595b089e1c41fffaea796c1ec93c2b395144bc6265c95ab3b00e0d697fe878a5502eac02abc5ad2ddf6ad5175d3e7db3631881c594f20d98ba60f78effdd28846d0af60572ece98e4c5ea752cc537caa7f183f3689bcda158a7420e6d51787c9805bab60902693f058695671ffdde0c5160ef0b72b116b661b969d4fcbbb65b4f0f3a0fae61f053aa4c1c39d1a54aa0db6c0411b2a5460d9d78249f99b922f82bba71b7a8c194272c344eedf7dc3182f57b2564e6c7ad8bed7894bd2199df853116c30b5a54ece592bdf5be1d0cd648b76a6c6260c30616692c9fa9b98dede782038687e697583b580afe2841295a25440ddc6e2fdcc8deb778421328fb7fab77991a84086b12447c228b3b9a84db5119256ebf247ac6aca42ab048de61f33b77a7b07e4629691d4aa5ac35e91c", 0x1000}, {&(0x7f00000075c0)="caa1106603536e7c4a541ee57e4bf758ad525d5783807151d1e2299be389268290aa92eae89d1937be1770757406cbfe40ae79756ddaea96c78421b3b2d66a47332f7010af37569268b36a38b1c1d8736891363b1d97b98883693b73d2717a0d644a7f87c66ba578369d6e8c096515915d81f4f2797b1ae91e427c028f6de1cf029b4faae510d57b279fbe5e1857a3ae279ec97a4b86bef5dfc3adbdb7ab2de14b66ec", 0xa3}, {&(0x7f0000007680)="e0503ae1aac52d2f05af70b607cabceded800381a70b079327247ad6e11e3efeb4f4cbe9b2ebeb409409e7ec4cf7be3bf65e6f19c04b4e5f04211ebacfafdeb3dd2eb5ae0d9d024d786e08284adfb2caa798c368a33773cdecce5aa6196e95406c0e1860379d60a18378a4c9499840c2469fd4c5c318a22b66edd2cd5fd3c1a03e88f65d40dc0c45dfbc331a8b5609e84bc0ce80030437279cdf4a06d5d50b1815ea779d1c1f3b3d2c6d31f45a2c6b81144c3fb9283d208df809fb84ea865bf6225f98fb5838455bb84bbdc5a1ae555f506a62abca33c3d30d071550ea8fbf1ad3c22c2db0cd7b0c06e689b9a4521325165b108f", 0xf4}, {&(0x7f0000007780)="24a8049e32117b9101e8785eb4bf697413fb3d1c5b154d9f1b9e2d6c74b25010cd0b71b48269ad10c98a66a4a31a602d00bfe295317ea3b3652ae842b8", 0x3d}], 0xa, &(0x7f0000007880)=[@rights={{0x20, 0x1, 0x1, [r1, r2, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r6, 0xffffffffffffffff, r4, r6]}}], 0x70, 0x4000000}}, {{&(0x7f0000007900)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000007c00)=[{&(0x7f0000007980)="b488e152880117f9e5c01d5cadf9c61f9a643e0831a0eaf30559b5dc81d1d7dd187d14807bce39f94978fb7598e33445fbd34a3754de772ac44d7fcac63600cbaf7bc46360be2d8ea18c8fcd7da00ab762587ee9d8a2333c1e9c6fc0bad806b47dc234d2", 0x64}, {&(0x7f0000007a00)="fb1230cc672c76d2f1d0c44e51df154ed233e341f8eaa937e13fac367b1bce4ae7da652d85c058da9b20c679d224657641d2f005b873bb2c9e0f44553e52829da381a129116280a6b9739730649086d65765d56e1c538b65d17080942838636d1ca1d053842e6f2635d59eb6f73838b8e8fe751e9396805bc92534aa22663ad26ded933add252a4b383a0aaff680950ec48fc22d75badd3834fcfbeddfd659ef21b6d4f5597a2238ee8acbe4f1e247bd541d8ec5bc8fbe74572082dc9dbdf10a5f060196d237961e77f9b7aa81f52d", 0xcf}, {&(0x7f0000007b00)="54eaaff70190450f8539efda6f3fa52a832f15fc44dab331d964071c424c4afcd79bbe1951b4af008bc6701614fb5f10afb754eacffba279c35d5845da3a42471712a8d2b585b7bb039786bd0146742e83d396da775afeb2d72343bdbd30436cc0f68298b97e3cba9a855bbb12240e8e75ef0d0f498611a42ca569704a485601e0a65403a186c36f010ea27befecceca0419fee5a08aa5fad33b2cd5bf9d4fd081c761c688cda50fd3fe5755d7e04200e51c7aec72ee62966d29ece3fd7695dacbdc2f2cd5b597", 0xc7}], 0x3, &(0x7f0000007c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0xfffffffffffffd54, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r6]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, r5, 0xffffffffffffffff, r5]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r6, r6, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}], 0xc4, 0x14}}, {{&(0x7f0000007d40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000008280)=[{&(0x7f0000007dc0)="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", 0xfb}, {&(0x7f0000007ec0)="441969c21486b2638362392a9795a7c965f91179781511b4d0fe885a8c95913736f74e41a964eb47ee4045969b25be433c74a64ca4e485193a820275a016b1dff494995416c878793fae3f348d067ed67c27eded6d260f96329e15e49e91423f2c3fb3a80fbc70f4cbe48ab8e032bf831755d6e3b67f425ffed1542feb1e43e0cb7effae1720563eb92c5858c5b1ad73f688cc3ccb4d150089fbd82dd95122039daf46652a1a006ca4e111f7ede0af46c99b079cbf40d967e43ef56c2b8538ce642c925841d53322de694153762d51838c1c74f0ed3fffe90d32b601e898fe4e6a01d14d9ee6f4866e3271", 0xeb}, {&(0x7f0000007fc0)="6bf07c2ed3bd25b1d741b83a5e28265a8e46b46c73c813af7a1e8d41ff27db356d2869fbf737f8aab4ad69cf7821eebd9200396b2a8df8f96a2bc6651a1607161560332ee775f107c884c7d61823176a54ad1923e47b734e3ace330c25dd2799d8c99297e468b1676339abd69af774ce83fed286c2d660d020ede04fec352b950b70328c2009a5973528cd6b5139b282ca67cfe4880f731fe34cd03b31fb0ac73c396ab0179b7e359154b8a1a513", 0xae}, {&(0x7f0000008080)="c83220c6bd715b8228b426b46d94bfb85a52b3c905da1195e5086362facf5ed867e4bfc64792d7414ec7a984126e4e7598950ab9d2a285013eb28fc0e6776b2c1d0e19bae36fa2a33d6471f90b64a1b225a334f2ad0aa2a4f1ebd55be575bda61a477e8daa175b45aab1da76284140a406fd019c1353ccd1388d695901adc2c64144bff0c082d376ce496727a87f9fbb4281e67621cf49cbc004b95d33238008f4dd6f5664b5ff9b3ecf563d8fadb3add92246fc5b2e527687dcc671e7a07c841ce3fb5af8ef63cae69ce400328d1b97e8f8e3003aeb7285f0ec68aa78cbbdcd426781cec96e90de24691201ed5e70", 0xef}, {&(0x7f0000008180)="75302cf3f9391dced3b1d112bba731ce03042e63f7afd002f8d6321956516bef1f0e33e480f2b4c6ca0b52fed6ffe599065cd8c14a0660ca921b432c8ee1efbdbaa37cc7d5363f201bd97031b12e411795b9d0f2f8c4bb6b0be7859824df22a6db55863085a32d393d9ed25d86a54fd4ea9a1cc70a0f48d2fccd49c624036fb64f1b4ceaf1c329e8a747a2ae7a0e08328f5adde887efafa2cfbdd02ffe45535eb8b0deff81bd8300006910407eed264452341508c4cf3af3763ebfe18f718522b02c7b158c4053782e7f63ea3cfa6245960f0f0ba97004c9dced4d1c", 0xdc}], 0x5, &(0x7f0000008380)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x48, 0x1}}, {{0x0, 0x0, &(0x7f0000008440)=[{&(0x7f0000008500)="edaa329216e1f8039def742e5df017ac35f79ca79e8ce72f7c96ae242c3f8ad36dbab5f02313a313eb61fd63e9c6a13e62b5343c5b1c546c189b1f81a3bf21f4fa0bcdb2f2a3915a36003eb8acb5ba0f4e5bb47c", 0x54}, {&(0x7f0000008580)="04af5b43d75a36f12eef56c0a48e42f763e1a963dcdde1fe6e22dd9b0fe34feaad089bb52619715b9cdebc858fac629eb8ca454042ff16a205b339a23297d4fb6fc7b3acbe6b75e4fc3811e4cc058c4126271c1ff6f2b5a5339bdc5156ef06693523ab5b1a60aecd3fa8d07d6698854d07f2ece1e189f55a3cae2bccf5b54daeb33f827d924f1cdce6cc092a3e8cfed3270572bd10d6c8f1db2c23289fdf9fb99cf65d942fb65450753343381551f2db31519f7d47d46674", 0xb8}], 0x2, &(0x7f0000008800)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0xe4, 0x9891}}], 0x6, 0x4000050) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) 2.382761453s ago: executing program 1 (id=5743): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f00000187c0)=[{{0x0, 0x0, &(0x7f0000000400)}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000700)='A&', 0x2}, {&(0x7f0000010a40)="97", 0x1}, {&(0x7f0000011a40)="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", 0x5c1}, {&(0x7f0000000580)='p', 0x1}, {&(0x7f0000000800)="d3e2", 0x2}], 0x5}}, {{0x0, 0x0, &(0x7f0000013d00)=[{&(0x7f0000012c80)=')', 0x1}, {&(0x7f0000000a80)="ecf0b77e2d3143f6893e3f9bc29c3731bdc582af97c1bf0674757047fc89e061bc4acb669e7d92c5888b3c7c1f58034aaa89a600b7ec470a4aaab954b3320122a0339227a00f962d2f95a614dc46d3e6a2b4214b81b69114212732f12054f32213940723f17822b5a5b515cc3fb1cfb715f52ed9fdb19cc2345f7b980ae617fe48e22d835c679197f6c120edb5c7cfeec854e724aff6b7eaa1bd065a04decaeca9945e46f6078c00b14bc719e813cd8d53c2c75c9bb19776a54e11e7420ef6244f3f270c673627f1e614f3f6ebd97ad5408bd59e0ee1250225dc02f9bb0bc9cdb54f1f336d8d878d8924dbebebacdc6253652d964e416e97c8e8da354edbfcf984e973b52ec3c8923680ac50dbb0135df49115394b8d132aaf3098e46a5666d87b29cea898a73368f891576281356ae6fcf9ef65a60e81e70e6a7f48a33b9a6c2417755aac78d76f9988879359b1cf19bc9bf69f0f61d30ee18d6896d2b65fbd666190aff1ccebe1073784011c81634d8e36c583b9773151c91e532e45b4033d3d77f248f3f2129e3278860405fd36c5bfa13f865949b9a84bbd97396efdcb697538b20978810174c41c4b85082447f740a0d27c7ea70344b88a0c6f1d766c954525e2454b0f6bb571aedae99d5adb99ba5f2d4feb8814f87dfd0d6af9d8382a3978cc0708fe64a5224c04109095be1af065e6d2d08886cd53f74f70b61252cf4546bf56d313d8ef4f9f8bcbaaa07c453f54ed2948e2372ce36320ce82e040809d8ad429f139393f74c982dc86b22f02a1ac011629b7e797658962ab7520dbc58c2756c3745de1d9088f1b6e0b2e3c468a4c6411c0fbb4fa04aeb78af80cc9bb0a731924d152585d4d20292b3209e71d83e9112871b0d26056787f818afce31f975a9d63004c3dbadd059a728749ffadc7e377a9343afc5c48ebcc3a37061fd6f851c8df96f076e93df2d2748041e36e1d978433bf0995229cf60e6cdafc475a8b48c3c3f4a05da8facd564b21ed2d818a74fedff7e7d2a015ec46e4d0b458247be8e38ab67c200ab99eebc231c9c7007f209d7bfdbfe8056229a708ef5b8167ae", 0x301}], 0x2}}, {{0x0, 0x0, &(0x7f0000012ac0)=[{&(0x7f00000008c0)='R', 0x1}, {&(0x7f00000003c0)="61f3078fe23e66fa050a7e87f0fcc27e8f4753a8c502bbd1", 0x18}, {&(0x7f0000012a40)="cc", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f00000160c0)=[{&(0x7f0000013e40)='y', 0x1}, {&(0x7f0000013e80)="3cebd858e1205cf47a", 0x9}, {&(0x7f0000013f00)='E4', 0x2}, {&(0x7f0000000480)="ae", 0xfeb7}], 0x4}}], 0x5, 0x4008440) (fail_nth: 1) 1.999790951s ago: executing program 1 (id=5744): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9, 0x6d, 0x5c, 0x40, 0x2304, 0x23e, 0xd769, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x37, 0x10, 0xeb}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r2, 0x705, &(0x7f0000000040)=0x72f0) 1.752822032s ago: executing program 3 (id=5746): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0x1e, 0x6000, 0x0, 0x0}, {0x6, 0x4001, 0x0, 0x0}], 0x2}) 1.717570074s ago: executing program 3 (id=5747): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="25022abd7000fedbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="34007a8024000100a18fb46829f7a107be1a755c699dd054606c409cb5616a643ba90497e808187af6c44e75eeefd78bfed49e0cedb4b3b189db2ed8868b9fc9cb897722d7f5141ea5e0b89739565e14adf26294b34585507abda12919e101c16ebaf640cc2ac62ec3aa0b8e074f1b44eaeef635e98258c5eb86"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20040804) 1.632428148s ago: executing program 3 (id=5748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.478759557s ago: executing program 5 (id=5749): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xc}) r2 = dup(r0) fsopen(&(0x7f0000000200)='vfat\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x20800) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r0, 0x80) dup3(r3, r0, 0x80000) read(r0, &(0x7f00000002c0)=""/228, 0xe4) (fail_nth: 1) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 1.478113758s ago: executing program 3 (id=5750): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000280)='/sys/kernel/config', 0x2c0941, 0x23) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) ppoll(&(0x7f0000000240)=[{r1, 0x2}], 0x1, &(0x7f0000000300), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000400200000434c00000100000057cc6ad6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000001c0)={0x10000000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x18c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x7f, 0x6, "2cfd788ca32c37c614ab01b6af425d837d49522b1e08cc454a78bcf944158db8026b90bc36b3a444b9ed0111e4e276af1c6b7e8ab1d604c1d9dbd3fa76eaafb6cad125afa7b0d823f92bd5f0b31809f5181b240a8e7c924d68dbeb2e13d5202eba78b9954c1292f4b75775fa29ae66c5b7eb109a18550f7348f4e4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xcf, 0x6, "fe20c9afc7302f32581a82143f0d978f9e855e62e1fd9d9e15a28354909eb2a3b50e7c989cb11e51f98856907ac6c3cd4fbcf45b9941d5ea82f8e3b94fc07a439da8c33dbe743bfae1fcad997736a0ac2af40ce8d45dd1533944d93274414cf7c85bdfeb858a0d22f7e472e21b778c5ffe693bfa12ef0b9df0401077ab2407dd66b55fbabdb5b287102da4be6dd448fdcf83ada65f0a2212394ff399feba6ce68d5a48e31774b10c9f04f2f3ef6b68b155603712b5328fc599889b92edb2a8badacd1c8ff96574f9c206ff"}]}], {0x14}}, 0x1d4}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f00000002c0)={0x0, 0x6, [@broadcast, @multicast, @broadcast, @local, @remote, @multicast]}) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x4d630983, 0x5, 0x2, 0x8, 0x40, 0x6, 0x1, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3", 0x17f}], 0x3}, 0x0) mkdirat(r0, &(0x7f0000000180)='./control\x00', 0x160) 1.436820791s ago: executing program 0 (id=5751): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket(0x200000100000011, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) timer_create(0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x3, 0x2003) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[0x0]) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)="39000000140081ae0000dc676f97daf01e2357f9ff9bffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x3a}], 0x1}, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x880}, 0x4001) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) fsopen(&(0x7f0000000100)='zonefs\x00', 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r6, r5, 0x0, 0x20000023893) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.417270308s ago: executing program 4 (id=5752): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3d}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000000) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a40)=ANY=[@ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x4) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000d26a871dba07e83f34c6e27805b6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r3}, &(0x7f0000044000)=0x0) timer_settime(r6, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r7 = gettid() tkill(r7, 0x14) 866.52034ms ago: executing program 4 (id=5753): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) (fail_nth: 1) 290.769119ms ago: executing program 5 (id=5754): syz_open_dev$vim2m(&(0x7f0000000500), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x36de, 0x0, 0x4d, &(0x7f0000000180)="d1596137019028b4e6973edf1911fbfc4c57a11c8b9430e181a0399636ff048efb6d1ff9da18c7b520508922e15ef5a43a2403935d48ed4c365d55448dc474f02bfc8c827504ccfccbaca50d60"}, {0x36de, 0x4801, 0x0, 0x0}], 0x2}) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f00000000c0)=0x4, 0x4) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x10) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) r5 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYBLOB="6d30826100000000084e13002febca69661ed574a444c0289d8cecf84bd81c77a51e5a4017e636e1dd11420611c8dcb79457cb602febb5cab7568c4e240301a2c98981fd504e681aa3ed2a6a8814fbd6f4ed40f1569c4a88ed8d74626e1677e9ad69b78789bf21e95cf48028fbd161e9ca474d125031a618042494cec2e7daa75271b575274575", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 290.51953ms ago: executing program 4 (id=5755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000006b02000000000000040000a3"]) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xff, 0x0, 0x0, 0x7, 0x200}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @multicast1}]}, 0x34}}, 0xea5bc50b6199d77e) 147.380984ms ago: executing program 3 (id=5756): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1e0, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xd}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x18c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x174, 0x1, [@m_vlan={0x170, 0x9, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaa2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff9, 0x8, 0x2000000e, 0x3, 0x40}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x3, 0x10000000, 0x5, 0x9}, 0x2}}]}, {0xf9, 0x6, "986ec045006365b68b08d0c39134b4087ab54a2a5d35d886b99a60d4553985bfaac53e110787b47af4df44b6ebd96f384f85d972e512a03edb3ca84857986ff96be9127fd7eb6d2df60f4be3a79bde32ed489e7b21550c31626e5afc84bbfdecc943876141653b52e4f33fe7689b726345a93f2e981865e47278358122f2d0125fc43fa1051cbd344fc9b4a169c010c3bc75b4c117d53ec3f42f75a4da3786cc852aba45f48da01cfb69db2d22bf4a1bcedce3d8f732201b0876b5842c7c646422ae6336f65d7ae8ce080a1533ec748164ece26fd949603480e9a631bced4b26e5a8d84d2fbd544c4b4e55416ba108e2c93bd17b40"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 63.217456ms ago: executing program 0 (id=5757): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0x1e, 0x6000, 0x0, 0x0}, {0x6, 0x4001, 0x0, 0x0}], 0x2}) 15.129254ms ago: executing program 4 (id=5758): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xc, 0x8, 0x4, 0x3}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x4, 0x0, 'queue0\x00'}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc01c7c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000040), &(0x7f0000000280)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={r3, 0x0, &(0x7f0000000200)}) 0s ago: executing program 3 (id=5759): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="25022abd7000fedbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="34007a8024000100a18fb46829f7a107be1a755c699dd054606c409cb5616a643ba90497e808187af6c44e75eeefd78bfed49e0cedb4b3b189db2ed8868b9fc9cb897722d7f5141ea5e0b89739565e14adf26294b34585507abda12919e101c16ebaf640cc2ac62ec3aa0b8e074f1b44eaeef635e98258c5eb86"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20040804) kernel console output (not intermixed with test programs): 000 [ 1670.266252][T27450] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1670.266265][T27450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1670.266301][T27450] [ 1670.588276][ C0] vkms_vblank_simulate: vblank timer overrun [ 1670.638300][T27456] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1670.674827][ T984] DVB: Unable to find symbol dib7000p_attach() [ 1670.681052][ T984] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1670.785576][T27458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5460'. [ 1671.098961][ T984] rc_core: IR keymap rc-dib0700-rc5 not found [ 1671.108243][ T984] Registered IR keymap rc-empty [ 1671.114493][ T984] dvb-usb: could not initialize remote control. [ 1671.132310][ T984] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1671.297123][T27467] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5462'. [ 1671.478653][ T5909] usb 6-1: USB disconnect, device number 38 [ 1671.560643][ T5909] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1673.614121][T27492] input: syz0 as /devices/virtual/input/input47 [ 1674.216279][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.222584][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.617342][T27508] FAULT_INJECTION: forcing a failure. [ 1674.617342][T27508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1674.720253][T27508] CPU: 1 UID: 0 PID: 27508 Comm: syz.3.5476 Not tainted syzkaller #0 PREEMPT(full) [ 1674.720283][T27508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1674.720297][T27508] Call Trace: [ 1674.720306][T27508] [ 1674.720317][T27508] dump_stack_lvl+0x189/0x250 [ 1674.720346][T27508] ? __pfx____ratelimit+0x10/0x10 [ 1674.720373][T27508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1674.720396][T27508] ? __pfx__printk+0x10/0x10 [ 1674.720419][T27508] ? __might_fault+0xb0/0x130 [ 1674.720461][T27508] should_fail_ex+0x414/0x560 [ 1674.720493][T27508] _copy_from_user+0x2d/0xb0 [ 1674.720516][T27508] get_compat_msghdr+0xad/0x4a0 [ 1674.720548][T27508] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1674.720587][T27508] ___sys_sendmsg+0x193/0x2a0 [ 1674.720617][T27508] ? __pfx____sys_sendmsg+0x10/0x10 [ 1674.720680][T27508] ? __fget_files+0x2a/0x420 [ 1674.720701][T27508] ? __fget_files+0x3a0/0x420 [ 1674.720732][T27508] __sys_sendmsg+0x164/0x220 [ 1674.720762][T27508] ? __pfx___sys_sendmsg+0x10/0x10 [ 1674.720807][T27508] ? __pfx_ksys_write+0x10/0x10 [ 1674.720841][T27508] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1674.720872][T27508] ? lockdep_hardirqs_on+0x9c/0x150 [ 1674.720902][T27508] __do_fast_syscall_32+0xb6/0x2b0 [ 1674.720940][T27508] ? lockdep_hardirqs_on+0x9c/0x150 [ 1674.720971][T27508] do_fast_syscall_32+0x34/0x80 [ 1674.721000][T27508] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1674.721028][T27508] RIP: 0023:0xf70ed539 [ 1674.721047][T27508] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1674.721066][T27508] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1674.721090][T27508] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 1674.721105][T27508] RDX: 0000000000000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 1674.721118][T27508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1674.721131][T27508] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1674.721143][T27508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1674.721174][T27508] [ 1674.725591][T27512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5477'. [ 1675.567916][T27532] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5479'. [ 1676.279044][T27541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5483'. [ 1676.419990][T27532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1676.433301][T27532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1676.450081][T27532] bond0 (unregistering): Released all slaves [ 1677.552467][T27553] FAULT_INJECTION: forcing a failure. [ 1677.552467][T27553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1677.575172][T27553] CPU: 1 UID: 0 PID: 27553 Comm: syz.0.5488 Not tainted syzkaller #0 PREEMPT(full) [ 1677.575199][T27553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1677.575212][T27553] Call Trace: [ 1677.575221][T27553] [ 1677.575230][T27553] dump_stack_lvl+0x189/0x250 [ 1677.575255][T27553] ? __pfx____ratelimit+0x10/0x10 [ 1677.575278][T27553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1677.575300][T27553] ? __pfx__printk+0x10/0x10 [ 1677.575321][T27553] ? __might_fault+0xb0/0x130 [ 1677.575359][T27553] should_fail_ex+0x414/0x560 [ 1677.575387][T27553] _copy_from_user+0x2d/0xb0 [ 1677.575408][T27553] get_compat_msghdr+0xad/0x4a0 [ 1677.575437][T27553] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1677.575472][T27553] ___sys_sendmsg+0x193/0x2a0 [ 1677.575500][T27553] ? __pfx____sys_sendmsg+0x10/0x10 [ 1677.575565][T27553] ? __fget_files+0x2a/0x420 [ 1677.575583][T27553] ? __fget_files+0x3a0/0x420 [ 1677.575629][T27553] __sys_sendmsg+0x164/0x220 [ 1677.575657][T27553] ? __pfx___sys_sendmsg+0x10/0x10 [ 1677.575691][T27553] ? __pfx_ksys_write+0x10/0x10 [ 1677.575724][T27553] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1677.575754][T27553] ? lockdep_hardirqs_on+0x9c/0x150 [ 1677.575783][T27553] __do_fast_syscall_32+0xb6/0x2b0 [ 1677.575811][T27553] ? lockdep_hardirqs_on+0x9c/0x150 [ 1677.575841][T27553] do_fast_syscall_32+0x34/0x80 [ 1677.575870][T27553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1677.575896][T27553] RIP: 0023:0xf709d539 [ 1677.575920][T27553] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1677.575940][T27553] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1677.575963][T27553] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1677.575979][T27553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1677.575991][T27553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1677.576004][T27553] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1677.576018][T27553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1677.576050][T27553] [ 1677.855037][T27557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5490'. [ 1679.484635][ T5909] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1679.724685][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 1679.811685][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.908460][T27581] input: syz1 as /devices/virtual/input/input48 [ 1680.184713][ T5909] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1680.312578][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.369901][ T5909] usb 4-1: config 0 descriptor?? [ 1681.019278][T27592] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5497'. [ 1681.689764][ T30] audit: type=1326 audit(1760004926.876:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27558 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1681.792870][ T30] audit: type=1326 audit(1760004926.886:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27558 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1682.058850][ T30] audit: type=1326 audit(1760004926.886:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27558 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1682.093200][ T30] audit: type=1326 audit(1760004927.226:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27599 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1682.116672][ T30] audit: type=1326 audit(1760004927.226:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27558 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1682.138939][ T30] audit: type=1326 audit(1760004927.226:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27558 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1682.178670][ T30] audit: type=1326 audit(1760004927.376:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27599 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1682.995025][ T5916] usb 4-1: USB disconnect, device number 51 [ 1683.079791][T27612] FAULT_INJECTION: forcing a failure. [ 1683.079791][T27612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1683.101901][T27612] CPU: 0 UID: 0 PID: 27612 Comm: syz.4.5503 Not tainted syzkaller #0 PREEMPT(full) [ 1683.101931][T27612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1683.101945][T27612] Call Trace: [ 1683.101958][T27612] [ 1683.101968][T27612] dump_stack_lvl+0x189/0x250 [ 1683.101996][T27612] ? __pfx____ratelimit+0x10/0x10 [ 1683.102020][T27612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1683.102042][T27612] ? __pfx__printk+0x10/0x10 [ 1683.102076][T27612] ? __might_fault+0xb0/0x130 [ 1683.102133][T27612] should_fail_ex+0x414/0x560 [ 1683.102165][T27612] _copy_from_user+0x2d/0xb0 [ 1683.102189][T27612] __sys_connect+0x123/0x440 [ 1683.102211][T27612] ? __fget_files+0x3a0/0x420 [ 1683.102231][T27612] ? __pfx___sys_connect+0x10/0x10 [ 1683.102273][T27612] ? __pfx_ksys_write+0x10/0x10 [ 1683.102335][T27612] __ia32_sys_connect+0x7a/0x90 [ 1683.102359][T27612] __do_fast_syscall_32+0xb6/0x2b0 [ 1683.102388][T27612] ? lockdep_hardirqs_on+0x9c/0x150 [ 1683.102419][T27612] do_fast_syscall_32+0x34/0x80 [ 1683.102448][T27612] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1683.102474][T27612] RIP: 0023:0xf7fb5539 [ 1683.102493][T27612] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1683.102512][T27612] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 1683.102536][T27612] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1683.102551][T27612] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 1683.102565][T27612] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1683.102578][T27612] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1683.102591][T27612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1683.102623][T27612] [ 1683.283769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1683.694842][ T5916] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1683.909496][T27634] input: syz0 as /devices/virtual/input/input49 [ 1683.947516][ T5916] usb 6-1: not running at top speed; connect to a high speed hub [ 1684.033587][ T5916] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1684.149787][ T5916] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 1684.223190][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.301560][ T5916] usb 6-1: Product: syz [ 1684.305942][ T5916] usb 6-1: Manufacturer: syz [ 1684.310663][ T5916] usb 6-1: SerialNumber: syz [ 1684.841579][T27625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5508'. [ 1684.872614][T27625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1684.947162][T27625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1685.035423][ T5916] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input50 [ 1685.143160][ T5184] bcm5974 6-1:1.0: could not read from device [ 1685.154039][ T5184] bcm5974 6-1:1.0: could not read from device [ 1685.290169][T27638] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5510'. [ 1685.336962][ T5184] bcm5974 6-1:1.0: could not read from device [ 1685.342012][ T5916] usb 6-1: USB disconnect, device number 39 [ 1685.973307][T27650] tls_set_device_offload_rx: netdev not found [ 1686.104640][ T5916] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1686.191316][T27653] FAULT_INJECTION: forcing a failure. [ 1686.191316][T27653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1686.217694][T27656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5516'. [ 1686.266111][T27653] CPU: 0 UID: 0 PID: 27653 Comm: syz.4.5517 Not tainted syzkaller #0 PREEMPT(full) [ 1686.266141][T27653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1686.266156][T27653] Call Trace: [ 1686.266167][T27653] [ 1686.266176][T27653] dump_stack_lvl+0x189/0x250 [ 1686.266206][T27653] ? __pfx____ratelimit+0x10/0x10 [ 1686.266230][T27653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1686.266254][T27653] ? __pfx__printk+0x10/0x10 [ 1686.266279][T27653] ? __might_fault+0xb0/0x130 [ 1686.266322][T27653] should_fail_ex+0x414/0x560 [ 1686.266352][T27653] _copy_from_user+0x2d/0xb0 [ 1686.266373][T27653] get_compat_msghdr+0xad/0x4a0 [ 1686.266396][T27653] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1686.266428][T27653] ___sys_recvmsg+0x17f/0x510 [ 1686.266465][T27653] ? __pfx____sys_recvmsg+0x10/0x10 [ 1686.266518][T27653] ? __fget_files+0x3a0/0x420 [ 1686.266541][T27653] do_recvmmsg+0x36a/0x770 [ 1686.266567][T27653] ? __pfx_do_recvmmsg+0x10/0x10 [ 1686.266596][T27653] ? ksys_write+0x1cb/0x250 [ 1686.266656][T27653] ? __fget_files+0x3a0/0x420 [ 1686.266681][T27653] __sys_recvmmsg+0x19d/0x280 [ 1686.266702][T27653] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1686.266721][T27653] ? __pfx_ksys_write+0x10/0x10 [ 1686.266770][T27653] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1686.266804][T27653] __do_fast_syscall_32+0xb6/0x2b0 [ 1686.266832][T27653] ? lockdep_hardirqs_on+0x9c/0x150 [ 1686.266853][T27653] do_fast_syscall_32+0x34/0x80 [ 1686.266872][T27653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1686.266899][T27653] RIP: 0023:0xf7fb5539 [ 1686.266917][T27653] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1686.266936][T27653] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1686.266956][T27653] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1686.266970][T27653] RDX: 0000000000000284 RSI: 0000000000000002 RDI: 0000000000000000 [ 1686.266984][T27653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1686.266993][T27653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1686.267001][T27653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1686.267026][T27653] [ 1686.268022][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1686.795157][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1686.964071][ T5916] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1686.974641][T17899] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1687.000436][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.074611][ T5916] usb 1-1: Product: syz [ 1687.078816][ T5916] usb 1-1: Manufacturer: syz [ 1687.103949][ T5916] usb 1-1: SerialNumber: syz [ 1687.120277][ T5916] usb 1-1: config 0 descriptor?? [ 1687.157703][T17899] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1687.195809][T17899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1687.233261][T17899] usb 5-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 1687.264680][T17899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.291926][T17899] usb 5-1: config 0 descriptor?? [ 1687.361757][T27646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.379822][T27646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1687.430518][ T5916] usb 1-1: USB disconnect, device number 36 [ 1687.514727][T27676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5521'. [ 1687.564195][ T984] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1687.635681][T24647] udevd[24647]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1687.735615][ T984] usb 6-1: Using ep0 maxpacket: 8 [ 1687.745095][ T984] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1687.756254][ T984] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1687.766413][ T984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.775881][ T984] usb 6-1: Product: syz [ 1687.780287][ T984] usb 6-1: Manufacturer: syz [ 1687.785239][ T984] usb 6-1: SerialNumber: syz [ 1687.796900][ T984] usb 6-1: config 0 descriptor?? [ 1687.811184][ T984] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1687.820271][ T984] usb 6-1: setting power ON [ 1687.825328][ T984] dvb-usb: bulk message failed: -22 (2/0) [ 1687.835282][ T984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1687.848695][ T984] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1687.857795][ T984] usb 6-1: media controller created [ 1687.880051][T17899] wacom 0003:056A:0315.0021: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 1687.911622][T17899] wacom 0003:056A:0315.0021: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.4-1/input0 [ 1687.933455][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1687.950798][T17899] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0315.0021/input/input51 [ 1688.008482][T27672] dvb-usb: bulk message failed: -22 (3/0) [ 1688.016053][T27672] cxusb: i2c wr: len=80 is too big! [ 1688.016053][T27672] [ 1688.040437][ T984] usb 6-1: selecting invalid altsetting 6 [ 1688.053151][ T984] usb 6-1: digital interface selection failed (-22) [ 1688.114710][ T984] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1688.139808][ T984] usb 6-1: setting power OFF [ 1688.150288][ T984] dvb-usb: bulk message failed: -22 (2/0) [ 1688.150641][T27677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.178506][ T984] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1688.207832][T27677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.280251][ T984] (NULL device *): no alternate interface [ 1688.481632][T27663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.495338][T27663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.658552][T27685] input: syz0 as /devices/virtual/input/input54 [ 1688.814388][T27663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1688.883084][T27663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1689.513214][T27680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.544305][T27680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1689.602527][ T6855] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.675113][ T6855] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.684155][ T6855] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.714932][T17900] usb 5-1: USB disconnect, device number 50 [ 1689.723024][ T6855] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.888592][T27680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1689.971016][T27680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1690.174400][ T984] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1690.201534][ T984] usb 6-1: USB disconnect, device number 40 [ 1690.439797][T27708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5531'. [ 1690.508032][T27710] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5530'. [ 1691.267558][T27713] input: syz0 as /devices/virtual/input/input55 [ 1691.896003][T27729] sit0: entered promiscuous mode [ 1691.908117][T27729] netlink: 'syz.0.5536': attribute type 1 has an invalid length. [ 1691.916275][T27729] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5536'. [ 1692.344842][ T5916] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1692.383870][T27742] vcan0: tx drop: invalid sa for name 0x0000020000000000 [ 1692.547435][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1692.557879][ T5916] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1692.581488][ T5916] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1692.596629][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.609754][ T5916] usb 1-1: config 0 descriptor?? [ 1692.650191][T27742] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1692.681973][ T5916] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1692.689240][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 1692.702356][ T5916] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1692.761721][ T5916] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1692.780262][ T5916] usb 1-1: media controller created [ 1692.789583][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1692.815592][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 1692.870394][ T5916] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1692.885424][T27734] dvb-usb: bulk message failed: -22 (2/0) [ 1692.891665][T27734] dvb-usb: bulk message failed: -22 (4/0) [ 1693.083721][ T5916] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input57 [ 1693.100476][ T5916] dvb-usb: schedule remote query interval to 150 msecs. [ 1693.108607][ T5916] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1693.171058][ T5916] usb 1-1: USB disconnect, device number 37 [ 1693.235148][ T5916] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1693.397100][ T984] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1693.564785][ T984] usb 4-1: Using ep0 maxpacket: 8 [ 1693.571923][ T984] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1693.592263][ T984] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1693.601596][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.618914][ T984] usb 4-1: Product: syz [ 1693.624943][ T984] usb 4-1: Manufacturer: syz [ 1693.633332][ T984] usb 4-1: SerialNumber: syz [ 1693.661944][ T984] usb 4-1: config 0 descriptor?? [ 1693.690669][ T984] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1693.705182][ T984] usb 4-1: setting power ON [ 1693.719978][ T984] dvb-usb: bulk message failed: -22 (2/0) [ 1693.925149][ T984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1693.970594][ T984] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1693.999799][ T984] usb 4-1: media controller created [ 1694.107370][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1694.184639][T17900] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1694.197329][ T984] usb 4-1: selecting invalid altsetting 6 [ 1694.210668][ T984] usb 4-1: digital interface selection failed (-22) [ 1694.228011][ T984] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1694.246601][ T984] usb 4-1: setting power OFF [ 1694.253920][ T984] dvb-usb: bulk message failed: -22 (2/0) [ 1694.261738][ T984] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1694.279671][ T984] (NULL device *): no alternate interface [ 1694.387443][T17900] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1694.430414][ T984] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1694.450512][T17900] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1694.554105][T17900] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1694.579054][T17900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.647092][T27754] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5544'. [ 1694.700421][T17900] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1694.736272][T17900] usb 2-1: invalid MIDI out EP 0 [ 1694.900729][T27770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5547'. [ 1694.998682][T17900] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1695.026621][T27770] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1695.124313][T27770] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5547'. [ 1695.174685][T27770] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1695.226774][T27752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.322623][T27770] ptrace attach of "./syz-executor exec"[22978] was attempted by "./syz-executor exec"[27770] [ 1695.333601][T27752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.188777][T27752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.201156][T27752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.250174][ T5916] usb 4-1: USB disconnect, device number 52 [ 1696.362083][T27779] fuse: Bad value for 'fd' [ 1696.752066][ T5916] usb 2-1: USB disconnect, device number 60 [ 1697.284600][ T5916] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1697.461511][ T5916] usb 2-1: device descriptor read/64, error -71 [ 1697.714618][ T5916] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1697.929692][ T5916] usb 2-1: device descriptor read/64, error -71 [ 1698.044981][ T5916] usb usb2-port1: attempt power cycle [ 1698.434638][ T5916] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1698.485169][ T5916] usb 2-1: device descriptor read/8, error -71 [ 1698.602549][T27830] netlink: 'syz.0.5561': attribute type 21 has an invalid length. [ 1698.610601][T27830] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5561'. [ 1698.622299][T27830] netlink: 'syz.0.5561': attribute type 4 has an invalid length. [ 1698.661312][T27830] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5561'. [ 1698.744614][ T5916] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1698.765648][T27830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5561'. [ 1698.776112][ T5916] usb 2-1: device descriptor read/8, error -71 [ 1698.885664][ T5916] usb usb2-port1: unable to enumerate USB device [ 1699.198824][T27834] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5562'. [ 1699.634324][T27841] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5565'. [ 1700.083970][ T984] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1700.192432][ T5916] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1700.557866][ T984] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 1700.572068][ T984] usb 5-1: config 0 has no interface number 0 [ 1700.574892][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 1700.601302][ T984] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1700.610977][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.614643][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1700.626736][ T984] usb 5-1: Product: syz [ 1700.634319][ T984] usb 5-1: Manufacturer: syz [ 1700.650596][ T984] usb 5-1: SerialNumber: syz [ 1700.659397][ T5916] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1700.681213][ T984] usb 5-1: config 0 descriptor?? [ 1700.689243][ T5916] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1700.709017][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.724209][ T984] hub 5-1:0.217: bad descriptor, ignoring hub [ 1700.740955][ T5916] usb 6-1: Product: syz [ 1700.759578][ T5916] usb 6-1: Manufacturer: syz [ 1700.764619][ T984] hub 5-1:0.217: probe with driver hub failed with error -5 [ 1700.772044][ T5916] usb 6-1: SerialNumber: syz [ 1700.797200][ T24] usb 2-1: config 0 has no interfaces? [ 1700.806209][ T24] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1700.815715][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.823830][ T24] usb 2-1: Product: syz [ 1700.838998][ T5916] usb 6-1: config 0 descriptor?? [ 1700.848550][ T24] usb 2-1: Manufacturer: syz [ 1700.853176][ T24] usb 2-1: SerialNumber: syz [ 1700.867673][ T5916] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1700.885975][ T24] usb 2-1: config 0 descriptor?? [ 1700.953856][ T984] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1700.958740][ T5916] usb 6-1: setting power ON [ 1700.967324][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 1701.025845][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1701.049552][ T984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1701.055002][ T5916] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1701.068455][T27846] dib0700: tx buffer length is larger than 4. Not supported. [ 1701.169384][ T5916] usb 6-1: media controller created [ 1701.169383][ T984] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1701.295017][ T984] usb 5-1: media controller created [ 1701.309944][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1701.824708][ T5916] usb 6-1: selecting invalid altsetting 6 [ 1701.840990][ T5916] usb 6-1: digital interface selection failed (-22) [ 1701.844389][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1701.917882][T27852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.966175][ T5916] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1702.015337][ T5916] usb 6-1: setting power OFF [ 1702.019970][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 1702.044758][ T5916] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1702.055157][ T5916] (NULL device *): no alternate interface [ 1702.119782][ T5916] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1702.152903][T27852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.194789][ T984] DVB: Unable to find symbol dib7000p_attach() [ 1702.304044][ T984] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1702.433959][T27870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5573'. [ 1702.883440][T17899] usb 6-1: USB disconnect, device number 41 [ 1702.889660][ T984] rc_core: IR keymap rc-dib0700-rc5 not found [ 1702.907202][ T984] Registered IR keymap rc-empty [ 1702.915556][ T984] dvb-usb: could not initialize remote control. [ 1702.936579][ T984] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1703.067657][ T984] usb 5-1: USB disconnect, device number 51 [ 1703.153156][ T984] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1703.327900][T17899] usb 2-1: USB disconnect, device number 65 [ 1703.739105][T17899] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1703.884890][T17899] usb 2-1: device descriptor read/64, error -71 [ 1704.034962][T27897] pimreg: entered allmulticast mode [ 1704.050710][T27897] pimreg: left allmulticast mode [ 1704.135599][T17899] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1704.287281][T17899] usb 2-1: device descriptor read/64, error -71 [ 1704.293672][ T984] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1704.416324][T27907] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1704.560793][T17899] usb usb2-port1: attempt power cycle [ 1704.687747][ T984] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 1704.697060][ T984] usb 6-1: config 0 has no interface number 0 [ 1704.924646][T17899] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1704.957792][ T984] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1704.967115][ T984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.975394][ T984] usb 6-1: Product: syz [ 1704.979745][T17899] usb 2-1: device descriptor read/8, error -71 [ 1704.991441][ T984] usb 6-1: Manufacturer: syz [ 1705.006297][ T984] usb 6-1: SerialNumber: syz [ 1705.057589][ T984] usb 6-1: config 0 descriptor?? [ 1705.087008][ T984] hub 6-1:0.217: bad descriptor, ignoring hub [ 1705.104675][ T984] hub 6-1:0.217: probe with driver hub failed with error -5 [ 1705.236061][T17899] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1705.275396][T17899] usb 2-1: device descriptor read/8, error -71 [ 1705.287391][ T984] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1705.304449][ T984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1705.327065][ T984] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1705.336155][ T984] usb 6-1: media controller created [ 1705.368614][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1705.402358][T17899] usb usb2-port1: unable to enumerate USB device [ 1705.704577][ T984] DVB: Unable to find symbol dib7000p_attach() [ 1705.710919][ T984] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1706.005709][ T5916] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1706.016322][ T984] rc_core: IR keymap rc-dib0700-rc5 not found [ 1706.022617][ T984] Registered IR keymap rc-empty [ 1706.028031][ T984] dvb-usb: could not initialize remote control. [ 1706.055015][ T984] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1706.096838][ T984] usb 6-1: USB disconnect, device number 42 [ 1706.165980][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 1706.177096][ T5916] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1706.188183][ T5916] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1706.208014][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.208745][ T984] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1706.234573][ T5916] usb 1-1: Product: syz [ 1706.238790][ T5916] usb 1-1: Manufacturer: syz [ 1706.243402][ T5916] usb 1-1: SerialNumber: syz [ 1706.317993][ T5916] usb 1-1: config 0 descriptor?? [ 1706.336973][ T5916] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1706.391680][ T5916] usb 1-1: setting power ON [ 1706.404837][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 1706.570488][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1706.594848][ T5916] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1706.610131][ T5916] usb 1-1: media controller created [ 1706.705255][T27935] : renamed from bridge_slave_0 [ 1706.905399][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1706.996836][ T5916] usb 1-1: selecting invalid altsetting 6 [ 1707.067492][ T5916] usb 1-1: digital interface selection failed (-22) [ 1707.095160][ T5916] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1707.104457][ T5916] usb 1-1: setting power OFF [ 1707.111980][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 1707.189924][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1707.274762][ T5916] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1707.289741][ T5916] (NULL device *): no alternate interface [ 1707.444995][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1707.500902][ T24] usb 2-1: config 3 has an invalid interface number: 201 but max is 0 [ 1707.523924][ T5916] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1707.537653][ T24] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.544918][ T5921] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1707.551265][ T24] usb 2-1: config 3 has no interface number 0 [ 1707.561446][ T24] usb 2-1: too many endpoints for config 3 interface 201 altsetting 255: 242, using maximum allowed: 30 [ 1707.608436][ T24] usb 2-1: config 3 interface 201 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 1707.622214][ T24] usb 2-1: config 3 interface 201 has no altsetting 0 [ 1707.634832][T27923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.643802][T27923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.662414][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=b0.61 [ 1707.671626][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.680002][ T24] usb 2-1: Product: syz [ 1707.684204][ T24] usb 2-1: Manufacturer: syz [ 1707.694083][ T24] usb 2-1: SerialNumber: syz [ 1707.719520][ T24] ax88179_178a 2-1:3.201: probe with driver ax88179_178a failed with error -22 [ 1707.739121][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.763308][ T5921] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1707.783308][ T5921] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1707.810100][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.824714][T27951] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1707.890319][T27923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.902851][T27923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.915024][ T984] usb 1-1: USB disconnect, device number 38 [ 1707.957725][ T5921] usb 6-1: config 0 descriptor?? [ 1708.023281][ T5921] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1708.043951][ T5921] dvb-usb: bulk message failed: -22 (3/0) [ 1708.052686][ T5921] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1708.081962][ T5921] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1708.250799][ T5921] usb 6-1: media controller created [ 1708.260659][T27942] dvb-usb: bulk message failed: -22 (2/0) [ 1708.279998][T27942] dvb-usb: bulk message failed: -22 (4/0) [ 1708.321163][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1708.330718][T18015] usb 2-1: USB disconnect, device number 70 [ 1708.407467][ T5921] dvb-usb: bulk message failed: -22 (6/0) [ 1708.433881][ T5921] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1708.457084][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input60 [ 1708.487710][ T5921] dvb-usb: schedule remote query interval to 150 msecs. [ 1708.504669][ T5921] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1708.543392][ T5921] usb 6-1: USB disconnect, device number 43 [ 1708.620751][ T5921] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1709.257640][ T5921] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1709.524804][ T984] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1709.535303][ T5921] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 1709.543521][ T5921] usb 1-1: config 0 has no interface number 0 [ 1709.555083][ T5921] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1709.564324][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.575255][ T5921] usb 1-1: Product: syz [ 1709.579554][ T5921] usb 1-1: Manufacturer: syz [ 1709.584288][ T5921] usb 1-1: SerialNumber: syz [ 1709.594775][ T5921] usb 1-1: config 0 descriptor?? [ 1709.603545][ T5921] hub 1-1:0.217: bad descriptor, ignoring hub [ 1709.611244][ T5921] hub 1-1:0.217: probe with driver hub failed with error -5 [ 1709.687136][ T984] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.699600][ T984] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1709.724659][ T984] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1709.745439][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.847383][ T5921] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1709.861360][ T984] usb 4-1: config 0 descriptor?? [ 1709.868078][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1709.914929][ T984] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1709.933544][ T5921] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1709.958855][ T984] dvb-usb: bulk message failed: -22 (3/0) [ 1709.964800][ T5921] usb 1-1: media controller created [ 1710.000873][ T984] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1710.070336][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1710.090638][ T984] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1710.113527][ T984] usb 4-1: media controller created [ 1710.148893][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1710.176874][ T984] dvb-usb: bulk message failed: -22 (6/0) [ 1710.198908][ T984] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1710.291137][ T984] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input61 [ 1710.352075][ T5921] DVB: Unable to find symbol dib7000p_attach() [ 1710.360823][ T5921] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1710.449532][ T984] dvb-usb: schedule remote query interval to 150 msecs. [ 1710.473000][ T984] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1710.637813][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 1710.646687][ T984] dvb-usb: error while querying for an remote control event. [ 1710.695378][ T5921] rc_core: IR keymap rc-dib0700-rc5 not found [ 1710.702823][ T984] usb 4-1: USB disconnect, device number 53 [ 1710.744309][ T5921] Registered IR keymap rc-empty [ 1710.750793][ T5921] dvb-usb: could not initialize remote control. [ 1710.769092][ T5921] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1710.796166][ T984] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1710.820743][ T5921] usb 1-1: USB disconnect, device number 39 [ 1710.947629][T18015] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1710.993104][ T5921] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1711.152385][T18015] usb 6-1: Using ep0 maxpacket: 16 [ 1711.183323][T18015] usb 6-1: config 252 has too many interfaces: 129, using maximum allowed: 32 [ 1711.199717][T18015] usb 6-1: config 252 has 1 interface, different from the descriptor's value: 129 [ 1711.287639][T18015] usb 6-1: config 252 has no interface number 0 [ 1711.300850][T18015] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1711.334903][T18015] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1711.360605][T18015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.381349][T18015] usb 6-1: Product: syz [ 1711.393094][T18015] usb 6-1: Manufacturer: syz [ 1711.404632][T18015] usb 6-1: SerialNumber: syz [ 1711.625389][T18015] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1711.876584][T28007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.892006][T28007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.576484][ T984] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1712.631322][ T24] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1712.716653][T22413] usb 6-1: Failed to submit usb control message: -110 [ 1712.741446][T22413] usb 6-1: unable to send the bmi data to the device: -110 [ 1712.773479][T22413] usb 6-1: unable to get target info from device [ 1712.795202][T22413] usb 6-1: could not get target info (-110) [ 1712.803800][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.814638][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 1712.819896][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1712.822291][ T984] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1712.829634][T22413] usb 6-1: could not probe fw (-110) [ 1712.927505][ T984] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1712.937604][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.958240][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1712.960434][ T984] usb 5-1: Product: syz [ 1712.990739][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.995199][ T984] usb 5-1: Manufacturer: syz [ 1713.020766][ T984] usb 5-1: SerialNumber: syz [ 1713.040444][ T24] usb 4-1: config 0 descriptor?? [ 1713.062354][ T984] usb 5-1: config 0 descriptor?? [ 1713.094584][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1713.102920][ T984] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1713.117778][ T984] usb 5-1: setting power ON [ 1713.124326][ T984] dvb-usb: bulk message failed: -22 (2/0) [ 1713.124334][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1713.141909][ T984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1713.153250][ T984] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1713.162284][ T984] usb 5-1: media controller created [ 1713.173483][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1713.209457][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1713.243223][ T984] usb 5-1: selecting invalid altsetting 6 [ 1713.243238][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1713.243286][ T24] usb 4-1: media controller created [ 1713.249887][ T984] usb 5-1: digital interface selection failed (-22) [ 1713.279269][ T984] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1713.289440][ T984] usb 5-1: setting power OFF [ 1713.294718][ T984] dvb-usb: bulk message failed: -22 (2/0) [ 1713.306157][T28014] dvb-usb: bulk message failed: -22 (3/0) [ 1713.306251][ T984] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1713.316928][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1713.321901][ T984] (NULL device *): no alternate interface [ 1713.330031][T28014] dvb-usb: bulk message failed: -22 (4/0) [ 1713.395629][T28014] cxusb: i2c read failed [ 1713.421192][T28005] cxusb: i2c wr: len=80 is too big! [ 1713.421192][T28005] [ 1713.429674][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1713.454713][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1713.492097][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input63 [ 1713.551947][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1713.581644][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1713.625344][ T24] usb 4-1: USB disconnect, device number 54 [ 1713.696322][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1713.785301][T25180] usb 6-1: USB disconnect, device number 44 [ 1714.141432][T28005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.209605][T28005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.420062][T28005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.436508][T28005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.448496][ T984] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1714.527407][ T984] usb 5-1: USB disconnect, device number 52 [ 1714.574623][T18015] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1714.726753][T18015] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1714.741589][T18015] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1714.771213][T18015] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1714.793735][T18015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.826943][T18015] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1714.844664][ T24] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1714.869625][T18015] usb 4-1: invalid MIDI out EP 0 [ 1715.124695][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1715.143618][ T24] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1715.166531][T27010] udevd[27010]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1715.193654][ T24] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1715.274663][T18015] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1715.287842][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1715.318380][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1715.340575][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1715.357323][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1715.447064][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1715.472655][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.505749][ T24] usb 2-1: config 0 descriptor?? [ 1715.761238][ T24] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1715.807329][ T24] usb 2-1: USB disconnect, device number 71 [ 1715.839197][ T24] usblp0: removed [ 1716.137811][T28067] FAULT_INJECTION: forcing a failure. [ 1716.137811][T28067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1716.151077][T28067] CPU: 1 UID: 0 PID: 28067 Comm: syz.5.5626 Not tainted syzkaller #0 PREEMPT(full) [ 1716.151100][T28067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1716.151113][T28067] Call Trace: [ 1716.151120][T28067] [ 1716.151129][T28067] dump_stack_lvl+0x189/0x250 [ 1716.151154][T28067] ? __pfx____ratelimit+0x10/0x10 [ 1716.151176][T28067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1716.151196][T28067] ? __pfx__printk+0x10/0x10 [ 1716.151216][T28067] ? __might_fault+0xb0/0x130 [ 1716.151252][T28067] should_fail_ex+0x414/0x560 [ 1716.151279][T28067] _copy_from_user+0x2d/0xb0 [ 1716.151299][T28067] get_compat_msghdr+0xad/0x4a0 [ 1716.151326][T28067] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1716.151359][T28067] ___sys_sendmsg+0x193/0x2a0 [ 1716.151385][T28067] ? __pfx____sys_sendmsg+0x10/0x10 [ 1716.151439][T28067] ? __fget_files+0x2a/0x420 [ 1716.151456][T28067] ? __fget_files+0x3a0/0x420 [ 1716.151501][T28067] __sys_sendmsg+0x164/0x220 [ 1716.151526][T28067] ? __pfx___sys_sendmsg+0x10/0x10 [ 1716.151556][T28067] ? __pfx_ksys_write+0x10/0x10 [ 1716.151586][T28067] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1716.151612][T28067] ? lockdep_hardirqs_on+0x9c/0x150 [ 1716.151638][T28067] __do_fast_syscall_32+0xb6/0x2b0 [ 1716.151663][T28067] ? lockdep_hardirqs_on+0x9c/0x150 [ 1716.151691][T28067] do_fast_syscall_32+0x34/0x80 [ 1716.151714][T28067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1716.151736][T28067] RIP: 0023:0xf707d539 [ 1716.151753][T28067] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1716.151769][T28067] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1716.151789][T28067] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1716.151803][T28067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1716.151814][T28067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1716.151826][T28067] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1716.151837][T28067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1716.151896][T28067] [ 1716.365792][ T984] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1716.524645][ T984] usb 2-1: Using ep0 maxpacket: 32 [ 1716.531233][ T984] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1716.539658][ T984] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1716.548952][ T984] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1716.558057][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1716.567808][ T984] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1716.577556][ T984] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1716.590732][ T984] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1716.600050][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.611829][ T984] usb 2-1: config 0 descriptor?? [ 1716.674830][T25180] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1716.830903][T25180] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1716.842527][ T984] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1716.863231][T25180] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1716.873917][T25180] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1716.886733][T25180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.901179][T25180] usb 6-1: config 0 descriptor?? [ 1716.910811][T25180] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1716.917930][T25180] dvb-usb: bulk message failed: -22 (3/0) [ 1716.930031][T25180] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1716.940805][T25180] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1716.948664][T25180] usb 6-1: media controller created [ 1716.957048][T25180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1717.031711][T25180] dvb-usb: bulk message failed: -22 (6/0) [ 1717.087287][T25180] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1717.111215][T28070] dvb-usb: bulk message failed: -22 (2/0) [ 1717.117168][T28070] dvb-usb: bulk message failed: -22 (4/0) [ 1717.276515][ T5921] usb 4-1: USB disconnect, device number 55 [ 1717.353116][T25180] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input65 [ 1717.380229][T25180] dvb-usb: schedule remote query interval to 150 msecs. [ 1717.400004][T28089] xfrm0: entered allmulticast mode [ 1717.410571][T28089] syzkaller0: entered promiscuous mode [ 1717.416808][T28089] syzkaller0: refused to change device tx_queue_len [ 1717.429593][T25180] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1717.462373][T25180] usb 6-1: USB disconnect, device number 45 [ 1717.602001][T25180] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1717.884578][ T5921] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1718.224694][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 1718.231423][ T5921] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1718.243718][ T5921] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1718.261838][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.270692][ T5921] usb 4-1: Product: syz [ 1718.276074][ T5921] usb 4-1: Manufacturer: syz [ 1718.280987][ T5921] usb 4-1: SerialNumber: syz [ 1718.298171][ T5921] usb 4-1: config 0 descriptor?? [ 1718.308924][ T5921] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1718.318040][ T5921] usb 4-1: setting power ON [ 1718.324847][ T5921] dvb-usb: bulk message failed: -22 (2/0) [ 1718.339923][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1718.358844][ T5921] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1718.377721][ T5921] usb 4-1: media controller created [ 1718.453216][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1718.462348][T17900] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1718.473462][T28104] x_tables: duplicate underflow at hook 1 [ 1718.506494][ T5921] usb 4-1: selecting invalid altsetting 6 [ 1718.522539][ T5921] usb 4-1: digital interface selection failed (-22) [ 1718.529683][ T5921] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1718.529703][T28094] dvb-usb: bulk message failed: -22 (3/0) [ 1718.546381][ T5921] usb 4-1: setting power OFF [ 1718.558771][T28094] cxusb: i2c wr: len=80 is too big! [ 1718.558771][T28094] [ 1718.558785][ T5921] dvb-usb: bulk message failed: -22 (2/0) [ 1718.572404][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1718.582128][ T5921] (NULL device *): no alternate interface [ 1718.591723][ T5916] usb 2-1: USB disconnect, device number 72 [ 1718.610721][ T5916] usblp0: removed [ 1718.634575][T17900] usb 6-1: Using ep0 maxpacket: 8 [ 1718.641615][T17900] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1718.654527][T17900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.700918][T17900] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1718.714573][T17900] pvrusb2: ********** [ 1718.722664][T17900] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1718.735788][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1718.754631][T17900] pvrusb2: Important functionality might not be entirely working. [ 1718.762480][T17900] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1718.794581][T17900] pvrusb2: ********** [ 1718.904759][ T2347] pvrusb2: Invalid write control endpoint [ 1718.911393][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1718.928609][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1718.963241][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.009211][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1719.032897][ T24] pvrusb2: ********** [ 1719.043170][ T2347] pvrusb2: Invalid write control endpoint [ 1719.090376][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1719.100621][T28101] FAULT_INJECTION: forcing a failure. [ 1719.100621][T28101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1719.100665][T28101] CPU: 0 UID: 0 PID: 28101 Comm: syz.5.5633 Not tainted syzkaller #0 PREEMPT(full) [ 1719.100687][T28101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1719.100698][T28101] Call Trace: [ 1719.100706][T28101] [ 1719.100715][T28101] dump_stack_lvl+0x189/0x250 [ 1719.100740][T28101] ? __pfx____ratelimit+0x10/0x10 [ 1719.100762][T28101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1719.100782][T28101] ? __pfx__printk+0x10/0x10 [ 1719.100814][T28101] should_fail_ex+0x414/0x560 [ 1719.100841][T28101] _copy_to_user+0x31/0xb0 [ 1719.100862][T28101] simple_read_from_buffer+0xe1/0x170 [ 1719.100894][T28101] proc_fail_nth_read+0x1b3/0x220 [ 1719.100920][T28101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1719.100958][T28101] ? rw_verify_area+0x2a6/0x4d0 [ 1719.100986][T28101] ? __lock_acquire+0xab9/0xd20 [ 1719.101006][T28101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1719.101034][T28101] vfs_read+0x1fd/0xa30 [ 1719.101066][T28101] ? fdget_pos+0x247/0x320 [ 1719.101089][T28101] ? __pfx___mutex_lock+0x10/0x10 [ 1719.101118][T28101] ? __pfx_vfs_read+0x10/0x10 [ 1719.101147][T28101] ? __fget_files+0x2a/0x420 [ 1719.101171][T28101] ? __fget_files+0x3a0/0x420 [ 1719.101189][T28101] ? __fget_files+0x2a/0x420 [ 1719.101215][T28101] ksys_read+0x145/0x250 [ 1719.101245][T28101] ? __pfx_ksys_read+0x10/0x10 [ 1719.101276][T28101] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1719.101306][T28101] ? lockdep_hardirqs_on+0x9c/0x150 [ 1719.101333][T28101] __do_fast_syscall_32+0xb6/0x2b0 [ 1719.101362][T28101] ? lockdep_hardirqs_on+0x9c/0x150 [ 1719.101392][T28101] do_fast_syscall_32+0x34/0x80 [ 1719.101418][T28101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1719.101444][T28101] RIP: 0023:0xf707d539 [ 1719.101463][T28101] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1719.101481][T28101] RSP: 002b:00000000f546d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1719.101503][T28101] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546d620 [ 1719.101518][T28101] RDX: 000000000000000f RSI: 00000000f7415ff4 RDI: 0000000000000000 [ 1719.101531][T28101] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1719.101543][T28101] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1719.101557][T28101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1719.101588][T28101] [ 1719.126907][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1719.366285][ T24] pvrusb2: Important functionality might not be entirely working. [ 1719.404801][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1719.410461][ T5916] usb 6-1: USB disconnect, device number 46 [ 1719.412396][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1719.428704][ T2347] pvrusb2: Device being rendered inoperable [ 1719.434749][ T2347] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1719.440814][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1719.441854][ T2347] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1719.462569][ T2347] pvrusb2: Attached sub-driver cx25840 [ 1719.468614][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1719.479005][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1719.511381][T28094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.538842][ T24] pvrusb2: ********** [ 1719.560346][ T2347] pvrusb2: Invalid write control endpoint [ 1719.560815][T28094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.778199][T17900] usb 5-1: USB disconnect, device number 53 [ 1719.806267][ T2347] pvrusb2: Invalid write control endpoint [ 1719.815421][T28094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.839833][T28094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.908509][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1719.938511][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1719.946429][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1719.956821][ T2347] pvrusb2: Device being rendered inoperable [ 1719.960015][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1719.962825][ T2347] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1719.980615][ T2347] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1719.989630][ T2347] pvrusb2: Attached sub-driver cx25840 [ 1719.995643][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1720.007358][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1720.077472][ T5921] usb 4-1: USB disconnect, device number 56 [ 1720.554629][ T5916] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1720.707142][ T5916] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1720.718381][ T5916] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1720.730396][ T5916] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1720.739771][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.760398][ T5916] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1720.768399][ T5916] usb 6-1: invalid MIDI out EP 0 [ 1720.881904][ T5916] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1720.903375][T28141] netlink: 'syz.3.5646': attribute type 10 has an invalid length. [ 1720.948827][T28141] team0: Port device dummy0 added [ 1720.970466][T28144] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5646'. [ 1721.261308][ T5916] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1721.524708][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 1721.531330][ T5916] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 1721.540440][ T5916] usb 4-1: config 0 has no interface number 0 [ 1721.548353][ T5916] usb 4-1: config 0 interface 200 has no altsetting 0 [ 1721.558599][ T5916] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1721.568076][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.576482][ T5916] usb 4-1: Product: syz [ 1721.580717][ T5916] usb 4-1: Manufacturer: syz [ 1721.607846][ T5916] usb 4-1: SerialNumber: syz [ 1721.681344][ T5916] usb 4-1: config 0 descriptor?? [ 1722.114738][ T5916] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input66 [ 1722.165627][ T5916] usb 4-1: USB disconnect, device number 57 [ 1722.866585][T28164] netlink: 'syz.3.5652': attribute type 3 has an invalid length. [ 1722.912152][T28164] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5652'. [ 1722.947092][T28164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5652'. [ 1723.077371][T28173] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5655'. [ 1723.095550][T28173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1723.185949][ T5916] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1723.340759][T18015] usb 6-1: USB disconnect, device number 47 [ 1723.347169][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 1723.361482][ T5916] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1723.388847][ T5916] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1723.408428][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.431354][ T5916] usb 1-1: Product: syz [ 1723.437746][ T5916] usb 1-1: Manufacturer: syz [ 1723.442509][ T5916] usb 1-1: SerialNumber: syz [ 1723.450322][ T5916] usb 1-1: config 0 descriptor?? [ 1723.462643][ T5916] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1723.473118][ T5916] usb 1-1: setting power ON [ 1723.479054][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 1723.488956][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1723.515321][ T5916] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1723.534124][ T5916] usb 1-1: media controller created [ 1723.571679][T28182] netlink: 200 bytes leftover after parsing attributes in process `syz.5.5659'. [ 1723.575783][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1723.602980][ T5916] usb 1-1: selecting invalid altsetting 6 [ 1723.608891][ T5916] usb 1-1: digital interface selection failed (-22) [ 1723.618600][ T5916] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1723.635322][ T5916] usb 1-1: setting power OFF [ 1723.640127][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 1723.650267][ T5916] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1723.661833][T28168] dvb-usb: bulk message failed: -22 (3/0) [ 1723.671495][ T5916] (NULL device *): no alternate interface [ 1723.675059][T28168] cxusb: i2c wr: len=80 is too big! [ 1723.675059][T28168] [ 1723.855410][T28187] FAULT_INJECTION: forcing a failure. [ 1723.855410][T28187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1723.934606][T28187] CPU: 1 UID: 0 PID: 28187 Comm: syz.5.5660 Not tainted syzkaller #0 PREEMPT(full) [ 1723.934635][T28187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1723.934649][T28187] Call Trace: [ 1723.934657][T28187] [ 1723.934666][T28187] dump_stack_lvl+0x189/0x250 [ 1723.934693][T28187] ? __pfx____ratelimit+0x10/0x10 [ 1723.934718][T28187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1723.934739][T28187] ? __pfx__printk+0x10/0x10 [ 1723.934761][T28187] ? __might_fault+0xb0/0x130 [ 1723.934800][T28187] should_fail_ex+0x414/0x560 [ 1723.934830][T28187] _copy_from_user+0x2d/0xb0 [ 1723.934852][T28187] __sys_bpf+0x1e3/0x860 [ 1723.934874][T28187] ? __pfx___sys_bpf+0x10/0x10 [ 1723.934909][T28187] ? ksys_write+0x22a/0x250 [ 1723.934936][T28187] ? exc_page_fault+0x82/0x100 [ 1723.934961][T28187] ? __pfx_ksys_write+0x10/0x10 [ 1723.934996][T28187] __ia32_sys_bpf+0x7c/0x90 [ 1723.935026][T28187] __do_fast_syscall_32+0xb6/0x2b0 [ 1723.935053][T28187] ? lockdep_hardirqs_on+0x9c/0x150 [ 1723.935082][T28187] do_fast_syscall_32+0x34/0x80 [ 1723.935108][T28187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1723.935133][T28187] RIP: 0023:0xf707d539 [ 1723.935151][T28187] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1723.935169][T28187] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1723.935191][T28187] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880 [ 1723.935206][T28187] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1723.935218][T28187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1723.935230][T28187] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1723.935243][T28187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1723.935272][T28187] [ 1724.373236][T28168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.402818][T28168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1724.614997][ T984] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 1724.636998][T28168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.650075][T28168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1724.669428][ T5916] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1724.730540][ T5916] usb 1-1: USB disconnect, device number 40 [ 1724.765154][ T984] usb 4-1: Invalid ep0 maxpacket: 64 [ 1724.960291][ T984] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 1725.024633][T17900] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1725.114876][ T984] usb 4-1: Invalid ep0 maxpacket: 64 [ 1725.120433][ T984] usb usb4-port1: attempt power cycle [ 1725.154680][T17900] usb 6-1: device descriptor read/64, error -71 [ 1725.396142][T17900] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1725.464678][ T984] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 1725.494078][T28220] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5672'. [ 1725.505356][ T984] usb 4-1: Invalid ep0 maxpacket: 64 [ 1725.545204][T17900] usb 6-1: device descriptor read/64, error -71 [ 1725.655633][T17900] usb usb6-port1: attempt power cycle [ 1725.665279][ T984] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 1725.695604][ T984] usb 4-1: Invalid ep0 maxpacket: 64 [ 1725.701351][ T984] usb usb4-port1: unable to enumerate USB device [ 1725.854011][T28228] FAULT_INJECTION: forcing a failure. [ 1725.854011][T28228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.873683][T28228] CPU: 1 UID: 0 PID: 28228 Comm: syz.1.5674 Not tainted syzkaller #0 PREEMPT(full) [ 1725.873711][T28228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1725.873725][T28228] Call Trace: [ 1725.873734][T28228] [ 1725.873743][T28228] dump_stack_lvl+0x189/0x250 [ 1725.873771][T28228] ? __pfx____ratelimit+0x10/0x10 [ 1725.873795][T28228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1725.873827][T28228] ? __pfx__printk+0x10/0x10 [ 1725.873847][T28228] ? __might_fault+0xb0/0x130 [ 1725.873883][T28228] should_fail_ex+0x414/0x560 [ 1725.873912][T28228] _copy_from_user+0x2d/0xb0 [ 1725.873932][T28228] get_compat_msghdr+0xad/0x4a0 [ 1725.873961][T28228] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1725.873995][T28228] ___sys_sendmsg+0x193/0x2a0 [ 1725.874021][T28228] ? __pfx____sys_sendmsg+0x10/0x10 [ 1725.874049][T28228] ? rcu_is_watching+0x15/0xb0 [ 1725.874101][T28228] ? irqentry_exit+0x74/0x90 [ 1725.874138][T28228] ? fdget+0x179/0x1e0 [ 1725.874159][T28228] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1725.874198][T28228] __sys_sendmmsg+0x28e/0x430 [ 1725.874227][T28228] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1725.874250][T28228] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1725.874293][T28228] ? ksys_write+0x22a/0x250 [ 1725.874314][T28228] ? exc_page_fault+0x82/0x100 [ 1725.874333][T28228] ? __pfx_ksys_write+0x10/0x10 [ 1725.874367][T28228] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1725.874388][T28228] __do_fast_syscall_32+0xb6/0x2b0 [ 1725.874410][T28228] ? lockdep_hardirqs_on+0x9c/0x150 [ 1725.874432][T28228] do_fast_syscall_32+0x34/0x80 [ 1725.874453][T28228] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1725.874473][T28228] RIP: 0023:0xf7fb4539 [ 1725.874493][T28228] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1725.874511][T28228] RSP: 002b:00000000f546455c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1725.874533][T28228] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080004400 [ 1725.874546][T28228] RDX: 0000000000000203 RSI: 0000000000000000 RDI: 0000000000000000 [ 1725.874559][T28228] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1725.874571][T28228] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1725.874582][T28228] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1725.874610][T28228] [ 1726.284677][T17900] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1726.352369][T17900] usb 6-1: device descriptor read/8, error -71 [ 1726.614942][T17900] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1726.645347][T17900] usb 6-1: device descriptor read/8, error -71 [ 1726.754952][T17900] usb usb6-port1: unable to enumerate USB device [ 1727.342336][T28245] FAULT_INJECTION: forcing a failure. [ 1727.342336][T28245] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.355518][T28245] CPU: 0 UID: 0 PID: 28245 Comm: syz.0.5679 Not tainted syzkaller #0 PREEMPT(full) [ 1727.355545][T28245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1727.355558][T28245] Call Trace: [ 1727.355567][T28245] [ 1727.355576][T28245] dump_stack_lvl+0x189/0x250 [ 1727.355620][T28245] ? __pfx____ratelimit+0x10/0x10 [ 1727.355646][T28245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1727.355670][T28245] ? __pfx__printk+0x10/0x10 [ 1727.355702][T28245] ? __pfx___might_resched+0x10/0x10 [ 1727.355732][T28245] should_fail_ex+0x414/0x560 [ 1727.355763][T28245] should_failslab+0xa8/0x100 [ 1727.355787][T28245] __kmalloc_noprof+0xcb/0x7f0 [ 1727.355815][T28245] ? kfree+0x4d/0x6d0 [ 1727.355839][T28245] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1727.355879][T28245] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1727.355913][T28245] ? tomoyo_domain+0xd9/0x130 [ 1727.355949][T28245] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1727.355975][T28245] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1727.356004][T28245] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1727.356029][T28245] ? finish_task_switch+0x266/0x950 [ 1727.356064][T28245] ? rcu_is_watching+0x15/0xb0 [ 1727.356099][T28245] ? __lock_acquire+0xab9/0xd20 [ 1727.356143][T28245] ? __fget_files+0x2a/0x420 [ 1727.356169][T28245] ? __fget_files+0x3a0/0x420 [ 1727.356188][T28245] ? __fget_files+0x2a/0x420 [ 1727.356211][T28245] security_file_ioctl_compat+0xcb/0x2d0 [ 1727.356238][T28245] __ia32_compat_sys_ioctl+0x128/0x840 [ 1727.356271][T28245] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1727.356300][T28245] ? __fget_files+0x3a0/0x420 [ 1727.356324][T28245] ? irqentry_exit+0x74/0x90 [ 1727.356350][T28245] ? lockdep_hardirqs_on+0x9c/0x150 [ 1727.356393][T28245] ? syscall_enter_from_user_mode_prepare+0x91/0x110 [ 1727.356427][T28245] __do_fast_syscall_32+0xb6/0x2b0 [ 1727.356458][T28245] ? lockdep_hardirqs_on+0x9c/0x150 [ 1727.356495][T28245] do_fast_syscall_32+0x34/0x80 [ 1727.356524][T28245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1727.356550][T28245] RIP: 0023:0xf709d539 [ 1727.356569][T28245] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1727.356589][T28245] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1727.356612][T28245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004020565a [ 1727.356629][T28245] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1727.356643][T28245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1727.356656][T28245] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1727.356669][T28245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1727.356714][T28245] [ 1727.356776][T28245] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1727.966045][ T5921] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1728.114599][ T5916] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1728.114693][T17900] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1728.149025][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.159512][ T5921] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1728.169690][ T5921] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1728.764601][T17900] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1728.773834][T17900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.788762][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.797997][T17900] usb 5-1: config 0 descriptor?? [ 1728.812350][T17900] pwc: Philips SPC 900NC USB webcam detected. [ 1728.815133][ T5916] usb 6-1: device descriptor read/64, error -71 [ 1728.846258][ T5921] usb 2-1: config 0 descriptor?? [ 1728.867428][ T5921] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1728.934585][ T5921] dvb-usb: bulk message failed: -22 (3/0) [ 1728.948324][T28259] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1728.966998][ T5921] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1729.128131][ T5921] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1729.143373][T17900] pwc: Failed to set LED on/off time (-71) [ 1729.154656][ T5916] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1729.189907][ T5921] usb 2-1: media controller created [ 1729.216029][T17900] pwc: send_video_command error -71 [ 1729.221278][T17900] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1729.227198][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1729.244744][T17900] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1729.257358][T17900] usb 5-1: USB disconnect, device number 54 [ 1729.304827][ T5916] usb 6-1: device descriptor read/64, error -71 [ 1729.316920][ T5921] dvb-usb: bulk message failed: -22 (6/0) [ 1729.322871][ T5921] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1729.399128][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input68 [ 1729.431673][ T5921] dvb-usb: schedule remote query interval to 150 msecs. [ 1729.435411][ T5916] usb usb6-port1: attempt power cycle [ 1729.453694][ T5921] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1729.502555][ T5921] usb 2-1: USB disconnect, device number 73 [ 1729.570889][ T5921] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1729.745016][T18015] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1729.816538][T28271] input: syz0 as /devices/virtual/input/input69 [ 1729.831742][ T5916] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1729.877138][ T5916] usb 6-1: device descriptor read/8, error -71 [ 1729.934574][T18015] usb 4-1: Using ep0 maxpacket: 8 [ 1729.942849][T18015] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1729.948897][T28273] FAULT_INJECTION: forcing a failure. [ 1729.948897][T28273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1729.965035][T28273] CPU: 0 UID: 0 PID: 28273 Comm: syz.4.5686 Not tainted syzkaller #0 PREEMPT(full) [ 1729.965059][T28273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1729.965071][T28273] Call Trace: [ 1729.965079][T28273] [ 1729.965088][T28273] dump_stack_lvl+0x189/0x250 [ 1729.965113][T28273] ? __pfx____ratelimit+0x10/0x10 [ 1729.965155][T28273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1729.965176][T28273] ? __pfx__printk+0x10/0x10 [ 1729.965198][T28273] ? __might_fault+0xb0/0x130 [ 1729.965235][T28273] should_fail_ex+0x414/0x560 [ 1729.965285][T28273] _copy_from_user+0x2d/0xb0 [ 1729.965306][T28273] get_compat_msghdr+0xad/0x4a0 [ 1729.965346][T28273] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1729.965380][T28273] ___sys_recvmsg+0x17f/0x510 [ 1729.965409][T28273] ? __pfx____sys_recvmsg+0x10/0x10 [ 1729.965455][T28273] ? __fget_files+0x3a0/0x420 [ 1729.965483][T28273] do_recvmmsg+0x36a/0x770 [ 1729.965514][T28273] ? __pfx_do_recvmmsg+0x10/0x10 [ 1729.965537][T28273] ? ksys_write+0x1cb/0x250 [ 1729.965624][T28273] ? __fget_files+0x3a0/0x420 [ 1729.965653][T28273] __sys_recvmmsg+0x19d/0x280 [ 1729.965683][T28273] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1729.965711][T28273] ? __pfx_ksys_write+0x10/0x10 [ 1729.965747][T28273] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1729.965779][T28273] __do_fast_syscall_32+0xb6/0x2b0 [ 1729.965809][T28273] ? lockdep_hardirqs_on+0x9c/0x150 [ 1729.965840][T28273] do_fast_syscall_32+0x34/0x80 [ 1729.965869][T28273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1729.965896][T28273] RIP: 0023:0xf7fb5539 [ 1729.965915][T28273] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1729.965935][T28273] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1729.965958][T28273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001680 [ 1729.965974][T28273] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000000000000000 [ 1729.965988][T28273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1729.966002][T28273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1729.966016][T28273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1729.966049][T28273] [ 1729.968323][T18015] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1730.311642][T18015] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.325008][T18015] usb 4-1: Product: syz [ 1730.334613][ T5916] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1730.343368][T18015] usb 4-1: Manufacturer: syz [ 1730.352797][T18015] usb 4-1: SerialNumber: syz [ 1730.363387][ T5916] usb 6-1: device descriptor read/8, error -71 [ 1730.381088][T18015] usb 4-1: config 0 descriptor?? [ 1730.421253][T18015] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1730.437749][T18015] usb 4-1: setting power ON [ 1730.485040][T18015] dvb-usb: bulk message failed: -22 (2/0) [ 1730.797240][T18015] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1730.814036][ T5916] usb usb6-port1: unable to enumerate USB device [ 1730.900848][T18015] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1730.918384][T18015] usb 4-1: media controller created [ 1730.956879][T18015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1730.987306][T18015] usb 4-1: selecting invalid altsetting 6 [ 1730.993088][T18015] usb 4-1: digital interface selection failed (-22) [ 1730.999809][T18015] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1731.030817][T18015] usb 4-1: setting power OFF [ 1731.050417][T18015] dvb-usb: bulk message failed: -22 (2/0) [ 1731.059660][T28286] binder: BINDER_SET_CONTEXT_MGR already set [ 1731.068646][T18015] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1731.084641][T28286] binder: 28285:28286 ioctl 4018620d 800002c0 returned -16 [ 1731.114743][T18015] (NULL device *): no alternate interface [ 1731.260793][T28288] tipc: Started in network mode [ 1731.283503][T18015] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1731.345726][T28288] tipc: Node identity b23f7dfeecc8, cluster identity 4711 [ 1731.363145][T28288] tipc: Enabled bearer , priority 0 [ 1731.400602][T28294] tipc: Enabled bearer , priority 0 [ 1731.408462][T28294] syzkaller0: entered promiscuous mode [ 1731.413932][T28294] syzkaller0: entered allmulticast mode [ 1731.433194][T28292] syzkaller0: entered promiscuous mode [ 1731.439374][T28292] syzkaller0: entered allmulticast mode [ 1731.464339][T28288] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5691'. [ 1731.474617][ T5909] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1731.504785][T28288] tipc: Resetting bearer [ 1731.515454][T28295] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5693'. [ 1731.526769][T28284] tipc: Resetting bearer [ 1731.553263][T28284] tipc: Disabling bearer [ 1731.567276][T28294] tipc: Resetting bearer [ 1731.598540][T28293] tipc: Resetting bearer [ 1731.624642][ T5909] usb 6-1: Using ep0 maxpacket: 16 [ 1731.631127][T28293] tipc: Disabling bearer [ 1731.631888][ T5909] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1731.648003][ T5909] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1731.654829][ T5909] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1731.664004][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.681056][ T5909] usb 6-1: config 0 descriptor?? [ 1731.763108][T28266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.776632][T28266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.843496][T28303] FAULT_INJECTION: forcing a failure. [ 1731.843496][T28303] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.856530][T28303] CPU: 0 UID: 0 PID: 28303 Comm: syz.4.5696 Not tainted syzkaller #0 PREEMPT(full) [ 1731.856561][T28303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1731.856575][T28303] Call Trace: [ 1731.856585][T28303] [ 1731.856595][T28303] dump_stack_lvl+0x189/0x250 [ 1731.856625][T28303] ? __pfx____ratelimit+0x10/0x10 [ 1731.856653][T28303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1731.856678][T28303] ? __pfx__printk+0x10/0x10 [ 1731.856707][T28303] ? __pfx___might_resched+0x10/0x10 [ 1731.856738][T28303] should_fail_ex+0x414/0x560 [ 1731.856771][T28303] should_failslab+0xa8/0x100 [ 1731.856795][T28303] __kmalloc_noprof+0xcb/0x7f0 [ 1731.856825][T28303] ? kfree+0x4d/0x6d0 [ 1731.856850][T28303] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1731.856901][T28303] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1731.856936][T28303] ? tomoyo_domain+0xd9/0x130 [ 1731.856973][T28303] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1731.856998][T28303] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1731.857027][T28303] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1731.857072][T28303] ? __lock_acquire+0xab9/0xd20 [ 1731.857123][T28303] ? __fget_files+0x2a/0x420 [ 1731.857148][T28303] ? __fget_files+0x3a0/0x420 [ 1731.857166][T28303] ? __fget_files+0x2a/0x420 [ 1731.857191][T28303] security_file_ioctl_compat+0xcb/0x2d0 [ 1731.857220][T28303] __ia32_compat_sys_ioctl+0x128/0x840 [ 1731.857252][T28303] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1731.857281][T28303] ? __fget_files+0x3a0/0x420 [ 1731.857308][T28303] ? fput+0xa0/0xd0 [ 1731.857332][T28303] ? ksys_write+0x22a/0x250 [ 1731.857361][T28303] ? exc_page_fault+0x82/0x100 [ 1731.857388][T28303] ? __pfx_ksys_write+0x10/0x10 [ 1731.857422][T28303] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1731.857451][T28303] ? lockdep_hardirqs_on+0x9c/0x150 [ 1731.857481][T28303] __do_fast_syscall_32+0xb6/0x2b0 [ 1731.857509][T28303] ? lockdep_hardirqs_on+0x9c/0x150 [ 1731.857538][T28303] do_fast_syscall_32+0x34/0x80 [ 1731.857566][T28303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1731.857592][T28303] RIP: 0023:0xf7fb5539 [ 1731.857610][T28303] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1731.857629][T28303] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1731.857653][T28303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008916 [ 1731.857668][T28303] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1731.857693][T28303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1731.857705][T28303] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1731.857718][T28303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1731.857748][T28303] [ 1731.857758][T28303] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1732.106713][T28266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.180442][T28266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.180451][ T5909] nzxt-smart2 0003:1E71:2009.0022: unknown main item tag 0x0 [ 1732.180485][ T5909] nzxt-smart2 0003:1E71:2009.0022: unknown main item tag 0x0 [ 1732.254856][ T5909] nzxt-smart2 0003:1E71:2009.0022: unknown main item tag 0x0 [ 1732.282611][ T5909] nzxt-smart2 0003:1E71:2009.0022: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 1732.312519][T17900] usb 4-1: USB disconnect, device number 62 [ 1732.431956][T28312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5698'. [ 1732.667632][T28317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.697384][T28317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.855077][T17900] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1732.974762][T25180] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1733.041149][T17900] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1733.051702][T17900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.061211][T17900] usb 5-1: Product: syz [ 1733.071323][T17900] usb 5-1: Manufacturer: syz [ 1733.081217][T17900] usb 5-1: SerialNumber: syz [ 1733.104309][T17900] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1733.124877][T25180] usb 2-1: Using ep0 maxpacket: 32 [ 1733.132655][T25180] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1733.144571][T25180] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1733.159184][ T5921] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1733.186631][T25180] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1733.197862][T25180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1733.208116][T25180] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1733.218483][T25180] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1733.232205][T25180] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1733.276246][T25180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.306525][T25180] usb 2-1: config 0 descriptor?? [ 1733.353816][T28331] FAULT_INJECTION: forcing a failure. [ 1733.353816][T28331] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.368938][T28331] CPU: 0 UID: 0 PID: 28331 Comm: syz.0.5704 Not tainted syzkaller #0 PREEMPT(full) [ 1733.368972][T28331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1733.368985][T28331] Call Trace: [ 1733.368993][T28331] [ 1733.369002][T28331] dump_stack_lvl+0x189/0x250 [ 1733.369033][T28331] ? __pfx____ratelimit+0x10/0x10 [ 1733.369060][T28331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1733.369080][T28331] ? __pfx__printk+0x10/0x10 [ 1733.369105][T28331] ? __pfx___might_resched+0x10/0x10 [ 1733.369130][T28331] should_fail_ex+0x414/0x560 [ 1733.369160][T28331] should_failslab+0xa8/0x100 [ 1733.369186][T28331] __kmalloc_noprof+0xcb/0x7f0 [ 1733.369216][T28331] ? kfree+0x4d/0x6d0 [ 1733.369241][T28331] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1733.369282][T28331] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1733.369317][T28331] ? tomoyo_domain+0xd9/0x130 [ 1733.369356][T28331] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1733.369384][T28331] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1733.369415][T28331] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1733.369461][T28331] ? __lock_acquire+0xab9/0xd20 [ 1733.369507][T28331] ? __fget_files+0x2a/0x420 [ 1733.369535][T28331] ? __fget_files+0x3a0/0x420 [ 1733.369554][T28331] ? __fget_files+0x2a/0x420 [ 1733.369579][T28331] security_file_ioctl_compat+0xcb/0x2d0 [ 1733.369608][T28331] __ia32_compat_sys_ioctl+0x128/0x840 [ 1733.369642][T28331] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1733.369673][T28331] ? __fget_files+0x3a0/0x420 [ 1733.369700][T28331] ? fput+0xa0/0xd0 [ 1733.369726][T28331] ? ksys_write+0x22a/0x250 [ 1733.369756][T28331] ? exc_page_fault+0x82/0x100 [ 1733.369784][T28331] ? __pfx_ksys_write+0x10/0x10 [ 1733.369818][T28331] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1733.369848][T28331] ? lockdep_hardirqs_on+0x9c/0x150 [ 1733.369881][T28331] __do_fast_syscall_32+0xb6/0x2b0 [ 1733.369912][T28331] ? lockdep_hardirqs_on+0x9c/0x150 [ 1733.369944][T28331] do_fast_syscall_32+0x34/0x80 [ 1733.369976][T28331] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1733.370003][T28331] RIP: 0023:0xf709d539 [ 1733.370021][T28331] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1733.370040][T28331] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1733.370064][T28331] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 1733.370080][T28331] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 1733.370093][T28331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1733.370106][T28331] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1733.370120][T28331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1733.370154][T28331] [ 1733.370211][T28331] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1733.655329][T25180] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1733.678000][T25180] usb 2-1: USB disconnect, device number 74 [ 1733.704820][T25180] usblp0: removed [ 1733.977313][T28342] FAULT_INJECTION: forcing a failure. [ 1733.977313][T28342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1733.990605][T28342] CPU: 1 UID: 0 PID: 28342 Comm: syz.0.5709 Not tainted syzkaller #0 PREEMPT(full) [ 1733.990634][T28342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1733.990646][T28342] Call Trace: [ 1733.990655][T28342] [ 1733.990670][T28342] dump_stack_lvl+0x189/0x250 [ 1733.990696][T28342] ? __pfx____ratelimit+0x10/0x10 [ 1733.990718][T28342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1733.990737][T28342] ? __pfx__printk+0x10/0x10 [ 1733.990755][T28342] ? __might_fault+0xb0/0x130 [ 1733.990786][T28342] should_fail_ex+0x414/0x560 [ 1733.990809][T28342] _copy_from_user+0x2d/0xb0 [ 1733.990830][T28342] get_compat_msghdr+0xad/0x4a0 [ 1733.990858][T28342] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1733.990890][T28342] ___sys_sendmsg+0x193/0x2a0 [ 1733.990914][T28342] ? __pfx____sys_sendmsg+0x10/0x10 [ 1733.990955][T28342] ? __fget_files+0x2a/0x420 [ 1733.990967][T28342] ? __fget_files+0x3a0/0x420 [ 1733.990991][T28342] __sys_sendmsg+0x164/0x220 [ 1733.991017][T28342] ? __pfx___sys_sendmsg+0x10/0x10 [ 1733.991047][T28342] ? __pfx_ksys_write+0x10/0x10 [ 1733.991075][T28342] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1733.991100][T28342] ? lockdep_hardirqs_on+0x9c/0x150 [ 1733.991118][T28342] __do_fast_syscall_32+0xb6/0x2b0 [ 1733.991136][T28342] ? lockdep_hardirqs_on+0x9c/0x150 [ 1733.991158][T28342] do_fast_syscall_32+0x34/0x80 [ 1733.991184][T28342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1733.991208][T28342] RIP: 0023:0xf709d539 [ 1733.991224][T28342] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1733.991239][T28342] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1733.991257][T28342] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 1733.991271][T28342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1733.991278][T28342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1733.991286][T28342] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1733.991294][T28342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1733.991313][T28342] [ 1734.145170][T25180] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1734.246427][T17899] usb 6-1: USB disconnect, device number 56 [ 1734.254972][ T5921] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1734.262206][ T5921] ath9k_htc: Failed to initialize the device [ 1734.277702][T17900] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1734.301834][T28344] FAULT_INJECTION: forcing a failure. [ 1734.301834][T28344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1734.316299][T28344] CPU: 1 UID: 0 PID: 28344 Comm: syz.0.5710 Not tainted syzkaller #0 PREEMPT(full) [ 1734.316326][T28344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1734.316340][T28344] Call Trace: [ 1734.316349][T28344] [ 1734.316358][T28344] dump_stack_lvl+0x189/0x250 [ 1734.316384][T28344] ? __pfx____ratelimit+0x10/0x10 [ 1734.316410][T28344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1734.316433][T28344] ? __pfx__printk+0x10/0x10 [ 1734.316456][T28344] ? __might_fault+0xb0/0x130 [ 1734.316497][T28344] should_fail_ex+0x414/0x560 [ 1734.316529][T28344] _copy_from_user+0x2d/0xb0 [ 1734.316551][T28344] get_compat_msghdr+0xad/0x4a0 [ 1734.316582][T28344] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1734.316620][T28344] ___sys_sendmsg+0x193/0x2a0 [ 1734.316656][T28344] ? __pfx____sys_sendmsg+0x10/0x10 [ 1734.316719][T28344] ? __fget_files+0x2a/0x420 [ 1734.316738][T28344] ? __fget_files+0x3a0/0x420 [ 1734.316768][T28344] __sys_sendmsg+0x164/0x220 [ 1734.316807][T28344] ? __pfx___sys_sendmsg+0x10/0x10 [ 1734.316840][T28344] ? __pfx_ksys_write+0x10/0x10 [ 1734.316882][T28344] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1734.316909][T28344] ? lockdep_hardirqs_on+0x9c/0x150 [ 1734.316934][T28344] __do_fast_syscall_32+0xb6/0x2b0 [ 1734.316960][T28344] ? lockdep_hardirqs_on+0x9c/0x150 [ 1734.316987][T28344] do_fast_syscall_32+0x34/0x80 [ 1734.317012][T28344] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1734.317036][T28344] RIP: 0023:0xf709d539 [ 1734.317053][T28344] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1734.317070][T28344] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1734.317090][T28344] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800007c0 [ 1734.317104][T28344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1734.317115][T28344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1734.317127][T28344] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1734.317139][T28344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1734.317167][T28344] [ 1734.536891][T17900] usb 4-1: device descriptor read/64, error -71 [ 1734.565188][ T5921] usb 5-1: ath9k_htc: USB layer deinitialized [ 1734.705506][T25180] usb 2-1: Using ep0 maxpacket: 32 [ 1734.726686][T25180] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1734.735305][T25180] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1734.743953][T25180] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1734.754286][T25180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1734.755911][T28358] FAULT_INJECTION: forcing a failure. [ 1734.755911][T28358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1734.777667][T25180] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1734.777724][T25180] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1734.777771][T25180] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1734.777795][T25180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.794627][T17900] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1734.804122][T28358] CPU: 1 UID: 0 PID: 28358 Comm: syz.0.5715 Not tainted syzkaller #0 PREEMPT(full) [ 1734.804148][T28358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1734.804162][T28358] Call Trace: [ 1734.804172][T28358] [ 1734.804181][T28358] dump_stack_lvl+0x189/0x250 [ 1734.804210][T28358] ? __pfx____ratelimit+0x10/0x10 [ 1734.804235][T28358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1734.804258][T28358] ? __pfx__printk+0x10/0x10 [ 1734.804281][T28358] ? __might_fault+0xb0/0x130 [ 1734.804321][T28358] should_fail_ex+0x414/0x560 [ 1734.804352][T28358] _copy_to_iter+0x404/0x1790 [ 1734.804383][T28358] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1734.804426][T28358] ? __pfx__copy_to_iter+0x10/0x10 [ 1734.804456][T28358] ? traverse+0x541/0x580 [ 1734.804501][T28358] seq_read_iter+0x2e9/0xe20 [ 1734.804537][T28358] ? __asan_memset+0x22/0x50 [ 1734.804677][T28358] seq_read+0x369/0x480 [ 1734.804701][T28358] ? __lock_acquire+0xab9/0xd20 [ 1734.804731][T28358] ? __pfx_seq_read+0x10/0x10 [ 1734.804776][T28358] ? __pfx_seq_read+0x10/0x10 [ 1734.804799][T28358] proc_reg_read+0x1e9/0x2e0 [ 1734.804858][T28358] vfs_readv+0x5aa/0x850 [ 1734.804881][T28358] ? __pfx_proc_reg_read+0x10/0x10 [ 1734.804913][T28358] ? __pfx_vfs_readv+0x10/0x10 [ 1734.804968][T28358] ? __fget_files+0x2a/0x420 [ 1734.804993][T28358] ? __fget_files+0x3a0/0x420 [ 1734.805012][T28358] ? __fget_files+0x2a/0x420 [ 1734.805042][T28358] __ia32_compat_sys_preadv+0x1bf/0x2c0 [ 1734.805082][T28358] ? __pfx___ia32_compat_sys_preadv+0x10/0x10 [ 1734.805122][T28358] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1734.805154][T28358] ? lockdep_hardirqs_on+0x9c/0x150 [ 1734.805183][T28358] __do_fast_syscall_32+0xb6/0x2b0 [ 1734.805214][T28358] ? lockdep_hardirqs_on+0x9c/0x150 [ 1734.805246][T28358] do_fast_syscall_32+0x34/0x80 [ 1734.805275][T28358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1734.805304][T28358] RIP: 0023:0xf709d539 [ 1734.805324][T28358] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1734.805344][T28358] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 1734.805371][T28358] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 1734.805387][T28358] RDX: 0000000000000001 RSI: 0000000000000007 RDI: 0000000000000000 [ 1734.805402][T28358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1734.805416][T28358] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1734.805430][T28358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1734.805466][T28358] [ 1734.874682][ T5916] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1734.882230][T25180] usb 2-1: config 0 descriptor?? [ 1734.896375][T28360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5716'. [ 1735.045007][T17900] usb 4-1: device descriptor read/64, error -71 [ 1735.121767][T25180] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 75 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1735.144792][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 1735.152427][ T5916] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1735.184967][ T5916] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1735.194052][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.209070][ T5916] usb 6-1: Product: syz [ 1735.213356][ T5916] usb 6-1: Manufacturer: syz [ 1735.220289][ T5916] usb 6-1: SerialNumber: syz [ 1735.237270][ T5916] usb 6-1: config 0 descriptor?? [ 1735.248259][ T5916] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1735.257716][ T5916] usb 6-1: setting power ON [ 1735.262274][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 1735.275939][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1735.279413][T28363] netlink: 'syz.0.5717': attribute type 1 has an invalid length. [ 1735.287272][ T5916] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1735.293492][T17900] usb usb4-port1: attempt power cycle [ 1735.302454][ T5916] usb 6-1: media controller created [ 1735.318198][T28363] netlink: 'syz.0.5717': attribute type 1 has an invalid length. [ 1735.333303][T28363] netlink: 'syz.0.5717': attribute type 1 has an invalid length. [ 1735.360980][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1735.391202][ T5916] usb 6-1: selecting invalid altsetting 6 [ 1735.398138][ T5916] usb 6-1: digital interface selection failed (-22) [ 1735.425225][ T5916] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1735.445149][ T5916] usb 6-1: setting power OFF [ 1735.449776][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 1735.464381][ T24] usb 5-1: USB disconnect, device number 55 [ 1735.486822][T28351] dvb-usb: bulk message failed: -22 (3/0) [ 1735.492689][ T5916] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1735.503259][T28351] cxusb: i2c wr: len=80 is too big! [ 1735.503259][T28351] [ 1735.526013][ T5916] (NULL device *): no alternate interface [ 1735.556703][T28365] netlink: 'syz.0.5718': attribute type 1 has an invalid length. [ 1735.582201][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.589616][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.595864][T28365] netlink: 'syz.0.5718': attribute type 1 has an invalid length. [ 1735.658776][T17900] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1735.674473][ T5921] usb 2-1: USB disconnect, device number 75 [ 1735.699588][ T5921] usblp0: removed [ 1735.715126][T17900] usb 4-1: device descriptor read/8, error -71 [ 1735.820937][T28372] FAULT_INJECTION: forcing a failure. [ 1735.820937][T28372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1735.838750][T28372] CPU: 0 UID: 0 PID: 28372 Comm: syz.4.5719 Not tainted syzkaller #0 PREEMPT(full) [ 1735.838777][T28372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1735.838787][T28372] Call Trace: [ 1735.838793][T28372] [ 1735.838799][T28372] dump_stack_lvl+0x189/0x250 [ 1735.838817][T28372] ? __pfx____ratelimit+0x10/0x10 [ 1735.838833][T28372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1735.838848][T28372] ? __pfx__printk+0x10/0x10 [ 1735.838861][T28372] ? __might_fault+0xb0/0x130 [ 1735.838886][T28372] should_fail_ex+0x414/0x560 [ 1735.838906][T28372] _copy_from_user+0x2d/0xb0 [ 1735.838920][T28372] get_compat_msghdr+0xad/0x4a0 [ 1735.838940][T28372] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1735.838963][T28372] ___sys_sendmsg+0x193/0x2a0 [ 1735.838981][T28372] ? __pfx____sys_sendmsg+0x10/0x10 [ 1735.839019][T28372] ? __fget_files+0x2a/0x420 [ 1735.839030][T28372] ? __fget_files+0x3a0/0x420 [ 1735.839049][T28372] __sys_sendmsg+0x164/0x220 [ 1735.839066][T28372] ? __pfx___sys_sendmsg+0x10/0x10 [ 1735.839087][T28372] ? __pfx_ksys_write+0x10/0x10 [ 1735.839108][T28372] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1735.839126][T28372] ? lockdep_hardirqs_on+0x9c/0x150 [ 1735.839144][T28372] __do_fast_syscall_32+0xb6/0x2b0 [ 1735.839163][T28372] ? lockdep_hardirqs_on+0x9c/0x150 [ 1735.839181][T28372] do_fast_syscall_32+0x34/0x80 [ 1735.839199][T28372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1735.839215][T28372] RIP: 0023:0xf7fb5539 [ 1735.839226][T28372] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1735.839238][T28372] RSP: 002b:00000000f548555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1735.839253][T28372] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000400 [ 1735.839262][T28372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1735.839270][T28372] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1735.839278][T28372] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1735.839286][T28372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1735.839305][T28372] [ 1736.055278][ C0] vkms_vblank_simulate: vblank timer overrun [ 1736.147474][T17900] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1736.171407][T28351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.180264][T28351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1736.190114][T17900] usb 4-1: device descriptor read/8, error -71 [ 1736.211451][T28376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5720'. [ 1736.305276][T17900] usb usb4-port1: unable to enumerate USB device [ 1736.391390][T28351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.403110][T28351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1736.417529][ T5916] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1736.437860][ T5916] usb 6-1: USB disconnect, device number 57 [ 1738.492668][T28391] syz.3.5726 (28391): drop_caches: 2 [ 1738.739376][T28415] FAULT_INJECTION: forcing a failure. [ 1738.739376][T28415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1738.841220][T28415] CPU: 0 UID: 0 PID: 28415 Comm: syz.1.5732 Not tainted syzkaller #0 PREEMPT(full) [ 1738.841249][T28415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1738.841262][T28415] Call Trace: [ 1738.841271][T28415] [ 1738.841281][T28415] dump_stack_lvl+0x189/0x250 [ 1738.841306][T28415] ? __pfx____ratelimit+0x10/0x10 [ 1738.841330][T28415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1738.841351][T28415] ? __pfx__printk+0x10/0x10 [ 1738.841372][T28415] ? __might_fault+0xb0/0x130 [ 1738.841409][T28415] should_fail_ex+0x414/0x560 [ 1738.841437][T28415] _copy_from_user+0x2d/0xb0 [ 1738.841456][T28415] do_fcntl+0x2b0/0x1910 [ 1738.841481][T28415] ? rcu_read_lock_any_held+0xb3/0x120 [ 1738.841513][T28415] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1738.841538][T28415] ? __pfx_do_fcntl+0x10/0x10 [ 1738.841560][T28415] ? vfs_write+0x956/0xb30 [ 1738.841591][T28415] ? sb_end_write+0xe9/0x1c0 [ 1738.841611][T28415] ? vfs_write+0x956/0xb30 [ 1738.841638][T28415] ? tomoyo_file_fcntl+0x78/0x210 [ 1738.841670][T28415] ? bpf_lsm_file_fcntl+0x9/0x20 [ 1738.841696][T28415] do_compat_fcntl64+0x477/0x720 [ 1738.841726][T28415] ? __pfx_do_compat_fcntl64+0x10/0x10 [ 1738.841759][T28415] ? ksys_write+0x1e1/0x250 [ 1738.841784][T28415] ? exc_page_fault+0x82/0x100 [ 1738.841814][T28415] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1738.841841][T28415] ? lockdep_hardirqs_on+0x9c/0x150 [ 1738.841868][T28415] __do_fast_syscall_32+0xb6/0x2b0 [ 1738.841894][T28415] ? lockdep_hardirqs_on+0x9c/0x150 [ 1738.841922][T28415] do_fast_syscall_32+0x34/0x80 [ 1738.841948][T28415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1738.841972][T28415] RIP: 0023:0xf7fb4539 [ 1738.841989][T28415] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1738.842006][T28415] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000037 [ 1738.842027][T28415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000000f [ 1738.842041][T28415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1738.842052][T28415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1738.842064][T28415] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1738.842076][T28415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1738.842106][T28415] [ 1739.074794][ C0] vkms_vblank_simulate: vblank timer overrun [ 1739.335025][ T5921] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1739.804282][ T5921] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1739.824636][ T5921] usb 4-1: config 1 has no interface number 0 [ 1739.827994][T18015] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1739.830782][ T5921] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1739.877432][ T5921] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1739.890997][ T5921] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1739.907069][ T5921] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1739.919290][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.927929][ T5921] usb 4-1: Product: syz [ 1739.932252][ T5921] usb 4-1: Manufacturer: syz [ 1739.937020][ T5921] usb 4-1: SerialNumber: syz [ 1739.948366][T28417] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1739.974622][T18015] usb 5-1: device descriptor read/64, error -71 [ 1740.171844][T28408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5730'. [ 1740.182915][T28408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5730'. [ 1740.217655][T28408] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1740.264666][T18015] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1740.413994][ T5921] usb 4-1: No status endpoint found [ 1740.615125][ T5921] usb 4-1: USB disconnect, device number 67 [ 1740.677918][T18015] usb 5-1: device descriptor read/64, error -71 [ 1741.084986][T18015] usb usb5-port1: attempt power cycle [ 1741.434637][T18015] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1741.453963][T28447] FAULT_INJECTION: forcing a failure. [ 1741.453963][T28447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.467695][T28447] CPU: 1 UID: 0 PID: 28447 Comm: syz.1.5743 Not tainted syzkaller #0 PREEMPT(full) [ 1741.467721][T28447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1741.467735][T28447] Call Trace: [ 1741.467756][T28447] [ 1741.467768][T28447] dump_stack_lvl+0x189/0x250 [ 1741.467792][T28447] ? __pfx____ratelimit+0x10/0x10 [ 1741.467816][T28447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1741.467836][T28447] ? __pfx__printk+0x10/0x10 [ 1741.467856][T28447] ? __might_fault+0xb0/0x130 [ 1741.467892][T28447] should_fail_ex+0x414/0x560 [ 1741.467937][T28447] _copy_from_user+0x2d/0xb0 [ 1741.467959][T28447] get_compat_msghdr+0xad/0x4a0 [ 1741.467988][T28447] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1741.468024][T28447] ___sys_sendmsg+0x193/0x2a0 [ 1741.468051][T28447] ? __pfx____sys_sendmsg+0x10/0x10 [ 1741.468077][T28447] ? __lock_acquire+0xab9/0xd20 [ 1741.468128][T28447] ? __fget_files+0x2a/0x420 [ 1741.468146][T28447] ? __fget_files+0x3a0/0x420 [ 1741.468175][T28447] __sys_sendmmsg+0x28e/0x430 [ 1741.468205][T28447] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1741.468226][T28447] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1741.468284][T28447] ? ksys_write+0x22a/0x250 [ 1741.468311][T28447] ? exc_page_fault+0x82/0x100 [ 1741.468335][T28447] ? __pfx_ksys_write+0x10/0x10 [ 1741.468369][T28447] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1741.468395][T28447] __do_fast_syscall_32+0xb6/0x2b0 [ 1741.468422][T28447] ? lockdep_hardirqs_on+0x9c/0x150 [ 1741.468450][T28447] do_fast_syscall_32+0x34/0x80 [ 1741.468476][T28447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1741.468501][T28447] RIP: 0023:0xf7fb4539 [ 1741.468518][T28447] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1741.468535][T28447] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1741.468556][T28447] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800187c0 [ 1741.468571][T28447] RDX: 0000000000000005 RSI: 0000000004008440 RDI: 0000000000000000 [ 1741.468584][T28447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1741.468596][T28447] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1741.468609][T28447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1741.468638][T28447] [ 1741.809054][T18015] usb 5-1: device descriptor read/8, error -71 [ 1742.054762][T18015] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1742.086102][T18015] usb 5-1: device descriptor read/8, error -71 [ 1742.184589][ T5921] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1742.196271][T18015] usb usb5-port1: unable to enumerate USB device [ 1742.346552][ T5921] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 1742.356784][ T5921] usb 2-1: config 0 has no interface number 0 [ 1742.407109][ T5921] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1742.434952][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.453668][ T5921] usb 2-1: Product: syz [ 1742.458741][ T5921] usb 2-1: Manufacturer: syz [ 1742.463776][ T5921] usb 2-1: SerialNumber: syz [ 1742.482263][ T5921] usb 2-1: config 0 descriptor?? [ 1742.493819][ T5921] hub 2-1:0.217: bad descriptor, ignoring hub [ 1742.504558][ T5921] hub 2-1:0.217: probe with driver hub failed with error -5 [ 1742.564035][T28468] FAULT_INJECTION: forcing a failure. [ 1742.564035][T28468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1742.583569][T28462] syzkaller0: entered promiscuous mode [ 1742.594432][T28462] syzkaller0: entered allmulticast mode [ 1742.600295][T28468] CPU: 1 UID: 0 PID: 28468 Comm: syz.5.5749 Not tainted syzkaller #0 PREEMPT(full) [ 1742.600325][T28468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1742.600340][T28468] Call Trace: [ 1742.600349][T28468] [ 1742.600360][T28468] dump_stack_lvl+0x189/0x250 [ 1742.600388][T28468] ? __pfx____ratelimit+0x10/0x10 [ 1742.600414][T28468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1742.600440][T28468] ? __pfx__printk+0x10/0x10 [ 1742.600463][T28468] ? __might_fault+0xb0/0x130 [ 1742.600506][T28468] should_fail_ex+0x414/0x560 [ 1742.600538][T28468] _copy_to_iter+0x1de/0x1790 [ 1742.600584][T28468] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1742.600718][T28468] ? __pfx__copy_to_iter+0x10/0x10 [ 1742.600749][T28468] ? __pfx_woken_wake_function+0x10/0x10 [ 1742.600784][T28468] ? __pfx_aa_file_perm+0x10/0x10 [ 1742.600829][T28468] tty_read+0x29b/0x690 [ 1742.600889][T28468] ? __pfx_tty_read+0x10/0x10 [ 1742.600918][T28468] ? common_file_perm+0x1b5/0x230 [ 1742.600953][T28468] ? bpf_lsm_file_permission+0x9/0x20 [ 1742.600976][T28468] ? security_file_permission+0x75/0x290 [ 1742.601010][T28468] vfs_read+0x55a/0xa30 [ 1742.601051][T28468] ? __pfx_vfs_read+0x10/0x10 [ 1742.601092][T28468] ? __fget_files+0x2a/0x420 [ 1742.601123][T28468] ksys_read+0x145/0x250 [ 1742.601157][T28468] ? __pfx_ksys_read+0x10/0x10 [ 1742.601190][T28468] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1742.601221][T28468] ? lockdep_hardirqs_on+0x9c/0x150 [ 1742.601250][T28468] __do_fast_syscall_32+0xb6/0x2b0 [ 1742.601289][T28468] ? lockdep_hardirqs_on+0x9c/0x150 [ 1742.601319][T28468] do_fast_syscall_32+0x34/0x80 [ 1742.601349][T28468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1742.601372][T28468] RIP: 0023:0xf707d539 [ 1742.601391][T28468] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1742.601411][T28468] RSP: 002b:00000000f544c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1742.601436][T28468] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1742.601451][T28468] RDX: 00000000000000e4 RSI: 0000000000000000 RDI: 0000000000000000 [ 1742.601466][T28468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1742.601480][T28468] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1742.601494][T28468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1742.601529][T28468] [ 1742.950209][ T5921] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1742.975482][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1743.031362][ T5921] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1743.043152][T28474] FAULT_INJECTION: forcing a failure. [ 1743.043152][T28474] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.056742][ T5921] usb 2-1: media controller created [ 1743.064320][T28474] CPU: 0 UID: 0 PID: 28474 Comm: syz.4.5753 Not tainted syzkaller #0 PREEMPT(full) [ 1743.064339][T28474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1743.064349][T28474] Call Trace: [ 1743.064356][T28474] [ 1743.064362][T28474] dump_stack_lvl+0x189/0x250 [ 1743.064382][T28474] ? __pfx____ratelimit+0x10/0x10 [ 1743.064399][T28474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1743.064414][T28474] ? __pfx__printk+0x10/0x10 [ 1743.064430][T28474] ? __pfx___might_resched+0x10/0x10 [ 1743.064446][T28474] ? fs_reclaim_acquire+0x7d/0x100 [ 1743.064475][T28474] should_fail_ex+0x414/0x560 [ 1743.064505][T28474] should_failslab+0xa8/0x100 [ 1743.064526][T28474] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1743.064552][T28474] ? getname_flags+0xb8/0x540 [ 1743.064575][T28474] getname_flags+0xb8/0x540 [ 1743.064598][T28474] __ia32_compat_sys_execve+0x79/0xb0 [ 1743.064628][T28474] __do_fast_syscall_32+0xb6/0x2b0 [ 1743.064655][T28474] ? lockdep_hardirqs_on+0x9c/0x150 [ 1743.064682][T28474] do_fast_syscall_32+0x34/0x80 [ 1743.064709][T28474] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1743.064727][T28474] RIP: 0023:0xf7fb5539 [ 1743.064739][T28474] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1743.064752][T28474] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1743.064767][T28474] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 1743.064777][T28474] RDX: 0000000080000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1743.064786][T28474] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1743.064794][T28474] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1743.064803][T28474] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1743.064823][T28474] [ 1743.245616][ C0] vkms_vblank_simulate: vblank timer overrun [ 1743.264595][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1743.715916][ T5921] DVB: Unable to find symbol dib7000p_attach() [ 1743.722154][ T5921] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1743.833922][T28485] ------------[ cut here ]------------ [ 1743.839634][T28485] usb 2-1: BOGUS control dir, pipe 80004c80 doesn't match bRequestType c0 [ 1743.844594][ T5921] rc_core: IR keymap rc-dib0700-rc5 not found [ 1743.854287][ T5921] Registered IR keymap rc-empty [ 1743.867145][T28485] WARNING: CPU: 1 PID: 28485 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 1743.877484][T28485] Modules linked in: [ 1743.881726][T28485] CPU: 1 UID: 0 PID: 28485 Comm: syz.0.5757 Not tainted syzkaller #0 PREEMPT(full) [ 1743.891290][T28485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1743.902372][T28485] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 1743.908136][T28485] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 72 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 c4 6b 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 1743.928170][T28485] RSP: 0018:ffffc9000ce07660 EFLAGS: 00010246 [ 1743.934285][T28485] RAX: 1d80363434fc1200 RBX: ffff88814cb07e00 RCX: 0000000000080000 [ 1743.942367][T28485] RDX: ffffc9000c47d000 RSI: 0000000000003978 RDI: 0000000000003979 [ 1743.950738][T28485] RBP: 1ffff11003edf934 R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 1743.958903][T28485] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: ffff8880216ad100 [ 1743.966995][T28485] R13: ffff88801f6fc9a0 R14: 0000000080004c80 R15: ffff888077d25640 [ 1743.975954][T28485] FS: 0000000000000000(0000) GS:ffff888125e12000(0063) knlGS:00000000f548db40 [ 1743.984991][T28485] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1743.991621][T28485] CR2: 00000000f7476288 CR3: 0000000067636000 CR4: 00000000003526f0 [ 1743.999697][T28485] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1744.007790][T28485] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1744.016355][T28485] Call Trace: [ 1744.019665][T28485] [ 1744.022629][T28485] usb_start_wait_urb+0x114/0x4c0 [ 1744.027793][T28485] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1744.033405][T28485] usb_control_msg+0x232/0x3e0 [ 1744.038278][T28485] dib0700_i2c_xfer+0xba7/0xf70 [ 1744.043188][T28485] __i2c_transfer+0x874/0x2170 [ 1744.048092][T28485] ? lockdep_hardirqs_on+0x9c/0x150 [ 1744.053345][T28485] ? __pfx___i2c_transfer+0x10/0x10 [ 1744.058737][T28485] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1744.064153][T28485] ? i2c_transfer+0x11d/0x3a0 [ 1744.069063][T28485] i2c_transfer+0x25b/0x3a0 [ 1744.073629][T28485] ? __pfx_i2c_transfer+0x10/0x10 [ 1744.078767][T28485] ? _copy_from_user+0x94/0xb0 [ 1744.083567][T28485] i2cdev_ioctl_rdwr+0x460/0x740 [ 1744.088611][T28485] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 1744.093766][T28485] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1744.099594][T28485] ? __fget_files+0x3a0/0x420 [ 1744.104299][T28485] ? __fget_files+0x2a/0x420 [ 1744.109028][T28485] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1744.115081][T28485] __ia32_compat_sys_ioctl+0x540/0x840 [ 1744.120575][T28485] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1744.126686][T28485] ? count_memcg_event_mm+0x21/0x260 [ 1744.132021][T28485] ? __se_sys_futex_time32+0x360/0x3e0 [ 1744.137605][T28485] ? rcu_is_watching+0x15/0xb0 [ 1744.142406][T28485] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1744.149196][T28485] ? lockdep_hardirqs_on+0x9c/0x150 [ 1744.154431][T28485] __do_fast_syscall_32+0xb6/0x2b0 [ 1744.159681][T28485] ? lockdep_hardirqs_on+0x9c/0x150 [ 1744.165027][T28485] do_fast_syscall_32+0x34/0x80 [ 1744.169926][T28485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1744.176365][T28485] RIP: 0023:0xf709d539 [ 1744.180467][T28485] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1744.200247][T28485] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1744.208798][T28485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000707 [ 1744.216920][T28485] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 1744.224981][T28485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1744.232990][T28485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1744.241080][T28485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1744.249144][T28485] [ 1744.252186][T28485] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1744.259479][T28485] CPU: 1 UID: 0 PID: 28485 Comm: syz.0.5757 Not tainted syzkaller #0 PREEMPT(full) [ 1744.268856][T28485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1744.278933][T28485] Call Trace: [ 1744.282232][T28485] [ 1744.285173][T28485] dump_stack_lvl+0x99/0x250 [ 1744.289951][T28485] ? __asan_memcpy+0x40/0x70 [ 1744.294571][T28485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1744.299794][T28485] ? __pfx__printk+0x10/0x10 [ 1744.304410][T28485] vpanic+0x237/0x6d0 [ 1744.308405][T28485] ? __pfx_vpanic+0x10/0x10 [ 1744.312935][T28485] panic+0xb9/0xc0 [ 1744.316671][T28485] ? __pfx_panic+0x10/0x10 [ 1744.321153][T28485] __warn+0x31b/0x4b0 [ 1744.325148][T28485] ? usb_submit_urb+0x114d/0x18b0 [ 1744.330178][T28485] ? usb_submit_urb+0x114d/0x18b0 [ 1744.335204][T28485] report_bug+0x2be/0x4f0 [ 1744.339546][T28485] ? usb_submit_urb+0x114d/0x18b0 [ 1744.344573][T28485] ? usb_submit_urb+0x114d/0x18b0 [ 1744.349595][T28485] ? usb_submit_urb+0x114f/0x18b0 [ 1744.354618][T28485] handle_bug+0x84/0x160 [ 1744.358870][T28485] exc_invalid_op+0x1a/0x50 [ 1744.363380][T28485] asm_exc_invalid_op+0x1a/0x20 [ 1744.368231][T28485] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 1744.373879][T28485] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 72 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 c4 6b 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 1744.393502][T28485] RSP: 0018:ffffc9000ce07660 EFLAGS: 00010246 [ 1744.399576][T28485] RAX: 1d80363434fc1200 RBX: ffff88814cb07e00 RCX: 0000000000080000 [ 1744.407563][T28485] RDX: ffffc9000c47d000 RSI: 0000000000003978 RDI: 0000000000003979 [ 1744.415542][T28485] RBP: 1ffff11003edf934 R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 1744.423534][T28485] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: ffff8880216ad100 [ 1744.431603][T28485] R13: ffff88801f6fc9a0 R14: 0000000080004c80 R15: ffff888077d25640 [ 1744.439617][T28485] usb_start_wait_urb+0x114/0x4c0 [ 1744.444660][T28485] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1744.450227][T28485] usb_control_msg+0x232/0x3e0 [ 1744.455084][T28485] dib0700_i2c_xfer+0xba7/0xf70 [ 1744.459948][T28485] __i2c_transfer+0x874/0x2170 [ 1744.464726][T28485] ? lockdep_hardirqs_on+0x9c/0x150 [ 1744.469945][T28485] ? __pfx___i2c_transfer+0x10/0x10 [ 1744.475421][T28485] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1744.480808][T28485] ? i2c_transfer+0x11d/0x3a0 [ 1744.485505][T28485] i2c_transfer+0x25b/0x3a0 [ 1744.490049][T28485] ? __pfx_i2c_transfer+0x10/0x10 [ 1744.495098][T28485] ? _copy_from_user+0x94/0xb0 [ 1744.499876][T28485] i2cdev_ioctl_rdwr+0x460/0x740 [ 1744.504841][T28485] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 1744.509967][T28485] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1744.515639][T28485] ? __fget_files+0x3a0/0x420 [ 1744.520316][T28485] ? __fget_files+0x2a/0x420 [ 1744.524911][T28485] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1744.530465][T28485] __ia32_compat_sys_ioctl+0x540/0x840 [ 1744.535932][T28485] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1744.541922][T28485] ? count_memcg_event_mm+0x21/0x260 [ 1744.547213][T28485] ? __se_sys_futex_time32+0x360/0x3e0 [ 1744.552691][T28485] ? rcu_is_watching+0x15/0xb0 [ 1744.557466][T28485] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1744.564158][T28485] ? lockdep_hardirqs_on+0x9c/0x150 [ 1744.569372][T28485] __do_fast_syscall_32+0xb6/0x2b0 [ 1744.574500][T28485] ? lockdep_hardirqs_on+0x9c/0x150 [ 1744.579707][T28485] do_fast_syscall_32+0x34/0x80 [ 1744.584566][T28485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1744.590906][T28485] RIP: 0023:0xf709d539 [ 1744.594982][T28485] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1744.614596][T28485] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1744.623036][T28485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000707 [ 1744.631012][T28485] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 1744.638991][T28485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1744.646972][T28485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1744.654952][T28485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1744.662945][T28485] [ 1744.666308][T28485] Kernel Offset: disabled [ 1744.670634][T28485] Rebooting in 86400 seconds..