last executing test programs: 8m16.154648446s ago: executing program 3 (id=2711): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r3, 0x5, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='|'}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="6ee9cb1e3267"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4810}, 0x0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) r6 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x7168, 0x3010, 0x2, 0x41}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 8m15.045506566s ago: executing program 3 (id=2716): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r2 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0)=0x3, 0x4) r3 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r3, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000402, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) sched_setattr(0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001600)=""/4103, 0x1007, 0x97) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 8m13.5104231s ago: executing program 3 (id=2723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x8501) io_setup(0x205, &(0x7f0000002500)=0x0) r4 = eventfd(0xf84) r5 = epoll_create(0x8002) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000480)={0x90000014}) io_submit(r3, 0x1, &(0x7f0000002680)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x1000, r5, 0x0}]) fcntl$setstatus(r2, 0x4, 0x2400) openat$mice(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000580)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000004c0)="f6", 0x1}], 0x1, &(0x7f0000000540), 0x0, 0x40005}}], 0x1, 0x20040040) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) mq_open(0x0, 0x40, 0x12c, &(0x7f0000000180)={0x8001, 0xfffffffffffffffd, 0x1ff}) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r9, r9, r9}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r10, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)='&', 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff19, &(0x7f0000000140)={&(0x7f00000005c0)={0xc0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dacb138a8b7972489d6a69dbbeb99674156e77cb24ca1c21"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "710956444b532b65daaf5e64d39bc1ea6c54dcf093e10860"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "524072b340b0480b04cb1e21445a1d00"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808) 8m6.785187638s ago: executing program 3 (id=2746): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000106, 0x0, 0x6}]}) setpgid(0x0, r1) tee(r2, r0, 0x4, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="aebc", 0x2, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000300)=@secondary) keyctl$link(0x8, r9, r8) keyctl$dh_compute(0x17, &(0x7f0000000240)={0x0, 0x0, r9}, &(0x7f0000000280), 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={'sm3-generic\x00'}, &(0x7f0000000440)="bd4ebd965c6499aab76bec40b419a27c346fe335f37856df179b05fa560b230852c8ebdab5e0ac1cb12d72aa3841f1", 0x2f}) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) lseek(r5, 0xfffffffffffffff5, 0x1) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5111) wait4(r1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x2, 0x0) tkill(r1, 0x3d) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/time_for_children\x00') r11 = socket(0x15, 0x1, 0x10) write(r11, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) 8m6.069428813s ago: executing program 3 (id=2754): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x33, 0x0, 0x9, 0x40000000b49, 0x5, 0xa, 0x0, 0xf}, 0x0) io_uring_setup(0x664c, &(0x7f0000000500)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x4040800) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a02020100000000ff0100000000000000000000000000014e220000001890780400000000000000fb66000000fea0e8554a8a75caee42b1c0f6d5000000"], 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0048fe0926a38da997e6fb429a6846654fd32001b8ef17b08e6ee4c5a5ba7446e4535ad45c5eda1bd7bee447054942c46bcc063f94ae2dd1f86ac734a758c0ee33059f5af0150e070cd36321c0", @ANYRES32=r6, @ANYBLOB="0800050006000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x810) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000010003904de000000fedadf2500000000", @ANYRES32=r9, @ANYBLOB="01980000011100001400128008000100677265000800028004001200"], 0x34}}, 0x0) sendto$packet(r0, &(0x7f00000000c0)='?', 0x28, 0x0, &(0x7f0000000040)={0xc9, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') fchdir(r10) syz_emit_ethernet(0x46, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 8m5.682513361s ago: executing program 3 (id=2756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000009cff000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 8m4.736311603s ago: executing program 32 (id=2756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000009cff000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 7.422055804s ago: executing program 2 (id=5031): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x40, 0xbbba, 0x2, 0x0, 0x2, {}, {0x80004, 0x2}, {0x4004000}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x800f, 0x2, 0x20000000, 0x80, 0x2000000, 0x11}) 7.127821967s ago: executing program 5 (id=5033): r0 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x3, 0x5, 0x4, 0xf, 0x803, "000000ffff0600fdff090000000800", '\x00', "05030400", '\x00\b\x00', ['\x00\x00\x00\x00\n\x00', "8004000700", '\x00', "fdffffffff40000000a600"]}) 6.869443731s ago: executing program 5 (id=5034): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10200, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x1010, 0xffffffffffffffff, 0x2000) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x8010aebc, &(0x7f0000000100)={0x6, 0x892, 0x0, 0x0}) r6 = fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f0000000140)='./file0\x00', r6) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff1a89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000040)={0x0, @sliced={0x7, [0x4, 0x1, 0x7, 0xb, 0x0, 0x7ff, 0xd, 0x8, 0x5, 0x8, 0x6, 0xff, 0xb, 0x5, 0x56, 0x54, 0xa, 0x9, 0xc, 0x4, 0x4, 0xffff, 0x1a8, 0x3726, 0xb78, 0xd7e1, 0x9, 0xd, 0x2, 0x3, 0x2, 0x5f1a, 0x5, 0x1000, 0x0, 0x8001, 0x3, 0x0, 0x9, 0xff0, 0x9, 0x9, 0x8, 0xe50e, 0x4, 0x2, 0x3a74, 0x9], 0x3}}) socket(0x400000000010, 0x3, 0x0) 6.780138283s ago: executing program 2 (id=5035): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '/dev/loop#\x00'}, {}, {}, {0x20, '#! '}, {0x20, '}[^[#)'}, {0x20, '/dev/loop#\x00'}, {0x20, 'cpuset.effective_cpus\x00'}], 0xa, "760ad63bd93c65be332ef04cbf83be4a1a6540ef6c5040b4e4707c73c8087e508a4fc8366aa0e0cf8736231f869ca3d7acabf3e6daa72eb730842390d8110e6a23bd1f2bc89be6ce563b529fb77ef0d56ea6b238f9e935db72ae6866b54bd83fd2e1c7da25a05d0f8a4638808d1245d426c15fb1a5c0e741fa02ce2422f747d89196a8983eae67f25f4fcbf52f21bb6d8cccbc08302b5ea17818"}, 0xea) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}}) 6.437623786s ago: executing program 2 (id=5036): r0 = openat$ttynull(0xffffff9c, &(0x7f0000000c00), 0x40, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900100027bd7000fcdbdf25020014030002c8050001000008001e00f08500004d"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24014080) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000500)={0x0, 0x7734, 0x80, 0x2, 0x26e}, &(0x7f0000000140), &(0x7f0000000080)) r3 = syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x6ee6, 0x40, 0x0, 0x3df}, &(0x7f0000000080), &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x66, 0x0, 0x0, &(0x7f00000010c0)={0x1, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x2, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)='\x00\x00', 0x0, 0x800004, 0x10030, 0x1, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r5) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000c40)=0x80000001) 5.881775431s ago: executing program 2 (id=5039): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0xefff, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 5.242571414s ago: executing program 1 (id=5041): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb4200e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 5.153496169s ago: executing program 2 (id=5042): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioprio_set$pid(0x0, 0x0, 0x2004) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3d8, 0x1ec, 0x2f8, 0xe0, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xbc, 0xe0}, @unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0xfff7, 0x8}}}, {{@arp={@private=0xa010102, @multicast2, 0xff, 0xffffff00, 0x5, 0x5, {@mac=@local, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, 0x2, 0x2f, 0x1, 0xd, 0xed0, 0x6, 'vxcan1\x00', 'pim6reg0\x00', {}, {0xff}, 0x0, 0x148}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @empty, @private=0xa010102, 0x8, 0xffffffff}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) lseek(0xffffffffffffffff, 0x8, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) r5 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = syz_io_uring_setup(0x37, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0, 0xc0010162, 0x1}) io_uring_enter(r7, 0xd81, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001114010226bd70000000000008004a0001000000080003000100000008004b0013"], 0x30}, 0x1, 0x0, 0x0, 0x24004804}, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 4.694721183s ago: executing program 1 (id=5043): syz_emit_ethernet(0x2f3, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x2bd, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x1f, 0x1, '\x00'/12}, {0x18}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000400000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 4.473706047s ago: executing program 5 (id=5044): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000400)=@ethtool_regs={0x7}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r5 = shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) r7 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) poll(0x0, 0x0, 0x7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x8811) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) r10 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r11, 0x0, 0x41}, 0x38) read$FUSE(r10, &(0x7f0000002d80)={0x2020}, 0x2025) 4.273761119s ago: executing program 1 (id=5045): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd000411000400000000006e6ad9ba00442f01000000000000002000d76b1369000001ff02000000000003e800000000000001042088be"], 0x7a) 3.903894765s ago: executing program 1 (id=5046): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000140)=0x60) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) r5 = fcntl$dupfd(r3, 0x406, r0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r4, 0x4068aea3, &(0x7f0000000240)={0xc5, 0x0, r5}) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000380)={&(0x7f0000000100)=[{0x6, 0x10, 0x0, 0x0}, {0x2, 0x4000, 0x0, 0x0}], 0x2}) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800010000000000000000000a0000000000000000000000180016000d0001000700000000000000000010000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150003"], 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 3.117497017s ago: executing program 2 (id=5052): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x101901, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x40000001, 0x0, 0x3ff000000}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r7) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x2c2) write$UHID_INPUT(r1, &(0x7f00000030c0)={0xf, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x23e}}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r8, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.266415357s ago: executing program 5 (id=5056): syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000200000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 2.208786666s ago: executing program 4 (id=5057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000110008000a000000000008001800ac1414aa08001900ffffffff14001b00fe"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.953722912s ago: executing program 5 (id=5058): epoll_create1(0x80000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2cf9977a71da3cb, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0xf0cfbc5d1cbe1900, @fd_index=0x4, 0x5, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.947409408s ago: executing program 4 (id=5059): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="fb2c54d949e9002f37dd75c13bdb4e060b738722f773d9623a70c5d8fe95afa2d1493da77baa9d9e", 0x28) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x700) 1.845288867s ago: executing program 0 (id=5060): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8ddd79e0fde3893930e06e91c39cc01d239a1c20cb0cee84da924212382163c6638e798d66660c356195a56523456052c42aca7c8404e259561dfea5cbdc21a31b7e7eb73a710b68ba2ae2eff86d3d4fbda8b72014f5de839d48acbc9d217f7ac0b3362a66f3a7d04277cc4b918687ed082170f98dc54bd56f28ea3fecc4e86e1820ed811919dac4d09c18e27c4d839c7ac015d34522c7d87ae968dc872d97db81da9a4b6f631535348d9d44ca3fe846f6706fd3d3bd2f62f2d046a2973c9e8c6ccbf96fd0060d532433732627bf213a35870cea250f79ac773b8adba386e0ae960801b073646dcfe7c89f0cb410d22146cb3109bb9a12649e943104875c0272dfdfac5998854c0f62438909522fba45a4ac83b917a6d9a45704fefe035986b7ae676dd6b8094d2ce7ed64f0aaf138cc827553d74b2c04488d849df41fb98a6c966c07cbb1a9fe3ee5e41c3082c51b37f9df811461cf123830ee606c7b5816b6b86b21860177bfc3fd9aeb689dbb39963a55cee2afe7352200f719a3c0fe44e059446bd7226d9e814d2358c2524c0103c48f7516cc69eb04815bbef84a5bd840a5131f45c335ef8939d6100cf89160f5f1c5aec60e479d18f4680a5a525964fbf2371c1493df2c3e67f98645f329d984250dc98a48a5ab14624438ad259145794a22055ace7d33b5218ed2bda0a528bee49e4e4ae3068477da429945eef0e06128a3202f62634d8faba02e7a951fd2ceba99d2a1488872c66ceef1c5ba5a3e4a523be", 0x2ce}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000000680)="e7e140c1539844faa6b154ea7feff4ea6f8982486b3b538c8b51c9aef394f05e323340e29fc2843aad8367dd41c05bb3c8c6e1d3526967931d8b32e56176be653b4f9843469422b588883a7fe8636ef03569de926873dc1c4743b904c7b415cd1de0a498494588a63339d262127e73de59ab2fb38143dedc01469814247b008788706b54dbce8cd6e7e590ba55335960", 0x90}, {&(0x7f0000000740)="0245ca1e2ef7dcf086170ff4184701406f92e30048e1ec6f2729ee18879879dad3b59dd754588389cdd6ff31d5482fa87c095f26f1f14cc7bf21fc16102d01783702bee28d0cb0a88895ad03f610fcf5aafb353669e6a7ae4c484b2d5898e7ad9c23a08dc8a1a682a0bc1561f0a388a25fd8435ccc", 0x75}, {&(0x7f0000002580)="d57e409e030b8c26b7360e2c6eec65139ef3189437e98ecf77e7b99f694602229d06f64624cb3475c6162df60afc219bba45e601a720aa2d0574d85368442a6512cd85fe05e10264f4e321c3cf98a6e93041f2a7d69a8fc4b0fe042e9376d67f2975e2d033ed26d32ee05cc5fb4e515fea23917d597501b96efbbf337cd31031d0d0831b6190eaa1d2f66a546b3589456003a8b62d5cf765554b1015f38eb37fdee7fe4237f65f2c495692c7903fcdf25a102757f9e5ea19e949d008c9e55f1476612f475be1762b4cf590ec36e9e159a8e11bbae1b99f41762989a5984fba49ab702d296a5da71f0ce4210fd605bf636fff96c82dd4133454c5be16cce7c5cb3225612ef97fbbd47a0c609fb996a30d7ccdbea2afd3c4a304cbd74b774db4b341c922c9815a63e88091d7ec0ec33d487e888fcf9cb19fccd9937be62f83c5fd212cf05bd0c3fef817e338251880d51055a4b615e5e721c3b88d281c6a81ed90692035dc16601cd730ec5190b9e43f8472be664003662e0872f16497727fb52fa0ab7e44451f57d40cd76353500805f693478fe857b0292ee767191fdcf46f092dc37299ec973a89cec8282d5c3647b74692fdcb60189bf8758edf39fbc9113005d88306b1a4159d9b2d27ac0a0f7e7439f261b7d0cc4ccb071b8167d31b7a9baedc3a7c37872fa1864048b89d743f4160ba6446716b9d17b1ef836af0c374e68d5d171d60a6aee7e9f29d126f4f7093a131573676292837ddeb335191055d632f79e3cfd0b14bfba6c2ae645828f63c49efcc19da7d500de3b6c741d2b5728a91cab6e867845f3cf07a204388d50565ba378ee0ff58665dd15a400556b421ab8e9542ba21710ed9fac6b99608d0948c8382b46dc5a53093beea8bbad6bc06dd8b69058a0c37dcf51fa0e76e93931a6f7487ad2564f04c5c48e42bcb987a6e17c3184594ca59151d11092be9b782dda04a1f6a49337b5ceb88d2f7bba332b6712d296330b986eccad8d253da874c29fc539655dc7bb25e83995b60a4801a404e45bc0dc248bb6d1fc1716fed9c5c60da9f579268d92fed85ec97563b4651f41d285ffd9c3dd098e66e44b613aabeb6cff7b4b510034bc09830bafb66f8ce64e7f4d179b318ed54752c6ed7693b725f06444a34c5886ff2c225306846b41271a2ac76183676819c5df205c69e469219e1892893e3bc7bb8b301ae90ed2b4ea0388b1b668860ba2de06a32faf99bf9c29e784c38f18ee61512a5d11231e4bd83d655a64b36c7298db02596d6997e140585661b38a13cac04b6889b8616f258913c9c65e27de963e864408109444c6e8bc4bc7a2e2b7cec1dcdaa3a25966aa51346c080fc81a950538dd7d962b09fe3b7282f936a6697e88f5fbb3c69c55a3d7cc9a7d2db9bfcd2876a5bfdafb1ad8610d396d4a5647271e95487da904ce20c658e9d11f07e0013b9bb4e15c4b3728e083ab0252b5eb5d8c90e754d7db2ddbbefbba87bba66b518e95cc65867057677429dd95689497f65b85b90aed5aa85b50e0ee27fc76c4db81078026de806bbf453d25d11bd89a214984e4c7570b762bb79a73fa045f38a6b63a2a69ec1ff3c9ce2426ae252ddb189f20acb9d848bfef95df1185c1c08a2d9e2bbd553366a59daf9cdc521bf25b318367167edd8a94ff19e97501c03a0269be8f430a9de0febf8be4b732b46e2d64fc1babe808760f86e191959fe35509c8ac5189363d02e66ff3196c875edc226dae412776394396da6c14391341e769e74ddafffa2abfc5974acf05055f83f8b492fd04f86c9472c1b9ed4ecdb696fbe888efb5eb2c448cec0acb0ae085a24fa5cff418e45d068e628ff36641456e5e4a1a2a1e0c82805ff06b84352fe583619149b83b726fce720b7c68759e619d104ec8579cd009c7207e590ad6574e7a09b3a3efd1058a92e57af127b315aadfa5a3afb079303891a76188a705bf5b1493f4b04945da105bacea183d714e3966aca05fe1e79a307c0fd5e00a23c4c21a577959b07eb3e9aeb7cca7da643de5836a7507529772d8c1e3b69d227bfe300c01cdf4fe9a3c1960a5d8c304a67d9b3a79d03302cecb8792359bb0d916691f0c336b19c6ae9a595b4ebead5873d14abb5ebb48b0aa94dfd134d732c275ecad65a22a32a664a85b99e55eab0495633d2e2a373ad705259cb16b5b7e05a4f1a06e55cdb55393583492eede2066d31aa8904754de9d71bf1f6704c9d512ecace7aeecd74005ede498e82427bd060162d995409a07ef68066d8aa6e308a5c5bfe4b8c42ee410c545d4c7e7e6d742dbe56f3e7b455f68c12d50c1cbd60eac2a15cb863d32348705411b667d665d433eb165c676128a7caecc4a77c31103e5c2d9d2d15d082618fcd4f4e8c750b6ce22103b96e5d880e9e75d34456dfcf9cdab70168fb4b3f9ec29ee8e5eedab41012c805d78b2c7f82f58864c1d3a63fcf9a2db9b665308f0dfcca7144781cb7ad25ee829a929d186d72be2010ee8fe4b79ba9fd395fce2225f2f781f64d04ec0a7c44626afcf60b975b0f2995a596143524759c16a832652e6cf0d9b9c384cfd03958846aa36f21f3e99d06b1af2e1f79cfe21e6dafde5960603aaf2b64160de1e263e8451962aa23ff018a46e7f7ef6b21b50e6c249d3871ce7d49ae04c60c057737c46e0914d1ea9fbf18a61b3e2b1d2236187bed44b39684d2e33df245bc964ed6f7429d0476c529397c16b56d8ea82631444d757bfdab5ff1e9acc733f7989743476f310255fc2f8f69c1557206b9d25709a354a99c851ef71f029b05f14bce3465fbc236464732c627035b0765256c077a4e16d63013df978e1f8f742916e37ec324806b2eae879fd13142d61c59e9720f271128392059b0580b8cb90d8afb790134e0af444b9d20839f32b6d614c960442287dc46f53b1ca633f231c75e9dfd2944b3ab62911a246afc137f926137cb4848a0550c8cdd8e32bb9c9a03a6b6e48dd45864696309ae38c278d7433540ad3a4367bc8d106e85ba289cd1a839c25587f010984aa9c327485f64bba66654913eaacae5690b2023084794fe45984fcdbf1df03b2d8ab176c853899096eb611c51e50f1205d4a372c7ff59303eefbf53ca985616faf42bc6c9931af8be53f4968fd3b1204462518cdce740c2e73477284af058a99f2898f3033cbffcf0b3ec2bedc8cfe67eb79b437c8ed9c1db98118363e1b03e7efbffa43e0a50a0b3864480abd8f403cdbd7bd6ed5ea74e43ff7aed2b7e859936d8962cf5aeeb5b56e742fde1fd7f204e06ea8505727ae6c7e9dcce37cf4e065e3c7d9fde7ad93201628c56b48e7443b95e5b8c69e319ca2cb74fb965dbe6b9c27e4afe9f214b81529e4fb41deda27b895c5b8aa585c665e1bf79a218363a7254e820971a5fbeb007ccae5f6b302275c6b69a9ce00ce4338cdfbfd9fce219ecd952a826d5b875b377157a6e3a6ffb4a9b8ec560a12c6a9771794e49616b48b93505d52eb9aef6499c5fa4cdc0ee368f87c8717574ce5927fd358bb90598e8830be4216a33f8266be0096a90a438350b4024fa7c30f5817c933f8ae46d8bcd45aba7f0185a31fc686a01c955d0d95dadeadeede950063d47384aca8befdddb4a00fc4de59843d1ad07155684918027211f54cfb52f90b4dca6241ca7f9a333c56780cd11886179df0b33f0561c4ea67f193dd30cbe6eef0349e4e04f7b35f9a3f140fe2dbdabba3524162a5ee077041fd91b2fa30a2bda580c4e1751e8fe9ce7c7267cdf2ad73c9d79aa20bdc49f1380678f05c7cb0d91860fa4cad8a31fdb8507e1db0498f38b7694c3ab08219d372579b7e1dae27253795a2df9084293d365aea43dfe231a03adccb126898dc927d5caa48a905655809e825eb52cbed08681384aefb9d5d889ff8e51c7ca63d07e528e2b082ab1c7f66b032fd629ad94746396f19bc3cfba851768f45bdcca7c9dd31a4f1ab718b3613b57295493ed27ef57a116a4b77c6bfefb9b2de1595fa1fd20ac51892accd806b8e17e3ea175e92ac749b848d3f1ef8da49093500970c889b27d03c349a0612255771cb65438cd8c257b19e112160f0ea28a8d658c287038c7606d16eb8c64f9fd349f0356dd65113af76f482452f58630404e4bf84f671eeaedb1ab8251a4be03875579578d13a671bce52fe342a43f92e89bfb7f66176295e4626d44e7b1beb82ee37c10e40756faa4c3b580fb2df3a517aae117f5e50e5dc10a2fe384ea7fe56d46533fc0c73c7bbdeb3ba5ef1506876b31bd205ce0464d38d2e7d0c6b90c16df4e2ac3ac7cbd57a43752dde3277b6d807e9d1099a8df10f25b523cf03a52f791b73ebd471236d3d8ef7dd3660efcfd9bfcf6148223b67620128b1885d693fb3126e6e6f247250904cebbbc22f244e6c14b0ee2daaaf56aec443479c9736c20e41a77be943d0d345a6d1c1d7b9dca8d564072872d957a760368033218545647ed5419546904ba38c3ae52ae2f5e1200138b2395d60586318fc72578b506d12d555cf5449c822d866bbbc334e3cb83ca3777ac95a53393c0ae8ff1ed5131a78876c8eb76b460ba54d5e2902bf0a1e7e2ce58425d87e8272f15d467bfacd68600f42ffbc91592ccd6843de959bac088f88f8d0418ded347a40ac3b206b2809b152b3509614038664d2e13d780c4512fa1d98a564c60e3a2360e8611344f36a0d59b7a87e0a36d0d8eb52f5a7656f4e81fa9b840cb876ee701776280d429e6ad7f5c5028b5e508a5efc110cc60f10fd5214df8f049b77199b4340cf96d84195e48169875bb774e0d8b5c870804334e8bd4143ff7423b31112884742434d1ddd822b6abd45fae1ced1b8da7207f9e174ff174cfae79f66724668a4cd81f873516f37f512c987f01cdd0e9d79a176742ab62c0a666660c2634aa8a2f0464960620fbe6eecbe46232590ed990a208fd60d43216dc5414e6ed271bc1ecce1d8fea9f1c81d2af1fc399231e9e5ef8b9b53207c64e3f284a31347dba8730bf3afe79c40f4e08e5912c8544038a39a7f4abf11383b126b57078a2cd4ab09c58bf3282095e85569b3b53b6de47fac4070d6243dcb8807d917cc5b2cace98e412de61d6d95565fdf70092c4eaa5ecb3076fea2f6d18b1197185962b55ddc2a8e19219fe25b47077bc9dc674c83eeb86e9dc94ff87dfc6b4a90f64575fffe7afc4f83f86461c8b52fd3e547105e91801488a43ceda741eadc0568365930e2e18bfa555311281185ab6a1c01c7028354609fb11cb1cd83f8e340642746cb9151e50638ad3638f7d3864fba31a5b8e17a64d80016093773c5975f97adda95c77dcc3ba5c53a7c2863031be18a026ebc9139bfd7ba2ebb2a7a46785254acab2e6c3d6aec086605c224484c5cd5ebbe8754a64a3068143fb87fa9e8ac5bf45f3937c27f926537a8a4c9d9d69d033f7a32c40c749611965d8b6c7b423237ae6f31b6184b3e4e843d0e77c47a70e92884e0c813ecd9ee9ce68e36a15d6d3da68f5699fbabaf08644984eba7bb1bdfc7884f19928a5e4499fff3fc6c41c8169aad7c5fdbb391235d523594d944d7c72e5142f41251bec27a5efd5cb1d85ad3c737c4c98d57170f04e36c44762a55f2855551efb79b1b42b53607909a46d125ad0a5352eb38d1470143270b44aab555000c8411d2284b215a777cf747a9f2cb442df033cdb1e5dda824a2210b8", 0xfc0}, {&(0x7f00000007c0)="ce1f8335842559fa859166a1b18356f84fb88ffa5e57330036e6aa65e777", 0x1e}], 0x5, &(0x7f0000000840)=[@ip_ttl={{0x10, 0x0, 0x2, 0xd}}], 0x10}}], 0x2, 0x40000d0) 1.754308431s ago: executing program 4 (id=5061): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) shutdown(r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000000)={0x79}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) unshare(0x22020400) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x5, 0x8, 0x0, 0x3}, 0x0) (async) r6 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000001840)={0x10000000}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=@newchain={0x2070, 0x64, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xf}, {0xc, 0x9}, {0xffe0, 0x8}}, [@f_tcindex={{0xc}, {0x8a0, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xe8b2}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff1, 0xfff3}}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_POLICE={0x874, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x4, 0x7, 0xd1, 0x1, 0x814, 0x100, 0x31bd9a08, 0xa, 0x87e6, 0x7, 0x6, 0x8001, 0x597, 0x6, 0x2, 0x5, 0x8, 0x2, 0x7ff, 0x5, 0x4, 0x9, 0x8, 0x188a, 0x9, 0x101, 0x0, 0xe2, 0x40, 0xb07, 0xfffffffb, 0x0, 0x7f, 0x19, 0x15b, 0xfffffff8, 0x7, 0x10, 0x9, 0x81, 0xb1600, 0x1, 0x0, 0x5, 0x9, 0x66d, 0x10, 0x86, 0x8, 0xffffffff, 0xc58, 0x4, 0xc2, 0x2, 0x3, 0xf, 0x6, 0xc, 0x10, 0x9, 0x101, 0x7, 0x9, 0x6dd, 0xfffffffa, 0x0, 0x1, 0xb, 0x1, 0x80000001, 0x81, 0x7ff8000, 0x2, 0xa, 0xfd9, 0x7, 0x51, 0x7, 0x1, 0x401, 0xe5, 0x8, 0x4, 0x5, 0x1, 0x401, 0x0, 0x4, 0xfffffffb, 0x48, 0xd4, 0x10, 0x72, 0xfff, 0xa, 0x1, 0x10000, 0xa8f, 0x4c37, 0x0, 0x5, 0x8, 0x4, 0x800, 0x3, 0x9e4, 0x1, 0x32, 0x8, 0x9, 0x101, 0x9, 0x1, 0xf, 0x2, 0x1, 0x2, 0x4b77, 0x6, 0x3, 0x3ff, 0x4, 0xfffffff5, 0x1, 0x1000, 0x3, 0x7, 0x7ff, 0x6, 0x3, 0x6, 0x5, 0x7, 0x5, 0x3, 0x200, 0x3, 0x8, 0x1, 0xbf, 0x4, 0x9, 0x9, 0x0, 0x2, 0x1, 0x8, 0x32a0, 0xff, 0x2, 0x4f44, 0x38c, 0x0, 0x7, 0xffffffff, 0x0, 0xffffff80, 0x0, 0xe2f, 0x8, 0xffffffff, 0xfcc, 0x10001, 0x2, 0x4, 0x3, 0x27, 0xe, 0x2, 0xe33f, 0x5f9a05d2, 0x8001, 0x7, 0x4923, 0x8, 0x4b, 0xfffffff9, 0x5, 0x9, 0x5, 0x7, 0x3, 0x1, 0x3, 0x0, 0x4, 0x7, 0x408b, 0x9, 0x27d, 0x1ff, 0x9, 0x0, 0x567, 0x9, 0x8, 0x3, 0x101, 0x6, 0x7, 0xfffffff7, 0x5a, 0x3, 0x6, 0x9, 0xffffffff, 0x7, 0xfffffff9, 0x1, 0xfff, 0x10, 0x0, 0x468, 0x10001, 0x3, 0x441, 0x5, 0x21c9, 0xffff, 0x1000, 0x81, 0x6, 0x6, 0x7, 0x2, 0x8, 0x400, 0x4, 0x80, 0x0, 0x7, 0x1000, 0x3, 0x0, 0x4, 0x8, 0x7, 0x7fff, 0x10, 0x1dd1, 0x62c, 0x8, 0x3, 0x7b2, 0x9, 0x9, 0x0, 0x3, 0xc, 0x2, 0x8000, 0x6, 0xc, 0x100, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x10, 0x2, 0x96, 0x9, 0x24000000, 0x6, 0x0, 0xf, 0x9, 0xc, 0x7381, 0x100, 0x200, 0x4, 0x98bb, 0xffffff01, 0x2, 0x2, 0x3, 0xc, 0x4, 0xa4, 0x9, 0x0, 0x7f, 0x8, 0x1000000, 0x3, 0xffffffff, 0x300000, 0x8, 0x5, 0xc, 0x7, 0x66f4, 0x80000001, 0x6, 0x5, 0x6, 0x10001, 0x3, 0x3, 0x1, 0x8, 0x8, 0x8, 0x0, 0xb0, 0x1, 0x3, 0x8, 0xc, 0x4, 0x9, 0xf, 0x200, 0x1f54, 0x1, 0x0, 0x80000000, 0x9b, 0xd, 0x1, 0x854c, 0x36, 0x1000, 0x4, 0xff, 0x3, 0x6, 0xfffffff8, 0x9, 0x9, 0x8, 0xec, 0xfffffff9, 0xff, 0x6, 0x9, 0x401, 0x9977, 0xe3, 0x0, 0xf, 0x4, 0x2f, 0x3, 0x4, 0xfffffffd, 0x9, 0x4, 0x8, 0xb, 0x6, 0x2, 0x0, 0x9c83, 0x2, 0x9, 0x3, 0x8, 0x3, 0xffffffa1, 0x81, 0x8, 0x1, 0x3, 0x4c3, 0x6, 0x200000, 0x9, 0x6, 0x3, 0x4, 0x307, 0xff, 0x0, 0x7, 0x1, 0xc03, 0x8, 0xf3, 0x7, 0x4, 0xc3, 0x2, 0x1, 0x4, 0x5, 0x1, 0xfffffffb, 0x3, 0xffff, 0x10, 0x7, 0xffffffff, 0x7, 0xc06b, 0x8, 0x9, 0x3, 0x1, 0x0, 0xe, 0x1, 0x0, 0x2, 0xf, 0x6, 0x0, 0x0, 0x6, 0x1, 0x3, 0x4, 0x10, 0xb228, 0x8, 0xff, 0x3, 0x5, 0x4, 0x4, 0x2, 0xff, 0x5c75694d, 0xb, 0x7fffffff, 0x7, 0x9, 0x66, 0x8, 0x8e, 0x730, 0x7f, 0x81, 0x3, 0x2, 0x74b, 0x0, 0x1, 0x401, 0x400, 0xc98f, 0x6, 0x8, 0x8000, 0x9, 0x4, 0x5, 0x8, 0x6, 0xffffffff, 0x80000000, 0x800, 0x5b, 0x1ff, 0x101, 0xe, 0xedba, 0x4, 0x8f8, 0x7, 0xffffff81, 0x2, 0x5, 0x40, 0x40, 0x6, 0x6, 0x1, 0x9, 0x9, 0x7, 0x27a, 0x6, 0x2, 0x7fffffff, 0x7, 0x5, 0x8, 0x7, 0x56, 0x9, 0x5a, 0x3, 0x2, 0x7f, 0x80000001, 0x8c2, 0x5, 0x6, 0x43d9, 0x80000001, 0x6, 0x8, 0x5, 0x481a, 0x8001, 0x1, 0x3, 0x100, 0x0, 0x667, 0x64, 0x6, 0xfff, 0xfffffffa, 0x5, 0x3, 0x1, 0x2, 0x5, 0x3, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x7, 0x8, 0x94be, {0x1d, 0x0, 0xfff9, 0x3, 0x9, 0xd}, {0xf, 0x2, 0x9, 0x342, 0xfffc, 0x401}, 0x4, 0x6ad, 0x80000000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x7, 0xf}}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0x6}}]}}, @f_rsvp6={{0xa}, {0x177c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast1}, @TCA_RSVP_ACT={0x1750, 0x6, [@m_police={0x870, 0xd, 0x0, 0x0, {{0xb}, {0x814, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x5, 0x1, 0xf1, 0x6, 0x1ff, 0x9, 0x3, 0x2, 0x3, 0xffffffff, 0x8001, 0x8000, 0xb49, 0x4, 0x0, 0x959, 0x5, 0x4a1280ea, 0x1, 0x7fffffff, 0x1, 0x2, 0x6, 0x8, 0x5c, 0x7, 0x9, 0xfffffff8, 0x4, 0x7c, 0x9, 0x7fff, 0x2, 0x0, 0x9, 0xfff, 0x5, 0xfffffff7, 0xfffff000, 0x5, 0x3, 0x8, 0x9, 0x1, 0x7, 0x10, 0x0, 0x2, 0xa813, 0x9, 0x4, 0x9, 0x5, 0x101, 0x5a1, 0x564, 0x800, 0x43, 0xfa, 0x0, 0xf0c00000, 0x8, 0x1458, 0xfffff182, 0x8, 0x3, 0x8d4f, 0x7, 0x8, 0x7, 0x2a, 0x9, 0x6, 0x1, 0x80000000, 0x80000000, 0x80000001, 0x6, 0x6, 0x0, 0x5, 0x3, 0x2, 0x1, 0x9c4, 0x56, 0xa5be, 0x8, 0x7, 0x7, 0x7f, 0x2, 0xff, 0x5, 0x80000006, 0x8, 0x9, 0x5, 0x0, 0x9, 0xd, 0x5, 0x9, 0x7fffffff, 0x4, 0x4, 0x10000, 0x3, 0xe, 0xfffffff8, 0x7fffffff, 0x8, 0x80000001, 0x9, 0xfffffe00, 0x0, 0x10001, 0x2, 0x3, 0xffffffff, 0xf, 0x0, 0x5, 0xfffeffff, 0x53, 0x8001, 0x96, 0xfffffff1, 0x4, 0x2, 0x8, 0x81, 0xa, 0xd4, 0x3, 0xffffffff, 0x7, 0x1, 0x6, 0xc5, 0x9, 0x4, 0x4, 0x400, 0x2, 0x2, 0xfab, 0x9, 0x1, 0x3, 0x2, 0x1, 0x8c72, 0xffff, 0x2, 0x5, 0x2, 0xa, 0xd, 0x9, 0x2, 0x3, 0x2, 0x7, 0x843, 0x2, 0x9, 0x1, 0x10000, 0x0, 0x3, 0x3, 0x4, 0x4, 0x5, 0x3, 0x7, 0x2, 0xff, 0x13c000, 0x5, 0x4, 0x2ea, 0x391, 0x2, 0xffff7fff, 0x2, 0x4, 0x9, 0x5, 0x8, 0xfc, 0x10001, 0x9, 0x401, 0x2, 0x1ff, 0x3, 0xfffffeff, 0xd270, 0x101, 0x6, 0x7fffffff, 0x4, 0x5, 0x8000, 0x1, 0x81, 0x2, 0x60978698, 0x8, 0x98, 0xa, 0xd, 0x0, 0x7fffffff, 0x50000, 0x0, 0x2, 0x2, 0x1, 0x0, 0x2, 0x4, 0x6, 0x7, 0x1e, 0xfff, 0x2, 0x4, 0x8, 0x2, 0x5, 0x2, 0x1df5e3b7, 0x1, 0x0, 0x9, 0x5984, 0x5, 0x36, 0x5, 0x3, 0x5, 0x1000, 0x2, 0x8001, 0x5, 0x5, 0x6, 0x4, 0x9, 0xbe4, 0x2, 0x100]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x101, 0xf6a, 0x0, 0x3, 0x2, 0x3, 0x7fff, 0x2, 0x3a, 0x4, 0x9, 0x4, 0x2ac, 0x80000000, 0x81, 0x63, 0x1, 0x9, 0x3, 0x6b, 0x1, 0x4, 0xfffff801, 0x200, 0x4, 0x4, 0xf22, 0x35, 0x185, 0x0, 0x8, 0x3, 0x780f547d, 0x10, 0x2, 0xa6d6, 0x200, 0x9, 0x8000, 0x10, 0x9, 0xe75d, 0x0, 0x2a000000, 0x2, 0xa, 0x1ff, 0xf, 0xffffffff, 0x7, 0xfa, 0x0, 0x1, 0x1, 0x80, 0x6, 0x4, 0x400, 0x6, 0x2, 0x0, 0x400000, 0xffff, 0xbee, 0x3, 0x2a, 0x5, 0x0, 0x8, 0xe07, 0x482e580f, 0x8, 0x3, 0x7f, 0x8, 0x36, 0x200, 0xd, 0x6, 0x6, 0x3, 0x3, 0x9, 0xa73a, 0x0, 0x8000, 0x0, 0x5, 0x1, 0x10, 0xc442, 0x0, 0x4, 0x5, 0x0, 0x401, 0xffff, 0x8, 0x18, 0x1, 0x7, 0x4, 0x8, 0xfffffff5, 0xb802, 0x1, 0x89fa, 0x5, 0x1, 0x7, 0x84a, 0x58, 0x4, 0xce99ea8, 0xa0000000, 0x2, 0x9, 0x7, 0x0, 0xffff7fff, 0x7, 0x74eb, 0x7ff, 0x6, 0xffff, 0x6, 0xe, 0xf0e8, 0x8, 0x80000000, 0xfffffffe, 0x200, 0x3, 0x9, 0x7, 0x4, 0x3, 0x2, 0x92, 0x8001, 0x7f, 0x80, 0xfffffff8, 0xcb, 0x1, 0x7, 0xa, 0x9, 0x7f, 0x3, 0x9, 0x40000000, 0x8, 0x8, 0x50, 0x4, 0xfffffffa, 0x5, 0x80000000, 0x401, 0x3, 0xd23a, 0x8, 0x3, 0x0, 0x7fffffff, 0x7, 0x7, 0x0, 0x8000, 0xfffffff3, 0x1, 0x7fff, 0x1, 0x2, 0x40, 0x1, 0x9996, 0x200, 0x6, 0x4, 0x1e11, 0x3, 0xb, 0x7f, 0x7, 0xf7a, 0xff, 0x7fff, 0x8, 0x3, 0x5, 0x0, 0x7fffffff, 0x0, 0x0, 0x4f, 0x8, 0x6, 0x10, 0xf0, 0x0, 0x7, 0xaa8, 0x6089, 0x8, 0x432c, 0x3, 0x1, 0x4, 0xffffffff, 0x7f, 0xfe94, 0x4, 0x6, 0x8000, 0x5, 0xfffffff7, 0x7f, 0x32, 0x3, 0x532e, 0x4, 0xc, 0x7, 0x5, 0xe, 0x6, 0x9, 0x2, 0x5, 0x5, 0x1000, 0xfffffd98, 0x8001, 0x2, 0x6, 0x9, 0x80000001, 0x8, 0xfffffff8, 0x4, 0x1, 0x1, 0x7fff, 0x0, 0xa38, 0x1, 0x5, 0x40, 0x9bf, 0x3, 0x9, 0x8001, 0x1]}]]}, {0x31, 0x6, "e63829b8baf92c33636fcee9d6c64668c4da70b69e504e5056a24b5ec954618a1f811b7154c6150f9073af4dd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xedc, 0xc, 0x0, 0x0, {{0x8}, {0x4}, {0xeb1, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x2070}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000000)={0xed6, 0x4, 0x10, 0xfffffff7, 0x13, "4ca86f9c3bc93e60e0a255076b5e266d108b42"}) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r9, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) (async) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) (async) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) (async) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) (async) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x640000, 0xa8) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 1.723133083s ago: executing program 0 (id=5062): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00?'], 0x48}, 0x1, 0x0, 0x580f02}, 0x0) 1.45649869s ago: executing program 0 (id=5063): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@delchain={0x24, 0x2c, 0xf31, 0x70bd29, 0x25dfcbfb, {0x0, 0x0, 0x0, r5, {}, {0xfff8, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1.229408358s ago: executing program 0 (id=5064): r0 = socket$inet(0x2, 0x3, 0x6) fcntl$getflags(0xffffffffffffffff, 0x401) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000040)={0x3, "257beb"}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0xfffe, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @empty, @remote}}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) write(r3, &(0x7f0000000a00)="1c0000001a005f0214f9f407000904001f000000ff02000200020000", 0x1c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0001110004"], 0xfdef) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a0101000000000000f5ffffff000a14000000110001"], 0x70}}, 0x0) 920.091365ms ago: executing program 1 (id=5065): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x1, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x81400, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) close(r3) fsconfig$FSCONFIG_SET_STRING(r3, 0x3, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) poll(0x0, 0x0, 0x9) 709.323209ms ago: executing program 4 (id=5066): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000104000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="400d0000001200002800128008000100687372001c00028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 571.229325ms ago: executing program 0 (id=5067): syz_emit_ethernet(0x2f3, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x2bd, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x1f, 0x1, '\x00'/12}, {0x18}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000400000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 283.906997ms ago: executing program 0 (id=5068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async, rerun: 32) close(r0) (rerun: 32) r1 = epoll_create1(0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x90000001}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi\n', 0x3}], 0x1, 0x0) close_range(r3, r4, 0x0) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000440)) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) prctl$PR_SET_IO_FLUSHER(0x39, 0x400003) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004061}, 0x0) (async) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r9, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) (async, rerun: 64) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r9, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) (rerun: 64) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r9, 0x7ac, &(0x7f0000000080)={0x0}) socket$nl_generic(0x10, 0x3, 0x10) 269.639218ms ago: executing program 4 (id=5069): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000840)={0x20f, 0x2, 0x0, {{0x51f, 0xce, 0x0, 0x0, {}, 0x2810000, 0x8, 0x1, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\xff', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x83\x00\xb5\x00\x00+YN\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\x00\x00\x9f\xd2\x8f43\xb6\x02\"K\xdd_MR\xb8=a\xcb\v!\x89A\x16\x95\xef\xe2\xefH\xb2\x11\x1d\x1c6\x04\x82\xe6\xc7\x8e\x1e{\xb8\x8e7\x9d*\xec\xff\xfe\xc3\xa1\x9e^\x17<\x8b\x04\xcfr\f\xa4+\xfd3\x8c\xb7\x0f\xdaP+\x89/\xb0\xdd\x83{\x9e\xc6S\x05\x0f\r|\xdcE\x99\x7f\xa6w;\xbf\xe1\xbdp\xee\x03\xe4\xaf\xb4\x99\xa2\x9b\xd3\xde\xce/F@\xf8V\x02\x1c\xde\xe9\xdcoR\x1e{\xc0jv\xa9\x1eg\xba\x8d\xf3\xcc%:\xbcY\x1a\x15\a\x7f\x89\x92\xeaWv\x80\xff\xec\x87\xa9\x06\xd0(\x8am\xbf2\xa2$\x01T6{\x1e\x05v\x1a;\xac\xde\xab\xba\x82\xb3\xccLFl\xe0\x0e&\x81\xb2\xffk\x94\"\xd8\x01\b\n\x96\xc8\xc8r\xa6\xad\xd7\xd7 D3\x82\xaea\xb3U89\xde#4]\v\xdd\xcc\t\x878\x97\x03\xf81\xa0\x948\x91\xf0\xfa\x9eo\x9b\xb5w\x86\xd9R\xc2\x9a\x8c\xbd\xb8M\xd5\xed~\xd8\xab\xf6\x0f\xacKC\x1b\xbfo\x0e\xc9\x006\xf5\xe4', 0x2f19639a8414712, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8r\x9aE\x1b4\a\xdb\xda\xb2\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x13\x12D\xf7s=\xa4*&%\x00\x00\x00_\ro \xe5\xfd\xac\xfb\xa5l\xf3\xe7\xa3\xc0\x14\x19N\x13\xa4\x92G\x7f\x92\'\xe4{\x1a^,)\xee\xec\x05}d\xc2\xb5\x9e\\\xa6\a\x1e\x06l\xa4\x86,\xff\b\x9f\xd5\x9fo\xb8\x8cLi\x14\xd0\x9a\xf7\xf6'}, 0xfffffed4, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20f) 96.283603ms ago: executing program 1 (id=5070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000003c0)=""/198) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) r5 = fcntl$dupfd(r4, 0x0, r4) read$FUSE(r5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) recvmmsg(r6, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="010020bd7000fbdbdf0900000000180001801400020064756d6d79303f016be43459fc0137d38ebe72817870"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000002f80)=0xc5, 0x4) 92.009445ms ago: executing program 5 (id=5071): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}, 0x1, 0x0, 0x4100}, 0x0) 0s ago: executing program 4 (id=5072): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="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", 0x2ce}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000000680)="e7e140c1539844faa6b154ea7feff4ea6f8982486b3b538c8b51c9aef394f05e323340e29fc2843aad8367dd41c05bb3c8c6e1d3526967931d8b32e56176be653b4f9843469422b588883a7fe8636ef03569de926873dc1c4743b904c7b415cd1de0a498494588a63339d262127e73de59ab2fb38143dedc01469814247b008788706b54dbce8cd6e7e590ba55335960", 0x90}, {&(0x7f0000000740)="0245ca1e2ef7dcf086170ff4184701406f92e30048e1ec6f2729ee18879879dad3b59dd754588389cdd6ff31d5482fa87c095f26f1f14cc7bf21fc16102d01783702bee28d0cb0a88895ad03f610fcf5aafb353669e6a7ae4c484b2d5898e7ad9c23a08dc8a1a682a0bc1561f0a388a25fd8435ccc", 0x75}, {&(0x7f0000002580)="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", 0xfc0}, {&(0x7f00000007c0)="ce1f8335842559fa859166a1b18356f84fb88ffa5e57330036e6aa65e777", 0x1e}], 0x5, &(0x7f0000000840)=[@ip_ttl={{0x10, 0x0, 0x2, 0xd}}], 0x10}}], 0x2, 0x40000d0) kernel console output (not intermixed with test programs): Number=3 [ 1022.232828][T20207] usb 5-1: Product: syz [ 1022.244048][T20207] usb 5-1: Manufacturer: syz [ 1022.261753][T20207] usb 5-1: SerialNumber: syz [ 1022.288340][T20207] usb 5-1: config 0 descriptor?? [ 1022.305956][T20207] cdc_ether 5-1:0.0: skipping garbage [ 1022.314225][T20207] usb 5-1: bad CDC descriptors [ 1022.326590][T20207] usb 5-1: unsupported MDLM descriptors [ 1022.342329][ T5971] usb 3-1: USB disconnect, device number 15 [ 1022.365137][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1022.407894][ T10] usb 6-1: device descriptor read/8, error -71 [ 1022.615094][T20207] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1022.674956][ T10] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1022.745244][ T10] usb 6-1: device descriptor read/8, error -71 [ 1022.765063][T20207] usb 1-1: Using ep0 maxpacket: 16 [ 1022.775059][T20207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.793184][T20207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.817065][T20207] usb 1-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00 [ 1022.837359][T20207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.855664][ T10] usb usb6-port1: unable to enumerate USB device [ 1022.868108][T20207] usb 1-1: config 0 descriptor?? [ 1023.095324][ T40] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1023.111311][ T40] ath9k_htc: Failed to initialize the device [ 1023.138021][ T5971] usb 3-1: ath9k_htc: USB layer deinitialized [ 1023.587029][T20493] gretap1: entered promiscuous mode [ 1023.631525][T20492] random: crng reseeded on system resumption [ 1024.547993][T20207] usb 1-1: string descriptor 0 read error: -71 [ 1024.601150][T20207] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input50 [ 1024.614704][ T5185] bcm5974 1-1:0.0: could not read from device [ 1024.687951][ T5185] bcm5974 1-1:0.0: could not read from device [ 1024.721678][T20207] usb 1-1: USB disconnect, device number 73 [ 1024.760482][T14920] bcm5974 1-1:0.0: could not read from device [ 1024.883962][T20503] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1025.056491][T20507] netlink: 'syz.2.4394': attribute type 2 has an invalid length. [ 1025.088976][T20509] binder: 20508:20509 ioctl c0306201 800001c0 returned -14 [ 1025.185790][T20511] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4395'. [ 1025.553247][T20520] loop2: detected capacity change from 0 to 7 [ 1025.554060][T20520] Dev loop2: unable to read RDB block 7 [ 1025.554106][T20520] loop2: unable to read partition table [ 1025.554325][T20520] loop2: partition table beyond EOD, truncated [ 1025.554342][T20520] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1025.744456][T20523] netlink: 'syz.5.4397': attribute type 1 has an invalid length. [ 1025.744484][T20523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4397'. [ 1025.881987][T20207] usb 5-1: USB disconnect, device number 28 [ 1026.015015][ T5971] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1026.185209][ T5971] usb 6-1: Using ep0 maxpacket: 16 [ 1026.197323][ T5971] usb 6-1: config 0 has no interfaces? [ 1026.229442][ T5971] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1026.248229][ T5971] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1026.264955][ T5971] usb 6-1: Manufacturer: syz [ 1026.308625][ T5971] usb 6-1: config 0 descriptor?? [ 1026.503338][T20534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4401'. [ 1026.551665][T20534] netlink: 'syz.2.4401': attribute type 1 has an invalid length. [ 1027.362293][T20542] FAULT_INJECTION: forcing a failure. [ 1027.362293][T20542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1027.416313][T20542] CPU: 1 UID: 0 PID: 20542 Comm: syz.1.4404 Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.416351][T20542] Tainted: [L]=SOFTLOCKUP [ 1027.416361][T20542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1027.416378][T20542] Call Trace: [ 1027.416385][T20542] [ 1027.416393][T20542] dump_stack_lvl+0xe8/0x150 [ 1027.416418][T20542] should_fail_ex+0x414/0x560 [ 1027.416450][T20542] _copy_from_user+0x2d/0xb0 [ 1027.416471][T20542] get_compat_msghdr+0xad/0x4a0 [ 1027.416497][T20542] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1027.416519][T20542] ? kstrtouint+0x6e/0xe0 [ 1027.416548][T20542] ___sys_sendmsg+0x193/0x2a0 [ 1027.416570][T20542] ? __pfx____sys_sendmsg+0x10/0x10 [ 1027.416596][T20542] ? get_pid_task+0x20/0x1f0 [ 1027.416616][T20542] ? get_pid_task+0x20/0x1f0 [ 1027.416634][T20542] ? get_pid_task+0x20/0x1f0 [ 1027.416675][T20542] ? __fget_files+0x2a/0x420 [ 1027.416694][T20542] ? __fget_files+0x3a0/0x420 [ 1027.416722][T20542] __sys_sendmsg+0x164/0x220 [ 1027.416742][T20542] ? __pfx___sys_sendmsg+0x10/0x10 [ 1027.416767][T20542] ? __pfx_ksys_write+0x10/0x10 [ 1027.416791][T20542] __do_fast_syscall_32+0x1dc/0x560 [ 1027.416810][T20542] ? lockdep_hardirqs_on+0x7b/0x110 [ 1027.416824][T20542] ? do_fast_syscall_32+0x34/0x80 [ 1027.416841][T20542] ? irqentry_exit+0x10f/0x660 [ 1027.416860][T20542] do_fast_syscall_32+0x34/0x80 [ 1027.416878][T20542] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1027.416898][T20542] RIP: 0023:0xf70cd539 [ 1027.416912][T20542] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1027.416927][T20542] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1027.416943][T20542] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000000 [ 1027.416955][T20542] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1027.416964][T20542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1027.416974][T20542] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1027.416983][T20542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1027.417005][T20542] [ 1027.937560][T20207] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1028.094941][T20207] usb 2-1: Using ep0 maxpacket: 16 [ 1028.102397][T20207] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1028.119168][T20207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.172213][T20207] usb 2-1: config 0 descriptor?? [ 1028.374967][ T5971] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1028.392333][T20207] usbhid 2-1:0.0: can't add hid device: -71 [ 1028.400693][T20207] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1028.414601][T20207] usb 2-1: USB disconnect, device number 30 [ 1028.504945][ T5971] usb 1-1: device descriptor read/64, error -71 [ 1028.564983][ T5928] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1028.715170][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 1028.728932][T20556] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4408'. [ 1028.739834][ T5928] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1028.751580][ T5971] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1028.770818][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.793533][ T5928] usb 3-1: config 0 descriptor?? [ 1028.904929][ T5971] usb 1-1: device descriptor read/64, error -71 [ 1029.036625][ T5971] usb usb1-port1: attempt power cycle [ 1029.057033][ T5928] usbhid 3-1:0.0: can't add hid device: -71 [ 1029.070202][ T5928] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1029.097906][ T5928] usb 3-1: USB disconnect, device number 16 [ 1029.267484][ T5913] usb 6-1: USB disconnect, device number 59 [ 1029.397469][ T5971] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1029.445517][ T5971] usb 1-1: device descriptor read/8, error -71 [ 1029.481423][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4411'. [ 1029.514269][T20564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4411'. [ 1029.548419][T20564] netlink: 'syz.1.4411': attribute type 19 has an invalid length. [ 1029.694916][ T5971] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1029.724353][ T5913] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1029.753335][ T5971] usb 1-1: device descriptor read/8, error -71 [ 1029.915871][ T5971] usb usb1-port1: unable to enumerate USB device [ 1029.928943][ T5913] usb 6-1: config 0 has no interfaces? [ 1029.968968][ T5913] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1030.009067][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.029964][ T5913] usb 6-1: Product: syz [ 1030.035088][ T5913] usb 6-1: Manufacturer: syz [ 1030.050598][ T5913] usb 6-1: SerialNumber: syz [ 1030.070944][ T5913] usb 6-1: config 0 descriptor?? [ 1030.218182][T20575] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4416'. [ 1030.255364][T20575] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4416'. [ 1030.350848][T20565] veth0: entered promiscuous mode [ 1030.369211][T20565] veth0: left promiscuous mode [ 1030.405549][T20582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4417'. [ 1030.534751][ T5971] usb 6-1: USB disconnect, device number 60 [ 1031.696053][T20627] binder: 20623:20627 ioctl c0306201 800001c0 returned -14 [ 1032.041121][T20639] netlink: 'syz.0.4436': attribute type 2 has an invalid length. [ 1032.594953][T20652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4440'. [ 1032.604582][T20652] netlink: 'syz.0.4440': attribute type 1 has an invalid length. [ 1033.401536][T20669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4446'. [ 1034.299900][T20684] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 1034.597014][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4451'. [ 1034.745376][T20207] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1034.925614][T20207] usb 1-1: Using ep0 maxpacket: 16 [ 1034.966315][T20207] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1034.988627][T20207] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1035.007697][T20207] usb 1-1: can't read configurations, error -71 [ 1036.302589][T20705] vlan2: entered promiscuous mode [ 1036.314922][T20207] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1036.485330][T20207] usb 1-1: Using ep0 maxpacket: 8 [ 1036.504517][T20207] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1036.541808][T20207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.556474][T20207] usb 1-1: Product: syz [ 1036.562249][T20207] usb 1-1: Manufacturer: syz [ 1036.574922][ T5928] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1036.595669][T20207] usb 1-1: SerialNumber: syz [ 1036.603201][T20712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4461'. [ 1036.619679][T20712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4461'. [ 1036.635719][T20207] usb 1-1: config 0 descriptor?? [ 1036.648983][T20207] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1036.666429][T20712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4461'. [ 1036.677109][T20712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4461'. [ 1036.737083][ T5928] usb 5-1: config 54 has an invalid interface number: 54 but max is 0 [ 1036.767579][ T5928] usb 5-1: config 54 has no interface number 0 [ 1036.817007][ T5928] usb 5-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 1036.836062][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.870276][ T5928] usb 5-1: Product: syz [ 1036.874532][ T5928] usb 5-1: Manufacturer: syz [ 1036.890296][ T5928] usb 5-1: SerialNumber: syz [ 1037.291786][ T5928] go7007 5-1:54.54: probe with driver go7007 failed with error -12 [ 1037.310862][T20699] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1037.328233][T20699] syzkaller1: linktype set to 823 [ 1037.341531][ T5928] usb 5-1: USB disconnect, device number 29 [ 1037.457890][T20207] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1037.481915][T20207] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1037.507327][T20207] usb 1-1: USB disconnect, device number 80 [ 1037.714393][T20735] fuse: Unknown parameter 'group_i' [ 1037.947135][T20739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4470'. [ 1038.037101][T20741] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4471'. [ 1038.064698][T20741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4471'. [ 1038.435287][T20207] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1038.496498][T20751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4474'. [ 1038.615246][T20207] usb 1-1: Using ep0 maxpacket: 8 [ 1038.637266][T20207] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 1038.654531][T20207] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.743512][T20207] usb 1-1: config 0 has no interface number 0 [ 1038.757522][T20207] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1038.777698][T20207] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1038.820217][T20207] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 1038.843239][T20207] usb 1-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1038.858438][T20207] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1038.885771][T20207] usb 1-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 1038.930019][T20207] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1038.952517][T20207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.975287][T20207] usb 1-1: Product: syz [ 1038.987867][T20207] usb 1-1: Manufacturer: syz [ 1039.001889][T20207] usb 1-1: SerialNumber: syz [ 1039.032566][T20207] usb 1-1: config 0 descriptor?? [ 1039.066629][T20746] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1039.103830][T20746] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1039.351769][T20207] usb 1-1: NFC: intf ffff888057454000 id ffffffff8e93ee20 [ 1039.492725][T20207] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 1039.573442][T20207] usb 1-1: USB disconnect, device number 81 [ 1039.623334][T20207] usb 1-1: NFC: intf ffff888057454000 [ 1039.652367][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4479'. [ 1040.340609][T20782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4482'. [ 1040.379285][T20782] netlink: 'syz.1.4482': attribute type 1 has an invalid length. [ 1040.494948][ T5913] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1040.694913][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 1040.716797][ T5913] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1040.745541][ T5913] usb 1-1: config 0 has no interface number 0 [ 1040.777464][ T5913] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1040.814203][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.853501][ T5913] usb 1-1: Product: syz [ 1040.875451][ T5913] usb 1-1: Manufacturer: syz [ 1040.903030][ T5913] usb 1-1: SerialNumber: syz [ 1040.923900][ T5913] usb 1-1: config 0 descriptor?? [ 1040.968634][ T5913] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1041.177958][ T5913] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1041.237658][ T5913] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1041.326919][T20794] loop2: detected capacity change from 0 to 7 [ 1041.372524][ T5998] Dev loop2: unable to read RDB block 7 [ 1041.378007][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1041.390283][ T5913] usb 1-1: USB disconnect, device number 82 [ 1041.408925][ T5998] loop2: unable to read partition table [ 1041.429486][T20796] loop8: detected capacity change from 0 to 8 [ 1041.438834][ T5998] loop2: partition table beyond EOD, truncated [ 1041.472397][ T5913] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1041.495698][T20796] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1041.501084][T20796] loop8: partition table partially beyond EOD, truncated [ 1041.525059][T20794] Dev loop2: unable to read RDB block 7 [ 1041.530613][ T5913] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1041.531235][T20796] loop8: p1 size 3004527350 extends beyond EOD, [ 1041.548059][ T5913] quatech2 1-1:0.51: device disconnected [ 1041.592024][T20796] truncated [ 1041.616971][T20794] loop2: unable to read partition table [ 1041.622899][T20794] loop2: partition table beyond EOD, truncated [ 1041.704918][T20794] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ïÿ¨â·û) failed (rc=-5) [ 1041.843262][ T5892] udevd[5892]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1042.120711][T20811] FAULT_INJECTION: forcing a failure. [ 1042.120711][T20811] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.154893][T20811] CPU: 0 UID: 0 PID: 20811 Comm: syz.5.4494 Tainted: G L syzkaller #0 PREEMPT(full) [ 1042.154928][T20811] Tainted: [L]=SOFTLOCKUP [ 1042.154936][T20811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1042.154949][T20811] Call Trace: [ 1042.154966][T20811] [ 1042.154976][T20811] dump_stack_lvl+0xe8/0x150 [ 1042.155009][T20811] should_fail_ex+0x414/0x560 [ 1042.155050][T20811] should_failslab+0xa8/0x100 [ 1042.155079][T20811] __kmalloc_noprof+0xdf/0x800 [ 1042.155101][T20811] ? tomoyo_encode+0x28b/0x550 [ 1042.155135][T20811] tomoyo_encode+0x28b/0x550 [ 1042.155171][T20811] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1042.155214][T20811] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1042.155240][T20811] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1042.155269][T20811] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1042.155294][T20811] ? __lock_acquire+0x6b6/0x2cf0 [ 1042.155321][T20811] ? get_pid_task+0x20/0x1f0 [ 1042.155360][T20811] ? get_pid_task+0x20/0x1f0 [ 1042.155407][T20811] ? __fget_files+0x2a/0x420 [ 1042.155439][T20811] ? __fget_files+0x3a0/0x420 [ 1042.155464][T20811] ? __fget_files+0x2a/0x420 [ 1042.155496][T20811] security_file_ioctl_compat+0xcb/0x2d0 [ 1042.155522][T20811] __ia32_compat_sys_ioctl+0x128/0x840 [ 1042.155549][T20811] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1042.155573][T20811] ? __fget_files+0x3a0/0x420 [ 1042.155608][T20811] ? fput+0xa0/0xd0 [ 1042.155638][T20811] ? ksys_write+0x22a/0x250 [ 1042.155663][T20811] ? __pfx_ksys_write+0x10/0x10 [ 1042.155695][T20811] __do_fast_syscall_32+0x1dc/0x560 [ 1042.155720][T20811] ? lockdep_hardirqs_on+0x7b/0x110 [ 1042.155739][T20811] ? do_fast_syscall_32+0x34/0x80 [ 1042.155763][T20811] ? irqentry_exit+0x10f/0x660 [ 1042.155788][T20811] do_fast_syscall_32+0x34/0x80 [ 1042.155814][T20811] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1042.155841][T20811] RIP: 0023:0xf6ffd539 [ 1042.155860][T20811] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1042.155880][T20811] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1042.155903][T20811] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0386105 [ 1042.155919][T20811] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 1042.155931][T20811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1042.155942][T20811] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1042.155980][T20811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1042.156011][T20811] [ 1042.156036][T20811] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1042.474905][ T5913] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1042.653447][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1042.681761][ T5913] usb 2-1: not running at top speed; connect to a high speed hub [ 1042.699307][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.722707][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1042.746300][T20822] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4497'. [ 1042.774621][ T5913] usb 2-1: string descriptor 0 read error: -22 [ 1042.795093][T20207] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1042.806298][ T5913] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1042.840605][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.903470][ T5913] usb 2-1: 0:2 : does not exist [ 1043.045183][T20207] usb 1-1: Using ep0 maxpacket: 8 [ 1043.056785][T20207] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1043.082347][T20207] usb 1-1: config 2 has an invalid interface number: 33 but max is 0 [ 1043.123225][T20207] usb 1-1: config 2 has no interface number 0 [ 1043.144417][T20207] usb 1-1: config 2 interface 33 has no altsetting 0 [ 1043.170403][T20207] usb 1-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=83.d4 [ 1043.217769][T20207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.249934][T20207] usb 1-1: Product: syz [ 1043.265333][T20207] usb 1-1: Manufacturer: syz [ 1043.281597][T20207] usb 1-1: SerialNumber: syz [ 1043.576067][T20207] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 1043.631512][T20207] dvb-usb: bulk message failed: -22 (2/0) [ 1043.671915][T20207] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1043.689912][T20827] syz.5.4498 (20827): drop_caches: 2 [ 1043.728517][T20207] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 1043.786076][T20207] usb 1-1: media controller created [ 1043.801452][ T5913] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1043.816934][T20207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1043.875782][ T5913] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1043.892268][T20207] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 1043.942579][T20207] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1044.054060][ T5913] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1044.116157][ T5913] usb 2-1: USB disconnect, device number 31 [ 1044.405797][T20207] rc_core: IR keymap rc-dtt200u not found [ 1044.442760][T20207] Registered IR keymap rc-empty [ 1044.480644][T20207] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1044.514754][T20838] netlink: 'syz.0.4502': attribute type 27 has an invalid length. [ 1044.558452][T20207] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input51 [ 1044.644241][T20207] dvb-usb: schedule remote query interval to 300 msecs. [ 1044.696639][T20207] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 1044.771212][T20842] input: syz0 as /devices/virtual/input/input52 [ 1044.790523][T20207] usb 1-1: USB disconnect, device number 83 [ 1045.115442][T20207] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 1045.420897][T20858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4507'. [ 1045.475101][T20860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4510'. [ 1045.602295][T20860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1046.073708][T20874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4511'. [ 1046.247040][T20872] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1046.837059][T20207] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1047.025364][T20207] usb 6-1: Using ep0 maxpacket: 16 [ 1047.057457][T20207] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1047.098706][T20207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.151743][T20207] usb 6-1: config 0 descriptor?? [ 1047.470733][T20892] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1047.499942][T20207] usbhid 6-1:0.0: can't add hid device: -71 [ 1047.534369][T20207] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1047.597692][T20207] usb 6-1: USB disconnect, device number 61 [ 1047.971657][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1047.971678][ T30] audit: type=1800 audit(1766532561.770:607): pid=20879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4513" name="bus" dev="ramfs" ino=94076 res=0 errno=0 [ 1048.030365][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4519'. [ 1049.532623][T20919] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4527'. [ 1049.634887][ T5952] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1049.795065][ T5952] usb 1-1: device descriptor read/64, error -71 [ 1049.940562][T20923] loop2: detected capacity change from 0 to 7 [ 1049.970288][T14920] Dev loop2: unable to read RDB block 7 [ 1049.997128][T14920] loop2: unable to read partition table [ 1050.021146][T14920] loop2: partition table beyond EOD, truncated [ 1050.049223][T20923] Dev loop2: unable to read RDB block 7 [ 1050.077939][ T5952] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1050.110407][T20923] loop2: unable to read partition table [ 1050.145149][T20923] loop2: partition table beyond EOD, truncated [ 1050.158588][T20923] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1050.244992][ T5952] usb 1-1: device descriptor read/64, error -71 [ 1050.375622][ T5952] usb usb1-port1: attempt power cycle [ 1050.665023][ T5913] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1050.754909][ T5952] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1050.815708][ T5952] usb 1-1: device descriptor read/8, error -71 [ 1050.854893][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 1050.873011][ T5913] usb 2-1: config 0 has no interfaces? [ 1050.889367][ T5913] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1050.928263][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.966161][ T5913] usb 2-1: config 0 descriptor?? [ 1051.054970][ T5952] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1051.108650][ T5952] usb 1-1: device descriptor read/8, error -71 [ 1051.195239][T20930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.231590][T20930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.247391][ T5952] usb usb1-port1: unable to enumerate USB device [ 1051.274620][T20930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.312887][T20930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.519127][ T6091] usb 2-1: USB disconnect, device number 32 [ 1052.533419][T20952] netlink: 'syz.5.4539': attribute type 21 has an invalid length. [ 1052.544753][T20952] netlink: 'syz.5.4539': attribute type 6 has an invalid length. [ 1052.553465][T20952] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4539'. [ 1052.724699][T20960] FAULT_INJECTION: forcing a failure. [ 1052.724699][T20960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.743965][T20962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4541'. [ 1052.752371][T20960] CPU: 1 UID: 0 PID: 20960 Comm: syz.4.4542 Tainted: G L syzkaller #0 PREEMPT(full) [ 1052.752473][T20960] Tainted: [L]=SOFTLOCKUP [ 1052.752502][T20960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1052.752542][T20960] Call Trace: [ 1052.752565][T20960] [ 1052.752595][T20960] dump_stack_lvl+0xe8/0x150 [ 1052.752681][T20960] should_fail_ex+0x414/0x560 [ 1052.752779][T20960] _copy_from_iter+0x1cd/0x1630 [ 1052.752882][T20960] ? __pfx__copy_from_iter+0x10/0x10 [ 1052.752946][T20960] ? __build_skb_around+0x22d/0x3c0 [ 1052.752998][T20960] ? __alloc_skb+0x198/0x3a0 [ 1052.753020][T20960] ? netlink_sendmsg+0x642/0xb30 [ 1052.753045][T20960] ? skb_put+0x11b/0x210 [ 1052.753072][T20960] netlink_sendmsg+0x6b2/0xb30 [ 1052.753109][T20960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.753174][T20960] ? __import_iovec+0x5d4/0x7f0 [ 1052.753243][T20960] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1052.753334][T20960] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1052.753391][T20960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.753473][T20960] __sock_sendmsg+0x21c/0x270 [ 1052.753567][T20960] ____sys_sendmsg+0x505/0x820 [ 1052.753652][T20960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1052.753737][T20960] ? kstrtouint+0x6e/0xe0 [ 1052.753847][T20960] ___sys_sendmsg+0x21f/0x2a0 [ 1052.753916][T20960] ? __pfx____sys_sendmsg+0x10/0x10 [ 1052.753991][T20960] ? get_pid_task+0x20/0x1f0 [ 1052.754064][T20960] ? get_pid_task+0x20/0x1f0 [ 1052.754129][T20960] ? get_pid_task+0x20/0x1f0 [ 1052.754265][T20960] ? __fget_files+0x2a/0x420 [ 1052.754339][T20960] ? __fget_files+0x3a0/0x420 [ 1052.754441][T20960] __sys_sendmsg+0x164/0x220 [ 1052.754508][T20960] ? __pfx___sys_sendmsg+0x10/0x10 [ 1052.754617][T20960] ? __pfx_ksys_write+0x10/0x10 [ 1052.754729][T20960] __do_fast_syscall_32+0x1dc/0x560 [ 1052.754804][T20960] ? lockdep_hardirqs_on+0x7b/0x110 [ 1052.754860][T20960] ? do_fast_syscall_32+0x34/0x80 [ 1052.754927][T20960] ? irqentry_exit+0x10f/0x660 [ 1052.754999][T20960] do_fast_syscall_32+0x34/0x80 [ 1052.755070][T20960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1052.755147][T20960] RIP: 0023:0xf706d539 [ 1052.755206][T20960] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1052.755267][T20960] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1052.755322][T20960] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000000 [ 1052.755364][T20960] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1052.755397][T20960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1052.755437][T20960] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1052.755470][T20960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1052.755554][T20960] [ 1053.065321][T20481] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1053.201000][T20967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4543'. [ 1053.214750][T20967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4543'. [ 1053.227770][T20967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4543'. [ 1053.239512][T20967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4543'. [ 1053.248936][T20481] usb 5-1: Using ep0 maxpacket: 16 [ 1053.257903][T20481] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1053.274927][T20481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.306039][T20481] usb 5-1: config 0 descriptor?? [ 1053.517545][T20481] usbhid 5-1:0.0: can't add hid device: -71 [ 1053.544999][T20481] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1053.599661][T20481] usb 5-1: USB disconnect, device number 30 [ 1053.796722][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4549'. [ 1053.883150][T20985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4550'. [ 1054.852492][T21003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4555'. [ 1055.007371][T21006] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1055.798894][T21015] binder: 21014:21015 ioctl c0306201 80000640 returned -22 [ 1056.078615][T21020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4561'. [ 1056.451740][T21023] vlan2: entered promiscuous mode [ 1058.288250][T21054] loop2: detected capacity change from 0 to 7 [ 1058.311006][T21054] Dev loop2: unable to read RDB block 7 [ 1058.342307][T21054] loop2: unable to read partition table [ 1058.360321][T21054] loop2: partition table beyond EOD, truncated [ 1058.391067][T21054] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1058.424029][ T5200] Dev loop2: unable to read RDB block 7 [ 1058.436199][ T10] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1058.445288][ T5200] loop2: unable to read partition table [ 1058.451220][ T5200] loop2: partition table beyond EOD, truncated [ 1058.519184][T21062] __nla_validate_parse: 4 callbacks suppressed [ 1058.519204][T21062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4577'. [ 1058.614959][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1058.629384][ T10] usb 6-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 1058.651404][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.673020][T21064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4578'. [ 1058.696504][ T10] usb 6-1: config 0 descriptor?? [ 1058.706623][ T5971] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1058.729802][ T10] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1058.752655][T21064] vlan3: entered promiscuous mode [ 1058.758115][ T10] gspca_mr97310a: reg write [21] error -22 [ 1058.796844][ T10] mr97310a 6-1:0.0: probe with driver mr97310a failed with error -22 [ 1058.884900][ T5971] usb 5-1: Using ep0 maxpacket: 32 [ 1058.913628][T21070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4579'. [ 1058.924334][ T5971] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1058.960996][ T5971] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1058.980918][ T10] usb 6-1: USB disconnect, device number 62 [ 1059.017468][ T5971] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1059.052177][ T5971] usb 5-1: config 1 has no interface number 0 [ 1059.074101][ T5971] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1059.097416][ T5971] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1059.118578][ T5971] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1059.139460][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.218907][ T5971] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1059.284982][T20481] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1059.417840][ T5971] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1059.447707][T20481] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.472508][T20481] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1059.498259][T20481] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1059.522300][T20481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1059.550943][T20481] usb 3-1: SerialNumber: syz [ 1059.653241][T21079] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4582'. [ 1059.664401][T21059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.712704][T21059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.740776][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.754083][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.807732][T20481] usb 3-1: 0:2 : does not exist [ 1059.847866][T20481] usb 3-1: USB disconnect, device number 17 [ 1059.918684][T14920] udevd[14920]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1060.009828][ T5971] usb 5-1: USB disconnect, device number 31 [ 1060.037049][ T5971] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1060.823224][T21098] loop5: detected capacity change from 0 to 7 [ 1060.867200][T21098] Dev loop5: unable to read RDB block 7 [ 1060.888570][T21098] loop5: unable to read partition table [ 1060.916335][T21098] loop5: partition table beyond EOD, truncated [ 1060.929088][T21098] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1060.954912][ T5971] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1060.959435][T21100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4590'. [ 1061.028787][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4590'. [ 1061.126371][T20481] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1061.126879][ T5971] usb 5-1: Using ep0 maxpacket: 16 [ 1061.157727][ T5971] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1061.198343][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1061.269869][ T5971] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1061.300809][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.315150][T20481] usb 2-1: Using ep0 maxpacket: 8 [ 1061.348262][T20481] usb 2-1: config 10 has an invalid interface number: 211 but max is 0 [ 1061.357228][ T5971] usb 5-1: Product: syz [ 1061.361434][ T5971] usb 5-1: Manufacturer: syz [ 1061.375241][ T5971] usb 5-1: SerialNumber: syz [ 1061.386977][T20481] usb 2-1: config 10 has no interface number 0 [ 1061.405894][T20481] usb 2-1: config 10 interface 211 has no altsetting 0 [ 1061.414516][ T5971] usb 5-1: config 0 descriptor?? [ 1061.441462][T20481] usb 2-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice=99.7e [ 1061.467308][ T5971] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1061.493316][T20481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.515875][ T5971] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1061.604567][T20481] usb 2-1: Product: syz [ 1061.614702][T20481] usb 2-1: Manufacturer: syz [ 1061.642035][T20481] usb 2-1: SerialNumber: syz [ 1061.695839][T21113] FAULT_INJECTION: forcing a failure. [ 1061.695839][T21113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.709921][T21113] CPU: 0 UID: 0 PID: 21113 Comm: syz.2.4595 Tainted: G L syzkaller #0 PREEMPT(full) [ 1061.709950][T21113] Tainted: [L]=SOFTLOCKUP [ 1061.709956][T21113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1061.709966][T21113] Call Trace: [ 1061.709973][T21113] [ 1061.709980][T21113] dump_stack_lvl+0xe8/0x150 [ 1061.710006][T21113] should_fail_ex+0x414/0x560 [ 1061.710037][T21113] _copy_from_user+0x2d/0xb0 [ 1061.710058][T21113] blkdev_common_ioctl+0x541/0x2c70 [ 1061.710084][T21113] ? kasan_quarantine_put+0x6a/0x1f0 [ 1061.710102][T21113] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1061.710127][T21113] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1061.710147][T21113] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1061.710167][T21113] ? do_vfs_ioctl+0xbe8/0x1430 [ 1061.710184][T21113] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1061.710200][T21113] ? get_pid_task+0x20/0x1f0 [ 1061.710228][T21113] ? get_pid_task+0x20/0x1f0 [ 1061.710266][T21113] compat_blkdev_ioctl+0x54c/0x770 [ 1061.710289][T21113] ? __fget_files+0x2a/0x420 [ 1061.710313][T21113] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1061.710335][T21113] ? __fget_files+0x2a/0x420 [ 1061.710357][T21113] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1061.710378][T21113] __ia32_compat_sys_ioctl+0x543/0x840 [ 1061.710396][T21113] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1061.710412][T21113] ? __fget_files+0x3a0/0x420 [ 1061.710436][T21113] ? fput+0xa0/0xd0 [ 1061.710457][T21113] ? ksys_write+0x22a/0x250 [ 1061.710474][T21113] ? __pfx_ksys_write+0x10/0x10 [ 1061.710499][T21113] __do_fast_syscall_32+0x1dc/0x560 [ 1061.710517][T21113] ? lockdep_hardirqs_on+0x7b/0x110 [ 1061.710532][T21113] ? do_fast_syscall_32+0x34/0x80 [ 1061.710550][T21113] ? irqentry_exit+0x10f/0x660 [ 1061.710568][T21113] do_fast_syscall_32+0x34/0x80 [ 1061.710589][T21113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1061.710608][T21113] RIP: 0023:0xf702d539 [ 1061.710622][T21113] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1061.710636][T21113] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1061.710653][T21113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000001277 [ 1061.710664][T21113] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1061.710674][T21113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1061.710684][T21113] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1061.710693][T21113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1061.710715][T21113] [ 1062.188006][ T5971] em28xx 5-1:0.0: unknown em28xx chip ID (143) [ 1062.395592][ T5971] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1062.406829][ T5971] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1062.434336][ T5971] em28xx 5-1:0.0: No AC97 audio processor [ 1062.967949][T21126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4600'. [ 1063.205308][ T5971] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1063.374890][ T5971] usb 3-1: Using ep0 maxpacket: 32 [ 1063.395420][ T5971] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1063.423122][ T5971] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1063.451364][ T5971] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1063.479403][ T5971] usb 3-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 1063.504218][ T5971] usb 3-1: config 0 has no interface number 0 [ 1063.518370][ T5971] usb 3-1: config 0 interface 11 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1063.547009][ T5971] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1063.583243][ T5971] usb 3-1: New USB device found, idVendor=16d5, idProduct=6202, bcdDevice=78.05 [ 1063.602498][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.623213][ T5971] usb 3-1: Product: syz [ 1063.630295][ T5971] usb 3-1: Manufacturer: syz [ 1063.636153][ T5971] usb 3-1: SerialNumber: syz [ 1063.668256][ T5971] usb 3-1: config 0 descriptor?? [ 1063.702621][ T5971] option 3-1:0.11: GSM modem (1-port) converter detected [ 1063.802431][ T5971] usb 5-1: USB disconnect, device number 32 [ 1063.850570][ T5971] em28xx 5-1:0.0: Disconnecting em28xx [ 1063.896289][ T5971] em28xx 5-1:0.0: Freeing device [ 1063.970620][T20481] appletouch 2-1:10.211: Could not find int-in endpoint [ 1064.016774][T20481] appletouch 2-1:10.211: probe with driver appletouch failed with error -5 [ 1064.066270][T20481] usbhid 2-1:10.211: couldn't find an input interrupt endpoint [ 1064.091511][T20481] usb 2-1: USB disconnect, device number 33 [ 1064.233936][T21147] loop1: detected capacity change from 0 to 7 [ 1064.260581][T21147] loop1: [CUMANA/ADFS] p1 [ADFS] p1 [ 1064.266362][T21147] loop1: partition table partially beyond EOD, truncated [ 1064.273759][T21147] loop1: p1 size 2989602745 extends beyond EOD, truncated [ 1064.315236][ T5971] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1064.434646][T14920] udevd[14920]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1064.536677][ T5971] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1064.575025][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.608751][ T5971] usb 5-1: config 0 descriptor?? [ 1064.625254][T20207] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1064.657182][ T5971] cp210x 5-1:0.0: cp210x converter detected [ 1064.806125][T20207] usb 6-1: Using ep0 maxpacket: 32 [ 1064.885505][T20207] usb 6-1: config 9 interface 0 has no altsetting 0 [ 1064.895572][ T5971] usb 5-1: cp210x converter now attached to ttyUSB1 [ 1064.917418][T20207] usb 6-1: New USB device found, idVendor=0471, idProduct=2093, bcdDevice=e6.1a [ 1064.939512][T20207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.971598][T20207] usb 6-1: Product: syz [ 1064.988687][T20207] usb 6-1: Manufacturer: syz [ 1065.018758][T20207] usb 6-1: SerialNumber: syz [ 1065.135959][T21165] netlink: 'syz.2.4599': attribute type 5 has an invalid length. [ 1065.612347][T21174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4614'. [ 1065.659067][T21166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.687009][T21166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.793364][T21166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.836282][T21166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.078705][T20481] usb 5-1: USB disconnect, device number 33 [ 1067.124018][T20481] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1067.155973][T20481] cp210x 5-1:0.0: device disconnected [ 1067.366703][T21190] loop2: detected capacity change from 0 to 7 [ 1067.396670][T21190] Dev loop2: unable to read RDB block 7 [ 1067.412486][T21190] loop2: unable to read partition table [ 1067.427588][T21190] loop2: partition table beyond EOD, truncated [ 1067.445373][T21190] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1067.849840][T20207] usb 6-1: USB disconnect, device number 63 [ 1067.948300][T21194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4619'. [ 1067.959415][T21172] syz.1.4613 (21172): drop_caches: 1 [ 1068.073823][T21196] loop2: detected capacity change from 0 to 7 [ 1068.082666][T21196] Dev loop2: unable to read RDB block 7 [ 1068.102416][T21196] loop2: unable to read partition table [ 1068.133389][T21196] loop2: partition table beyond EOD, truncated [ 1068.181895][T21196] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1068.238828][ T5200] Dev loop2: unable to read RDB block 7 [ 1068.246483][ T5200] loop2: unable to read partition table [ 1068.298880][ T5200] loop2: partition table beyond EOD, truncated [ 1068.520033][T21201] FAULT_INJECTION: forcing a failure. [ 1068.520033][T21201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.626672][T21201] CPU: 1 UID: 0 PID: 21201 Comm: syz.1.4622 Tainted: G L syzkaller #0 PREEMPT(full) [ 1068.626709][T21201] Tainted: [L]=SOFTLOCKUP [ 1068.626720][T21201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1068.626735][T21201] Call Trace: [ 1068.626745][T21201] [ 1068.626756][T21201] dump_stack_lvl+0xe8/0x150 [ 1068.626792][T21201] should_fail_ex+0x414/0x560 [ 1068.626836][T21201] _copy_from_user+0x2d/0xb0 [ 1068.626866][T21201] kstrtouint_from_user+0xc4/0x170 [ 1068.626894][T21201] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1068.626937][T21201] proc_fail_nth_write+0x88/0x200 [ 1068.626963][T21201] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1068.626995][T21201] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1068.627024][T21201] vfs_write+0x27e/0xb30 [ 1068.627057][T21201] ? __pfx_vfs_write+0x10/0x10 [ 1068.627082][T21201] ? __fget_files+0x2a/0x420 [ 1068.627117][T21201] ? __fget_files+0x3a0/0x420 [ 1068.627146][T21201] ? __fget_files+0x2a/0x420 [ 1068.627186][T21201] ksys_write+0x145/0x250 [ 1068.627212][T21201] ? __pfx_ksys_write+0x10/0x10 [ 1068.627249][T21201] __do_fast_syscall_32+0x1dc/0x560 [ 1068.627277][T21201] ? lockdep_hardirqs_on+0x7b/0x110 [ 1068.627298][T21201] ? do_fast_syscall_32+0x34/0x80 [ 1068.627324][T21201] ? irqentry_exit+0x10f/0x660 [ 1068.627353][T21201] do_fast_syscall_32+0x34/0x80 [ 1068.627381][T21201] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1068.627410][T21201] RIP: 0023:0xf70cd539 [ 1068.627430][T21201] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1068.627450][T21201] RSP: 002b:00000000f54bd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1068.627475][T21201] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54bd620 [ 1068.627493][T21201] RDX: 0000000000000001 RSI: 00000000f7466ff4 RDI: 0000000000000000 [ 1068.627509][T21201] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1068.627523][T21201] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1068.627538][T21201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1068.627576][T21201] [ 1069.040879][T21073] usb 3-1: USB disconnect, device number 18 [ 1069.080856][T21073] option 3-1:0.11: device disconnected [ 1069.333688][T21208] tipc: New replicast peer: 255.255.255.255 [ 1069.365384][T21208] tipc: Enabled bearer , priority 10 [ 1069.420866][T21208] tipc: Enabling of bearer rejected, already enabled [ 1069.438065][T21208] tipc: Enabling of bearer rejected, already enabled [ 1070.030681][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4631'. [ 1070.096042][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4631'. [ 1070.117406][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4631'. [ 1070.137591][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4631'. [ 1070.475455][ T10] tipc: Node number set to 3696548002 [ 1070.763047][T21240] netlink: 'syz.5.4634': attribute type 1 has an invalid length. [ 1070.818602][T21240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4634'. [ 1071.107128][T21241] netlink: 'syz.2.4624': attribute type 4 has an invalid length. [ 1071.117196][T21241] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4624'. [ 1071.134899][T21073] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1071.295767][T21073] usb 6-1: Using ep0 maxpacket: 16 [ 1071.308252][T21073] usb 6-1: config 0 has no interfaces? [ 1071.378826][T21073] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1071.407782][T21241] .`: renamed from bond0 (while UP) [ 1071.479533][T21073] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1071.535543][T21073] usb 6-1: Manufacturer: syz [ 1071.589626][T21073] usb 6-1: config 0 descriptor?? [ 1072.486988][T21073] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1072.500929][T21250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4637'. [ 1072.647270][T21073] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1072.671132][T21073] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1072.699634][T21073] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1072.717472][T21073] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1072.726728][T21073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.735099][T21073] usb 5-1: Product: syz [ 1072.739659][T21073] usb 5-1: Manufacturer: syz [ 1072.744341][T21073] usb 5-1: SerialNumber: syz [ 1072.758176][T21073] hub 5-1:1.0: bad descriptor, ignoring hub [ 1072.764130][T21073] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1072.964508][T21073] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1073.315168][ T5928] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1073.513099][ T5928] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1073.536102][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.544262][ T5928] usb 1-1: Product: syz [ 1073.550606][ T5928] usb 1-1: Manufacturer: syz [ 1073.555494][ T5928] usb 1-1: SerialNumber: syz [ 1073.581255][ T5928] usb 1-1: config 0 descriptor?? [ 1073.598483][T21246] usb 5-1: reset high-speed USB device number 34 using dummy_hcd [ 1073.599425][T21073] usb 6-1: USB disconnect, device number 64 [ 1073.682185][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4643'. [ 1073.746526][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4643'. [ 1073.771495][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4643'. [ 1073.789100][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4643'. [ 1073.801250][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4643'. [ 1073.833026][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4643'. [ 1073.843240][ T5928] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1073.861971][T21268] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4644'. [ 1074.027242][T21246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.040770][T21246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.085258][ T5928] usb 5-1: USB disconnect, device number 34 [ 1074.097084][ T5928] usblp0: removed [ 1074.448101][ T5928] usb 1-1: USB disconnect, device number 88 [ 1076.391655][T21312] loop2: detected capacity change from 0 to 7 [ 1076.421417][T14920] Dev loop2: unable to read RDB block 7 [ 1076.427295][T14920] loop2: unable to read partition table [ 1076.433308][T14920] loop2: partition table beyond EOD, truncated [ 1076.447334][T21312] Dev loop2: unable to read RDB block 7 [ 1076.458870][T21312] loop2: unable to read partition table [ 1076.465203][T21312] loop2: partition table beyond EOD, truncated [ 1076.480966][T21312] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1076.538708][T21315] __nla_validate_parse: 29 callbacks suppressed [ 1076.538725][T21315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4654'. [ 1077.024941][T21073] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 1077.107801][T21333] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4661'. [ 1077.175212][T21073] usb 6-1: device descriptor read/64, error -71 [ 1077.435223][T21073] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 1077.526416][T21337] tap0: tun_chr_ioctl cmd 1074025675 [ 1077.538785][T21337] tap0: persist disabled [ 1077.585016][T21073] usb 6-1: device descriptor read/64, error -71 [ 1077.706927][T21073] usb usb6-port1: attempt power cycle [ 1078.057693][T21073] usb 6-1: new low-speed USB device number 67 using dummy_hcd [ 1078.096957][T21073] usb 6-1: device descriptor read/8, error -71 [ 1078.338872][T21073] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 1078.430690][T21073] usb 6-1: device descriptor read/8, error -71 [ 1078.592296][T21073] usb usb6-port1: unable to enumerate USB device [ 1078.707810][T21369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4667'. [ 1079.107187][ T5952] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1079.280160][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 1079.333917][T20481] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1079.357195][ T5952] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1079.369744][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.380499][ T5952] usb 1-1: config 0 descriptor?? [ 1079.545110][T20481] usb 5-1: Using ep0 maxpacket: 32 [ 1079.553491][T20481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.567454][T20481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.604713][T20481] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1079.640063][T20481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.666738][ T5952] usbhid 1-1:0.0: can't add hid device: -71 [ 1079.672931][ T5952] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1079.720262][T20481] usb 5-1: config 0 descriptor?? [ 1079.729562][ T5952] usb 1-1: USB disconnect, device number 89 [ 1080.182659][T20481] koneplus 0003:1E7D:2D51.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 1080.438201][ T30] audit: type=1326 audit(1766532594.230:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21390 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1080.553090][ T30] audit: type=1326 audit(1766532594.230:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21390 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1080.606841][ T5952] usb 5-1: USB disconnect, device number 35 [ 1080.691410][ T30] audit: type=1326 audit(1766532594.240:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21390 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1080.763584][T21391] fido_id[21391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1080.800050][ T30] audit: type=1326 audit(1766532594.240:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21390 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1080.911694][ T30] audit: type=1326 audit(1766532594.240:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21390 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1080.947957][ T30] audit: type=1326 audit(1766532594.240:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21390 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1081.057874][ T30] audit: type=1326 audit(1766532594.240:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21390 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1081.269275][ T30] audit: type=1326 audit(1766532594.240:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21390 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1081.382478][ T30] audit: type=1326 audit(1766532594.260:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21390 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1081.507403][ T30] audit: type=1326 audit(1766532594.260:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21390 comm="syz.5.4675" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1081.555456][T21406] IPv6: addrconf: prefix option has invalid lifetime [ 1082.442403][T21425] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4687'. [ 1082.461622][T21425] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4687'. [ 1082.645493][T20481] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1082.732854][T21429] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1082.822053][T21429] netlink: 1788 bytes leftover after parsing attributes in process `syz.1.4688'. [ 1082.847168][T20481] usb 1-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 1082.862344][T20481] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 1082.893987][T20481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.943401][T20481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.999063][T20481] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1083.053897][T20481] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1083.070847][T20481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.111506][T20481] usb 1-1: config 0 descriptor?? [ 1084.354911][T21073] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 1084.539081][T21073] usb 5-1: config 0 has an invalid interface number: 30 but max is 0 [ 1084.560822][T21073] usb 5-1: config 0 has no interface number 0 [ 1084.578706][T21073] usb 5-1: New USB device found, idVendor=0572, idProduct=de11, bcdDevice=84.e3 [ 1084.606691][T21073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.635644][T21073] usb 5-1: config 0 descriptor?? [ 1085.292014][T21073] usb 5-1: USB disconnect, device number 36 [ 1085.362791][T21429] team_slave_0: left promiscuous mode [ 1085.407621][T21429] team0 (unregistering): Port device team_slave_0 removed [ 1085.427462][T20481] usbhid 1-1:0.0: can't add hid device: -71 [ 1085.434483][T21429] team_slave_1: left promiscuous mode [ 1085.441184][T20481] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1085.469183][T21429] team0 (unregistering): Port device team_slave_1 removed [ 1085.486202][T20481] usb 1-1: USB disconnect, device number 90 [ 1085.823444][T21456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4696'. [ 1086.244325][T21467] netlink: 'syz.1.4700': attribute type 1 has an invalid length. [ 1086.315126][ T40] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1086.356277][T21473] bond3: (slave gretap1): making interface the new active one [ 1086.385002][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4700'. [ 1086.400138][T21473] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1086.428299][T21476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4700'. [ 1086.455016][T21467] macvlan2: entered promiscuous mode [ 1086.461249][T21467] macvlan2: entered allmulticast mode [ 1086.494873][ T40] usb 6-1: Using ep0 maxpacket: 16 [ 1086.505420][ T40] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1086.522445][T21478] vlan2: entered promiscuous mode [ 1086.529663][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.564031][ T40] usb 6-1: config 0 descriptor?? [ 1086.653646][T21480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4705'. [ 1086.656566][ T5971] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1086.782107][ T40] usbhid 6-1:0.0: can't add hid device: -71 [ 1086.802196][ T40] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1086.819840][T21484] binder: BINDER_SET_CONTEXT_MGR already set [ 1086.836088][T21484] binder: 21483:21484 ioctl 4018620d 800000c0 returned -16 [ 1086.855108][ T40] usb 6-1: USB disconnect, device number 69 [ 1086.867841][ T5971] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1086.905130][ T5971] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.937780][ T5971] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1086.944486][ T5971] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1086.972754][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.994084][ T5971] usb 1-1: config 0 descriptor?? [ 1087.060197][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4709'. [ 1087.085651][T21491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4709'. [ 1087.094935][T21073] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1087.245957][T21073] usb 3-1: Using ep0 maxpacket: 16 [ 1087.267335][T21073] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1087.276972][T21073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.306045][T21073] usb 3-1: config 0 descriptor?? [ 1087.322332][T21498] bridge0: entered allmulticast mode [ 1087.356234][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4712'. [ 1087.457363][ T5971] lenovo 0003:17EF:60EE.001E: ignoring exceeding usage max [ 1087.481097][ T5971] lenovo 0003:17EF:60EE.001E: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.0-1/input0 [ 1087.552932][T21073] usbhid 3-1:0.0: can't add hid device: -71 [ 1087.571743][T21505] netlink: 'syz.4.4715': attribute type 27 has an invalid length. [ 1087.592761][T21073] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1087.618356][T21073] usb 3-1: USB disconnect, device number 19 [ 1087.645023][T20207] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1087.666115][T21475] syzkaller1: entered promiscuous mode [ 1087.671980][T21475] syzkaller1: entered allmulticast mode [ 1087.809813][ T5971] lenovo 0003:17EF:60EE.001E: Failed to switch middle button: -71 [ 1087.827553][T20207] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1087.838183][ T5971] lenovo 0003:17EF:60EE.001E: Fn-lock setting failed: -71 [ 1087.850433][ T5971] lenovo 0003:17EF:60EE.001E: Sensitivity setting failed: -71 [ 1087.866594][T20207] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1087.878897][T21510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4717'. [ 1087.892657][T20207] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1087.908059][ T5971] usb 1-1: USB disconnect, device number 91 [ 1087.912703][T20207] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1087.923313][T20207] usb 2-1: Product: syz [ 1087.928148][T20207] usb 2-1: Manufacturer: syz [ 1087.933080][T20207] usb 2-1: SerialNumber: syz [ 1087.952752][T21510] vlan2: entered allmulticast mode [ 1087.961323][T20207] usb 2-1: config 0 descriptor?? [ 1087.969854][T21510] batadv_slave_1: entered allmulticast mode [ 1088.008601][T20207] usb 2-1: selecting invalid altsetting 0 [ 1088.266832][T20207] usb 2-1: USB disconnect, device number 34 [ 1088.345694][T21521] loop1: detected capacity change from 0 to 7 [ 1088.393834][T21521] loop1: [CUMANA/ADFS] p1 [ADFS] p1 [ 1088.401445][T21521] loop1: partition table partially beyond EOD, truncated [ 1088.412882][T21521] loop1: p1 size 2989602745 extends beyond EOD, truncated [ 1088.551695][T14920] udevd[14920]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1088.598168][T21529] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4726'. [ 1089.205626][T20207] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1089.377713][T20207] usb 5-1: device descriptor read/64, error -71 [ 1089.528653][T21552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4733'. [ 1089.565503][T21552] netlink: 'syz.1.4733': attribute type 1 has an invalid length. [ 1089.625007][T20207] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1089.683246][T21556] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4731'. [ 1089.784883][T20207] usb 5-1: device descriptor read/64, error -71 [ 1089.905190][T20207] usb usb5-port1: attempt power cycle [ 1090.256117][T20207] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1090.286242][T20207] usb 5-1: device descriptor read/8, error -71 [ 1090.528397][T20207] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1090.580786][T20207] usb 5-1: device descriptor read/8, error -71 [ 1090.705458][T20207] usb usb5-port1: unable to enumerate USB device [ 1090.746500][T21574] loop5: detected capacity change from 0 to 7 [ 1090.763873][T21574] Dev loop5: unable to read RDB block 7 [ 1090.778371][T21574] loop5: unable to read partition table [ 1090.790638][T21574] loop5: partition table beyond EOD, truncated [ 1090.804267][T21574] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1092.890207][T21600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4747'. [ 1093.214951][T21073] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1093.374869][T21073] usb 1-1: Using ep0 maxpacket: 32 [ 1093.392217][T21073] usb 1-1: too many configurations: 77, using maximum allowed: 8 [ 1093.420326][T21073] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1093.449586][T21073] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1093.473077][T21073] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1093.529136][T21073] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1093.560075][T21611] tipc: Started in network mode [ 1093.565558][T21611] tipc: Node identity 7f000001, cluster identity 4711 [ 1093.578831][T21073] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1093.596254][T21611] tipc: Enabled bearer , priority 10 [ 1093.615836][T21073] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1093.655931][T21073] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1093.710101][T21073] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1093.764052][T21073] usb 1-1: New USB device found, idVendor=05ac, idProduct=6f7c, bcdDevice=45.46 [ 1093.775301][T20207] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1093.803671][T21073] usb 1-1: New USB device strings: Mfr=139, Product=253, SerialNumber=254 [ 1093.824841][T21073] usb 1-1: Product: syz [ 1093.844860][T21073] usb 1-1: Manufacturer: syz [ 1093.849539][T21073] usb 1-1: SerialNumber: syz [ 1093.894224][T21073] usb 1-1: config 0 descriptor?? [ 1093.915115][T21073] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1093.955611][T20207] usb 3-1: Using ep0 maxpacket: 32 [ 1093.962673][T20207] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.004720][T20207] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 1094.035838][T20207] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1094.066118][T20207] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 1094.116356][T20207] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1094.145941][T20207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1094.168030][T20207] usb 3-1: SerialNumber: syz [ 1094.194292][T21610] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1094.205641][T21610] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1094.615412][ T40] tipc: Node number set to 2130706433 [ 1094.731108][T21621] netlink: 'syz.5.4754': attribute type 11 has an invalid length. [ 1094.967026][T20207] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1095.035475][T20207] usb 3-1: USB disconnect, device number 20 [ 1095.445222][T21633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4759'. [ 1095.472124][T21633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4759'. [ 1095.510189][T21633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4759'. [ 1095.535224][T21633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4759'. [ 1095.804287][T21639] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4762'. [ 1095.831704][T21639] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 1096.009237][ T40] usb 1-1: USB disconnect, device number 92 [ 1096.077759][T21647] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4765'. [ 1096.096661][T21647] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4765'. [ 1096.212389][T21653] netlink: 'syz.4.4767': attribute type 2 has an invalid length. [ 1096.233333][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1096.233353][ T30] audit: type=1326 audit(1766532610.030:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21649 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1096.268292][ T30] audit: type=1326 audit(1766532610.030:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21649 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1096.292761][ T30] audit: type=1326 audit(1766532610.070:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21649 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1096.317373][ T30] audit: type=1326 audit(1766532610.070:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21649 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1096.340775][ T30] audit: type=1326 audit(1766532610.070:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21649 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1096.386751][ T30] audit: type=1326 audit(1766532610.120:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21649 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=287 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1096.422481][ T30] audit: type=1326 audit(1766532610.120:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21649 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1096.509935][ T30] audit: type=1326 audit(1766532610.120:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21649 comm="syz.0.4766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x7ffc0000 [ 1096.920144][T21663] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4769'. [ 1096.960192][T21663] io-wq is not configured for unbound workers [ 1097.203895][T21666] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4770'. [ 1097.291766][ T30] audit: type=1326 audit(1766532611.090:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21667 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1097.349056][ T30] audit: type=1326 audit(1766532611.090:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21667 comm="syz.5.4771" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1097.836036][ T5971] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1098.000963][ T5971] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1098.019853][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.042010][ T5971] usb 5-1: Product: syz [ 1098.048377][ T5971] usb 5-1: Manufacturer: syz [ 1098.053301][ T5971] usb 5-1: SerialNumber: syz [ 1098.076787][ T5971] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1098.115133][T20481] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1098.218808][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1098.264912][T20481] usb 1-1: device descriptor read/64, error -71 [ 1098.475730][ T5971] usb 5-1: USB disconnect, device number 41 [ 1098.517172][T20481] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1098.685360][T20481] usb 1-1: device descriptor read/64, error -71 [ 1098.795361][T20481] usb usb1-port1: attempt power cycle [ 1098.935806][ T978] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1099.110825][ T978] usb 2-1: config 0 has an invalid interface number: 135 but max is 0 [ 1099.132140][ T978] usb 2-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1099.145200][T20481] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1099.167244][ T978] usb 2-1: config 0 has no interface number 0 [ 1099.175778][T20481] usb 1-1: device descriptor read/8, error -71 [ 1099.192688][ T978] usb 2-1: config 0 interface 135 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1099.228016][ T978] usb 2-1: config 0 interface 135 has no altsetting 0 [ 1099.248409][ T978] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1099.277592][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.305510][ T978] usb 2-1: Product: syz [ 1099.321280][ T978] usb 2-1: Manufacturer: syz [ 1099.335787][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1099.355805][ T978] usb 2-1: SerialNumber: syz [ 1099.370243][ T10] ath9k_htc: Failed to initialize the device [ 1099.381238][ T978] usb 2-1: config 0 descriptor?? [ 1099.396215][ T5971] usb 5-1: ath9k_htc: USB layer deinitialized [ 1099.425553][T20481] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1099.490628][T20481] usb 1-1: device descriptor read/8, error -71 [ 1099.625352][T20481] usb usb1-port1: unable to enumerate USB device [ 1099.899070][ T978] ums-karma 2-1:0.135: USB Mass Storage device detected [ 1099.917986][T21713] loop2: detected capacity change from 0 to 7 [ 1099.929737][T21713] Dev loop2: unable to read RDB block 7 [ 1099.942186][T21713] loop2: unable to read partition table [ 1099.951139][T21713] loop2: partition table beyond EOD, truncated [ 1099.966344][T21713] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1100.062836][ T978] usb 2-1: USB disconnect, device number 35 [ 1100.278382][T21721] __nla_validate_parse: 1 callbacks suppressed [ 1100.278398][T21721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4788'. [ 1101.170443][T21736] binder: BINDER_SET_CONTEXT_MGR already set [ 1101.211872][T21736] binder: 21734:21736 ioctl 4018620d 80000040 returned -16 [ 1102.358380][T21762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4799'. [ 1102.723439][T21766] binder: 21765:21766 ioctl c0306201 800002c0 returned -14 [ 1103.366041][T21775] FAULT_INJECTION: forcing a failure. [ 1103.366041][T21775] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.410801][T21775] CPU: 1 UID: 0 PID: 21775 Comm: syz.2.4804 Tainted: G L syzkaller #0 PREEMPT(full) [ 1103.410841][T21775] Tainted: [L]=SOFTLOCKUP [ 1103.410847][T21775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1103.410858][T21775] Call Trace: [ 1103.410865][T21775] [ 1103.410873][T21775] dump_stack_lvl+0xe8/0x150 [ 1103.410901][T21775] should_fail_ex+0x414/0x560 [ 1103.410931][T21775] should_failslab+0xa8/0x100 [ 1103.410953][T21775] __kmalloc_noprof+0xdf/0x800 [ 1103.410969][T21775] ? tomoyo_encode+0x28b/0x550 [ 1103.410994][T21775] tomoyo_encode+0x28b/0x550 [ 1103.411020][T21775] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1103.411050][T21775] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1103.411068][T21775] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1103.411088][T21775] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1103.411105][T21775] ? __lock_acquire+0x6b6/0x2cf0 [ 1103.411125][T21775] ? get_pid_task+0x20/0x1f0 [ 1103.411153][T21775] ? get_pid_task+0x20/0x1f0 [ 1103.411187][T21775] ? __fget_files+0x2a/0x420 [ 1103.411211][T21775] ? __fget_files+0x3a0/0x420 [ 1103.411231][T21775] ? __fget_files+0x2a/0x420 [ 1103.411254][T21775] security_file_ioctl_compat+0xcb/0x2d0 [ 1103.411273][T21775] __ia32_compat_sys_ioctl+0x128/0x840 [ 1103.411292][T21775] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1103.411308][T21775] ? __fget_files+0x3a0/0x420 [ 1103.411333][T21775] ? fput+0xa0/0xd0 [ 1103.411355][T21775] ? ksys_write+0x22a/0x250 [ 1103.411372][T21775] ? __pfx_ksys_write+0x10/0x10 [ 1103.411402][T21775] __do_fast_syscall_32+0x1dc/0x560 [ 1103.411421][T21775] ? lockdep_hardirqs_on+0x7b/0x110 [ 1103.411436][T21775] ? do_fast_syscall_32+0x34/0x80 [ 1103.411454][T21775] ? irqentry_exit+0x10f/0x660 [ 1103.411473][T21775] do_fast_syscall_32+0x34/0x80 [ 1103.411491][T21775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1103.411511][T21775] RIP: 0023:0xf702d539 [ 1103.411526][T21775] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1103.411541][T21775] RSP: 002b:00000000f53fc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1103.411557][T21775] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405668 [ 1103.411569][T21775] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1103.411579][T21775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1103.411588][T21775] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1103.411599][T21775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1103.411621][T21775] [ 1103.411644][T21775] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1104.465127][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4809'. [ 1104.761638][T21797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4811'. [ 1104.807624][T21797] netlink: 'syz.4.4811': attribute type 1 has an invalid length. [ 1105.037581][T21801] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1105.064882][T20481] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1105.224957][T20481] usb 1-1: Using ep0 maxpacket: 16 [ 1105.236456][T20481] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1105.264639][T20481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.301017][T20481] usb 1-1: config 0 descriptor?? [ 1105.528405][T20481] usbhid 1-1:0.0: can't add hid device: -71 [ 1105.553096][T20481] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1105.564986][T21073] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1105.610349][T20481] usb 1-1: USB disconnect, device number 97 [ 1105.728123][T21073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.749594][T21073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.761055][T21073] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1105.772935][T21073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.781788][ T978] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1105.812488][T21073] usb 5-1: config 0 descriptor?? [ 1105.950700][T21814] netlink: 'syz.1.4817': attribute type 1 has an invalid length. [ 1105.954118][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.984889][T21814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4817'. [ 1106.033973][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.098741][ T978] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1106.149151][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.195173][ T978] usb 6-1: config 0 descriptor?? [ 1106.265991][T20481] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1106.351534][T21073] usbhid 5-1:0.0: can't add hid device: -71 [ 1106.368672][T21073] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1106.408398][T21073] usb 5-1: USB disconnect, device number 42 [ 1106.445423][T20481] usb 2-1: Using ep0 maxpacket: 16 [ 1106.454833][T20481] usb 2-1: config 0 has no interfaces? [ 1106.477002][T20481] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1106.487394][T20481] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1106.495677][T20481] usb 2-1: Manufacturer: syz [ 1106.507357][T20481] usb 2-1: config 0 descriptor?? [ 1106.629176][ T10] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1106.659661][ T978] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 1106.692633][ T978] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 1106.718507][ T978] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 1106.736770][ T978] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 1106.757027][ T978] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 1106.789779][ T978] playstation 0003:054C:0DF2.001F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 1106.821368][ T10] usb 1-1: config 0 has no interfaces? [ 1106.843646][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1106.883216][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.962926][ T10] usb 1-1: Product: syz [ 1106.986586][ T10] usb 1-1: Manufacturer: syz [ 1106.994344][ T10] usb 1-1: SerialNumber: syz [ 1107.031281][ T10] usb 1-1: config 0 descriptor?? [ 1107.102721][ T978] playstation 0003:054C:0DF2.001F: Failed to retrieve feature with reportID 32: -71 [ 1107.141804][ T978] playstation 0003:054C:0DF2.001F: Failed to retrieve DualSense firmware info: -71 [ 1107.210430][ T978] playstation 0003:054C:0DF2.001F: Failed to get firmware info from DualSense [ 1107.241355][ T978] playstation 0003:054C:0DF2.001F: Failed to create dualsense. [ 1107.314720][ T978] playstation 0003:054C:0DF2.001F: probe with driver playstation failed with error -71 [ 1107.348580][T21818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4820'. [ 1107.403050][ T978] usb 6-1: USB disconnect, device number 70 [ 1107.445939][ T40] usb 1-1: USB disconnect, device number 98 [ 1107.692751][T21830] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 1107.933761][T21833] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4826'. [ 1108.389326][T21848] syzkaller0: entered promiscuous mode [ 1108.404192][T21848] syzkaller0: entered allmulticast mode [ 1108.456332][T21848] netlink: 'syz.0.4832': attribute type 1 has an invalid length. [ 1108.545596][T21073] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1108.666942][T21856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4833'. [ 1108.715373][T21073] usb 5-1: Using ep0 maxpacket: 8 [ 1108.734030][T21073] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1108.756550][T21073] usb 5-1: config 179 has no interface number 0 [ 1108.766216][T21858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4834'. [ 1108.776524][T21073] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1108.800039][T21073] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1108.814727][T21858] vlan3: entered promiscuous mode [ 1108.822457][T21073] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1108.839107][T21073] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1108.879731][T21073] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1108.938151][T21073] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1108.984238][T21073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.037145][T21844] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1109.324105][ T978] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input54 [ 1109.558938][ T978] usb 5-1: USB disconnect, device number 43 [ 1109.559056][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1109.559109][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1109.796465][ T10] usb 2-1: USB disconnect, device number 36 [ 1110.828688][ T10] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1110.978407][T21876] m1Ie5nè‹Ò: entered promiscuous mode [ 1111.017519][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4842'. [ 1111.027679][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4842'. [ 1111.070701][ T10] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1111.098182][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4842'. [ 1111.125331][ T10] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.147782][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4842'. [ 1111.189528][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1111.221618][ T10] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1111.304211][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.378715][ T10] usb 6-1: config 0 descriptor?? [ 1111.447578][T21896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4844'. [ 1111.590122][T21881] raw_sendmsg: syz.5.4840 forgot to set AF_INET. Fix it! [ 1112.341277][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1112.348356][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1112.362735][ T10] usb 6-1: USB disconnect, device number 71 [ 1113.090706][T21921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4850'. [ 1113.140755][T21921] netlink: 'syz.1.4850': attribute type 1 has an invalid length. [ 1114.129114][T21942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4856'. [ 1114.263285][ T5913] IPVS: starting estimator thread 0... [ 1114.385419][T21943] IPVS: using max 37 ests per chain, 88800 per kthread [ 1115.225367][ T10] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1115.375548][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1115.382670][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1115.396582][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.437976][ T10] usb 6-1: config 0 descriptor?? [ 1115.653203][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1115.666156][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1115.718213][ T10] usb 6-1: USB disconnect, device number 72 [ 1116.305945][T21964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4864'. [ 1116.306055][T21964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4864'. [ 1116.348988][T21964] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1116.349290][ T30] kauditd_printk_skb: 214 callbacks suppressed [ 1116.349307][ T30] audit: type=1326 audit(1766532630.140:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21966 comm="syz.5.4865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1116.352127][ T30] audit: type=1326 audit(1766532630.150:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21966 comm="syz.5.4865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1116.352912][ T30] audit: type=1326 audit(1766532630.150:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21966 comm="syz.5.4865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1116.353402][ T30] audit: type=1326 audit(1766532630.150:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21966 comm="syz.5.4865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1116.353701][ T30] audit: type=1326 audit(1766532630.150:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21966 comm="syz.5.4865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1116.357871][ T30] audit: type=1326 audit(1766532630.150:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21966 comm="syz.5.4865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1116.378776][T21967] syz.5.4865 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1116.391972][ T30] audit: type=1326 audit(1766532630.170:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21966 comm="syz.5.4865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1116.392030][ T30] audit: type=1326 audit(1766532630.170:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21966 comm="syz.5.4865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1116.392078][ T30] audit: type=1326 audit(1766532630.170:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21966 comm="syz.5.4865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1116.392124][ T30] audit: type=1326 audit(1766532630.170:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21966 comm="syz.5.4865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 1116.629621][T21964] bond0 (unregistering): Released all slaves [ 1116.675524][ T5913] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 1116.849909][ T5913] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1116.859015][ T5913] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1116.979228][ T5913] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1117.001630][ T5913] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1117.018043][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5D, changing to 0xD [ 1117.031032][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 1117.043077][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1117.053824][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1117.073455][ T5913] usb 2-1: string descriptor 0 read error: -22 [ 1117.095575][ T5913] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1117.121815][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.150196][ T5913] usb 2-1: config 0 descriptor?? [ 1117.182587][ T5913] hub 2-1:0.0: bad descriptor, ignoring hub [ 1117.233106][ T5913] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1117.495132][ T5913] usb 2-1: USB disconnect, device number 37 [ 1117.850617][T21994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4872'. [ 1117.944979][T20207] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1118.162113][T20207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.218550][T20207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.264984][T20207] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1118.337160][T20207] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1118.390888][T20207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.557193][T20207] usb 1-1: config 0 descriptor?? [ 1119.310127][T22006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4875'. [ 1119.385711][T22006] vlan3: entered promiscuous mode [ 1120.653946][T22015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4877'. [ 1121.186438][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.195549][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.310510][T20207] usbhid 1-1:0.0: can't add hid device: -71 [ 1121.318732][T20207] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1121.373562][T20207] usb 1-1: USB disconnect, device number 99 [ 1121.975620][T22028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4881'. [ 1122.463735][T22034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4883'. [ 1124.215359][ T5913] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1124.351246][T22056] netlink: 'syz.4.4888': attribute type 2 has an invalid length. [ 1124.370299][ T5913] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1124.402103][ T5913] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1124.421834][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1124.455406][ T5913] usb 2-1: Product: syz [ 1124.459605][ T5913] usb 2-1: Manufacturer: syz [ 1124.481650][ T5913] usb 2-1: SerialNumber: syz [ 1124.631245][T22060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4889'. [ 1124.649543][T22056] vxcan3: entered allmulticast mode [ 1124.790197][ T5913] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1124.832447][T22060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.859531][T22063] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1124.865434][T22060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.888718][T22060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.905017][T22060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.665467][T21073] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1125.827875][T21073] usb 3-1: Using ep0 maxpacket: 8 [ 1125.839816][T21073] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1125.856219][T21073] usb 3-1: config 0 has no interface number 0 [ 1125.877365][T21073] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1125.912243][T21073] usb 3-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=da.9a [ 1125.926540][T21073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.941952][T21073] usb 3-1: Product: syz [ 1125.947458][T21073] usb 3-1: Manufacturer: syz [ 1125.953265][T21073] usb 3-1: SerialNumber: syz [ 1125.969787][T21073] usb 3-1: config 0 descriptor?? [ 1126.383540][T21073] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -22 [ 1126.449918][T21073] usb 3-1: USB disconnect, device number 21 [ 1126.546020][T14920] udevd[14920]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1126.609649][ C0] usblp0: nonzero write bulk status received: -71 [ 1126.618246][ T978] usb 2-1: USB disconnect, device number 38 [ 1126.669005][ T978] usblp0: removed [ 1127.149411][T22106] fuse: Bad value for 'user_id' [ 1127.154345][T22106] fuse: Bad value for 'user_id' [ 1127.384350][T22111] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4900'. [ 1127.411134][T20481] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1127.459029][T20481] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1127.568239][T22106] ipip0: entered promiscuous mode [ 1127.573535][T22106] ipip0: entered allmulticast mode [ 1127.621436][T22122] FAULT_INJECTION: forcing a failure. [ 1127.621436][T22122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1127.722267][T22122] CPU: 1 UID: 0 PID: 22122 Comm: syz.4.4908 Tainted: G L syzkaller #0 PREEMPT(full) [ 1127.722294][T22122] Tainted: [L]=SOFTLOCKUP [ 1127.722300][T22122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1127.722310][T22122] Call Trace: [ 1127.722336][T22122] [ 1127.722346][T22122] dump_stack_lvl+0xe8/0x150 [ 1127.722380][T22122] should_fail_ex+0x414/0x560 [ 1127.722421][T22122] _copy_to_user+0x31/0xb0 [ 1127.722453][T22122] simple_read_from_buffer+0xe1/0x170 [ 1127.722476][T22122] proc_fail_nth_read+0x1b3/0x220 [ 1127.722504][T22122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1127.722523][T22122] ? rw_verify_area+0x2a6/0x4d0 [ 1127.722547][T22122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1127.722565][T22122] vfs_read+0x200/0xa30 [ 1127.722579][T22122] ? fdget_pos+0x247/0x320 [ 1127.722602][T22122] ? __pfx___mutex_lock+0x10/0x10 [ 1127.722620][T22122] ? __pfx_vfs_read+0x10/0x10 [ 1127.722636][T22122] ? __fget_files+0x2a/0x420 [ 1127.722659][T22122] ? __fget_files+0x3a0/0x420 [ 1127.722678][T22122] ? __fget_files+0x2a/0x420 [ 1127.722704][T22122] ksys_read+0x145/0x250 [ 1127.722720][T22122] ? __pfx_ksys_read+0x10/0x10 [ 1127.722743][T22122] __do_fast_syscall_32+0x1dc/0x560 [ 1127.722761][T22122] ? lockdep_hardirqs_on+0x7b/0x110 [ 1127.722776][T22122] ? do_fast_syscall_32+0x34/0x80 [ 1127.722793][T22122] ? irqentry_exit+0x10f/0x660 [ 1127.722811][T22122] do_fast_syscall_32+0x34/0x80 [ 1127.722829][T22122] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1127.722849][T22122] RIP: 0023:0xf706d539 [ 1127.722863][T22122] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1127.722876][T22122] RSP: 002b:00000000f543c590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1127.722893][T22122] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f543c620 [ 1127.722904][T22122] RDX: 000000000000000f RSI: 00000000f7406ff4 RDI: 0000000000000000 [ 1127.722914][T22122] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1127.722923][T22122] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1127.722933][T22122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1127.722955][T22122] [ 1128.647326][T22132] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4911'. [ 1128.768320][T22131] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4911'. [ 1128.815345][T22131] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4911'. [ 1129.247108][T22137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1129.278730][T22137] netlink: 'syz.0.4913': attribute type 1 has an invalid length. [ 1129.795538][T20481] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1129.982953][T20481] usb 1-1: Using ep0 maxpacket: 32 [ 1130.002818][T20481] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b23, bcdDevice= 0.00 [ 1130.027233][T20481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.116150][T20481] usb 1-1: config 0 descriptor?? [ 1130.639656][T20481] hid-corsair-void 0003:1B1C:1B23.0021: unknown main item tag 0x7 [ 1130.722650][T22155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4918'. [ 1130.735559][T20481] hid-corsair-void 0003:1B1C:1B23.0021: hidraw0: USB HID v0.00 Device [HID 1b1c:1b23] on usb-dummy_hcd.0-1/input0 [ 1130.807574][T22155] vlan2: entered allmulticast mode [ 1130.841235][T22155] batadv_slave_1: entered allmulticast mode [ 1130.857235][T20481] usb 1-1: USB disconnect, device number 100 [ 1130.910203][ T5952] hid-corsair-void 0003:1B1C:1B23.0021: failed to request firmware (reason: -19) [ 1130.921347][ T40] hid-corsair-void 0003:1B1C:1B23.0021: failed to request battery (reason: -19) [ 1130.959131][T22156] fido_id[22156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1131.974959][ T5952] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1132.155798][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 1132.193144][ T5952] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1132.214961][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.273979][ T5952] usb 2-1: config 0 descriptor?? [ 1132.497214][ T5952] usbhid 2-1:0.0: can't add hid device: -71 [ 1132.508241][ T5952] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1132.524370][ T5952] usb 2-1: USB disconnect, device number 39 [ 1133.098681][T22185] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 1133.367436][T22193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4931'. [ 1133.870427][T22213] FAULT_INJECTION: forcing a failure. [ 1133.870427][T22213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.901192][T22213] CPU: 1 UID: 0 PID: 22213 Comm: syz.1.4941 Tainted: G L syzkaller #0 PREEMPT(full) [ 1133.901231][T22213] Tainted: [L]=SOFTLOCKUP [ 1133.901240][T22213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1133.901255][T22213] Call Trace: [ 1133.901266][T22213] [ 1133.901277][T22213] dump_stack_lvl+0xe8/0x150 [ 1133.901313][T22213] should_fail_ex+0x414/0x560 [ 1133.901355][T22213] _copy_to_user+0x31/0xb0 [ 1133.901386][T22213] simple_read_from_buffer+0xe1/0x170 [ 1133.901420][T22213] proc_fail_nth_read+0x1b3/0x220 [ 1133.901449][T22213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1133.901476][T22213] ? rw_verify_area+0x2a6/0x4d0 [ 1133.901509][T22213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1133.901534][T22213] vfs_read+0x200/0xa30 [ 1133.901554][T22213] ? fdget_pos+0x247/0x320 [ 1133.901587][T22213] ? __pfx___mutex_lock+0x10/0x10 [ 1133.901614][T22213] ? __pfx_vfs_read+0x10/0x10 [ 1133.901637][T22213] ? __fget_files+0x2a/0x420 [ 1133.901679][T22213] ? __fget_files+0x3a0/0x420 [ 1133.901706][T22213] ? __fget_files+0x2a/0x420 [ 1133.901744][T22213] ksys_read+0x145/0x250 [ 1133.901769][T22213] ? __pfx_ksys_read+0x10/0x10 [ 1133.901803][T22213] __do_fast_syscall_32+0x1dc/0x560 [ 1133.901829][T22213] ? lockdep_hardirqs_on+0x7b/0x110 [ 1133.901850][T22213] ? do_fast_syscall_32+0x34/0x80 [ 1133.901875][T22213] ? irqentry_exit+0x10f/0x660 [ 1133.901903][T22213] do_fast_syscall_32+0x34/0x80 [ 1133.901929][T22213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1133.901956][T22213] RIP: 0023:0xf70cd539 [ 1133.901976][T22213] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1133.901996][T22213] RSP: 002b:00000000f54bd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1133.902020][T22213] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f54bd620 [ 1133.902035][T22213] RDX: 000000000000000f RSI: 00000000f7466ff4 RDI: 0000000000000000 [ 1133.902050][T22213] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1133.902063][T22213] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1133.902078][T22213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1133.902110][T22213] [ 1134.392272][T22221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4943'. [ 1134.765557][T21073] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1134.933365][T21073] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.972694][T21073] usb 2-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=5b.d8 [ 1134.983482][T21073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.994434][T21073] usb 2-1: Product: syz [ 1135.006897][T21073] usb 2-1: Manufacturer: syz [ 1135.011546][T21073] usb 2-1: SerialNumber: syz [ 1135.274298][T21073] usb 2-1: Could not find all expected endpoints [ 1135.382960][T21073] usb 2-1: USB disconnect, device number 40 [ 1135.400520][T22226] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4945'. [ 1135.562173][T22230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4946'. [ 1135.859211][T22236] netlink: 'syz.4.4947': attribute type 5 has an invalid length. [ 1135.906918][T22236] kAFS: unable to lookup cell '' [ 1136.120575][T22235] syz.0.4949 (22235): drop_caches: 1 [ 1136.329109][ T3493] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1136.367773][ T3493] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1136.377335][T21073] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1136.414662][ T3493] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1136.459814][ T3493] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1136.565984][T21073] usb 6-1: config 0 has no interfaces? [ 1136.603338][T21073] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1136.617281][T22251] binder: 22249:22251 ioctl 400c620e 800000c0 returned -22 [ 1136.645370][T21073] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.669185][T21073] usb 6-1: Product: syz [ 1136.689741][T22252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4954'. [ 1136.700936][T21073] usb 6-1: Manufacturer: syz [ 1136.719942][T21073] usb 6-1: SerialNumber: syz [ 1136.767993][T21073] usb 6-1: config 0 descriptor?? [ 1136.901397][T22257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4957'. [ 1137.104045][ T5952] usb 6-1: USB disconnect, device number 73 [ 1137.167704][T22261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4959'. [ 1137.325092][ T5929] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1137.497470][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 1137.513602][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.573605][T22267] loop2: detected capacity change from 0 to 7 [ 1137.575117][ T5929] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1137.611730][T22267] Dev loop2: unable to read RDB block 7 [ 1137.626519][T22267] loop2: unable to read partition table [ 1137.638271][T22267] loop2: partition table beyond EOD, truncated [ 1137.660073][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.671219][T22267] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1137.720290][ T5929] usb 5-1: config 0 descriptor?? [ 1138.169449][ T5929] kye 0003:0458:5013.0022: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1138.247545][ T5929] kye 0003:0458:5013.0022: hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 1138.273730][ T5929] kye 0003:0458:5013.0022: tablet-enabling feature report not found [ 1138.301296][ T5929] kye 0003:0458:5013.0022: tablet enabling failed [ 1138.406944][ T5929] usb 5-1: USB disconnect, device number 44 [ 1138.780397][T22288] fido_id[22288]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1139.368548][T22303] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4973'. [ 1139.937494][T22311] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4975'. [ 1139.996492][T22319] loop1: detected capacity change from 0 to 7 [ 1140.031616][T22319] loop1: [CUMANA/ADFS] p1 [ADFS] p1 [ 1140.042886][T22319] loop1: partition table partially beyond EOD, truncated [ 1140.052403][T22319] loop1: p1 size 2989602745 extends beyond EOD, truncated [ 1140.079163][T22311] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4975'. [ 1140.308309][T22323] netlink: 'syz.1.4978': attribute type 27 has an invalid length. [ 1140.616051][T22333] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1140.759524][T22336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4987'. [ 1140.819628][T22342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4988'. [ 1141.346599][ T5929] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1141.519466][T22357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1141.564599][T22358] netlink: 'syz.1.4993': attribute type 21 has an invalid length. [ 1141.572818][T22357] netlink: 'syz.1.4993': attribute type 21 has an invalid length. [ 1141.572845][T22357] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1141.572952][T22357] netlink: 'syz.1.4993': attribute type 4 has an invalid length. [ 1141.572970][T22357] netlink: 'syz.1.4993': attribute type 5 has an invalid length. [ 1141.572985][T22357] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1141.573976][ T5929] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1141.641348][T22358] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1141.727367][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.775634][T22358] netlink: 'syz.1.4993': attribute type 4 has an invalid length. [ 1141.787127][ T5929] usb 5-1: Product: syz [ 1141.800719][T22358] netlink: 'syz.1.4993': attribute type 5 has an invalid length. [ 1141.820312][ T5929] usb 5-1: Manufacturer: syz [ 1141.829007][T22358] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1141.842834][ T5929] usb 5-1: SerialNumber: syz [ 1141.941795][ T5929] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1142.016239][T20481] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1142.334989][T22350] vlan3: entered promiscuous mode [ 1142.498088][T21073] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1142.520999][ T5913] usb 5-1: USB disconnect, device number 45 [ 1142.686460][T21073] usb 6-1: Using ep0 maxpacket: 16 [ 1142.703770][T21073] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1142.722564][T21073] usb 6-1: config 0 has no interface number 0 [ 1142.773975][T21073] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.816800][T21073] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.870756][T21073] usb 6-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1142.900225][T21073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.914064][T21073] usb 6-1: config 0 descriptor?? [ 1142.988731][T22395] netlink: 'syz.1.5007': attribute type 4 has an invalid length. [ 1143.085548][T20481] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1143.096703][T20481] ath9k_htc: Failed to initialize the device [ 1143.105865][ T5913] usb 5-1: ath9k_htc: USB layer deinitialized [ 1143.135479][ T978] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1143.162587][T21073] holtek_mouse 0003:04D9:A081.0023: item fetching failed at offset 5/8 [ 1143.207130][T21073] holtek_mouse 0003:04D9:A081.0023: hid parse failed: -22 [ 1143.235930][ T5971] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1143.246788][T21073] holtek_mouse 0003:04D9:A081.0023: probe with driver holtek_mouse failed with error -22 [ 1143.289510][ T5929] usb 6-1: USB disconnect, device number 74 [ 1143.326923][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 1143.354092][ T978] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.387874][ T978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1143.411834][ T5971] usb 2-1: Using ep0 maxpacket: 32 [ 1143.428528][ T5971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.452662][ T978] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1143.468150][ T5971] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1143.491923][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.500265][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.508643][ T978] usb 1-1: Product: syz [ 1143.513133][ T5971] usb 2-1: Product: syz [ 1143.518940][ T978] usb 1-1: Manufacturer: syz [ 1143.523702][ T5971] usb 2-1: Manufacturer: syz [ 1143.529245][ T978] usb 1-1: SerialNumber: syz [ 1143.537731][ T5971] usb 2-1: SerialNumber: syz [ 1143.572802][ T5971] usb 2-1: config 0 descriptor?? [ 1143.583075][ T5971] usb 2-1: bad CDC descriptors [ 1143.600749][ T5971] usb 2-1: unsupported MDLM descriptors [ 1143.729498][T21073] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1143.773438][ T978] usb 1-1: 0:2 : does not exist [ 1143.790344][ T5971] usb 2-1: USB disconnect, device number 41 [ 1143.821501][ T978] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1143.885522][T21073] usb 5-1: Using ep0 maxpacket: 32 [ 1143.907481][T21073] usb 5-1: config 0 has an invalid interface number: 139 but max is 0 [ 1143.934449][ T978] usb 1-1: USB disconnect, device number 101 [ 1143.945514][T21073] usb 5-1: config 0 has no interface number 0 [ 1143.968470][T21073] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 1144.008736][T21073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.041246][T21073] usb 5-1: Product: syz [ 1144.053913][T14920] udevd[14920]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1144.086793][T21073] usb 5-1: Manufacturer: syz [ 1144.104521][T21073] usb 5-1: SerialNumber: syz [ 1144.129707][T21073] usb 5-1: config 0 descriptor?? [ 1144.382057][T22404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.424559][T22404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.494223][T21073] mct_u232 5-1:0.139: MCT U232 converter detected [ 1144.533843][T21073] mct_u232 ttyUSB0: expected endpoint missing [ 1144.574636][T21073] usb 5-1: USB disconnect, device number 46 [ 1144.603562][T21073] mct_u232 5-1:0.139: device disconnected [ 1144.763073][T22416] __nla_validate_parse: 2 callbacks suppressed [ 1144.763095][T22416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5013'. [ 1145.103900][T22423] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1145.488934][T22432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5018'. [ 1145.532230][T22433] loop5: detected capacity change from 0 to 7 [ 1145.555878][T22434] netlink: 'syz.4.5017': attribute type 1 has an invalid length. [ 1145.579711][T22433] Dev loop5: unable to read RDB block 7 [ 1145.596280][T22432] input: syz1 as /devices/virtual/input/input56 [ 1145.620965][T22434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5017'. [ 1145.634487][T22433] loop5: unable to read partition table [ 1145.650948][T22433] loop5: partition table beyond EOD, truncated [ 1145.684841][T22433] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1145.975003][ T5929] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1146.164839][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 1146.172245][ T5929] usb 5-1: config 0 has no interfaces? [ 1146.186493][ T5929] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1146.205500][ T5929] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1146.215552][ T5929] usb 5-1: Manufacturer: syz [ 1146.230798][T22447] netlink: 'syz.0.5023': attribute type 27 has an invalid length. [ 1146.251327][ T5929] usb 5-1: config 0 descriptor?? [ 1146.355773][ T978] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1146.366686][T21073] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1146.410951][T22449] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 1146.535510][ T978] usb 6-1: Using ep0 maxpacket: 16 [ 1146.551077][T21073] usb 3-1: Using ep0 maxpacket: 16 [ 1146.560022][T21073] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1146.581104][ T978] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1146.608180][T21073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.627599][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.665982][T21073] usb 3-1: config 0 descriptor?? [ 1146.695766][ T978] usb 6-1: config 0 descriptor?? [ 1146.920246][T22454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5027'. [ 1146.963993][ T978] usbhid 6-1:0.0: can't add hid device: -71 [ 1146.976357][T21073] usbhid 3-1:0.0: can't add hid device: -71 [ 1147.001781][T21073] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1147.024170][ T978] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1147.074672][ T978] usb 6-1: USB disconnect, device number 75 [ 1147.081572][T21073] usb 3-1: USB disconnect, device number 22 [ 1147.993932][T22470] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1148.244860][ T5952] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1148.395353][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 1148.409414][T22478] loop8: detected capacity change from 0 to 8 [ 1148.419813][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1148.437018][T22478] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1148.448698][T22478] loop8: partition table partially beyond EOD, truncated [ 1148.456900][ T5952] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1148.468033][T22478] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 1148.477108][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.497678][ T5952] usb 1-1: config 0 descriptor?? [ 1148.604530][T14920] udevd[14920]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1148.763277][ T5929] usb 5-1: USB disconnect, device number 47 [ 1149.286916][T22490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5038'. [ 1149.484976][T22494] loop2: detected capacity change from 0 to 7 [ 1149.525761][T22494] Dev loop2: unable to read RDB block 7 [ 1149.615674][T22494] loop2: unable to read partition table [ 1149.622373][T22494] loop2: partition table beyond EOD, truncated [ 1149.641980][T22494] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1150.088095][T22500] loop2: detected capacity change from 0 to 7 [ 1150.122354][T22500] Dev loop2: unable to read RDB block 7 [ 1150.128729][T20481] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1150.140299][T22500] loop2: unable to read partition table [ 1150.151192][T22500] loop2: partition table beyond EOD, truncated [ 1150.163243][T22500] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1150.253446][T22504] x_tables: duplicate underflow at hook 1 [ 1150.301017][T20481] usb 5-1: config 0 has no interfaces? [ 1150.358967][T22504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5042'. [ 1150.406906][T20481] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1150.447174][T22504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5042'. [ 1150.467311][T20481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.483645][T22507] input: syz0 as /devices/virtual/input/input57 [ 1150.517268][ T5952] usbhid 1-1:0.0: can't add hid device: -71 [ 1150.528556][T20481] usb 5-1: Product: syz [ 1150.554983][ T5952] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1150.566413][T20481] usb 5-1: Manufacturer: syz [ 1150.580961][T20481] usb 5-1: SerialNumber: syz [ 1150.615929][ T5952] usb 1-1: USB disconnect, device number 102 [ 1150.626106][T20481] usb 5-1: config 0 descriptor?? [ 1150.907678][ T5952] usb 5-1: USB disconnect, device number 48 [ 1150.960062][T22516] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5045'. [ 1151.485864][ T978] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1151.669423][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 1151.687947][T22526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5049'. [ 1151.716629][ T978] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1151.748233][ T978] usb 2-1: config 0 has no interface number 0 [ 1151.809233][ T978] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1151.851206][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.896064][ T978] usb 2-1: Product: syz [ 1151.936396][ T978] usb 2-1: Manufacturer: syz [ 1151.946783][T22529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5050'. [ 1151.958268][ T978] usb 2-1: SerialNumber: syz [ 1151.980666][ T978] usb 2-1: config 0 descriptor?? [ 1152.039460][ T978] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1152.071124][ T978] usb 2-1: selecting invalid altsetting 1 [ 1152.086583][ T978] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1152.143095][ T978] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1152.176951][ T978] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1152.204288][ T978] usb 2-1: media controller created [ 1152.276680][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1152.308632][T22540] netlink: 'syz.1.5046': attribute type 1 has an invalid length. [ 1152.308686][T22540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5046'. [ 1152.993355][T22547] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5056'. [ 1152.994134][T22547] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5056'. [ 1153.006807][T22549] netlink: 'syz.4.5057': attribute type 27 has an invalid length. [ 1153.222096][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5059'. [ 1153.225549][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5059'. [ 1153.326257][T22520] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1153.356212][ T978] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1153.356274][ T978] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1153.356781][ T978] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1153.496771][ T978] usb 2-1: USB disconnect, device number 42 [ 1155.093252][T22581] ------------[ cut here ]------------ [ 1155.100577][T22581] hook not found, pf 5 num 0 [ 1155.100615][T22581] WARNING: net/netfilter/core.c:514 at __nf_unregister_net_hook+0x2c5/0x6f0, CPU#0: syz.0.5068/22581 [ 1155.120336][T22581] Modules linked in: [ 1155.124700][T22581] CPU: 0 UID: 0 PID: 22581 Comm: syz.0.5068 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.139280][T22581] Tainted: [L]=SOFTLOCKUP [ 1155.143657][T22581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1155.154881][T22581] RIP: 0010:__nf_unregister_net_hook+0x2dc/0x6f0 [ 1155.162723][T22581] Code: 24 30 48 8b 5c 24 08 44 8b 6c 24 04 48 8d 3d db 52 11 06 48 8b 44 24 10 0f b6 04 28 84 c0 0f 85 f1 02 00 00 41 8b 17 44 89 ee <67> 48 0f b9 3a e9 db 01 00 00 e8 45 24 da 01 89 c3 31 ff 89 c6 e8 [ 1155.184042][T22581] RSP: 0018:ffffc900045df638 EFLAGS: 00010246 [ 1155.191492][T22581] RAX: 0000000000000000 RBX: ffff888079a93080 RCX: ffff88802a7ebd00 [ 1155.200239][T22581] RDX: 0000000000000000 RSI: 0000000000000005 RDI: ffffffff8f90c4e0 [ 1155.209270][T22581] RBP: dffffc0000000000 R08: ffffffff8f822277 R09: 1ffffffff1f0444e [ 1155.217949][T22581] R10: dffffc0000000000 R11: fffffbfff1f0444f R12: ffff88807aaba5c0 [ 1155.227223][T22581] R13: 0000000000000005 R14: ffff88807ed84488 R15: ffff88802770ce3c [ 1155.236389][T22581] FS: 0000000000000000(0000) GS:ffff888125e1f000(0063) knlGS:00000000f5436b40 [ 1155.246164][T22581] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1155.252809][T22581] CR2: 00000000567ad4c0 CR3: 0000000042fc0000 CR4: 00000000003526f0 [ 1155.261508][T22581] DR0: 00000000000000b3 DR1: 0000200000001000 DR2: 0000000100000001 [ 1155.270230][T22581] DR3: 0000000080000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1155.279053][T22581] Call Trace: [ 1155.282385][T22581] [ 1155.286060][T22581] __nf_tables_flowtable_event+0x5bf/0x8c0 [ 1155.291949][T22581] ? nft_pernet+0x23/0x240 [ 1155.297178][T22581] nf_tables_flowtable_event+0x103/0x160 [ 1155.302889][T22581] notifier_call_chain+0x19d/0x3a0 [ 1155.308823][T22581] unregister_netdevice_many_notify+0x1867/0x2340 [ 1155.315536][T22581] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1155.322375][T22581] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1155.328975][T22581] unregister_netdevice_queue+0x317/0x350 [ 1155.335922][T22581] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1155.342238][T22581] ? lockdep_hardirqs_on+0x7b/0x110 [ 1155.348228][T22581] ? queue_delayed_work_on+0x171/0x1d0 [ 1155.353754][T22581] __tun_detach+0x6d9/0x15d0 [ 1155.359201][T22581] ? __pfx_tun_chr_close+0x10/0x10 [ 1155.365532][T22581] tun_chr_close+0x10a/0x1c0 [ 1155.370164][T22581] __fput+0x44c/0xa70 [ 1155.374267][T22581] task_work_run+0x1d4/0x260 [ 1155.380237][T22581] ? __pfx_task_work_run+0x10/0x10 [ 1155.386118][T22581] ? __pfx_task_work_add+0x10/0x10 [ 1155.391285][T22581] get_signal+0x11ec/0x1340 [ 1155.396552][T22581] ? __pfx___fput_deferred+0x10/0x10 [ 1155.401909][T22581] arch_do_signal_or_restart+0x9a/0x7a0 [ 1155.408260][T22581] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1155.414505][T22581] exit_to_user_mode_loop+0x87/0x4e0 [ 1155.420488][T22581] ? rcu_is_watching+0x15/0xb0 [ 1155.426026][T22581] __do_fast_syscall_32+0x38e/0x560 [ 1155.431923][T22581] ? do_fast_syscall_32+0x34/0x80 [ 1155.438167][T22581] do_fast_syscall_32+0x34/0x80 [ 1155.443067][T22581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1155.450130][T22581] RIP: 0023:0xf7f44539 [ 1155.454222][T22581] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1155.474533][T22581] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1155.483603][T22581] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000400454ca [ 1155.492398][T22581] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1155.501069][T22581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1155.509701][T22581] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1155.518435][T22581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1155.527296][T22581] [ 1155.530984][T22581] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1155.538309][T22581] CPU: 0 UID: 0 PID: 22581 Comm: syz.0.5068 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.549363][T22581] Tainted: [L]=SOFTLOCKUP [ 1155.553719][T22581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1155.563979][T22581] Call Trace: [ 1155.567276][T22581] [ 1155.570238][T22581] vpanic+0x1e0/0x670 [ 1155.574276][T22581] panic+0xb9/0xc0 [ 1155.578039][T22581] ? __pfx_panic+0x10/0x10 [ 1155.582535][T22581] __warn+0x317/0x4b0 [ 1155.586560][T22581] ? __nf_unregister_net_hook+0x2c5/0x6f0 [ 1155.592608][T22581] ? __nf_unregister_net_hook+0x2c5/0x6f0 [ 1155.598368][T22581] __report_bug+0x288/0x500 [ 1155.602902][T22581] ? __nf_unregister_net_hook+0x2c5/0x6f0 [ 1155.608659][T22581] ? __pfx___report_bug+0x10/0x10 [ 1155.613716][T22581] ? rcu_is_watching+0x15/0xb0 [ 1155.618609][T22581] ? __mutex_trylock_common+0x153/0x260 [ 1155.624188][T22581] report_bug_entry+0x19a/0x290 [ 1155.629063][T22581] ? __nf_unregister_net_hook+0x2dc/0x6f0 [ 1155.634816][T22581] ? __nf_unregister_net_hook+0x2e1/0x6f0 [ 1155.640580][T22581] handle_bug+0xca/0x200 [ 1155.644873][T22581] exc_invalid_op+0x1a/0x50 [ 1155.649406][T22581] asm_exc_invalid_op+0x1a/0x20 [ 1155.654283][T22581] RIP: 0010:__nf_unregister_net_hook+0x2dc/0x6f0 [ 1155.660727][T22581] Code: 24 30 48 8b 5c 24 08 44 8b 6c 24 04 48 8d 3d db 52 11 06 48 8b 44 24 10 0f b6 04 28 84 c0 0f 85 f1 02 00 00 41 8b 17 44 89 ee <67> 48 0f b9 3a e9 db 01 00 00 e8 45 24 da 01 89 c3 31 ff 89 c6 e8 [ 1155.680358][T22581] RSP: 0018:ffffc900045df638 EFLAGS: 00010246 [ 1155.686449][T22581] RAX: 0000000000000000 RBX: ffff888079a93080 RCX: ffff88802a7ebd00 [ 1155.694448][T22581] RDX: 0000000000000000 RSI: 0000000000000005 RDI: ffffffff8f90c4e0 [ 1155.702473][T22581] RBP: dffffc0000000000 R08: ffffffff8f822277 R09: 1ffffffff1f0444e [ 1155.710477][T22581] R10: dffffc0000000000 R11: fffffbfff1f0444f R12: ffff88807aaba5c0 [ 1155.718467][T22581] R13: 0000000000000005 R14: ffff88807ed84488 R15: ffff88802770ce3c [ 1155.726473][T22581] ? __nf_unregister_net_hook+0x2a2/0x6f0 [ 1155.732236][T22581] __nf_tables_flowtable_event+0x5bf/0x8c0 [ 1155.738094][T22581] ? nft_pernet+0x23/0x240 [ 1155.742540][T22581] nf_tables_flowtable_event+0x103/0x160 [ 1155.748214][T22581] notifier_call_chain+0x19d/0x3a0 [ 1155.753406][T22581] unregister_netdevice_many_notify+0x1867/0x2340 [ 1155.759869][T22581] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1155.766677][T22581] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1155.772520][T22581] unregister_netdevice_queue+0x317/0x350 [ 1155.778532][T22581] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1155.785063][T22581] ? lockdep_hardirqs_on+0x7b/0x110 [ 1155.790287][T22581] ? queue_delayed_work_on+0x171/0x1d0 [ 1155.795779][T22581] __tun_detach+0x6d9/0x15d0 [ 1155.800411][T22581] ? __pfx_tun_chr_close+0x10/0x10 [ 1155.805550][T22581] tun_chr_close+0x10a/0x1c0 [ 1155.810167][T22581] __fput+0x44c/0xa70 [ 1155.814219][T22581] task_work_run+0x1d4/0x260 [ 1155.818841][T22581] ? __pfx_task_work_run+0x10/0x10 [ 1155.823982][T22581] ? __pfx_task_work_add+0x10/0x10 [ 1155.829129][T22581] get_signal+0x11ec/0x1340 [ 1155.833668][T22581] ? __pfx___fput_deferred+0x10/0x10 [ 1155.839082][T22581] arch_do_signal_or_restart+0x9a/0x7a0 [ 1155.844666][T22581] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1155.850865][T22581] exit_to_user_mode_loop+0x87/0x4e0 [ 1155.856282][T22581] ? rcu_is_watching+0x15/0xb0 [ 1155.861073][T22581] __do_fast_syscall_32+0x38e/0x560 [ 1155.866412][T22581] ? do_fast_syscall_32+0x34/0x80 [ 1155.871578][T22581] do_fast_syscall_32+0x34/0x80 [ 1155.876469][T22581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1155.882914][T22581] RIP: 0023:0xf7f44539 [ 1155.887005][T22581] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1155.906659][T22581] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1155.915364][T22581] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000400454ca [ 1155.923355][T22581] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1155.931523][T22581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1155.939689][T22581] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1155.947692][T22581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1155.955788][T22581] [ 1155.959466][T22581] Kernel Offset: disabled [ 1155.963826][T22581] Rebooting in 86400 seconds..