last executing test programs: 2m27.237534026s ago: executing program 1 (id=1162): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0xdd, 0x4, 0x3, 0x21, 0x0, 0x9, 0xe8, 0xa0, 0x7, 0x3, 0x3, 0x3, 0x86, 0xf}, 0xe) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x5, @empty, 0x9}}, 0xfff, 0xfff, 0x1, 0x3, 0x11, 0xb, 0xde}, &(0x7f0000000240)=0x9c) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080), 0x1200053, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 2m27.176645784s ago: executing program 1 (id=1163): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='westwood', 0x8) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/232, 0xe8, 0x1, &(0x7f00000003c0)=""/142, 0x8e}, &(0x7f0000000240)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)={0x788, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x47c, 0x11d, 0x0, 0x1, [{0x1f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x8, 0x9, 0x8, 0x20, 0x79, 0x3]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x48, 0x48, 0x16, 0x1b, 0x36, 0x24, 0x16, 0x60, 0x16, 0xc, 0x6c, 0x4, 0x16, 0x3, 0x12, 0x60, 0x1, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x9, 0x881e, 0x5, 0x1, 0x5, 0xb896, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x0, 0x77b, 0x9, 0x45, 0x1, 0x3]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x6}, {0x7, 0x3}, {0x4}, {0x0, 0x3}, {0x5, 0x8}, {0x2, 0x2}, {0x0, 0x1}, {0x1}, {0x7, 0x1}, {0x0, 0x3}, {0x3}, {}, {0x7}, {0x6, 0x2}, {0x4, 0x2}, {0x4, 0x5}, {0x6, 0x7}, {0x5, 0xa}, {0x3, 0x2}, {0x7, 0x6}, {0x6, 0x1}, {0x3, 0x7}, {0x4, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x6, 0x6}, {}, {0x7, 0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x7}, {0x3, 0x8}, {0x5, 0xa}, {0x4, 0xa}, {0x3, 0x1}, {0x3, 0x3}, {0x6, 0x1}, {0x3, 0x3}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0xa}, {0x7, 0x9}, {0x6, 0x3}, {0x2, 0x2}, {0x5, 0x2}, {0x6, 0x8}, {0x3, 0x1}, {0x4, 0x3}, {0x7, 0x1}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x4, 0x8}, {0x2, 0x7}, {0x3, 0x7}, {0x2, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x5, 0x4}, {0x7, 0x7}, {0x4, 0xa}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x4, 0x7}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x7, 0x0, 0x6, 0x2, 0xd, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x5, 0x6, 0x46ef, 0xc4e, 0xaa, 0x8]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x4}, {0x6, 0x6}, {0x3, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x8}, {0x1, 0x9}, {0x3, 0x1}, {0x4, 0x9}, {0x1}, {0x4, 0x7}, {0x1, 0x1}, {0x2, 0xa}, {0x5}, {0x6, 0x3}, {0x6, 0x2}, {0x3, 0x6}, {0x5, 0x9}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x3, 0x1, 0xc, 0x2ba, 0x2, 0xd425]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x0, 0x6, 0x1, 0x8, 0x1, 0x8, 0x42]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x4, 0x12, 0x18, 0x1b, 0x30, 0x1, 0x16, 0x5, 0x2, 0x2, 0x1, 0x1, 0xb, 0x24, 0x1, 0x36, 0x2, 0x1b, 0xc, 0x36, 0x1, 0x12, 0xc, 0x40, 0x3, 0x6c]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x6}, {0x2, 0x1}, {0x7, 0xa}, {0x2, 0x2}, {0x3, 0xe}, {0x1, 0x6}, {0x7}, {0x0, 0x3}, {0x0, 0x9}, {0x6, 0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0xa}, {0x5, 0x2}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x3, 0x3}, {0x0, 0x5}, {0x2, 0x9}, {0x3, 0x2}, {0x2}, {0x1, 0x3}, {0x3, 0xa}, {0x7, 0x6}, {0x5, 0x6}, {0x6, 0x6}, {0x4}, {0x5, 0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x3}]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffc, 0x1, 0x33, 0x7, 0xffff, 0x3, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6b, 0x5, 0x6, 0x4, 0x36, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x227e8dbd5efb9676}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x210, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x3, 0x80, 0x4b04, 0x8, 0xf, 0xb]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x1b, 0x1b, 0xc, 0x1, 0x36, 0x5, 0x30, 0x36, 0xc, 0x1b, 0x60, 0x30, 0x12, 0xc, 0x6, 0x6c, 0x60, 0x30, 0x2, 0x6, 0x16, 0x30, 0x24, 0x2, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6e, 0xc, 0x36, 0x30, 0x6b, 0x6, 0x1, 0x9, 0x4, 0x3, 0x1b, 0x1, 0xc, 0x3, 0xb, 0x30, 0x3, 0x16, 0x2d, 0x6, 0xb, 0x5, 0x6e, 0x9, 0xc, 0x18, 0x6, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x9, 0xe, 0x1c15, 0x6a, 0x80, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x4, 0x7, 0x5, 0xd, 0xe8, 0x400]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x2}, {0x5, 0x2}, {0x3, 0x7}, {0x3, 0x2}, {0x0, 0x4}, {0x3, 0x4}, {0x4, 0x6}, {}, {0x1, 0x7}, {0x2, 0xa}, {0x2, 0x6}, {0x3, 0x6}, {0x5, 0x1}, {0x4, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x8}, {0x5, 0xa}, {0x4, 0x7}, {0x1, 0x1}, {0x6, 0x8}, {0x3}, {0x3, 0x3}, {0x2, 0x3}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x4}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x7}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x4}, {0x3, 0x9}, {0x5, 0x5}, {0x2, 0x5}, {0x6, 0xa}, {0x2, 0x4}, {0x2, 0xa}, {0x5, 0x4}, {0x0, 0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x5, 0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x6, 0x2, 0x400, 0xe, 0x5, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0xe18, 0x5, 0x9, 0x8, 0x8ca, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x2}, {0x5, 0x2}, {0x3, 0xa}, {0x5, 0x2}, {0x3, 0x2}, {0x7, 0x9}, {0x7, 0x6}, {0x5, 0x2}, {0x4, 0x2}, {0x1, 0x8}, {}, {0x7, 0x9}, {0x1, 0x3}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0x6}, {0x6}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0x3}, {0x7}, {0x5, 0xa}, {0x0, 0x2}, {0x2, 0x8}, {0x6, 0xa}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x8}, {0x4, 0x4}, {0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x4, 0x6}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x4}, {0x6, 0x9}, {0x7, 0x8}, {0x4, 0x7}, {0x5, 0x9}, {0x0, 0x6}, {}, {0x3, 0x5}, {0x2, 0x5}, {0x4, 0x4}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0x4}, {0x4, 0x9}, {0x5, 0x5}, {0x4, 0x2}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x9}, {0x4, 0x8}, {0x2, 0x1}, {0x6, 0x4}, {0x1, 0x8}, {0x4, 0x2}, {0x1, 0x2}, {0x3, 0x5}, {0x7, 0x3}, {0x1, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x4}, {0x1}, {0x6, 0x5}, {0x1, 0x7}, {0x2, 0x8}, {0x3, 0x9}, {0x4}, {0x4, 0x3}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0xa}, {0x2, 0x9}, {0x7, 0xa}, {0x7, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x3ff, 0x44b5, 0x249, 0x1, 0xfffb, 0x7]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x9, 0x9, 0xf25, 0xa, 0x9, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x60, 0xc, 0x6c, 0x2, 0x3, 0x16, 0x30, 0x18, 0x6c, 0x3, 0x5, 0x6, 0x3, 0x5b, 0x6b, 0x30, 0x12, 0x6c, 0x1, 0x12, 0x18, 0x48, 0x12, 0x1c, 0x18, 0xb, 0x9, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x353, 0x2, 0x9, 0xbae0, 0x10, 0x15, 0x3, 0xfdcf]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xa0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x15}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0x88, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x92}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x14}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x1d0, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd9}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x2, 0x8, 0x6, 0x84, 0x7, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x5, 0x8007, 0x9, 0x113, 0x9, 0x5, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfbee, 0x3ff, 0x2, 0x773, 0x9, 0xe, 0x5, 0xe]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x2, 0x1, 0x1b, 0x5, 0x24, 0x4, 0x3, 0x16, 0x12, 0x12, 0xc, 0xf74d7882e2ee00e9, 0x2, 0x24, 0x2, 0x36, 0xb, 0x16, 0x6c, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x18, 0x24df, 0x401, 0x5, 0x6, 0x2a, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x5, 0x0, 0x7ff, 0x7fff, 0xfff, 0x4c, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x2, 0x1, 0x8, 0x6, 0x4, 0x6, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0xcc7, 0x7, 0xffff, 0x8, 0x9, 0x401]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0xb, 0x3, 0x18, 0x4, 0x1b, 0x9, 0x60, 0x74, 0x24, 0x1, 0x1, 0xb, 0x24]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x4, 0x4}, {0x7, 0xa}, {0x6, 0x2}, {0x7, 0xa}, {0x1, 0x6}, {}, {0x6, 0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x2, 0x1}, {0x7, 0x7}, {0x1, 0x9}, {0x6, 0x3}, {0x5, 0x8}, {0x1, 0x9}, {0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x2, 0x4}, {0x5, 0xa}, {0x7, 0x2}, {0x4, 0x5}, {0x2, 0x8}, {0x4, 0x8}, {0x7, 0x4}, {0x3, 0x3}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0x4}, {0x3, 0x4}, {0x5, 0x7}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x5}, {0x4, 0x7}, {0x6, 0x7}, {0x1, 0xa}, {0x5, 0x1}, {0x7, 0x3}, {0x3, 0x7}, {0x3, 0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0x2}, {0x3, 0x9}, {0x2, 0x3}, {0x7, 0x8}, {0x3, 0x6}, {0x1, 0x3}, {0x1}, {0x0, 0x5}, {}, {0x6, 0x5}, {0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x6, 0x9}, {0x2, 0x7}, {0x1, 0x8}, {0x2, 0xa}, {0x3, 0x7}, {0x1, 0x8}, {0x1, 0x9}, {0x5}, {0x2, 0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}]}]}]}, 0x788}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000100)={0x5}) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m25.908016943s ago: executing program 1 (id=1165): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0x80, 0x12, "09e12e5f0b6bdcf72f2ec7008a15fa88b025"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x138}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xfd7f) 2m25.751953863s ago: executing program 1 (id=1167): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r0, &(0x7f0000011480)=[{&(0x7f00000000c0)=""/186, 0xba}], 0x1, 0x2, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006491e0089", 0xd, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r2, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x5, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71d], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x1000005, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r5, &(0x7f0000000240)='./file0/file0\x00', 0x272) 2m25.546610811s ago: executing program 1 (id=1170): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x1, 0x100, 0x0, 0x4, 0x107, 0xff, 0x6, 0x5, 0x1, 0x6, 0x7, 0xfffffffe, 0x1, 0x54}) 2m25.208805593s ago: executing program 1 (id=1171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002000000000000ff0300000000000000000000000000000000000000000000000000000000000000b266ce4e1373bb62e6f1092b41a9a290d1442413f7a16d50aac038d71950336c7a64c677ea7e9cd18a3182e886fe939ed16afd42bd951f6767dc131d086d76563aaafc1fd0b35f9730ffaf"], 0x48) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000000c0)={0xf}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4001af83, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="010129bd7000fddbdf25310000001b8ad3e62297940f20a452ef65176c4478f269753605b4c8b4b65f4a6dc06891ce445a4fdf0a023f062ef1ab3f9cc5b17763b501bf84f652a5b92911018548a2fc6479e36447fd57163b775df9e9c1c8c3ac29a1878e1979"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x2004c800) 2m24.964018456s ago: executing program 32 (id=1171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002000000000000ff0300000000000000000000000000000000000000000000000000000000000000b266ce4e1373bb62e6f1092b41a9a290d1442413f7a16d50aac038d71950336c7a64c677ea7e9cd18a3182e886fe939ed16afd42bd951f6767dc131d086d76563aaafc1fd0b35f9730ffaf"], 0x48) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000000c0)={0xf}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4001af83, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="010129bd7000fddbdf25310000001b8ad3e62297940f20a452ef65176c4478f269753605b4c8b4b65f4a6dc06891ce445a4fdf0a023f062ef1ab3f9cc5b17763b501bf84f652a5b92911018548a2fc6479e36447fd57163b775df9e9c1c8c3ac29a1878e1979"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x2004c800) 1m14.316945812s ago: executing program 0 (id=1567): r0 = timerfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x20101c, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0xedc0, &(0x7f0000000400)) 1m14.277191361s ago: executing program 0 (id=1569): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x40000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x100000000000020a, 0x0, 0x0, 0x0) 1m14.137069918s ago: executing program 0 (id=1571): r0 = socket$caif_stream(0x25, 0x1, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r3, 0x3, 0xfffffffa}, 0xc) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 1m11.516867773s ago: executing program 0 (id=1582): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x11) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}}}, 0x118) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000002ac0), 0x0, 0x0) read$hidraw(r2, &(0x7f0000000000)=""/4, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x40, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x21a7091, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2151090, 0x0) 1m11.494552132s ago: executing program 0 (id=1583): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40000f000000012720dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000140)={0x40, 0xb, 0xee, {0xee, 0x2, "49999cc2ffe1503a4a62206e6dabbd628dfbd71ddc5461709a57edd63e2a9670bd0ffb9027ffa6cdfe784f5a529fc987228336449dcb7f9b6989a46dff8d1add465777db1e1dab5f6a77873ec5c6919eadf34310996211e25ff8c7150e0407b1f5649deb01e7aadd3549f175b08b54800628e3fd020c9b01e580235bd1f6f83342a84ea19d28cae6a3864e92293b3ae60ee58144b9d333be9fba898ac8cf7b982cb2f503c99108f3cd258e8a81daa2b6e94ab95c4a373a48e1f2f84c64c236d1ddb5f1daca40a9c2c5c8072784b370a963159ab707d2bc33e1797631a95a5fad35c273ad8aaef1e123206a1d"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0xa, "ab30b9c2"}, @global=@item_012={0x0, 0x1, 0x5}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x951}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0x18, 0xb4, "afdc4116bd814188e01f998e5f74ce70d60ddc0d8b6e88d9636feae5a186e1ed057429feee3bafd1b50c04151b2da4ff7bd5a16e180ad87e9896e5fe4c039670de6b6f1e673c17636058e0c2a339dadcd65ab8003f513255b509ea2f63d25dcda6c64d8b2ba4fba1ca3d465d2cbd05a8a2c11de887160c6745276a2f7a769fe23b178770096a13251ce5e82f304719ed3fcaf461f5175a39c37eb63d6946108551dfe835cdc9f1a2a5e279925895069e1be537bb"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000003c0)={0x20, 0x1, 0xa0, "5bc8e95322ae219317775f35fe12a57149d4b74df8f776037d8bdf14c8475e7ac88f7f45f07a464546501e17cb2aad48a2e371d4bea63effd40222ddfaa51168b54e13c46ce47179ed884fb17fe3500bf7acb8d3d0b3d4336b67cf77d1eaee6ab01fe437f31277fb6d730859ae8770d9ae5458acfbfea5a0d81b0ff43ac638c1dd85b695e12691bd1b2958f7e079c35df4a566aed31d67dc52cb3980aad5d207"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x3}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendfile(r1, r1, &(0x7f0000000500)=0x1ff, 0x7ff) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={&(0x7f0000000240)=[{0x0, 0x1000, 0x4e, &(0x7f0000000100)="b19b603c22a0c5e7467f0fd78a542a25b1849b8c9332343d1662531ac5f3395b1c87c7c20516543d747e501ca41be4b5cd0d73acc610b27e67634c307a85788dfe6378c0975f6c0cd4801b2ba5d3"}], 0x1}) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) 1m11.441784757s ago: executing program 0 (id=1584): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x8, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x4, 0x1, 0xfffffffa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x10000000, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0x2, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0xd, 0x3, 0x3, 0x9, 0x1, 0x8, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x4, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m11.252419633s ago: executing program 33 (id=1584): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x8, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x4, 0x1, 0xfffffffa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x10000000, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0x2, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0xd, 0x3, 0x3, 0x9, 0x1, 0x8, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x4, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m10.047444336s ago: executing program 3 (id=1593): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}], 0x1, 0x4803) (async) recvmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000180)=""/192, 0xc0}], 0x1}, 0x60) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x40000000000000da, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x181) lseek(r5, 0x0, 0x1) (async) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="b8dee8a0c583ad8b00"], 0x9) (async) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4605, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962213af753f070c0000002a9000470900be0083000000000b09007a1583a1"], 0x0}, 0x0) 1m9.936972391s ago: executing program 3 (id=1594): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0xe, {[@global=@item_012={0x1, 0x1, 0xe31d2cc890952081, '\x00'}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0x8, "fbd881fa"}, @global=@item_012={0x1, 0x1, 0x7, "84"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x1, 0x100, 0x0, 0x4, 0x107, 0xff, 0x6, 0x5, 0x1, 0x6, 0x7, 0xfffffffe, 0x1, 0x54}) 1m8.06875584s ago: executing program 3 (id=1599): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0xf800, 0x8000, 0x3, 0x4, {{0xe, 0x4, 0x3, 0x2, 0x38, 0x66, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0x24, 0x11, 0x1, 0xe, [{@loopback}, {@private=0xa010102, 0x7}, {@rand_addr=0x64010102, 0x8}, {@broadcast, 0xfffffffd}]}]}}}}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x1, 0x7, 0xfffc, 0x0, 0xa, 0x0, 0xc2ca4bd923256b4d, 0x32}, {@in=@loopback, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0x6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x21}, {0xffffffff}, 0x80, 0x34ff, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x2000c002}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0xfd, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) 1m7.975477798s ago: executing program 3 (id=1601): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000480)=0xb) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 1m7.884794899s ago: executing program 3 (id=1602): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 1m7.172801123s ago: executing program 3 (id=1604): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb01e511000b0003000d00eec0e940fd322ed3d4f526341462e89a340a781fceb4d740d4e1dd651463317480d5fc86", 0x4a}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)=""/161, 0xa1}], 0x1}, 0x3}], 0x1, 0x10020, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 1m6.829320198s ago: executing program 34 (id=1604): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb01e511000b0003000d00eec0e940fd322ed3d4f526341462e89a340a781fceb4d740d4e1dd651463317480d5fc86", 0x4a}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)=""/161, 0xa1}], 0x1}, 0x3}], 0x1, 0x10020, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 1m6.358793179s ago: executing program 5 (id=1607): syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x20, 0xc, 0xaa, 0x88}, {0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x5, 0x3}, {0x9, 0x5, 0x6, 0x3, 0x20, 0x81, 0x48, 0x9}}}}}}]}}, 0x0) 1m4.708537674s ago: executing program 5 (id=1614): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000540), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) (async) sendto$packet(r2, &(0x7f0000000040)='-', 0x1, 0x4000000, &(0x7f0000000180)={0x11, 0x6558, r3, 0x1, 0x7, 0x6, @broadcast}, 0x14) (async) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a4000140a0002100036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) 1m4.449893428s ago: executing program 5 (id=1617): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x0, 0x2, 0xff, 0x1, 0xfffd}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000100)) 1m4.208711114s ago: executing program 5 (id=1619): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x11) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}}}, 0x118) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000002ac0), 0x0, 0x0) read$hidraw(r2, &(0x7f0000000000)=""/4, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x40, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x21a7091, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2151090, 0x0) 1m4.033671096s ago: executing program 5 (id=1621): syz_open_dev$video(&(0x7f0000000040), 0x8000000a7, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007bc, &(0x7f0000000700)={0x2, 0x4e23, @local}, 0x10) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "e65c98fdeaa0cc8ee96fe10820e04c7cad303c514436e1728c6cfc"}}, &(0x7f0000000140)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x1, "4cf4"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7927, 0x2, 0x1, {0x22, 0x75}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x20, 0x17, 0xd9, "c9522308717f2ef26170cc4ac2d5c5b867543d67543f0eedaed8f1177cc489adca8580d8a8327d264d90336aa5647eed600e0df6def93bff40365f0d35518f8f7ad0f91985ce528288b676afc4388b8b6902828e1ddb28c8b43490a1ef149ac14b6764d37b297c33bb61e300cf474ed46bcad9d541566522e71e9ccb3cfe4544db1e64a6701eacb459c06fec29ff054f1cb9dc3e14718238fcddd3d6cdbec7b4160106fb8ff3d173c2cf50875b64d38ab60ecf036afb2d0f67546dc9e78c976beba98b2533afbab8174a245b4bedfc0983d246ac61a6f613ef"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000840)={0x20, 0x1, 0x100, "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"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x7}}) 1m3.571101364s ago: executing program 5 (id=1624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x8c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x6d, 0x33, @beacon={{{}, {0xde1}, @broadcast, @device_a, @initial, {0x0, 0x200}}, 0x0, @random=0x1, 0x1, @void, @val, @val={0x3, 0x1, 0xa}, @val={0x4, 0x6, {0xf8, 0x97, 0x2, 0x2}}, @val={0x6, 0x2, 0x7}, @val={0x5, 0x3, {0x19, 0x84, 0x40}}, @val={0x25, 0x3, {0xfd, 0x68, 0x7d}}, @void, @val={0x3c, 0x4, {0x0, 0x0, 0x99, 0xc}}, @val={0x2d, 0x1a, {0x400, 0x0, 0x3, 0x0, {0xffffffffffffffff, 0xf34, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x8}}, @val={0x72, 0x6}, @void, @void}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) 1m3.265041401s ago: executing program 35 (id=1624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x8c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x6d, 0x33, @beacon={{{}, {0xde1}, @broadcast, @device_a, @initial, {0x0, 0x200}}, 0x0, @random=0x1, 0x1, @void, @val, @val={0x3, 0x1, 0xa}, @val={0x4, 0x6, {0xf8, 0x97, 0x2, 0x2}}, @val={0x6, 0x2, 0x7}, @val={0x5, 0x3, {0x19, 0x84, 0x40}}, @val={0x25, 0x3, {0xfd, 0x68, 0x7d}}, @void, @val={0x3c, 0x4, {0x0, 0x0, 0x99, 0xc}}, @val={0x2d, 0x1a, {0x400, 0x0, 0x3, 0x0, {0xffffffffffffffff, 0xf34, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x8}}, @val={0x72, 0x6}, @void, @void}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) 6.943678752s ago: executing program 7 (id=1921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000140)=0x14) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 6.345017718s ago: executing program 4 (id=1925): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x1f}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x4, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000800) 6.270474085s ago: executing program 4 (id=1927): r0 = syz_open_dev$video(0x0, 0x8000000a7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f00000000c0)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "e65c98fdeaa0cc8ee96fe10820e04c7cad303c514436e1728c6cfc"}}, &(0x7f0000000140)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x1, "4cf4"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7927, 0x2, 0x1, {0x22, 0x75}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x20, 0x17, 0xd9, "c9522308717f2ef26170cc4ac2d5c5b867543d67543f0eedaed8f1177cc489adca8580d8a8327d264d90336aa5647eed600e0df6def93bff40365f0d35518f8f7ad0f91985ce528288b676afc4388b8b6902828e1ddb28c8b43490a1ef149ac14b6764d37b297c33bb61e300cf474ed46bcad9d541566522e71e9ccb3cfe4544db1e64a6701eacb459c06fec29ff054f1cb9dc3e14718238fcddd3d6cdbec7b4160106fb8ff3d173c2cf50875b64d38ab60ecf036afb2d0f67546dc9e78c976beba98b2533afbab8174a245b4bedfc0983d246ac61a6f613ef"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000840)={0x20, 0x1, 0x100, "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"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x7}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 6.224663924s ago: executing program 7 (id=1928): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x517102, 0x20) timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x0, 0xfffffffe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0xc8080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x517102, 0x20) (async) timer_create(0x3, 0x0, &(0x7f00000001c0)) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) (async) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x0, 0xfffffffe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0xc8080) (async) 5.876848971s ago: executing program 7 (id=1931): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 5.799418561s ago: executing program 7 (id=1933): unshare(0x8000000) r0 = mq_open(&(0x7f00000000c0)='${$\x00', 0x40, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x80, 0x5, 0x1}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r3, 0x0, r1, r1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/370], 0x168}}], 0x1, 0x810) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0xab) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 5.021175787s ago: executing program 6 (id=1939): syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, '\x00\x00'}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x3, 0x7, "fb480aa47b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf9, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81, 0x0, 0xfffd}}}}}}}]}}, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) 3.689592908s ago: executing program 6 (id=1944): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df000000000000010902"], 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, "5500000000000000000100", "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 3.674273635s ago: executing program 2 (id=1945): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x0, 0x23, 0x3d, {0x3d, 0xe, "e98af52744580cb5f80b041c0f91fd8b5eb6dc718ad23842b054819d9e71f93d30948960785bb29f556abc1feefa666ee78b4676d52428afd88d27"}}, &(0x7f0000000340)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "bc0b8537139b5f799f753f870adb1acfbfe89df6010936dbbddc689ec2481e834cd72546f8b7df67f5f2ff56e122a129d108af6312c2aed107b55103ada3d108acaee99dd297584295cec65a45ba316313d0b6485d4d78b8aade4ef5e4202896a0b522ba597b6140eba3a33c07ce47bf13c667e5e80e9c73dde7db69c6b384befc53ccb46457a7300efd2dd5b40ba06786ea2c3a9e41c045adf006e24f22981660e17682e612237b7d31d12d4e4745f08150c42f1c7a1fc0af0cb825278f89dcae02c0f9033351c4719a89cb6b2b401486"}}}, &(0x7f0000000540)={0x34, &(0x7f0000000200)={0x0, 0x16, 0x55, "86126ab59396ded5b47ed083f4f0719531c758dc76fd09d73a2b7100450de3951024cccb03e76d1d3ddf135dfb4f9164e9656ff85e1089eff480537f2f2701edc65dd0089d073f5d444f8386dd83d80b1b3ca67514"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x629}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "76044b93a3c1edf3410e7b9d43b274008af7fc238ec331f7e869cd409028784a1db8d8886b7ae979ed709daf7809a8"}}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000c1431002dbd7000fbdbdf25080001000000000008003d"], 0x20}, 0x1, 0x0, 0x0, 0x4004400}, 0x20004044) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x15, &(0x7f00000000c0)=[@cr4={0x1, 0x100070}], 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x8000, 0x0, 0x0}], 0x1}) 3.1194447s ago: executing program 4 (id=1946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) setuid(0xee01) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) 2.983599571s ago: executing program 4 (id=1947): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x124}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb01e511000b0003000d000000", 0x28}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.888562592s ago: executing program 4 (id=1948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000c40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0x9, 0x5, {0x7, 0x25, 0x1, 0x81, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x2, 0x1, {0x7, 0x25, 0x1, 0x2, 0x3, 0x3}}}}}}}]}}, &(0x7f0000000f80)={0x0, 0x0, 0x19, &(0x7f0000000d80)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x49, 0x2, 0x400, 0xf000, 0x5, [0xff60, 0x0]}]}}) 2.656576768s ago: executing program 7 (id=1949): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x112, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x100, 0x1, 0x1, 0x7, 0xf0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x1, {{0xb, 0x24, 0x6, 0x0, 0x0, "82fd686fa3f0"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xa687, 0x8, 0x5}, [@mdlm_detail={0xaf, 0x24, 0x13, 0x9, "8cf620bf9a8ea156f2b098c54a7178e037b2ae20d9393f7dde6ccbf8ba35137dad39d042bf624c22a0b09461416775589144d855f17e7b4760778757dbb305686bb2b31b8465da7e39e20b607e4138a9792157fbc07b508002cec6ef42ad2c51593a20a534684e36f6fd7dd0c89513919bc18558e4068d0ebe2da5b1b3ae6510058919ecea0fe16687957844010c3ff4e3de8d92b6cc410ce5ec6a673c02d2ce5125cfa3997e19dd2fd53c"}, @dmm={0x7, 0x24, 0x14, 0xff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0xb, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x1, 0xf3}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0xc2, 0x9, 0x43, 0x8, 0x8}, 0xe8, &(0x7f0000000200)={0x5, 0xf, 0xe8, 0x6, [@generic={0x5, 0x10, 0x4, "b09c"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a4b4c53b52311aca04b7c493506778eb"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x1, 0x8001}, @generic={0xb9, 0x10, 0x3, "95264809ed1a817af21587da2beeed3c6338ef0444dbf5f4575745dd64ef18475a36d7a7661e53fc5285cb68528bd0412099b992dc5e01c1c45ec36299e44388afbe43fec3cd11a2bae30b28f9615d7efe54bce08646efc762e359c55d09eabd8ad46c0251696b7f5fe4138c3d96d46522ee34310490fb1106a84c6748a06b5ef20f33ec90c1eb038fc3e4a4085806150ad75152fc67da0b5b409f6f8d0571d14efca2e9400d5fcfd3c6a1fa5d502e998dc5d650f450"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x7, 0x4}]}, 0x2, [{0x6b, &(0x7f0000000300)=@string={0x6b, 0x3, "ba32a1cfb934fab42b1e284c09e34d8bd5853b7c5ad25c9dcd8adc05e64ec6565e08f813db2d6416d80c190eb0b712803f7c6c66e7ffad3fdfcf0d69bedb275a70ba82cd52342813eec119a9cc59085cf32417c1882fc49a16a72a868fc9dcbb783f1cbfb098d4a776"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x3c01}}]}) r1 = syz_usb_connect$cdc_ecm(0x2, 0x61, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x3, 0x10, 0x77, [{{0x9, 0x4, 0x0, 0xe, 0x0, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, '['}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x9}, [@acm={0x4, 0x24, 0x2, 0xc}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x1, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf, 0x40, 0xa8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x76, 0xb, 0x6}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x4f0, 0x9, 0x10, 0x7, 0xff}, 0x27, &(0x7f0000000480)={0x5, 0xf, 0x27, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0xf, 0x3, 0xb, 0xf00, 0x9, [0xffc00f, 0xff0030, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x81, 0x6}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44e}}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x11, 0xc4, {0xc4, 0xf, "e2eb183d22f2c88e8d027226fc44028cd8ce03b063768fdf1f485996a02ee9e92393e7e336c803dc345ba9e40f761451690fa9af9962576c1d0e66b2fdfe82ffeb8856c3fd92f95f8aea54d95039325f1d589c58f3ab900af25e70485e3fa20322eaf01c0874131310e3661f643c546f7b903c244426715817197ad4520c9d4e9fcf3fffdb94adf8b42de0040567515310f6b55fb09f7f8ad885585eb242ce0dbc969bf8f2ed104c3742a97840bfbe2458580a9dcd31919297d40f0341f5b8159852"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, &(0x7f00000006c0)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x7, 0x0, 0x2, [0xffc0c0, 0xffc0c0, 0xff00c0, 0xc000, 0xff00f0]}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x5, 0xaf, "72195b0c", "f7f714b1"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x2, 0x6, 0x8, 0xc, 0x2, 0x3}}}, &(0x7f0000000c80)={0x84, &(0x7f00000007c0)={0x40, 0x10, 0xe4, "2fef810be5b9037ad81dcacfa9eaa2856179e8dec98c21d6b012125e7aa8e5013875b5c959877540b0712e4b326c43c368d36c7257bcaa865c0ae5db1150d2d58a0a9d027f2565c92500415eb2887b20306640cdda39367f5b8451860db3ddd5c51f6fb5f46504d0380af99d9457450184ba0df9eb10fda600274025298cb8a4a4209729a33dd40b1cbaeb613f33bea90877a804a87f7a761cbd9c99d3cd540696d33f82a23d788062d7071a042e890c114e29d75726bd356e712336b1b4d9a4fdcce3720211daebaf9812cc46b91ad8c6ee78563dd871fe4522e48e8cc9904cc5bf69ee"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0xc0, 0x1}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0xa2}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "bf94"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "eb8c"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x40}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.438091474s ago: executing program 6 (id=1950): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 2.326017696s ago: executing program 6 (id=1951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000780)={0x0, &(0x7f0000000040)=[@code={0x1, 0x6f, {"66470f64dfc4a3255f1d040000000266baf80cb8ecdcf388ef66bafc0cb86b420000ef0fc76cf3b30f01f8c4619e5a72f8b9800000c00f3235010000000f30420f01c448b85a000000000000000f23c00f21f835020007000f23f843cd05"}}], 0x6f}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x5, 0x0, 0x7ff, 0x10000, 0xbdb], 0x1, 0x3c4210}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x4, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x3501, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4000000000, 0x6, 0xda, 0x1, 0x1, 0xb, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c4646}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.089056032s ago: executing program 6 (id=1952): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x4000, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 1.930117045s ago: executing program 6 (id=1953): shmctl$SHM_UNLOCK(0x0, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x0) (async) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1002) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc088, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xc5, 0x2, 0x3, 0x1, 0x0, 0x7f, {0x9, 0x21, 0xef9, 0x9, 0x1, {0x22, 0x671}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0x4, 0x7, 0x8, 0xb}, 0x17, &(0x7f0000000080)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x0, 0x45}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x3, 0x40, 0x3, 0xe}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41b}}, {0xb3, &(0x7f0000000180)=@string={0xb3, 0x3, "ceca88de0f86cfab79efa4744793de51129e9ab0e8a8e51c7f5c79ec4f846e7f1c1c27cfa0b0304665bc2a47668998659c63269a9ce9dab76a3c1020ed175d3992573beb17ab169de29272a77baf332e9df8dc2134655eb0a633fd13db5c7e4821209d6e14d201e6d8bc04a02eb2a94639eaa062d6603eeb364f70b174696778382d6ef2ced17cc63bf547a84c97d1c5071dac543f7b43531910144e29ba9c633a776f26777c6bbafbfcd6fe154daaa0ac"}}, {0x1c, &(0x7f0000000100)=@string={0x1c, 0x3, "4fa0f299e05b5c3152d45b2e392d3526e7e7af1553c8ead63459"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3801}}, {0xdc, &(0x7f0000000280)=@string={0xdc, 0x3, "2fd0a134b62d11c4b62daec995b8bd5d4d77d7c3a27a41631e19306a7a16add0d30846142995a9943c5491c9f6f49a1504e065661736dd1748214d84cf67db4a71f640c2e2c336e1bb4b51d1c4455610a95abc581d975959ba44257c4b7a9cad1e75851388533d547c4b26dcc766fe4d1b0e04edc54c583106fd15de4429db41e474ff2429eea0748d8e28e93068115d478a927ea17a46fc69508d493a6111267e87bed6e65a7f5dd83ee8dcb6c2d2d1a14143212ea9661d48d2769bd84847dc2193062193d8a4c57746d3a812d23acc73db56703a09455519de"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x449}}, {0x5c, &(0x7f0000000640)=ANY=[@ANYBLOB="5c03605b39e449d5ca7746d5dcc103c646cc70873ca722eda1f5dfa7ee78f9aa439e4b3b1b9e45519b91cb9380f0d774c7b4d19163900562007d661499f1012e377f36c009f7f7fede6892035fcc470722dbde4aa17a12f500469e0bd7a0f9dcaf5cf1d451"]}, {0xe1, &(0x7f0000000440)=@string={0xe1, 0x3, "b295d862dff98972ba7e6fff9c6b060129e391164574eda4823f5c20b3803c6448473fcfa700ae9d0cae72d6418d041ca2a5504f93e841b119118f6c025ca01dbb8fd537408cccc15734cd4f8878535036c889515c367344698ce2feadccf8119abea1159d1980d3aff78c598d072024724a8019f9c119a047f3d3f2bfb99f7cb486e55235f4e8137d6abbee58d1c734bf8bb5c6fadda4844f46cf4ea8d05a9e925aa6b46aebdfad8b6d81a4e40a749bed0401bd0f4588c101c7b787512b6a3f7efadf7a0b789eb4dceb274f3a10cb6f4bbbf78f5a1989a5b4a2dfe1a9aa74"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41d}}]}) 1.468683832s ago: executing program 4 (id=1954): r0 = syz_open_dev$video(0x0, 0x8000000a7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f00000000c0)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "e65c98fdeaa0cc8ee96fe10820e04c7cad303c514436e1728c6cfc"}}, &(0x7f0000000140)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x1, "4cf4"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7927, 0x2, 0x1, {0x22, 0x75}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x20, 0x17, 0xd9, "c9522308717f2ef26170cc4ac2d5c5b867543d67543f0eedaed8f1177cc489adca8580d8a8327d264d90336aa5647eed600e0df6def93bff40365f0d35518f8f7ad0f91985ce528288b676afc4388b8b6902828e1ddb28c8b43490a1ef149ac14b6764d37b297c33bb61e300cf474ed46bcad9d541566522e71e9ccb3cfe4544db1e64a6701eacb459c06fec29ff054f1cb9dc3e14718238fcddd3d6cdbec7b4160106fb8ff3d173c2cf50875b64d38ab60ecf036afb2d0f67546dc9e78c976beba98b2533afbab8174a245b4bedfc0983d246ac61a6f613ef"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000840)={0x20, 0x1, 0x100, "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"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x7}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 561.718979ms ago: executing program 2 (id=1955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) setuid(0xee01) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) 427.101685ms ago: executing program 2 (id=1956): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x124}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb01e511000b0003000d000000", 0x28}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 328.755012ms ago: executing program 2 (id=1957): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7, 0x4}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d8000000100081", 0x7}], 0x1}, 0x20000880) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="e41d00001200010a2dbd70000000000080"], 0x1de4}}, 0x40884) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0xffca}}, 0x1014) 328.203669ms ago: executing program 7 (id=1958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100400, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x400}) syz_usb_connect(0x5, 0x547, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x7a, 0x87, 0xb6, 0x40, 0x2019, 0x4902, 0x8cc0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x535, 0x2, 0xff, 0xa, 0x40, 0x0, [{{0x9, 0x4, 0x7, 0x81, 0x3, 0xff, 0xff, 0xff, 0xc, [], [{{0x9, 0x5, 0x0, 0x1, 0x8, 0x10, 0x1, 0xe}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x0, 0x7, 0x6}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x9, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9c9}, @generic={0xdc, 0x10, "40a7004c2de60bb3a3970befaa848ff622bed2f44dd1c58e408e01931456e302c8da712f062da0815ebde04bec7ef36b8b4b38f06b6632fba87140059890be69c5bf0f67cb401f148fb94bb91e2b8716ac9f065099d408ef3268df1bf7402b44ca5a86a7618accc6881035edaf5fcea31306605d630f5a7aef98d4166aa8edf982fbc7ed0c2da3ace2c874aeefcaa4de0e37327c63c9bc9f2832837fd8fc1e55ded910f23dd6a3e8a17ac1a331a4abc1b3897f3cc6521a470ba672cc9ca76943df807c26edc3ae36b58a1691e61ea6038910e4614093ad3324c0"}]}}]}}, {{0x9, 0x4, 0xb8, 0x9, 0xb, 0xff, 0xff, 0xff, 0x9, [], [{{0x9, 0x5, 0xd, 0x2, 0x400, 0x2, 0x8, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xb, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x3}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0xdd, 0x6, 0x8}}, {{0x9, 0x5, 0x0, 0x1c, 0x40, 0xd0, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x7a78}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x39}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x6b, 0x80, 0x40, [@generic={0xe9, 0xb, "2d5a3a725c84988422457eb595f5f550569125e542bf3c14ac2d27803a59826d413dcf2cdffb67a04a46c5173120215cdff3cae68a67283e8db0990b36c3fa387dff29747e0d3890765f1a677d379877e0733024f070aa440a0bfcc590b00d0e84a6f6e75cc89ec9c198b2c707047777b0df7ba486814f320127bb9a08231ab0d5012a941c832fe58babfea9decda8cbfbe479b6489d70515005a216a7572f4e114ff80e90847a6a4f862bf642dc30cdce3c9a6c942c3828bd2154be5de7008f446f46ad20a1e04538c34c017303a33d2a09947adf06325d8a4e07dd627ceafb82f4d2444cf1e7"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x6, 0x3b, 0xa, [@generic={0xec, 0x21, "98eafa63a4df047181419a5d8ea6e73326f97ac65f04626eb957eedb0aba9649c05c85dad351c70347b38aa497ad460e1f8d298070a0f80e5d34b4231b1a253bcb2a334e352e7d9138a56347953a802f9d082388b8c4d8dbeafef8aa2fcf1f1b3a90495ffc2701ea37c036d38130d5c3721c3d76a01774229dfc1a867e14f6330cd935f4e8771a8a57a9187cf6e89511882a2b0ea4c871ee9cc0657fe24364348fb271eea83365b94e661f442b66921bc2cc2858099a0a517d1781768ce0d7f60635f3beed5ca8fc4ebfe347b5f12cc228a0c230561c0054fdd81beddeaa60997232c77674c9c27bac08"}, @generic={0x102, 0x21, "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"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x5, 0xc0, 0x7}}, {{0x9, 0x5, 0x9, 0x1, 0x600, 0x3, 0x5, 0xff, [@generic={0x17, 0x31, "ab84fd3eb49fe086e378a3096e37f33a78f1447348"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x470, 0x3, 0x6, 0xfe, [@generic={0x1d, 0x5, "dcf6ed89ec9afbfdbddee48f7a23670fffbca06e153ab1ac42e0bd"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x6, 0x9, 0xf}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x4, 0x89, 0x5, [@generic={0x92, 0x10, "7b6a0893be319e91da9d862c25b1875ca899dcbfc95faaab6f4452d3b0fbd340b50b10c01fd106a84287245a5ae98b60a88278201b29a4694409fd57893cf5b9f42df814c4e02a6332b4b8d10fb40b921e7d2974adc4fdb369dd292feeaf5c2801658d922951556e239752cb879b4beb2335e89b7112fae3442f714a80a73cc3517f786648458d75624491808cb53130"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x9}]}}]}}]}}]}}, 0x0) 55.376089ms ago: executing program 2 (id=1959): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 0s ago: executing program 2 (id=1960): syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902"], 0x0) syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4d, &(0x7f0000000340)=ANY=[@ANYBLOB="3e0371a714c7a0019d810d9852f465acf8458ac08759f9457e2a6e53121d55529c63e2558fd6f6bb1d6737b72c3aaf3f572ca3212affdad37ff6c88d5f7154b2692559afde059760bd78a7c41c"]}]}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1) kernel console output (not intermixed with test programs): entered promiscuous mode [ 371.678773][T10534] veth0_macvtap: entered promiscuous mode [ 371.692073][T10534] veth1_macvtap: entered promiscuous mode [ 371.723757][T10534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.735393][T10585] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1636'. [ 371.746088][T10585] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1636'. [ 371.762704][T10534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.780903][ T38] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.798599][ T38] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.811021][ T38] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.824906][ T38] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.942678][ T52] Bluetooth: hci0: command tx timeout [ 371.995076][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.030636][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.071565][ T4551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.093171][ T4551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.188762][ T5911] uclogic 0003:28BD:0071.0024: pen parameters not found [ 372.204964][ T5911] uclogic 0003:28BD:0071.0024: interface is invalid, ignoring [ 372.207343][T10600] rdma_rxe: rxe_newlink: failed to add lo [ 372.222964][ T40] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 372.271425][ T40] usb 3-1: USB disconnect, device number 114 [ 372.287750][ T5911] usb 5-1: USB disconnect, device number 28 [ 372.344951][T10603] loop5: detected capacity change from 0 to 2319 [ 372.416424][ T9079] Buffer I/O error on dev loop5, logical block 289, async page read [ 372.503120][ T52] Bluetooth: hci3: command tx timeout [ 372.540757][T10605] syzkaller1: entered promiscuous mode [ 372.546610][T10605] syzkaller1: entered allmulticast mode [ 372.958423][T10610] tipc: Started in network mode [ 372.972726][T10610] tipc: Node identity ac14140f, cluster identity 4711 [ 373.018478][T10610] tipc: New replicast peer: 255.255.255.255 [ 373.038620][ T9079] Buffer I/O error on dev loop5, logical block 289, async page read [ 373.075853][T10610] tipc: Enabled bearer , priority 10 [ 373.231974][T10623] FAULT_INJECTION: forcing a failure. [ 373.231974][T10623] name failslab, interval 1, probability 0, space 0, times 0 [ 373.279783][T10623] CPU: 0 UID: 0 PID: 10623 Comm: syz.2.1646 Not tainted syzkaller #0 PREEMPT(full) [ 373.279812][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.279826][T10623] Call Trace: [ 373.279833][T10623] [ 373.279840][T10623] dump_stack_lvl+0x189/0x250 [ 373.279864][T10623] ? __pfx____ratelimit+0x10/0x10 [ 373.279885][T10623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.279932][T10623] ? __pfx__printk+0x10/0x10 [ 373.279964][T10623] ? __pfx___might_resched+0x10/0x10 [ 373.279986][T10623] ? fs_reclaim_acquire+0x7d/0x100 [ 373.280013][T10623] should_fail_ex+0x414/0x560 [ 373.280046][T10623] should_failslab+0xa8/0x100 [ 373.280065][T10623] __kmalloc_noprof+0xdf/0x800 [ 373.280079][T10623] ? do_insn_ioctl+0x100/0x5a0 [ 373.280099][T10623] do_insn_ioctl+0x100/0x5a0 [ 373.280119][T10623] comedi_unlocked_ioctl+0x907/0x1020 [ 373.280134][T10623] ? kasan_quarantine_put+0xdd/0x220 [ 373.280153][T10623] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 373.280170][T10623] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 373.280193][T10623] ? do_vfs_ioctl+0xbe8/0x1430 [ 373.280215][T10623] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 373.280235][T10623] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 373.280285][T10623] ? __fget_files+0x2a/0x420 [ 373.280307][T10623] ? __fget_files+0x3a0/0x420 [ 373.280324][T10623] ? __fget_files+0x2a/0x420 [ 373.280344][T10623] ? bpf_lsm_file_ioctl+0x9/0x20 [ 373.280361][T10623] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 373.280375][T10623] __se_sys_ioctl+0xfc/0x170 [ 373.280406][T10623] do_syscall_64+0xfa/0xfa0 [ 373.280427][T10623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.280442][T10623] ? clear_bhb_loop+0x60/0xb0 [ 373.280461][T10623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.280475][T10623] RIP: 0033:0x7ff91858f749 [ 373.280489][T10623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.280504][T10623] RSP: 002b:00007ff9193a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.280522][T10623] RAX: ffffffffffffffda RBX: 00007ff9187e5fa0 RCX: 00007ff91858f749 [ 373.280534][T10623] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 373.280544][T10623] RBP: 00007ff9193a0090 R08: 0000000000000000 R09: 0000000000000000 [ 373.280553][T10623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.280562][T10623] R13: 00007ff9187e6038 R14: 00007ff9187e5fa0 R15: 00007fff1b367488 [ 373.280586][T10623] [ 373.291489][ T40] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 373.409501][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'. [ 373.563083][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.564572][ T130] libceph: connect (1)[c::]:6789 error -101 [ 373.580273][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.583914][ T130] libceph: mon0 (1)[c::]:6789 connect error [ 373.602752][ T40] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.618077][ T40] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.621262][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 373.629494][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.646323][ T40] usb 5-1: config 0 descriptor?? [ 373.785001][ T10] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 373.795620][ T10] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 373.806488][ T10] usb 8-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 373.817198][ T10] usb 8-1: config 220 has no interface number 2 [ 373.823647][ T10] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 373.840631][ T10] usb 8-1: config 220 interface 0 has no altsetting 0 [ 373.847685][ T10] usb 8-1: config 220 interface 76 has no altsetting 0 [ 373.854820][ T10] usb 8-1: config 220 interface 1 has no altsetting 0 [ 373.870779][ T9] libceph: connect (1)[c::]:6789 error -101 [ 373.878094][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 373.888618][ T10] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 373.898103][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.908431][ T10] usb 8-1: Product: syz [ 373.912968][ T10] usb 8-1: Manufacturer: syz [ 373.917700][ T10] usb 8-1: SerialNumber: syz [ 374.021262][ T52] Bluetooth: hci0: command tx timeout [ 374.076404][ T40] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 374.104090][T10628] ceph: No mds server is up or the cluster is laggy [ 374.154854][ T52] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 260 [ 374.190376][ T10] usb 8-1: selecting invalid altsetting 0 [ 374.191352][ T5830] tipc: Node number set to 2886997007 [ 374.203695][ T10] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 374.251484][ T10] uvcvideo 8-1:220.0: No valid video chain found. [ 374.288853][ T5830] usb 5-1: USB disconnect, device number 29 [ 374.297591][ T10] usb 8-1: selecting invalid altsetting 0 [ 374.324905][ T10] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 374.387409][ T10] usb 8-1: USB disconnect, device number 2 [ 374.671180][ T5830] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 374.741789][ T40] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 374.843272][ T5830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 374.862502][ T5830] usb 3-1: config 6 has an invalid interface number: 200 but max is 0 [ 374.870851][ T5830] usb 3-1: config 6 has no interface number 0 [ 374.879835][ T5830] usb 3-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 374.893855][ T5830] usb 3-1: config 6 interface 200 has no altsetting 0 [ 374.911224][ T40] usb 7-1: Using ep0 maxpacket: 8 [ 374.923344][ T5830] usb 3-1: string descriptor 0 read error: -22 [ 374.934778][ T40] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 374.948911][ T5830] usb 3-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 374.961265][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.969329][ T40] usb 7-1: Product: syz [ 374.981247][ T5830] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 375.002070][ T40] usb 7-1: Manufacturer: syz [ 375.007725][ T40] usb 7-1: SerialNumber: syz [ 375.019079][ T40] usb 7-1: config 0 descriptor?? [ 375.036963][ T5830] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 375.111810][T10653] tipc: Enabling of bearer rejected, already enabled [ 375.231207][ T130] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 375.252853][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 375.272377][ T40] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 375.288918][ T5830] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 375.300472][ T5830] usb 3-1: media controller created [ 375.324346][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.377399][ T5830] dvb-usb: bulk message failed: -71 (6/0) [ 375.391779][ T130] usb 5-1: Using ep0 maxpacket: 16 [ 375.408200][ T5830] dvb-usb: bulk message failed: -71 (6/0) [ 375.415835][ T5830] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 375.422059][ T130] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 375.446065][ T130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 375.468592][ T130] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 375.479007][ T130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.487578][ T130] usb 5-1: Product: syz [ 375.497085][ T130] usb 5-1: Manufacturer: syz [ 375.502838][ T5830] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input63 [ 375.509708][ T130] usb 5-1: SerialNumber: syz [ 375.540517][ T130] usb 5-1: config 0 descriptor?? [ 375.543622][ T5830] dvb-usb: schedule remote query interval to 150 msecs. [ 375.571591][ T5830] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 375.578083][ T130] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 375.604762][ T5830] usb 3-1: USB disconnect, device number 115 [ 375.620153][T10662] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20004 [ 375.649189][ T10] IPVS: starting estimator thread 0... [ 375.679117][ T130] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 375.703973][ T5830] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 375.745766][T10663] IPVS: using max 25 ests per chain, 60000 per kthread [ 376.071292][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 376.101266][ T52] Bluetooth: hci0: command tx timeout [ 376.195151][ T130] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 376.203274][ T130] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 376.231226][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 376.238325][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.246579][ T10] usb 8-1: config 0 has no interface number 0 [ 376.253097][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 376.267591][ T10] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 376.276931][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.285312][ T10] usb 8-1: Product: syz [ 376.289706][ T10] usb 8-1: Manufacturer: syz [ 376.294607][ T10] usb 8-1: SerialNumber: syz [ 376.304380][ T10] usb 8-1: config 0 descriptor?? [ 376.315159][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 376.430126][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.441644][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.451931][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.465386][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.474988][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.488337][ T9] usb 3-1: config 0 descriptor?? [ 376.704352][ T40] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 376.720923][ T40] usb 7-1: USB disconnect, device number 3 [ 376.819218][ T130] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 376.928843][ T9] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 377.033077][ T130] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 377.043550][ T130] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 377.052674][ T130] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 377.059502][ T130] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 377.072167][ T130] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 377.084966][ T130] usb 5-1: USB disconnect, device number 30 [ 377.172821][ T40] usb 3-1: USB disconnect, device number 116 [ 377.496593][T10678] tipc: Started in network mode [ 377.501638][T10678] tipc: Node identity ac14140f, cluster identity 4711 [ 377.508824][T10678] tipc: New replicast peer: 255.255.255.255 [ 377.517477][T10678] tipc: Enabled bearer , priority 10 [ 377.528696][ T10] gspca_spca1528: reg_w err -71 [ 377.545205][ T10] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 377.573155][ T10] usb 8-1: USB disconnect, device number 3 [ 377.874051][T10690] syz_tun: entered allmulticast mode [ 377.888340][T10690] netlink: 'syz.4.1672': attribute type 39 has an invalid length. [ 377.906770][T10693] netlink: 'syz.2.1673': attribute type 3 has an invalid length. [ 377.914817][T10693] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1673'. [ 377.925783][T10690] syz_tun (unregistering): left allmulticast mode [ 378.131768][ T40] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 378.146913][T10700] FAULT_INJECTION: forcing a failure. [ 378.146913][T10700] name failslab, interval 1, probability 0, space 0, times 0 [ 378.167480][T10700] CPU: 0 UID: 0 PID: 10700 Comm: syz.4.1676 Not tainted syzkaller #0 PREEMPT(full) [ 378.167510][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.167525][T10700] Call Trace: [ 378.167534][T10700] [ 378.167543][T10700] dump_stack_lvl+0x189/0x250 [ 378.167575][T10700] ? __pfx____ratelimit+0x10/0x10 [ 378.167601][T10700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.167628][T10700] ? __pfx__printk+0x10/0x10 [ 378.167649][T10700] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 378.167696][T10700] should_fail_ex+0x414/0x560 [ 378.167729][T10700] should_failslab+0xa8/0x100 [ 378.167749][T10700] kmem_cache_alloc_noprof+0x88/0x700 [ 378.167772][T10700] ? skb_clone+0x212/0x3a0 [ 378.167793][T10700] skb_clone+0x212/0x3a0 [ 378.167813][T10700] __netlink_deliver_tap+0x424/0x8b0 [ 378.167840][T10700] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.167858][T10700] netlink_deliver_tap+0x19c/0x1b0 [ 378.167876][T10700] netlink_unicast+0x7fa/0x9e0 [ 378.167897][T10700] ? __pfx_netlink_unicast+0x10/0x10 [ 378.167913][T10700] ? netlink_sendmsg+0x642/0xb30 [ 378.167928][T10700] ? skb_put+0x11b/0x210 [ 378.167946][T10700] netlink_sendmsg+0x805/0xb30 [ 378.167970][T10700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.167988][T10700] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 378.168019][T10700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.168035][T10700] sock_sendmsg_nosec+0x18f/0x1d0 [ 378.168058][T10700] ____sys_sendmsg+0x577/0x8b0 [ 378.168081][T10700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.168105][T10700] ? import_iovec+0x74/0xa0 [ 378.168121][T10700] ___sys_sendmsg+0x21f/0x2a0 [ 378.168140][T10700] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.168183][T10700] ? __fget_files+0x2a/0x420 [ 378.168200][T10700] ? __fget_files+0x3a0/0x420 [ 378.168225][T10700] __x64_sys_sendmsg+0x19b/0x260 [ 378.168244][T10700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.168274][T10700] ? do_syscall_64+0xbe/0xfa0 [ 378.168295][T10700] do_syscall_64+0xfa/0xfa0 [ 378.168315][T10700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.168331][T10700] ? clear_bhb_loop+0x60/0xb0 [ 378.168351][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.168365][T10700] RIP: 0033:0x7f80f638f749 [ 378.168380][T10700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.168392][T10700] RSP: 002b:00007f80f7153038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.168408][T10700] RAX: ffffffffffffffda RBX: 00007f80f65e5fa0 RCX: 00007f80f638f749 [ 378.168420][T10700] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 378.168430][T10700] RBP: 00007f80f7153090 R08: 0000000000000000 R09: 0000000000000000 [ 378.168439][T10700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.168455][T10700] R13: 00007f80f65e6038 R14: 00007f80f65e5fa0 R15: 00007fff79a4b798 [ 378.168479][T10700] [ 378.331263][ T40] usb 7-1: device descriptor read/64, error -71 [ 378.492729][T10704] binder: BINDER_SET_CONTEXT_MGR already set [ 378.498793][T10704] binder: 10702:10704 ioctl 4018620d 200000000040 returned -16 [ 378.610693][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1678'. [ 378.621230][ T9] tipc: Node number set to 2886997007 [ 378.761211][ T40] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 378.901276][ T40] usb 7-1: device descriptor read/64, error -71 [ 378.931222][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 379.011677][ T40] usb usb7-port1: attempt power cycle [ 379.061391][ T9] usb 8-1: device descriptor read/64, error -71 [ 379.112314][ T5830] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 379.272972][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.284171][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.296355][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 379.310549][ T5830] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.314385][ T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 379.320105][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.342989][ T5830] usb 3-1: config 0 descriptor?? [ 379.352823][ T40] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 379.385046][ T40] usb 7-1: device descriptor read/8, error -71 [ 379.472655][ T9] usb 8-1: device descriptor read/64, error -71 [ 379.584028][ T9] usb usb8-port1: attempt power cycle [ 379.632508][ T40] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 379.661840][ T40] usb 7-1: device descriptor read/8, error -71 [ 379.771486][ T5830] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 379.784880][ T40] usb usb7-port1: unable to enumerate USB device [ 379.906115][ T5915] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 379.931398][ T9] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 379.951772][ T9] usb 8-1: device descriptor read/8, error -71 [ 380.028391][ T5830] usb 3-1: USB disconnect, device number 117 [ 380.061336][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 380.068617][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.081476][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.092184][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 380.105394][ T5915] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 380.115727][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.126715][ T5915] usb 5-1: config 0 descriptor?? [ 380.191342][ T9] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 380.213675][ T9] usb 8-1: device descriptor read/8, error -71 [ 380.321631][ T9] usb usb8-port1: unable to enumerate USB device [ 380.746858][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 380.753412][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 380.764796][ T5915] usb 5-1: USB disconnect, device number 31 [ 380.893380][T10733] binder: 10730:10733 ioctl c018620c 200000000580 returned -22 [ 380.979846][T10735] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1686'. [ 380.991798][ T5915] IPVS: starting estimator thread 0... [ 381.081727][T10737] IPVS: using max 36 ests per chain, 86400 per kthread [ 381.251316][ T5915] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 381.401174][ T5915] usb 3-1: device descriptor read/64, error -71 [ 381.641285][ T5915] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 381.751178][ T5830] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 381.791230][ T5915] usb 3-1: device descriptor read/64, error -71 [ 381.901795][ T5915] usb usb3-port1: attempt power cycle [ 381.908966][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.925440][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.935849][ T5830] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 381.949229][ T5830] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 381.960236][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.972904][ T5830] usb 5-1: config 0 descriptor?? [ 382.094985][T10757] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1694'. [ 382.162706][T10760] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1694'. [ 382.177348][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1694'. [ 382.208606][T10757] binder: 10756:10757 ioctl 5000aea5 200000001200 returned -22 [ 382.251355][ T5915] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 382.292779][ T5915] usb 3-1: device descriptor read/8, error -71 [ 382.333752][T10765] FAULT_INJECTION: forcing a failure. [ 382.333752][T10765] name failslab, interval 1, probability 0, space 0, times 0 [ 382.349244][T10765] CPU: 0 UID: 0 PID: 10765 Comm: syz.6.1696 Not tainted syzkaller #0 PREEMPT(full) [ 382.349275][T10765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 382.349289][T10765] Call Trace: [ 382.349298][T10765] [ 382.349308][T10765] dump_stack_lvl+0x189/0x250 [ 382.349340][T10765] ? __pfx____ratelimit+0x10/0x10 [ 382.349368][T10765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.349396][T10765] ? __pfx__printk+0x10/0x10 [ 382.349428][T10765] ? __pfx___might_resched+0x10/0x10 [ 382.349452][T10765] ? fs_reclaim_acquire+0x7d/0x100 [ 382.349480][T10765] should_fail_ex+0x414/0x560 [ 382.349514][T10765] should_failslab+0xa8/0x100 [ 382.349542][T10765] __kmalloc_noprof+0xdf/0x800 [ 382.349562][T10765] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 382.349601][T10765] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 382.349642][T10765] genl_family_rcv_msg_doit+0xb8/0x300 [ 382.349681][T10765] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 382.349721][T10765] ? __pfx_genl_get_cmd+0x10/0x10 [ 382.349747][T10765] ? stack_trace_save+0x9c/0xe0 [ 382.349766][T10765] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 382.349793][T10765] ? trim_netdev_trace+0x2a3/0x3d0 [ 382.349832][T10765] genl_rcv_msg+0x60e/0x790 [ 382.349869][T10765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.349897][T10765] ? ref_tracker_free+0x63a/0x7d0 [ 382.349926][T10765] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 382.349948][T10765] ? ____sys_sendmsg+0x577/0x8b0 [ 382.349970][T10765] ? ___sys_sendmsg+0x21f/0x2a0 [ 382.349990][T10765] ? __x64_sys_sendmsg+0x19b/0x260 [ 382.350012][T10765] ? do_syscall_64+0xfa/0xfa0 [ 382.350044][T10765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.350077][T10765] netlink_rcv_skb+0x208/0x470 [ 382.350099][T10765] ? __lock_acquire+0xab9/0xd20 [ 382.350122][T10765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.350154][T10765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.350199][T10765] ? down_read+0x1ad/0x2e0 [ 382.350233][T10765] genl_rcv+0x28/0x40 [ 382.350260][T10765] netlink_unicast+0x82f/0x9e0 [ 382.350292][T10765] ? __pfx_netlink_unicast+0x10/0x10 [ 382.350316][T10765] ? netlink_sendmsg+0x642/0xb30 [ 382.350338][T10765] ? skb_put+0x11b/0x210 [ 382.350365][T10765] netlink_sendmsg+0x805/0xb30 [ 382.350401][T10765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.350429][T10765] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 382.350473][T10765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.350496][T10765] sock_sendmsg_nosec+0x18f/0x1d0 [ 382.350530][T10765] ____sys_sendmsg+0x577/0x8b0 [ 382.350565][T10765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.350600][T10765] ? import_iovec+0x74/0xa0 [ 382.350625][T10765] ___sys_sendmsg+0x21f/0x2a0 [ 382.350653][T10765] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.350717][T10765] ? __fget_files+0x2a/0x420 [ 382.350742][T10765] ? __fget_files+0x3a0/0x420 [ 382.350779][T10765] __x64_sys_sendmsg+0x19b/0x260 [ 382.350807][T10765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.350843][T10765] ? __pfx_ksys_write+0x10/0x10 [ 382.350867][T10765] ? do_syscall_64+0xbe/0xfa0 [ 382.350899][T10765] do_syscall_64+0xfa/0xfa0 [ 382.350928][T10765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.350950][T10765] ? clear_bhb_loop+0x60/0xb0 [ 382.350976][T10765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.350997][T10765] RIP: 0033:0x7fde4938f749 [ 382.351018][T10765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.351043][T10765] RSP: 002b:00007fde4a2d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.351065][T10765] RAX: ffffffffffffffda RBX: 00007fde495e5fa0 RCX: 00007fde4938f749 [ 382.351082][T10765] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 382.351095][T10765] RBP: 00007fde4a2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 382.351109][T10765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.351121][T10765] R13: 00007fde495e6038 R14: 00007fde495e5fa0 R15: 00007fffe921f438 [ 382.351157][T10765] [ 382.767264][T10766] block nbd7: NBD_DISCONNECT [ 382.827930][ T5830] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 382.901239][ T5915] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 382.924040][ T5915] usb 3-1: device descriptor read/8, error -71 [ 383.024825][ T5830] usb 5-1: USB disconnect, device number 32 [ 383.031676][ T5915] usb usb3-port1: unable to enumerate USB device [ 383.380719][T10778] random: crng reseeded on system resumption [ 384.116314][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.125598][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.170612][ T9079] Buffer I/O error on dev loop5, logical block 289, async page read [ 384.272990][ T9769] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 384.433220][ T9769] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 384.442456][ T9769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.453027][ T9769] usb 3-1: config 0 descriptor?? [ 384.464610][ T9769] cp210x 3-1:0.0: cp210x converter detected [ 384.551246][ T5915] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 384.731166][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 384.737978][ T5915] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 384.751595][ T5915] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 384.762928][ T5915] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 384.773205][ T5915] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 384.784812][ T5915] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.799388][ T5915] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 384.808767][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.852163][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 384.894510][T10786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.915483][T10786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.947041][ T9769] usb 3-1: cp210x converter now attached to ttyUSB0 [ 385.052953][ T10] usb 7-1: config index 0 descriptor too short (expected 215, got 45) [ 385.063966][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 385.074312][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.082505][ T10] usb 7-1: Product: syz [ 385.086830][ T10] usb 7-1: Manufacturer: syz [ 385.092252][ T10] usb 7-1: SerialNumber: syz [ 385.131270][ T9769] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 385.312146][ T9769] usb 8-1: Using ep0 maxpacket: 8 [ 385.319154][ T9769] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.329713][ T9769] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 385.340809][ T9769] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 385.352445][ T9769] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 385.363971][ T9769] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 385.373155][ T9769] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.398747][ T9769] hub 8-1:1.0: bad descriptor, ignoring hub [ 385.405020][ T9769] hub 8-1:1.0: probe with driver hub failed with error -5 [ 385.413916][ T9769] cdc_wdm 8-1:1.0: skipping garbage [ 385.419223][ T9769] cdc_wdm 8-1:1.0: skipping garbage [ 385.427512][ T9769] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 385.436487][ T9769] cdc_wdm 8-1:1.0: Unknown control protocol [ 385.509338][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 385.521583][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 385.595220][T10800] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 385.656325][ T9769] usb 3-1: USB disconnect, device number 122 [ 385.670453][ T9769] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 385.687835][ T9769] cp210x 3-1:0.0: device disconnected [ 385.713226][ T40] usb 8-1: USB disconnect, device number 8 [ 386.051197][ T9769] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 386.201283][ T9769] usb 8-1: Using ep0 maxpacket: 8 [ 386.223354][ T9769] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.235827][ T9769] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 386.245224][ T9769] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 386.260337][ T9769] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 386.272555][ T9769] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 386.282030][ T9769] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.312129][ T9769] hub 8-1:1.0: bad descriptor, ignoring hub [ 386.319031][ T9769] hub 8-1:1.0: probe with driver hub failed with error -5 [ 386.328552][ T9769] cdc_wdm 8-1:1.0: skipping garbage [ 386.334458][ T9769] cdc_wdm 8-1:1.0: skipping garbage [ 386.342112][ T9769] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 386.348127][ T9769] cdc_wdm 8-1:1.0: Unknown control protocol [ 386.621548][ T130] usb 8-1: USB disconnect, device number 9 [ 386.642521][ T9769] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 386.651663][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 386.670111][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 386.680520][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 386.693146][ T10] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 386.706890][ T10] usb 7-1: USB disconnect, device number 8 [ 386.791229][ T9769] usb 3-1: device descriptor read/64, error -71 [ 387.041174][ T9769] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 387.181269][ T9769] usb 3-1: device descriptor read/64, error -71 [ 387.307420][ T9769] usb usb3-port1: attempt power cycle [ 387.321840][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 387.428119][ T40] usb 5-1: USB disconnect, device number 33 [ 387.491861][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 387.502015][ T10] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 387.524786][ T10] usb 8-1: config 0 has no interface number 0 [ 387.534880][ T10] usb 8-1: config 0 interface 31 has no altsetting 0 [ 387.548529][ T10] usb 8-1: New USB device found, idVendor=0915, idProduct=2002, bcdDevice=10.88 [ 387.572149][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.590673][ T10] usb 8-1: Product: syz [ 387.603689][ T10] usb 8-1: Manufacturer: syz [ 387.608455][ T10] usb 8-1: SerialNumber: syz [ 387.625107][ T10] usb 8-1: config 0 descriptor?? [ 387.651266][ T9769] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 387.672284][ T9769] usb 3-1: device descriptor read/8, error -71 [ 387.744771][T10828] kvm: apic: phys broadcast and lowest prio [ 387.815961][T10829] random: crng reseeded on system resumption [ 387.853229][T10810] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1712'. [ 387.884343][T10810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.897148][T10810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.917994][ T10] usb 8-1: USB disconnect, device number 10 [ 387.924105][ T9769] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 387.962450][ T9769] usb 3-1: device descriptor read/8, error -71 [ 388.091430][ T9769] usb usb3-port1: unable to enumerate USB device [ 388.590590][T10833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1719'. [ 388.792238][ T9769] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 388.941272][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 388.990115][ T9769] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 389.008562][ T9769] usb 8-1: config 1 has no interface number 0 [ 389.016618][ T9769] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 389.030998][ T9769] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 389.041640][ T9769] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 389.058521][ T9769] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 389.081775][ T10] usb 5-1: device descriptor read/64, error -71 [ 389.094442][ T9769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.102954][ T9769] usb 8-1: Product: syz [ 389.107170][ T9769] usb 8-1: Manufacturer: syz [ 389.111968][ T9769] usb 8-1: SerialNumber: syz [ 389.123363][T10831] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 389.251739][ T40] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 389.338136][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 389.352551][T10831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.372271][T10831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.396980][T10831] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 389.414126][ T40] usb 7-1: Using ep0 maxpacket: 16 [ 389.432349][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 389.437598][ T9769] usb 8-1: No status endpoint found [ 389.453896][ T40] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 389.476824][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 389.491211][ T10] usb 5-1: device descriptor read/64, error -71 [ 389.519677][ T40] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 389.538860][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.557774][ T40] usb 7-1: Product: syz [ 389.567914][ T40] usb 7-1: Manufacturer: syz [ 389.578051][ T40] usb 7-1: SerialNumber: syz [ 389.601645][ T10] usb usb5-port1: attempt power cycle [ 389.601889][ T40] usb 7-1: config 0 descriptor?? [ 389.621967][T10847] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 389.638199][T10831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.653189][T10831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.654863][ T40] port100 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 389.672146][ T9769] usb 8-1: USB disconnect, device number 11 [ 389.951372][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 389.982057][ T10] usb 5-1: device descriptor read/8, error -71 [ 390.091188][ T9769] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 390.221223][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 390.261455][ T9769] usb 3-1: Using ep0 maxpacket: 32 [ 390.267556][ T10] usb 5-1: device descriptor read/8, error -71 [ 390.276691][ T9769] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 390.287706][ T9769] usb 3-1: config 0 has no interface number 0 [ 390.300074][ T9769] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 390.309911][ T9769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.327086][ T9769] usb 3-1: Product: syz [ 390.345605][ T9769] usb 3-1: Manufacturer: syz [ 390.354734][ T9769] usb 3-1: SerialNumber: syz [ 390.365347][ T9769] usb 3-1: config 0 descriptor?? [ 390.374458][ T9769] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 390.393079][ T10] usb usb5-port1: unable to enumerate USB device [ 390.413433][ T10] usb 7-1: USB disconnect, device number 9 [ 390.534410][T10861] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1731'. [ 390.578393][T10856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.599303][T10856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.629912][ T9769] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 390.654421][ T9769] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 390.669407][T10863] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1732'. [ 391.029172][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 391.038498][ T9769] usb 3-1: USB disconnect, device number 127 [ 391.052371][ T9769] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 391.076803][ T9769] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 391.089251][ T9769] quatech2 3-1:0.51: device disconnected [ 391.251727][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 391.433325][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.444614][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.454811][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.467983][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.478562][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.488877][ T10] usb 7-1: config 0 descriptor?? [ 391.641226][ T9769] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 391.732144][T10876] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1738'. [ 391.792523][ T9769] usb 8-1: Using ep0 maxpacket: 8 [ 391.799976][ T9769] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.810358][ T9769] usb 8-1: config 0 has no interfaces? [ 391.818573][ T9769] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 391.828700][ T9769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.836945][ T9769] usb 8-1: Product: syz [ 391.841377][ T9769] usb 8-1: Manufacturer: syz [ 391.846076][ T9769] usb 8-1: SerialNumber: syz [ 391.851172][ T130] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 391.862766][ T9769] usb 8-1: config 0 descriptor?? [ 391.903955][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 391.910186][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 391.920860][ T10] usb 7-1: USB disconnect, device number 10 [ 392.023572][ T130] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 392.033195][ T130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.045113][ T130] usb 3-1: config 0 descriptor?? [ 392.102000][ T5890] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 392.253742][ T5890] usb 5-1: not running at top speed; connect to a high speed hub [ 392.263386][ T130] kaweth 3-1:0.0: Firmware present in device. [ 392.267644][ T5890] usb 5-1: config 3 has an invalid interface number: 24 but max is 3 [ 392.285105][ T5890] usb 5-1: config 3 has an invalid interface number: 58 but max is 3 [ 392.293540][ T5890] usb 5-1: config 3 has an invalid interface number: 24 but max is 3 [ 392.303623][ T5890] usb 5-1: config 3 has an invalid interface number: 209 but max is 3 [ 392.311919][ T5890] usb 5-1: config 3 has an invalid interface number: 164 but max is 3 [ 392.320161][ T5890] usb 5-1: config 3 has 5 interfaces, different from the descriptor's value: 4 [ 392.329319][ T5890] usb 5-1: config 3 has no interface number 0 [ 392.335520][ T5890] usb 5-1: config 3 has no interface number 1 [ 392.342737][ T5890] usb 5-1: config 3 has no interface number 3 [ 392.348867][ T5890] usb 5-1: config 3 has no interface number 4 [ 392.355186][ T5890] usb 5-1: config 3 interface 24 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 392.366224][ T5890] usb 5-1: config 3 interface 24 altsetting 243 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 392.377770][ T5890] usb 5-1: config 3 interface 24 altsetting 243 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 392.388997][ T5890] usb 5-1: config 3 interface 24 altsetting 243 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 392.402546][ T5890] usb 5-1: config 3 interface 24 altsetting 243 endpoint 0x1 has invalid maxpacket 1007, setting to 64 [ 392.413736][ T5890] usb 5-1: config 3 interface 24 altsetting 243 has a duplicate endpoint with address 0xC, skipping [ 392.426566][ T5890] usb 5-1: config 3 interface 24 altsetting 243 has a duplicate endpoint with address 0x3, skipping [ 392.437867][ T5890] usb 5-1: config 3 interface 24 altsetting 243 has a duplicate endpoint with address 0x2, skipping [ 392.450320][ T5890] usb 5-1: config 3 interface 24 altsetting 243 has an invalid descriptor for endpoint zero, skipping [ 392.457511][ T130] kaweth 3-1:0.0: Statistics collection: 0 [ 392.461592][ T5890] usb 5-1: config 3 interface 24 altsetting 243 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 392.490752][ T5890] usb 5-1: config 3 interface 24 altsetting 243 has an endpoint descriptor with address 0x6A, changing to 0xA [ 392.494776][ T130] kaweth 3-1:0.0: Multicast filter limit: 0 [ 392.522401][ T130] kaweth 3-1:0.0: MTU: 0 [ 392.524738][ T5890] usb 5-1: config 3 interface 24 altsetting 243 has a duplicate endpoint with address 0xA, skipping [ 392.526868][ T130] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 392.546700][ T5890] usb 5-1: config 3 interface 24 altsetting 243 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 392.574985][ T5890] usb 5-1: config 3 interface 24 altsetting 243 has a duplicate endpoint with address 0x1, skipping [ 392.609819][ T5890] usb 5-1: config 3 interface 24 altsetting 243 has a duplicate endpoint with address 0x8, skipping [ 392.623933][ T5890] usb 5-1: config 3 interface 24 altsetting 243 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 392.638893][ T5890] usb 5-1: config 3 interface 58 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 392.652898][ T5890] usb 5-1: config 3 interface 24 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 392.665327][ T5890] usb 5-1: config 3 interface 24 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.678793][ T5890] usb 5-1: too many endpoints for config 3 interface 209 altsetting 153: 223, using maximum allowed: 30 [ 392.692531][ T5890] usb 5-1: config 3 interface 209 altsetting 153 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 392.706584][ T5890] usb 5-1: config 3 interface 209 altsetting 153 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 392.720472][ T5890] usb 5-1: config 3 interface 2 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 392.731516][ T5890] usb 5-1: config 3 interface 2 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 392.744785][ T5890] usb 5-1: config 3 interface 2 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 392.757068][ T5890] usb 5-1: config 3 interface 2 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 392.770767][ T5890] usb 5-1: too many endpoints for config 3 interface 164 altsetting 41: 160, using maximum allowed: 30 [ 392.783619][ T5890] usb 5-1: config 3 interface 164 altsetting 41 has an invalid descriptor for endpoint zero, skipping [ 392.795561][ T5890] usb 5-1: config 3 interface 164 altsetting 41 has an invalid descriptor for endpoint zero, skipping [ 392.812983][ T5890] usb 5-1: config 3 interface 164 altsetting 41 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 392.825237][ T5890] usb 5-1: config 3 interface 164 altsetting 41 has a duplicate endpoint with address 0x9, skipping [ 392.836506][ T5890] usb 5-1: config 3 interface 164 altsetting 41 has a duplicate endpoint with address 0xD, skipping [ 392.847925][ T5890] usb 5-1: config 3 interface 164 altsetting 41 has a duplicate endpoint with address 0x5, skipping [ 392.863074][ T5890] usb 5-1: config 3 interface 164 altsetting 41 has a duplicate endpoint with address 0x3, skipping [ 392.874578][ T5890] usb 5-1: config 3 interface 164 altsetting 41 has an invalid descriptor for endpoint zero, skipping [ 392.897695][ T5890] usb 5-1: config 3 interface 164 altsetting 41 has a duplicate endpoint with address 0xC, skipping [ 392.900468][T10874] mkiss: ax0: crc mode is auto. [ 392.923397][ T5890] usb 5-1: config 3 interface 164 altsetting 41 has an invalid descriptor for endpoint zero, skipping [ 392.936264][ T5890] usb 5-1: config 3 interface 164 altsetting 41 has a duplicate endpoint with address 0xC, skipping [ 392.948510][ T5890] usb 5-1: config 3 interface 164 altsetting 41 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 392.960987][ T5890] usb 5-1: config 3 interface 164 altsetting 41 has 12 endpoint descriptors, different from the interface descriptor's value: 160 [ 392.975460][ T5890] usb 5-1: config 3 interface 24 has no altsetting 1 [ 392.983644][ T5890] usb 5-1: config 3 interface 209 has no altsetting 0 [ 392.990676][ T5890] usb 5-1: config 3 interface 2 has no altsetting 0 [ 392.997844][ T5890] usb 5-1: config 3 interface 164 has no altsetting 0 [ 393.008045][ T5890] usb 5-1: Dual-Role OTG device on HNP port [ 393.016593][ T5890] usb 5-1: New USB device found, idVendor=1608, idProduct=000e, bcdDevice=65.43 [ 393.026469][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.035256][ T5890] usb 5-1: Product: syz [ 393.039902][ T5890] usb 5-1: Manufacturer: ㄮ昽쫂ä‚媟 [ 393.046263][ T5890] usb 5-1: SerialNumber: syz [ 393.067187][T10876] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 393.075627][T10876] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 393.087015][T10876] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 393.185620][ T130] kaweth 3-1:0.0: kaweth interface created at eth5 [ 393.315543][ T5890] io_edgeport 5-1:3.24: required endpoints missing [ 393.350407][ T5890] io_edgeport 5-1:3.58: required endpoints missing [ 393.395767][ T5890] io_edgeport 5-1:3.209: required endpoints missing [ 393.444303][ T5890] io_edgeport 5-1:3.2: required endpoints missing [ 393.459411][ T5890] io_edgeport 5-1:3.164: required endpoints missing [ 393.473952][ T40] usb 3-1: USB disconnect, device number 2 [ 393.519321][ T5890] usb 5-1: USB disconnect, device number 38 [ 394.487684][ T130] usb 8-1: USB disconnect, device number 12 [ 394.561140][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 394.672027][ T5830] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 394.743508][ T10] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 394.801586][ T10] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 394.810697][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.831741][ T10] usb 3-1: Product: syz [ 394.835973][ T10] usb 3-1: Manufacturer: syz [ 394.840680][ T10] usb 3-1: SerialNumber: syz [ 394.851287][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 394.880109][ T5830] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 394.895091][ T5830] usb 5-1: config 179 has no interface number 0 [ 394.925923][ T5830] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 394.968726][T10944] netlink: 'syz.6.1751': attribute type 11 has an invalid length. [ 394.975929][ T5830] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 395.002492][T10944] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.1751'. [ 395.033060][ T5830] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 395.054639][ T5830] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 395.081760][ T10] usb 3-1: selecting invalid altsetting 1 [ 395.089306][ T5830] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 395.119324][ T5830] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 395.149716][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.205469][T10935] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 395.309211][ T10] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 395.309340][ T10] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 395.332372][T10931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.348614][T10931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.408039][ T10] usb 3-1: USB disconnect, device number 3 [ 395.474858][ T5830] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input68 [ 395.501749][T10955] netlink: 'syz.6.1756': attribute type 1 has an invalid length. [ 395.518123][T10955] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1756'. [ 395.549634][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1756'. [ 395.672801][ T10] usb 5-1: USB disconnect, device number 39 [ 395.672815][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 395.672962][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 395.696664][ T5830] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 395.749198][T10958] lo: entered promiscuous mode [ 395.863479][ T5830] usb 8-1: Using ep0 maxpacket: 8 [ 395.871255][ T5830] usb 8-1: config 0 has an invalid interface number: 75 but max is 0 [ 395.881196][ T5830] usb 8-1: config 0 has no interface number 0 [ 395.887372][ T5830] usb 8-1: config 0 interface 75 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 395.899449][ T5830] usb 8-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=df.29 [ 395.908593][ T5830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.916706][ T5830] usb 8-1: Product: syz [ 395.920918][ T5830] usb 8-1: Manufacturer: syz [ 395.926669][ T5830] usb 8-1: SerialNumber: syz [ 395.935873][ T5830] usb 8-1: config 0 descriptor?? [ 395.991349][ T5890] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 396.155009][T10953] syzkaller1: entered promiscuous mode [ 396.160623][T10953] syzkaller1: entered allmulticast mode [ 396.171159][ T5890] usb 7-1: Using ep0 maxpacket: 16 [ 396.178283][ T5890] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.193444][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 396.207427][ T5890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 396.222211][ T5890] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 396.232682][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.240779][ T5890] usb 7-1: Product: syz [ 396.246580][ T5890] usb 7-1: Manufacturer: syz [ 396.251488][ T5890] usb 7-1: SerialNumber: syz [ 396.259421][ T5890] usb 7-1: config 0 descriptor?? [ 396.265666][ T5830] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 396.284320][T10958] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 396.296851][ T5890] hub 7-1:0.0: bad descriptor, ignoring hub [ 396.307313][ T5890] hub 7-1:0.0: probe with driver hub failed with error -5 [ 396.319700][ T5890] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input69 [ 396.336503][ T40] usb 8-1: USB disconnect, device number 13 [ 396.432049][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 396.441869][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.452562][ T5830] usb 3-1: config 0 has no interfaces? [ 396.460324][ T5830] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 396.473800][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.482036][ T5830] usb 3-1: Product: syz [ 396.486330][ T5830] usb 3-1: Manufacturer: syz [ 396.491007][ T5830] usb 3-1: SerialNumber: syz [ 396.500383][ T5830] usb 3-1: config 0 descriptor?? [ 396.511134][T10958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.522248][T10958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.540768][T10957] lo: left promiscuous mode [ 397.194787][ T5890] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 397.371919][ T5890] usb 8-1: Using ep0 maxpacket: 8 [ 397.388291][ T5890] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 397.398792][ T8647] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 397.408335][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.428081][ T5890] usb 8-1: Product: syz [ 397.433144][ T5890] usb 8-1: Manufacturer: syz [ 397.437912][ T5890] usb 8-1: SerialNumber: syz [ 397.445223][ T5890] usb 8-1: config 0 descriptor?? [ 397.540114][T10984] x_tables: duplicate underflow at hook 1 [ 397.572875][ T8647] usb 7-1: device firmware changed [ 397.583713][ T5830] usb 7-1: USB disconnect, device number 11 [ 397.657914][ T5890] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 397.751473][ T5830] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 397.911189][ T5830] usb 7-1: Using ep0 maxpacket: 16 [ 397.918408][ T5830] usb 7-1: config 0 has an invalid interface number: 250 but max is 0 [ 397.929800][ T5830] usb 7-1: config 0 has no interface number 0 [ 397.936205][ T5830] usb 7-1: config 0 interface 250 altsetting 229 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 397.947748][ T5830] usb 7-1: config 0 interface 250 has no altsetting 0 [ 397.951808][ T9769] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 397.958806][ T5830] usb 7-1: New USB device found, idVendor=0eb0, idProduct=3457, bcdDevice=32.8e [ 397.972611][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.980710][ T5830] usb 7-1: Product: syz [ 397.984975][ T5830] usb 7-1: Manufacturer: syz [ 397.989618][ T5830] usb 7-1: SerialNumber: syz [ 397.998096][ T5830] usb 7-1: config 0 descriptor?? [ 398.111218][ T9769] usb 5-1: Using ep0 maxpacket: 32 [ 398.122061][ T9769] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 398.134370][ T9769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.142868][ T9769] usb 5-1: Product: syz [ 398.147074][ T9769] usb 5-1: Manufacturer: syz [ 398.153758][ T9769] usb 5-1: SerialNumber: syz [ 398.165824][ T9769] usb 5-1: config 0 descriptor?? [ 398.174417][ T9769] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 398.183843][ T9769] dvb-usb: bulk message failed: -22 (2/0) [ 398.192905][ T9769] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 398.203493][ T9769] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 398.212323][ T9769] usb 5-1: media controller created [ 398.230263][ T9769] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 398.255881][ T9769] usb 5-1: selecting invalid altsetting 7 [ 398.261958][ T9769] cxusb: set interface failed [ 398.266710][ T9769] dvb-usb: bulk message failed: -22 (1/0) [ 398.306927][ T9769] DVB: Unable to find symbol lgdt330x_attach() [ 398.313200][ T9769] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 398.374876][T10986] cxusb: i2c wr: len=79 is too big! [ 398.374876][T10986] [ 398.391153][ T9769] rc_core: IR keymap rc-dvico-portable not found [ 398.397760][ T9769] Registered IR keymap rc-empty [ 398.407256][ T9769] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 398.419348][ T9769] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input70 [ 398.434124][ T9769] dvb-usb: schedule remote query interval to 100 msecs. [ 398.443365][ T9769] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 398.462031][ T9769] usb 5-1: USB disconnect, device number 40 [ 398.557960][ T9769] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 399.001985][T10995] FAULT_INJECTION: forcing a failure. [ 399.001985][T10995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.015347][T10995] CPU: 0 UID: 0 PID: 10995 Comm: syz.4.1768 Not tainted syzkaller #0 PREEMPT(full) [ 399.015378][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.015392][T10995] Call Trace: [ 399.015401][T10995] [ 399.015411][T10995] dump_stack_lvl+0x189/0x250 [ 399.015445][T10995] ? __pfx____ratelimit+0x10/0x10 [ 399.015473][T10995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.015500][T10995] ? __pfx__printk+0x10/0x10 [ 399.015526][T10995] ? __might_fault+0xb0/0x130 [ 399.015570][T10995] should_fail_ex+0x414/0x560 [ 399.015604][T10995] _copy_from_user+0x2d/0xb0 [ 399.015641][T10995] ucma_resolve_ip+0x9a/0x280 [ 399.015674][T10995] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 399.015717][T10995] ucma_write+0x249/0x2e0 [ 399.015744][T10995] ? __pfx_ucma_write+0x10/0x10 [ 399.015767][T10995] ? security_file_permission+0x75/0x290 [ 399.015794][T10995] ? rw_verify_area+0x255/0x4d0 [ 399.015830][T10995] vfs_writev+0x4b6/0x960 [ 399.015860][T10995] ? __pfx_ucma_write+0x10/0x10 [ 399.015888][T10995] ? __pfx_vfs_writev+0x10/0x10 [ 399.015930][T10995] ? __fget_files+0x2a/0x420 [ 399.015960][T10995] ? __fget_files+0x3a0/0x420 [ 399.015985][T10995] ? __fget_files+0x2a/0x420 [ 399.016020][T10995] do_writev+0x14d/0x2d0 [ 399.016049][T10995] ? __pfx_do_writev+0x10/0x10 [ 399.016078][T10995] ? do_syscall_64+0xbe/0xfa0 [ 399.016109][T10995] do_syscall_64+0xfa/0xfa0 [ 399.016138][T10995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.016159][T10995] ? clear_bhb_loop+0x60/0xb0 [ 399.016184][T10995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.016205][T10995] RIP: 0033:0x7f80f638f749 [ 399.016225][T10995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.016242][T10995] RSP: 002b:00007f80f45f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 399.016266][T10995] RAX: ffffffffffffffda RBX: 00007f80f65e6090 RCX: 00007f80f638f749 [ 399.016282][T10995] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 399.016301][T10995] RBP: 00007f80f45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 399.016315][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.016327][T10995] R13: 00007f80f65e6128 R14: 00007f80f65e6090 R15: 00007fff79a4b798 [ 399.016362][T10995] [ 399.267524][ T10] usb 3-1: USB disconnect, device number 4 [ 399.276531][ T5890] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 399.298494][ T5890] usb 8-1: USB disconnect, device number 14 [ 399.425418][T11000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1770'. [ 399.435925][T11000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1770'. [ 400.170087][ T5830] cxacru 7-1:0.250: cxacru_bind: interface has incorrect endpoints [ 400.199135][ T5830] cxacru 7-1:0.250: usbatm_usb_probe: bind failed: -19! [ 400.228957][ T5830] usb 7-1: USB disconnect, device number 12 [ 400.495959][ T9769] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 400.651202][ T9769] usb 5-1: Using ep0 maxpacket: 8 [ 400.658829][ T9769] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.672134][ T9769] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.684702][ T9769] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 400.698732][ T9769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.708301][ T9769] usb 5-1: Product: syz [ 400.717769][ T9769] usb 5-1: Manufacturer: syz [ 400.728207][ T9769] usb 5-1: SerialNumber: syz [ 400.738933][ T9769] usb 5-1: config 0 descriptor?? [ 400.761158][ T10] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 400.923899][ T10] usb 7-1: config 0 has an invalid interface number: 237 but max is 0 [ 400.937294][ T10] usb 7-1: config 0 has no interface number 0 [ 400.956870][ T10] usb 7-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=57.70 [ 400.966674][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.974928][ T10] usb 7-1: Product: syz [ 400.979700][ T10] usb 7-1: Manufacturer: syz [ 400.985831][ T10] usb 7-1: SerialNumber: syz [ 400.994893][ T10] usb 7-1: config 0 descriptor?? [ 401.008099][ T10] gspca_main: spca505-2.14.0 probing 041e:401d [ 401.388291][ T52] Bluetooth: unknown link type 128 [ 401.498556][ T10] gspca_spca505: reg write: error -71 [ 401.518523][ T10] spca505 7-1:0.237: probe with driver spca505 failed with error -5 [ 401.544908][ T10] usb 7-1: USB disconnect, device number 13 [ 401.633118][T11042] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1786'. [ 401.643458][T11042] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1786'. [ 401.797198][T11051] binder: 11050:11051 ioctl c0184800 200000000240 returned -22 [ 402.097686][T11060] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 402.705690][T11067] binder: 11066:11067 ioctl c0306201 2000000001c0 returned -22 [ 402.801991][T11072] netlink: 'syz.6.1795': attribute type 10 has an invalid length. [ 402.815015][T11072] batman_adv: batadv0: Adding interface: wlan0 [ 402.821930][T11072] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.851282][T11072] batman_adv: batadv0: Interface activated: wlan0 [ 402.958307][T11074] comedi: valid board names for 8255 driver are: [ 402.964831][T11074] 8255 [ 402.967637][T11074] comedi: valid board names for vmk80xx driver are: [ 402.975070][T11074] vmk80xx [ 402.978180][T11074] comedi: valid board names for usbduxsigma driver are: [ 402.985181][ T5883] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 402.995113][T11074] usbduxsigma [ 402.998593][T11074] comedi: valid board names for usbduxfast driver are: [ 403.007201][T11074] usbduxfast [ 403.010542][T11074] comedi: valid board names for usbdux driver are: [ 403.017163][T11074] usbdux [ 403.020237][T11074] comedi: valid board names for ni6501 driver are: [ 403.026981][T11074] ni6501 [ 403.029963][T11074] comedi: valid board names for dt9812 driver are: [ 403.037486][T11074] dt9812 [ 403.040477][T11074] comedi: valid board names for ni_labpc_cs driver are: [ 403.054502][T11074] ni_labpc_cs [ 403.057943][T11074] comedi: valid board names for ni_daq_700 driver are: [ 403.067536][T11074] ni_daq_700 [ 403.070885][T11074] comedi: valid board names for labpc_pci driver are: [ 403.078146][T11074] labpc_pci [ 403.084210][T11074] comedi: valid board names for adl_pci9118 driver are: [ 403.092522][T11074] pci9118dg [ 403.095767][T11074] pci9118hg [ 403.098993][T11074] pci9118hr [ 403.102915][T11074] comedi: valid board names for 8255_pci driver are: [ 403.109660][T11074] 8255_pci [ 403.113591][T11074] comedi: valid board names for s526 driver are: [ 403.120008][T11074] s526 [ 403.122941][T11074] comedi: valid board names for multiq3 driver are: [ 403.130061][T11074] multiq3 [ 403.133263][T11074] comedi: valid board names for pcmuio driver are: [ 403.135997][ T5883] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 403.154476][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.160960][T11074] pcmuio48 [ 403.167519][T11074] pcmuio96 [ 403.170026][ T5883] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 403.170658][T11074] comedi: valid board names for pcmmio driver are: [ 403.189501][ T5883] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 403.199862][ T5883] usb 8-1: Manufacturer: syz [ 403.208050][ T5883] usb 8-1: config 0 descriptor?? [ 403.208543][T11074] pcmmio [ 403.216661][T11074] comedi: valid board names for pcmda12 driver are: [ 403.233252][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1798'. [ 403.253102][T11074] pcmda12 [ 403.260728][T11074] comedi: valid board names for pcmad driver are: [ 403.276133][T11074] pcmad12 [ 403.284253][T11074] pcmad16 [ 403.292838][T11074] comedi: valid board names for ni_labpc driver are: [ 403.312630][T11074] lab-pc-1200 [ 403.316710][ T9769] usb 5-1: USB disconnect, device number 41 [ 403.319634][T11074] lab-pc-1200ai [ 403.323145][ T5883] rc_core: IR keymap rc-hauppauge not found [ 403.323163][ T5883] Registered IR keymap rc-empty [ 403.324573][ T5883] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 403.335697][T11074] lab-pc+ [ 403.382823][ T5883] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input71 [ 403.396592][T11074] comedi: valid board names for atmio16 driver are: [ 403.418206][T11074] atmio16 [ 403.422904][T11074] atmio16d [ 403.431185][T11074] comedi: valid board names for ni_at_ao driver are: [ 403.462573][ T52] Bluetooth: hci0: command tx timeout [ 403.468156][T11074] at-ao-6 [ 403.471319][T11074] at-ao-10 [ 403.474571][T11074] comedi: valid board names for ni_at_a2150 driver are: [ 403.485188][T11074] ni_at_a2150 [ 403.488626][T11074] comedi: valid board names for adq12b driver are: [ 403.496969][T11074] adq12b [ 403.499971][T11074] comedi: valid board names for mpc624 driver are: [ 403.507850][T11074] mpc624 [ 403.510876][T11074] comedi: valid board names for c6xdigio driver are: [ 403.518040][T11074] c6xdigio [ 403.521303][T11074] comedi: valid board names for aio_iiro_16 driver are: [ 403.528445][T11074] aio_iiro_16 [ 403.531921][T11074] comedi: valid board names for aio_aio12_8 driver are: [ 403.539071][T11074] aio_aio12_8 [ 403.543508][T11074] aio_ai12_8 [ 403.546841][T11074] aio_ao12_4 [ 403.550393][T11074] comedi: valid board names for fl512 driver are: [ 403.556967][T11074] fl512 [ 403.563640][T11074] comedi: valid board names for dmm32at driver are: [ 403.570493][T11074] dmm32at [ 403.578720][T11074] comedi: valid board names for dt282x driver are: [ 403.590364][T11074] dt2821 [ 403.599444][T11074] dt2821-f [ 403.602821][T11074] dt2821-g [ 403.607430][T11074] dt2823 [ 403.610432][T11074] dt2824-pgh [ 403.613916][T11074] dt2824-pgl [ 403.617335][T11074] dt2825 [ 403.620345][T11074] dt2827 [ 403.628417][ C0] igorplugusb 8-1:0.0: receive overflow invalid: 44 [ 403.629963][T11074] dt2828 [ 403.640398][T11074] dt2829 [ 403.643513][T11074] dt21-ez [ 403.646572][T11074] dt23-ez [ 403.649786][T11074] dt24-ez [ 403.654254][T11074] dt24-ez-pgl [ 403.657768][T11074] comedi: valid board names for dt2817 driver are: [ 403.666948][T11074] dt2817 [ 403.670028][T11074] comedi: valid board names for dt2815 driver are: [ 403.677116][T11074] dt2815 [ 403.680138][T11074] comedi: valid board names for dt2814 driver are: [ 403.686885][T11074] dt2814 [ 403.689979][T11074] comedi: valid board names for dt2811 driver are: [ 403.696567][T11074] dt2811-pgh [ 403.699880][T11074] dt2811-pgl [ 403.711233][T11074] comedi: valid board names for dt2801 driver are: [ 403.717835][T11074] dt2801 [ 403.720816][T11074] comedi: valid board names for das6402 driver are: [ 403.727548][T11074] das6402-12 [ 403.730865][T11074] das6402-16 [ 403.731203][ T9769] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 403.736697][T11074] comedi: valid board names for das1800 driver are: [ 403.748440][T11074] das-1701st [ 403.752863][T11074] das-1701st-da [ 403.756452][T11074] das-1702st [ 403.759769][T11074] das-1702st-da [ 403.766941][T11074] das-1702hr [ 403.770302][T11074] das-1702hr-da [ 403.773961][T11074] das-1701ao [ 403.777275][T11074] das-1702ao [ 403.780675][T11074] das-1801st [ 403.785081][T11074] das-1801st-da [ 403.788681][T11074] das-1802st [ 403.792047][T11074] das-1802st-da [ 403.795620][T11074] das-1802hr [ 403.798925][T11074] das-1802hr-da [ 403.802613][T11074] das-1801hc [ 403.805927][T11074] das-1802hc [ 403.810249][T11074] das-1801ao [ 403.815729][T11074] das-1802ao [ 403.819078][T11074] comedi: valid board names for das800 driver are: [ 403.825686][T11074] das-800 [ 403.828940][T11074] cio-das800 [ 403.829494][T11067] netlink: 37 bytes leftover after parsing attributes in process `syz.7.1794'. [ 403.832302][T11074] das-801 [ 403.832314][T11074] cio-das801 [ 403.832325][T11074] das-802 [ 403.832334][T11074] cio-das802 [ 403.832342][T11074] cio-das802/16 [ 403.832352][T11074] comedi: valid board names for isa-das08 driver are: [ 403.832363][T11074] isa-das08 [ 403.832372][T11074] das08-pgm [ 403.832381][T11074] das08-pgh [ 403.832390][T11074] das08-pgl [ 403.832399][T11074] das08-aoh [ 403.832408][T11074] das08-aol [ 403.847139][ T130] usb 8-1: USB disconnect, device number 15 [ 403.850285][T11074] das08-aom [ 403.898094][T11074] das08/jr-ao [ 403.902081][T11074] das08jr-16-ao [ 403.905759][T11074] pc104-das08 [ 403.909196][T11074] das08jr/16 [ 403.912431][ T9769] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 403.914236][T11074] comedi: valid board names for das16m1 driver are: [ 403.924971][ T9769] usb 5-1: config 0 has no interface number 0 [ 403.927380][T11074] das16m1 [ 403.936466][ T9769] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 403.936870][T11074] comedi: valid board names for dac02 driver are: [ 403.957815][T11074] dac02 [ 403.963074][T11074] comedi: valid board names for rti802 driver are: [ 403.971991][T11074] rti802 [ 403.974048][ T9769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.975087][T11074] comedi: valid board names for rti800 driver are: [ 403.993405][T11074] rti800 [ 403.996525][T11074] rti815 [ 403.999720][T11074] comedi: valid board names for pcm3724 driver are: [ 404.006535][ T9769] usb 5-1: config 0 descriptor?? [ 404.014439][T11074] pcm3724 [ 404.015623][ T9769] usb 5-1: selecting invalid altsetting 1 [ 404.017539][T11074] comedi: valid board names for pcl818 driver are: [ 404.032722][T11074] pcl818l [ 404.033933][ T9769] dvb_ttusb_budget: ttusb_init_controller: error [ 404.035913][T11074] pcl818h [ 404.043622][ T9769] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 404.047768][T11074] pcl818hd [ 404.057189][T11074] pcl818hg [ 404.060597][T11074] pcl818 [ 404.073654][T11074] pcl718 [ 404.091499][T11074] pcm3718 [ 404.094684][T11074] comedi: valid board names for pcl816 driver are: [ 404.104219][T11074] pcl816 [ 404.107227][T11074] pcl814b [ 404.110292][T11074] comedi: valid board names for pcl812 driver are: [ 404.117952][T11074] pcl812 [ 404.120961][T11074] pcl812pg [ 404.125921][T11074] acl8112pg [ 404.129371][T11074] acl8112dg [ 404.134276][T11074] acl8112hg [ 404.137522][T11074] a821pgl [ 404.140699][T11074] a821pglnda [ 404.144198][T11074] a821pgh [ 404.147500][ T9769] DVB: Unable to find symbol cx22700_attach() [ 404.153945][T11074] a822pgl [ 404.157022][T11074] a822pgh [ 404.160084][T11074] a823pgl [ 404.165121][T11074] a823pgh [ 404.168548][T11074] pcl813 [ 404.171618][T11074] pcl813b [ 404.176631][T11074] acl8113 [ 404.179706][T11074] iso813 [ 404.184335][T11074] acl8216 [ 404.187494][T11074] a826pg [ 404.190464][T11074] comedi: valid board names for pcl730 driver are: [ 404.198567][T11074] pcl730 [ 404.201729][T11074] iso730 [ 404.204869][T11074] acl7130 [ 404.213189][T11074] pcm3730 [ 404.221568][ T9769] DVB: Unable to find symbol tda10046_attach() [ 404.227918][ T9769] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 404.236048][T11074] pcl725 [ 404.239032][T11074] p8r8dio [ 404.244458][T11074] acl7225b [ 404.247639][T11074] p16r16dio [ 404.250870][T11074] pcl733 [ 404.254515][ T9769] usb 5-1: USB disconnect, device number 42 [ 404.262351][T11074] pcl734 [ 404.283621][T11074] opmm-1616-xt [ 404.287150][T11074] pearl-mm-p [ 404.290441][T11074] ir104-pbf [ 404.296779][T11074] comedi: valid board names for pcl726 driver are: [ 404.307880][T11074] pcl726 [ 404.310886][T11074] pcl727 [ 404.314817][T11074] pcl728 [ 404.317804][T11074] acl6126 [ 404.323976][T11074] acl6128 [ 404.327056][T11074] comedi: valid board names for pcl724 driver are: [ 404.333740][T11074] pcl724 [ 404.336831][T11074] pcl722 [ 404.339771][T11074] pcl731 [ 404.343237][T11074] acl7122 [ 404.346315][T11074] acl7124 [ 404.349352][T11074] pet48dio [ 404.352867][T11074] pcmio48 [ 404.356012][T11074] onyx-mm-dio [ 404.359446][T11074] comedi: valid board names for pcl711 driver are: [ 404.371490][T11074] pcl711 [ 404.374527][T11074] pcl711b [ 404.379061][T11074] acl8112hg [ 404.382947][T11074] acl8112dg [ 404.386297][T11074] comedi: valid board names for amplc_pc263 driver are: [ 404.394451][T11074] pc263 [ 404.397430][T11074] comedi: valid board names for amplc_pc236 driver are: [ 404.405122][T11074] pc36at [ 404.414989][T11074] comedi: valid board names for amplc_dio200 driver are: [ 404.441409][T11074] pc212e [ 404.444423][T11074] pc214e [ 404.459050][T11074] pc215e [ 404.469558][T11074] pc218e [ 404.473401][T11074] pc272e [ 404.476488][T11074] comedi: valid board names for comedi_parport driver are: [ 404.486171][T11074] comedi_parport [ 404.489951][T11074] comedi: valid board names for comedi_test driver are: [ 404.497153][T11074] comedi_test [ 404.500660][T11074] comedi: valid board names for comedi_bond driver are: [ 404.512850][T11074] comedi_bond [ 404.811411][ T9769] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 404.985020][ T9769] usb 3-1: config 0 has an invalid interface number: 77 but max is 0 [ 405.009758][ T9769] usb 3-1: config 0 has no interface number 0 [ 405.017636][ T9769] usb 3-1: config 0 interface 77 altsetting 7 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 405.029653][ T9769] usb 3-1: config 0 interface 77 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 405.042437][ T9769] usb 3-1: config 0 interface 77 has no altsetting 0 [ 405.054093][ T9769] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=ea.48 [ 405.063842][ T9769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.135536][ T5883] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 405.144879][ T9769] usb 3-1: Product: syz [ 405.148810][ T30] audit: type=1800 audit(2000000180.370:80): pid=11118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1812" name="bus" dev="overlay" ino=845 res=0 errno=0 [ 405.149418][ T9769] usb 3-1: Manufacturer: syz [ 405.176154][ T9769] usb 3-1: SerialNumber: syz [ 405.195627][ T9769] usb 3-1: config 0 descriptor?? [ 405.203378][T11096] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 405.219701][T11096] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 405.245530][ T9769] redrat3 3-1:0.77: Couldn't find all endpoints [ 405.321548][ T5883] usb 7-1: Using ep0 maxpacket: 8 [ 405.332623][ T5883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.349283][ T5883] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.363149][ T5883] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 405.373047][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.382477][ T5883] usb 7-1: Product: syz [ 405.386838][ T5883] usb 7-1: Manufacturer: syz [ 405.392055][ T5883] usb 7-1: SerialNumber: syz [ 405.400291][ T5883] usb 7-1: config 0 descriptor?? [ 405.449284][ T5883] usb 3-1: USB disconnect, device number 5 [ 406.641307][ T10] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 406.793821][ T10] usb 8-1: config 0 has an invalid interface number: 168 but max is 0 [ 406.802661][ T10] usb 8-1: config 0 has no interface number 0 [ 406.808838][ T10] usb 8-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 406.818016][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.834779][ T10] usb 8-1: config 0 descriptor?? [ 406.861271][ T5883] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 406.891277][ T5830] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 407.031239][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 407.037383][ T5883] usb 3-1: no configurations [ 407.041776][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 407.048003][ T5883] usb 3-1: can't read configurations, error -22 [ 407.054902][ T5830] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 407.066624][ T10] usb 8-1: string descriptor 0 read error: -71 [ 407.080045][ T5830] usb 5-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 407.080134][ T10] usb-storage 8-1:0.168: USB Mass Storage device detected [ 407.096009][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 407.105496][ T5830] usb 5-1: Product: syz [ 407.110093][ T5830] usb 5-1: Manufacturer: syz [ 407.115325][ T5830] usb 5-1: SerialNumber: syz [ 407.124015][ T5830] usb 5-1: config 0 descriptor?? [ 407.128895][ T10] usb-storage 8-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 407.137462][ T5830] pwc: Philips SPC 880NC USB webcam detected. [ 407.183965][ T5883] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 407.197033][ T10] usb 8-1: USB disconnect, device number 16 [ 407.336404][ T5830] pwc: Warning: more than 1 configuration available. [ 407.342441][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 407.350983][ T5883] usb 3-1: no configurations [ 407.351448][ T5830] pwc: Failed to set LED on/off time (-71) [ 407.357353][ T5883] usb 3-1: can't read configurations, error -22 [ 407.362367][ T5830] pwc: send_video_command error -71 [ 407.369405][ T5883] usb usb3-port1: attempt power cycle [ 407.374594][ T5830] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 407.388123][ T5830] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 407.402744][ T5830] usb 5-1: USB disconnect, device number 43 [ 407.721263][ T5883] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 407.741940][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 407.747802][ T5883] usb 3-1: no configurations [ 407.755289][ T5883] usb 3-1: can't read configurations, error -22 [ 407.902932][ T5883] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 407.931798][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 407.937886][ T5883] usb 3-1: no configurations [ 407.945590][ T5883] usb 3-1: can't read configurations, error -22 [ 407.952659][ T5883] usb usb3-port1: unable to enumerate USB device [ 407.970955][ T5830] usb 7-1: USB disconnect, device number 14 [ 408.094466][T11182] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1833'. [ 408.444363][ T5830] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 408.511269][ T40] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 408.612976][ T5830] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 408.622052][ T5830] usb 7-1: config 0 has no interface number 0 [ 408.628291][ T5830] usb 7-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=67.bb [ 408.637604][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.648614][ T5830] usb 7-1: config 0 descriptor?? [ 408.653991][ T40] usb 5-1: device descriptor read/64, error -71 [ 408.701268][ T5915] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 408.856214][ T5915] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 408.865521][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.878866][ T5915] usb 8-1: Product: syz [ 408.886861][ T5915] usb 8-1: Manufacturer: syz [ 408.891495][ T40] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 408.891622][ T5915] usb 8-1: SerialNumber: syz [ 408.903952][ T5830] usb 7-1: string descriptor 0 read error: -71 [ 408.909419][ T5830] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.84/input/input73 [ 408.923388][ T5915] usb 8-1: config 0 descriptor?? [ 408.946395][ T5915] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 408.963410][ T5181] bcm5974 7-1:0.84: could not read from device [ 408.973888][ T5181] bcm5974 7-1:0.84: could not read from device [ 408.977263][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 408.997167][ T5830] usb 7-1: USB disconnect, device number 15 [ 408.999659][ T5915] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 409.017203][ T5915] usb 8-1: media controller created [ 409.045266][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.051471][ T40] usb 5-1: device descriptor read/64, error -71 [ 409.129206][ T5915] DVB: Unable to find symbol mt352_attach() [ 409.150379][T11197] dvb-usb: bulk message failed: -22 (7/0) [ 409.172004][ T40] usb usb5-port1: attempt power cycle [ 409.178142][ T5915] DVB: Unable to find symbol nxt6000_attach() [ 409.186146][ T5915] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 409.202645][ T5915] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input74 [ 409.216449][ T5915] dvb-usb: schedule remote query interval to 1000 msecs. [ 409.223889][ T5915] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 409.234210][ T5915] dvb-usb: bulk message failed: -22 (7/0) [ 409.240316][ T5915] dvb-usb: bulk message failed: -22 (7/0) [ 409.249457][ T5915] usb 8-1: USB disconnect, device number 17 [ 409.324696][ T5915] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 409.521238][ T40] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 409.545937][ T40] usb 5-1: device descriptor read/8, error -71 [ 409.605083][T11202] Failed to get privilege flags for destination (handle=0x2:0x0) [ 409.791181][ T40] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 409.823146][ T40] usb 5-1: device descriptor read/8, error -71 [ 409.932107][ T40] usb usb5-port1: unable to enumerate USB device [ 409.982413][ T5915] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 410.151143][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 410.162347][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.173007][ T5915] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 410.193409][ T5915] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 410.219210][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.231192][ T5915] usb 3-1: Product: syz [ 410.235434][ T5915] usb 3-1: Manufacturer: syz [ 410.240096][ T5915] usb 3-1: SerialNumber: syz [ 410.259749][ T5915] usb 3-1: config 0 descriptor?? [ 410.541270][ T40] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 410.711274][ T40] usb 8-1: Using ep0 maxpacket: 8 [ 410.717427][ T40] usb 8-1: no configurations [ 410.722604][ T40] usb 8-1: can't read configurations, error -22 [ 410.851187][ T40] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 411.011230][ T40] usb 8-1: Using ep0 maxpacket: 8 [ 411.018509][ T40] usb 8-1: no configurations [ 411.023324][ T40] usb 8-1: can't read configurations, error -22 [ 411.029853][ T40] usb usb8-port1: attempt power cycle [ 411.162420][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1850'. [ 411.391447][ T40] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 411.412123][ T40] usb 8-1: Using ep0 maxpacket: 8 [ 411.421640][ T40] usb 8-1: no configurations [ 411.426394][ T40] usb 8-1: can't read configurations, error -22 [ 411.573759][ T40] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 411.601900][ T40] usb 8-1: Using ep0 maxpacket: 8 [ 411.608085][ T40] usb 8-1: no configurations [ 411.617382][ T40] usb 8-1: can't read configurations, error -22 [ 411.633115][ T40] usb usb8-port1: unable to enumerate USB device [ 411.935509][T11258] ªªªªªª speed is unknown, defaulting to 1000 [ 411.962280][ T40] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 412.123317][ T40] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 412.134450][ T40] usb 7-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 412.145964][ T40] usb 7-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 412.163179][ T40] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.173136][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 412.181593][ T40] usb 7-1: SerialNumber: syz [ 412.401615][ T40] rndis_host 7-1:253.0: RNDIS init failed, -71 [ 412.410623][ T40] rndis_host 7-1:253.0: probe with driver rndis_host failed with error -71 [ 412.429462][ T40] usb 7-1: USB disconnect, device number 16 [ 412.655391][ T5915] usb 3-1: USB disconnect, device number 10 [ 412.697880][T11264] FAULT_INJECTION: forcing a failure. [ 412.697880][T11264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.711779][T11264] CPU: 0 UID: 0 PID: 11264 Comm: syz.2.1860 Not tainted syzkaller #0 PREEMPT(full) [ 412.711810][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.711824][T11264] Call Trace: [ 412.711833][T11264] [ 412.711843][T11264] dump_stack_lvl+0x189/0x250 [ 412.711875][T11264] ? __pfx____ratelimit+0x10/0x10 [ 412.711903][T11264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.711929][T11264] ? __pfx__printk+0x10/0x10 [ 412.711955][T11264] ? __might_fault+0xb0/0x130 [ 412.712000][T11264] should_fail_ex+0x414/0x560 [ 412.712032][T11264] _copy_from_user+0x2d/0xb0 [ 412.712055][T11264] input_event_from_user+0xb2/0x280 [ 412.712082][T11264] ? __pfx_input_event_from_user+0x10/0x10 [ 412.712113][T11264] ? input_inject_event+0xb6/0x340 [ 412.712143][T11264] evdev_write+0x2a6/0x480 [ 412.712173][T11264] ? __pfx_evdev_write+0x10/0x10 [ 412.712211][T11264] ? bpf_lsm_file_permission+0x9/0x20 [ 412.712234][T11264] ? security_file_permission+0x75/0x290 [ 412.712261][T11264] ? rw_verify_area+0x255/0x4d0 [ 412.712298][T11264] ? __lock_acquire+0xab9/0xd20 [ 412.712319][T11264] ? __pfx_evdev_write+0x10/0x10 [ 412.712349][T11264] vfs_write+0x27e/0xb30 [ 412.712378][T11264] ? __pfx_vfs_write+0x10/0x10 [ 412.712401][T11264] ? __fget_files+0x2a/0x420 [ 412.712429][T11264] ? __fget_files+0x2a/0x420 [ 412.712453][T11264] ? __fget_files+0x3a0/0x420 [ 412.712478][T11264] ? __fget_files+0x2a/0x420 [ 412.712519][T11264] ksys_write+0x145/0x250 [ 412.712542][T11264] ? __pfx_ksys_write+0x10/0x10 [ 412.712566][T11264] ? do_syscall_64+0xbe/0xfa0 [ 412.712597][T11264] do_syscall_64+0xfa/0xfa0 [ 412.712625][T11264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.712647][T11264] ? clear_bhb_loop+0x60/0xb0 [ 412.712673][T11264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.712694][T11264] RIP: 0033:0x7ff91858f749 [ 412.712713][T11264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.712737][T11264] RSP: 002b:00007ff9193a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 412.712761][T11264] RAX: ffffffffffffffda RBX: 00007ff9187e5fa0 RCX: 00007ff91858f749 [ 412.712781][T11264] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 412.712802][T11264] RBP: 00007ff9193a0090 R08: 0000000000000000 R09: 0000000000000000 [ 412.712816][T11264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 412.712829][T11264] R13: 00007ff9187e6038 R14: 00007ff9187e5fa0 R15: 00007fff1b367488 [ 412.712866][T11264] [ 413.134765][T11273] Invalid logical block size (3150) [ 414.069477][T11298] FAULT_INJECTION: forcing a failure. [ 414.069477][T11298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.085282][T11298] CPU: 0 UID: 0 PID: 11298 Comm: syz.4.1873 Not tainted syzkaller #0 PREEMPT(full) [ 414.085314][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.085328][T11298] Call Trace: [ 414.085337][T11298] [ 414.085346][T11298] dump_stack_lvl+0x189/0x250 [ 414.085379][T11298] ? __pfx____ratelimit+0x10/0x10 [ 414.085406][T11298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.085433][T11298] ? __pfx__printk+0x10/0x10 [ 414.085459][T11298] ? __might_fault+0xb0/0x130 [ 414.085500][T11298] should_fail_ex+0x414/0x560 [ 414.085534][T11298] _copy_from_iter+0x1cd/0x1630 [ 414.085571][T11298] ? __build_skb_around+0x22d/0x3f0 [ 414.085597][T11298] ? __pfx__copy_from_iter+0x10/0x10 [ 414.085624][T11298] ? __alloc_skb+0x2f1/0x430 [ 414.085646][T11298] ? __pfx___alloc_skb+0x10/0x10 [ 414.085667][T11298] ? netlink_sendmsg+0x642/0xb30 [ 414.085686][T11298] ? skb_put+0x11b/0x210 [ 414.085704][T11298] netlink_sendmsg+0x6b2/0xb30 [ 414.085728][T11298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.085746][T11298] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 414.085777][T11298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.085794][T11298] sock_sendmsg_nosec+0x18f/0x1d0 [ 414.085817][T11298] ____sys_sendmsg+0x577/0x8b0 [ 414.085840][T11298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.085871][T11298] ? import_iovec+0x74/0xa0 [ 414.085888][T11298] ___sys_sendmsg+0x21f/0x2a0 [ 414.085906][T11298] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.085950][T11298] ? __fget_files+0x2a/0x420 [ 414.085968][T11298] ? __fget_files+0x3a0/0x420 [ 414.085993][T11298] __x64_sys_sendmsg+0x19b/0x260 [ 414.086012][T11298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.086036][T11298] ? __pfx_ksys_write+0x10/0x10 [ 414.086053][T11298] ? do_syscall_64+0xbe/0xfa0 [ 414.086075][T11298] do_syscall_64+0xfa/0xfa0 [ 414.086097][T11298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.086112][T11298] ? clear_bhb_loop+0x60/0xb0 [ 414.086131][T11298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.086149][T11298] RIP: 0033:0x7f80f638f749 [ 414.086169][T11298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.086188][T11298] RSP: 002b:00007f80f7153038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.086212][T11298] RAX: ffffffffffffffda RBX: 00007f80f65e5fa0 RCX: 00007f80f638f749 [ 414.086228][T11298] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000004 [ 414.086239][T11298] RBP: 00007f80f7153090 R08: 0000000000000000 R09: 0000000000000000 [ 414.086249][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.086258][T11298] R13: 00007f80f65e6038 R14: 00007f80f65e5fa0 R15: 00007fff79a4b798 [ 414.086282][T11298] [ 414.426389][T11300] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.1874'. [ 414.441951][ T5915] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 414.601232][ T5915] usb 8-1: Using ep0 maxpacket: 16 [ 414.608406][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.621250][ T5915] usb 8-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 414.630337][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.646436][ T5915] usb 8-1: config 0 descriptor?? [ 414.721581][ T5890] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 414.891195][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 414.898189][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.909687][ T5890] usb 3-1: config 0 has no interfaces? [ 414.921465][ T5890] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 414.932275][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.940439][ T5890] usb 3-1: Product: syz [ 414.945008][ T5890] usb 3-1: Manufacturer: syz [ 414.949660][ T5890] usb 3-1: SerialNumber: syz [ 414.957231][ T5890] usb 3-1: config 0 descriptor?? [ 415.068107][ T5915] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 415.075808][ T5915] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 415.083653][ T5915] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 415.090503][ T5915] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 415.097374][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 415.105217][ T5915] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 415.112470][ T5915] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 415.119288][ T5915] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 415.126710][ T5915] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 415.135794][ T5915] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 415.142791][ T5915] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 415.153143][ T5915] kye 0003:0458:0087.0029: hidraw0: USB HID v0.09 Device [HID 0458:0087] on usb-dummy_hcd.7-1/input0 [ 415.273054][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.283966][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 415.293124][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.305681][ T10] usb 5-1: config 0 descriptor?? [ 415.316824][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 415.662778][T11317] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1880'. [ 415.722802][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 415.733564][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 415.742249][T11311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.753977][T11311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.765133][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 415.772566][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 415.789152][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 415.796800][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 415.804932][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 416.015503][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 416.028117][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 416.040936][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 416.048519][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 416.057057][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 416.064377][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 416.071779][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 416.078670][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 416.087248][ T10] pwc: Registered as video103. [ 416.099058][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input75 [ 416.146950][ T10] usb 5-1: USB disconnect, device number 48 [ 416.344190][ T5890] usb 8-1: USB disconnect, device number 22 [ 416.791483][ T5890] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 416.928121][T11336] x_tables: unsorted entry at hook 2 [ 416.941410][T11337] x_tables: unsorted entry at hook 2 [ 416.953530][ T5890] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 416.982846][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 416.986265][T11340] FAULT_INJECTION: forcing a failure. [ 416.986265][T11340] name failslab, interval 1, probability 0, space 0, times 0 [ 416.991932][ T5890] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 417.041644][T11340] CPU: 0 UID: 0 PID: 11340 Comm: syz.6.1886 Not tainted syzkaller #0 PREEMPT(full) [ 417.041676][T11340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.041690][T11340] Call Trace: [ 417.041699][T11340] [ 417.041709][T11340] dump_stack_lvl+0x189/0x250 [ 417.041741][T11340] ? __pfx____ratelimit+0x10/0x10 [ 417.041768][T11340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.041796][T11340] ? __pfx__printk+0x10/0x10 [ 417.041825][T11340] ? __pfx___might_resched+0x10/0x10 [ 417.041852][T11340] ? fs_reclaim_acquire+0x7d/0x100 [ 417.041880][T11340] should_fail_ex+0x414/0x560 [ 417.041916][T11340] should_failslab+0xa8/0x100 [ 417.041943][T11340] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 417.041977][T11340] ? __alloc_skb+0x255/0x430 [ 417.041997][T11340] ? napi_skb_cache_get+0x4a5/0x790 [ 417.042017][T11340] ? napi_skb_cache_get+0x151/0x790 [ 417.042043][T11340] __alloc_skb+0x255/0x430 [ 417.042067][T11340] ? __pfx___alloc_skb+0x10/0x10 [ 417.042090][T11340] ? netlink_autobind+0xdb/0x300 [ 417.042114][T11340] ? netlink_autobind+0x2c2/0x300 [ 417.042145][T11340] netlink_sendmsg+0x5c6/0xb30 [ 417.042180][T11340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.042207][T11340] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 417.042252][T11340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.042276][T11340] sock_sendmsg_nosec+0x18f/0x1d0 [ 417.042309][T11340] ____sys_sendmsg+0x577/0x8b0 [ 417.042343][T11340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.042378][T11340] ? import_iovec+0x74/0xa0 [ 417.042404][T11340] ___sys_sendmsg+0x21f/0x2a0 [ 417.042431][T11340] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.042496][T11340] ? __fget_files+0x2a/0x420 [ 417.042521][T11340] ? __fget_files+0x3a0/0x420 [ 417.042568][T11340] __x64_sys_sendmsg+0x19b/0x260 [ 417.042597][T11340] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 417.042632][T11340] ? __pfx_ksys_write+0x10/0x10 [ 417.042657][T11340] ? do_syscall_64+0xbe/0xfa0 [ 417.042690][T11340] do_syscall_64+0xfa/0xfa0 [ 417.042719][T11340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.042741][T11340] ? clear_bhb_loop+0x60/0xb0 [ 417.042768][T11340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.042790][T11340] RIP: 0033:0x7fde4938f749 [ 417.042809][T11340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.042828][T11340] RSP: 002b:00007fde4a2d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.042853][T11340] RAX: ffffffffffffffda RBX: 00007fde495e5fa0 RCX: 00007fde4938f749 [ 417.042869][T11340] RDX: 0000000000040004 RSI: 00002000000001c0 RDI: 0000000000000004 [ 417.042884][T11340] RBP: 00007fde4a2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 417.042898][T11340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.042911][T11340] R13: 00007fde495e6038 R14: 00007fde495e5fa0 R15: 00007fffe921f438 [ 417.042946][T11340] [ 417.049314][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.365982][ T5890] usb 5-1: config 0 descriptor?? [ 417.371984][T11331] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 417.502664][T11350] binder: BINDER_SET_CONTEXT_MGR already set [ 417.519042][T11350] binder: 11349:11350 ioctl 4018620d 2000000002c0 returned -16 [ 417.572527][ T5948] usb 3-1: USB disconnect, device number 11 [ 417.666771][T11356] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1892'. [ 417.801817][ T5890] logitech 0003:046D:C298.002A: hidraw0: USB HID v1.01 Device [HID 046d:c298] on usb-dummy_hcd.4-1/input0 [ 417.813665][ T5890] logitech 0003:046D:C298.002A: no inputs found [ 417.921204][ T5948] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 418.083728][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 418.095976][ T5948] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 418.106013][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.114234][ T5948] usb 3-1: Product: syz [ 418.118524][ T5948] usb 3-1: Manufacturer: syz [ 418.123202][ T5948] usb 3-1: SerialNumber: syz [ 418.130097][ T5948] usb 3-1: config 0 descriptor?? [ 418.221296][ T5890] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 418.410837][ T5890] usb 8-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 418.420567][T11364] kvm: kvm [11363]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 418.426297][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.439668][T11364] 9p: Bad value for 'wfdno' [ 418.443575][ T5890] usb 8-1: Product: syz [ 418.448573][T11364] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1895'. [ 418.450901][ T5890] usb 8-1: Manufacturer: syz [ 418.493204][ T5890] usb 8-1: SerialNumber: syz [ 418.515740][ T5890] usb 8-1: config 0 descriptor?? [ 418.606668][ T10] usb 3-1: USB disconnect, device number 12 [ 418.745394][ T5948] usb 8-1: USB disconnect, device number 23 [ 419.610041][ T5911] usb 5-1: USB disconnect, device number 49 [ 419.711192][ T5890] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 419.881174][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 419.890666][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.914360][ T5890] usb 3-1: config 0 has no interfaces? [ 419.923890][ T5890] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 419.933214][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.945657][ T5890] usb 3-1: Product: syz [ 419.950447][ T5890] usb 3-1: Manufacturer: syz [ 419.955379][ T5890] usb 3-1: SerialNumber: syz [ 419.972709][ T5890] usb 3-1: config 0 descriptor?? [ 420.631187][ T5830] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 420.791148][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 420.809817][ T5830] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 420.818646][T11389] vxcan1: tx drop: invalid da for name 0xfffffffffffffffc [ 420.832938][ T5830] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 420.851119][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.869533][ T5830] usb 5-1: Product: syz [ 420.874014][ T5830] usb 5-1: Manufacturer: syz [ 420.884182][ T5830] usb 5-1: SerialNumber: syz [ 420.905604][ T5830] usb 5-1: config 0 descriptor?? [ 421.042863][T11393] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 421.056427][T11393] block device autoloading is deprecated and will be removed. [ 421.282970][T11395] overlayfs: overlapping lowerdir path [ 421.811198][ T5830] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 421.983883][ T5830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.011504][ T5830] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 422.020639][ T5830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.037776][ T5830] usb 8-1: config 0 descriptor?? [ 422.050857][ T5830] pwc: Askey VC010 type 2 USB webcam detected. [ 422.114752][T11368] Set syz1 is full, maxelem 65536 reached [ 422.257806][T11404] FAULT_INJECTION: forcing a failure. [ 422.257806][T11404] name failslab, interval 1, probability 0, space 0, times 0 [ 422.270732][T11404] CPU: 0 UID: 0 PID: 11404 Comm: syz.6.1909 Not tainted syzkaller #0 PREEMPT(full) [ 422.270760][T11404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 422.270775][T11404] Call Trace: [ 422.270782][T11404] [ 422.270789][T11404] dump_stack_lvl+0x189/0x250 [ 422.270813][T11404] ? __pfx____ratelimit+0x10/0x10 [ 422.270839][T11404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.270866][T11404] ? __pfx__printk+0x10/0x10 [ 422.270898][T11404] ? __pfx___might_resched+0x10/0x10 [ 422.270926][T11404] should_fail_ex+0x414/0x560 [ 422.270955][T11404] should_failslab+0xa8/0x100 [ 422.270974][T11404] __kmalloc_noprof+0xdf/0x800 [ 422.270988][T11404] ? kfree+0x4d/0x680 [ 422.271020][T11404] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 422.271058][T11404] tomoyo_realpath_from_path+0xe3/0x5d0 [ 422.271172][T11404] ? tomoyo_domain+0xd8/0x130 [ 422.271198][T11404] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 422.271225][T11404] tomoyo_path_number_perm+0x1e8/0x5a0 [ 422.271257][T11404] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 422.271321][T11404] ? __fget_files+0x2a/0x420 [ 422.271344][T11404] ? __fget_files+0x3a0/0x420 [ 422.271361][T11404] ? __fget_files+0x2a/0x420 [ 422.271393][T11404] security_file_ioctl+0xcb/0x2d0 [ 422.271421][T11404] __se_sys_ioctl+0x47/0x170 [ 422.271454][T11404] do_syscall_64+0xfa/0xfa0 [ 422.271479][T11404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.271494][T11404] ? clear_bhb_loop+0x60/0xb0 [ 422.271513][T11404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.271533][T11404] RIP: 0033:0x7fde4938f749 [ 422.271555][T11404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.271573][T11404] RSP: 002b:00007fde4a2d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.271596][T11404] RAX: ffffffffffffffda RBX: 00007fde495e5fa0 RCX: 00007fde4938f749 [ 422.271611][T11404] RDX: ffbfffffffffffff RSI: 00000000400c0930 RDI: 0000000000000004 [ 422.271626][T11404] RBP: 00007fde4a2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 422.271636][T11404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.271645][T11404] R13: 00007fde495e6038 R14: 00007fde495e5fa0 R15: 00007fffe921f438 [ 422.271670][T11404] [ 422.473020][ T5830] pwc: recv_control_msg error -32 req 02 val 2b00 [ 422.491301][T11404] ERROR: Out of memory at tomoyo_realpath_from_path. [ 422.512309][ T5830] pwc: recv_control_msg error -32 req 02 val 2700 [ 422.520767][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.530744][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.542809][ T5830] pwc: recv_control_msg error -32 req 02 val 2c00 [ 422.550790][ T10] usb 3-1: USB disconnect, device number 13 [ 422.561773][ T5830] pwc: recv_control_msg error -32 req 04 val 1000 [ 422.573556][ T5830] pwc: recv_control_msg error -32 req 04 val 1300 [ 422.592821][ T5830] pwc: recv_control_msg error -32 req 04 val 1400 [ 422.600459][ T5830] pwc: recv_control_msg error -32 req 02 val 2000 [ 422.856253][ T5830] pwc: recv_control_msg error -71 req 04 val 1500 [ 422.869113][ T5830] pwc: recv_control_msg error -71 req 02 val 2500 [ 422.883080][ T5830] pwc: recv_control_msg error -71 req 02 val 2400 [ 422.890202][ T5830] pwc: recv_control_msg error -71 req 02 val 2600 [ 422.895352][T11419] FAULT_INJECTION: forcing a failure. [ 422.895352][T11419] name failslab, interval 1, probability 0, space 0, times 0 [ 422.897478][ T5830] pwc: recv_control_msg error -71 req 02 val 2900 [ 422.921776][ T5830] pwc: recv_control_msg error -71 req 02 val 2800 [ 422.933936][ T5830] pwc: recv_control_msg error -71 req 04 val 1100 [ 422.945525][T11419] CPU: 0 UID: 0 PID: 11419 Comm: syz.2.1914 Not tainted syzkaller #0 PREEMPT(full) [ 422.945554][T11419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 422.945569][T11419] Call Trace: [ 422.945578][T11419] [ 422.945588][T11419] dump_stack_lvl+0x189/0x250 [ 422.945621][T11419] ? __pfx____ratelimit+0x10/0x10 [ 422.945648][T11419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.945674][T11419] ? __pfx__printk+0x10/0x10 [ 422.945706][T11419] ? __pfx___might_resched+0x10/0x10 [ 422.945736][T11419] should_fail_ex+0x414/0x560 [ 422.945769][T11419] should_failslab+0xa8/0x100 [ 422.945795][T11419] kmem_cache_alloc_noprof+0x88/0x700 [ 422.945828][T11419] ? __kernfs_new_node+0xd7/0x7e0 [ 422.945857][T11419] __kernfs_new_node+0xd7/0x7e0 [ 422.945878][T11419] ? __lock_acquire+0xab9/0xd20 [ 422.945910][T11419] ? __pfx___kernfs_new_node+0x10/0x10 [ 422.945933][T11419] ? kernfs_root+0x1c/0x230 [ 422.945961][T11419] ? kernfs_root+0x1c/0x230 [ 422.945981][T11419] ? kernfs_root+0x1c/0x230 [ 422.945999][T11419] ? kernfs_root+0x1c/0x230 [ 422.946033][T11419] kernfs_new_node+0x102/0x210 [ 422.946062][T11419] __kernfs_create_file+0x4b/0x2e0 [ 422.946094][T11419] sysfs_add_file_mode_ns+0x238/0x300 [ 422.946134][T11419] internal_create_group+0x66d/0x1170 [ 422.946175][T11419] ? __pfx_internal_create_group+0x10/0x10 [ 422.946211][T11419] sysfs_create_groups+0x59/0x120 [ 422.946236][T11419] device_add_attrs+0x13f/0x5a0 [ 422.946274][T11419] ? __pfx_device_add_attrs+0x10/0x10 [ 422.946302][T11419] ? kobject_put+0x52d/0x570 [ 422.946338][T11419] ? device_add_class_symlinks+0x21f/0x240 [ 422.946372][T11419] device_add+0x496/0xb80 [ 422.946407][T11419] input_register_device+0x9d3/0x1170 [ 422.946449][T11419] uinput_create_device+0x422/0x670 [ 422.946487][T11419] uinput_ioctl_handler+0x3f0/0x1570 [ 422.946517][T11419] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 422.946562][T11419] ? __fget_files+0x2a/0x420 [ 422.946593][T11419] ? bpf_lsm_file_ioctl+0x9/0x20 [ 422.946617][T11419] ? __pfx_uinput_ioctl+0x10/0x10 [ 422.946643][T11419] __se_sys_ioctl+0xfc/0x170 [ 422.946678][T11419] do_syscall_64+0xfa/0xfa0 [ 422.946706][T11419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.946727][T11419] ? clear_bhb_loop+0x60/0xb0 [ 422.946753][T11419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.946774][T11419] RIP: 0033:0x7ff91858f749 [ 422.946793][T11419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.946812][T11419] RSP: 002b:00007ff9193a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.946833][T11419] RAX: ffffffffffffffda RBX: 00007ff9187e5fa0 RCX: 00007ff91858f749 [ 422.946848][T11419] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 422.946860][T11419] RBP: 00007ff9193a0090 R08: 0000000000000000 R09: 0000000000000000 [ 422.946873][T11419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.946884][T11419] R13: 00007ff9187e6038 R14: 00007ff9187e5fa0 R15: 00007fff1b367488 [ 422.946918][T11419] [ 422.961192][ T5830] pwc: recv_control_msg error -71 req 04 val 1200 [ 423.223174][T11428] overlayfs: overlapping lowerdir path [ 423.280493][ T5830] pwc: Registered as video103. [ 423.330158][ T5830] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input77 [ 423.372542][ T5830] usb 8-1: USB disconnect, device number 24 [ 423.398003][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 423.560356][ T5890] usb 5-1: USB disconnect, device number 50 [ 423.782461][ T5911] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 423.951195][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 423.961398][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.143681][ T5911] usb 3-1: config 0 has no interfaces? [ 424.155641][ T5911] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 424.175067][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.193532][ T5911] usb 3-1: Product: syz [ 424.203668][ T5911] usb 3-1: Manufacturer: syz [ 424.225810][ T5911] usb 3-1: SerialNumber: syz [ 424.254026][ T5911] usb 3-1: config 0 descriptor?? [ 424.415573][T11454] overlayfs: overlapping lowerdir path [ 424.681390][ T5948] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 424.849903][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 424.868322][ T5948] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 424.883470][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.894183][ T5948] usb 5-1: Product: syz [ 424.910740][ T5948] usb 5-1: Manufacturer: syz [ 424.922924][ T5948] usb 5-1: SerialNumber: syz [ 424.938009][ T5948] usb 5-1: config 0 descriptor?? [ 424.947978][ T30] audit: type=1326 audit(2000000200.170:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11473 comm="syz.7.1933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f001bd8f749 code=0x0 [ 425.147016][ T5948] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 425.220622][ T30] audit: type=1326 audit(2000000200.440:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11481 comm="syz.6.1935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde4938f749 code=0x0 [ 425.311451][ T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 425.349038][ T5948] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 425.375235][T11487] binder_alloc: 11486: pid 11486 spamming oneway? 1 buffers allocated for a total size of 4096 [ 425.467656][T11490] overlayfs: failed to resolve './file1/file0': -2 [ 425.479803][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 425.490321][ T10] usb 8-1: config 0 has an invalid interface number: 160 but max is 0 [ 425.500110][ T10] usb 8-1: config 0 has no interface number 0 [ 425.506680][ T10] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 425.516138][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.527104][ T10] usb 8-1: config 0 descriptor?? [ 425.809917][ T10] usb 8-1: string descriptor 0 read error: -71 [ 425.819872][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 425.829803][ T10] gspca_sonixj: reg_w1 err -71 [ 425.835196][ T10] sonixj 8-1:0.160: probe with driver sonixj failed with error -71 [ 425.847130][ T10] usb 8-1: USB disconnect, device number 25 [ 425.932771][ T5915] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 426.091179][ T5915] usb 7-1: Using ep0 maxpacket: 16 [ 426.098297][ T5915] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 426.108876][ T5915] usb 7-1: config 1 has no interface number 1 [ 426.115450][ T5915] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 426.126296][ T5915] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 426.145897][ T5915] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.155576][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.165018][ T5915] usb 7-1: Product: syz [ 426.169319][ T5915] usb 7-1: Manufacturer: syz [ 426.174015][ T5915] usb 7-1: SerialNumber: syz [ 426.390564][ T5915] usb 7-1: 2:1 : no UAC_FORMAT_TYPE desc [ 426.412548][ T5915] usb 7-1: USB disconnect, device number 17 [ 426.444703][ T9079] udevd[9079]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.566827][ T5911] usb 3-1: USB disconnect, device number 14 [ 427.231213][ T5911] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 427.251205][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 427.391173][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 427.400076][ T5911] usb 7-1: config 0 has no interfaces? [ 427.405917][ T5911] usb 7-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 427.411202][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 427.415162][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.423710][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 427.434935][ T5911] usb 7-1: config 0 descriptor?? [ 427.441840][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.470494][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 427.489631][ T10] pvrusb2: ********** [ 427.497040][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 427.509510][ T5911] usb 5-1: USB disconnect, device number 51 [ 427.510528][ T10] pvrusb2: Important functionality might not be entirely working. [ 427.526904][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 427.550701][ T10] pvrusb2: ********** [ 427.591441][T11521] overlayfs: failed to resolve './file1/file0': -2 [ 427.678222][ T2344] pvrusb2: Invalid write control endpoint [ 427.694466][ T10] usb 7-1: USB disconnect, device number 18 [ 427.810428][ T2344] pvrusb2: Invalid write control endpoint [ 427.819863][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 427.834920][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 427.843748][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 427.863915][ T2344] pvrusb2: Device being rendered inoperable [ 427.875284][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 427.884718][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 427.899486][ T2344] pvrusb2: Attached sub-driver cx25840 [ 427.906268][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 427.916637][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 428.091217][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 428.241135][ T5870] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 428.245343][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 428.273121][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 428.289179][ T10] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 428.321385][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.344400][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.364024][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.381452][ T10] usb 5-1: Product: syz [ 428.386171][ T10] usb 5-1: Manufacturer: syz [ 428.390904][ T10] usb 5-1: SerialNumber: syz [ 428.401317][ T5870] usb 8-1: Using ep0 maxpacket: 16 [ 428.418489][T11536] pvrusb2: Attempted to execute control transfer when device not ok [ 428.421497][ T5870] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.440859][ T5870] usb 8-1: config 0 has no interface number 0 [ 428.455521][ T5870] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 428.471825][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.479898][ T5870] usb 8-1: Product: syz [ 428.484655][ T5870] usb 8-1: Manufacturer: syz [ 428.490502][ T5870] usb 8-1: SerialNumber: syz [ 428.499594][ T5870] usb 8-1: config 0 descriptor?? [ 428.510812][ T5870] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 428.623009][ T10] usb 5-1: 0:2 : does not exist [ 428.673291][ T10] usb 5-1: USB disconnect, device number 52 [ 428.738303][T11543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.756365][ T9079] udevd[9079]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.769840][T11543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.991359][ T5911] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 429.131328][ T5911] usb 7-1: device descriptor read/64, error -71 [ 429.371206][ T5911] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 429.461292][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 429.511445][ T5911] usb 7-1: device descriptor read/64, error -71 [ 429.519169][T11528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.531859][T11528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.546439][T11528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.555829][T11528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.621463][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 429.622633][ T5911] usb usb7-port1: attempt power cycle [ 429.637927][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 429.648556][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.656918][ T10] usb 5-1: Product: syz [ 429.661291][ T10] usb 5-1: Manufacturer: syz [ 429.665963][ T10] usb 5-1: SerialNumber: syz [ 429.676020][ T10] usb 5-1: config 0 descriptor?? [ 429.766224][ T5870] gspca_spca1528: reg_w err -71 [ 429.771566][ T5870] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 429.790993][ T5870] usb 8-1: USB disconnect, device number 26 [ 429.884019][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 429.971190][ T5911] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 430.002867][ T5911] usb 7-1: device descriptor read/8, error -71 [ 430.088131][ T5870] usb 3-1: USB disconnect, device number 15 [ 430.102999][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 430.170560][T11547] overlayfs: failed to resolve './file1/file0': -2 [ 430.251200][ T5911] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 430.272481][ T5911] usb 7-1: device descriptor read/8, error -71 [ 430.359600][T11551] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1957'. [ 430.382241][ T5911] usb usb7-port1: unable to enumerate USB device [ 430.611189][ T5870] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 430.763017][ T5870] usb 8-1: config 255 has an invalid interface number: 7 but max is 1 [ 430.771375][ T5870] usb 8-1: config 255 has an invalid interface number: 184 but max is 1 [ 430.779731][ T5870] usb 8-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 430.788696][ T5870] usb 8-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 430.800985][ T5870] usb 8-1: config 255 has no interface number 0 [ 430.807579][ T5870] usb 8-1: config 255 has no interface number 1 [ 430.814002][ T5870] usb 8-1: config 255 interface 7 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 430.826254][ T31] INFO: task kworker/u8:14:6365 blocked for more than 143 seconds. [ 430.834300][ T5870] usb 8-1: config 255 interface 7 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 430.846167][ T31] Not tainted syzkaller #0 [ 430.851915][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.860625][ T31] task:kworker/u8:14 state:D stack:22600 pid:6365 tgid:6365 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 430.872876][ T5870] usb 8-1: config 255 interface 184 altsetting 9 bulk endpoint 0xD has invalid maxpacket 1024 [ 430.883396][ T5870] usb 8-1: config 255 interface 184 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 430.894618][ T31] Workqueue: netns cleanup_net [ 430.904569][ T31] Call Trace: [ 430.907954][ T31] [ 430.910919][ T31] __schedule+0x14bc/0x5030 [ 430.915517][ T5870] usb 8-1: config 255 interface 184 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 430.927843][ T31] ? do_raw_spin_lock+0x121/0x290 [ 430.933040][ T5870] usb 8-1: config 255 interface 184 altsetting 9 has 6 endpoint descriptors, different from the interface descriptor's value: 11 [ 430.947392][ T31] ? __lock_acquire+0xab9/0xd20 [ 430.951251][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 430.952441][ T31] ? __pfx___schedule+0x10/0x10 [ 430.965112][ T5870] usb 8-1: config 255 interface 7 has no altsetting 0 [ 430.972669][ T5870] usb 8-1: config 255 interface 184 has no altsetting 0 [ 430.979670][ T5870] usb 8-1: Dual-Role OTG device on HNP port [ 430.985765][ T31] ? schedule+0x91/0x360 [ 430.990059][ T31] schedule+0x165/0x360 [ 430.994379][ T31] afs_cell_purge+0x3f1/0x540 [ 430.999132][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 431.006182][ T5870] usb 8-1: New USB device found, idVendor=2019, idProduct=4902, bcdDevice=8c.c0 [ 431.016147][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 431.021911][ T5870] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.031280][ T31] ? afs_net+0x45/0x270 [ 431.035525][ T31] ? afs_net+0x45/0x270 [ 431.039709][ T31] afs_net_exit+0x50/0x100 [ 431.044888][ T31] ops_undo_list+0x49a/0x990 [ 431.059538][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 431.065026][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 431.070340][ T31] cleanup_net+0x4d8/0x7a0 [ 431.074966][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 431.079994][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.085392][ T31] ? process_one_work+0x868/0x15e0 [ 431.090666][ T31] process_one_work+0x93a/0x15e0 [ 431.095826][ T31] ? __lock_acquire+0xab9/0xd20 [ 431.100761][ T31] ? __pfx_process_one_work+0x10/0x10 [ 431.107791][ T31] ? assign_work+0x3a1/0x410 [ 431.112658][ T31] worker_thread+0x9b0/0xee0 [ 431.117363][ T31] kthread+0x711/0x8a0 [ 431.121868][ T31] ? __pfx_worker_thread+0x10/0x10 [ 431.127095][ T10] usb 3-1: config 0 has no interfaces? [ 431.127085][ T31] ? __pfx_kthread+0x10/0x10 [ 431.127128][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.142816][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.148148][ T31] ? __pfx_kthread+0x10/0x10 [ 431.155364][ T31] ret_from_fork+0x599/0xb30 [ 431.160069][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 431.165329][ T31] ? __switch_to_asm+0x39/0x70 [ 431.167043][ T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 431.170181][ T31] ? __switch_to_asm+0x33/0x70 [ 431.184254][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.186730][ T31] ? __pfx_kthread+0x10/0x10 [ 431.194122][ T10] usb 3-1: Product: syz [ 431.197409][ T31] ret_from_fork_asm+0x1a/0x30 [ 431.202769][ T10] usb 3-1: Manufacturer: syz [ 431.208906][ T31] [ 431.212498][ T10] usb 3-1: SerialNumber: syz [ 431.214686][ T31] [ 431.214686][ T31] Showing all locks held in the system: [ 431.224774][ T10] usb 3-1: config 0 descriptor?? [ 431.236369][ T31] 4 locks held by kworker/0:1/10: [ 431.247767][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 431.263727][ T5870] usb 8-1: string descriptor 0 read error: -71 [ 431.274360][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 431.285612][ T31] #2: ffff8880b8627198 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 431.294963][ T31] #3: ffffffff99f41cd8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 431.320785][ T5870] usb 8-1: USB disconnect, device number 27 [ 431.331179][ T31] 1 lock held by khungtaskd/31: [ 431.336855][ T31] #0: ffffffff8e33d700 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 431.348506][ T31] 2 locks held by getty/5580: [ 431.353993][ T31] #0: ffff88814dbbf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 431.364405][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 431.376450][ T31] 3 locks held by kworker/1:4/5870: [ 431.381977][ T31] 3 locks held by kworker/u8:14/6365: [ 431.387550][ T31] #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x841/0x15e0 [ 431.398232][ T31] #1: ffffc90019ae7b80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x868/0x15e0 [ 431.408410][ T31] #2: ffffffff8f6e8190 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 431.418941][ T31] 3 locks held by kworker/u8:17/10956: [ 431.424678][ T31] [ 431.427042][ T31] ============================================= [ 431.427042][ T31] [ 431.436444][ T31] NMI backtrace for cpu 0 [ 431.436465][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 431.436489][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 431.436503][ T31] Call Trace: [ 431.436512][ T31] [ 431.436521][ T31] dump_stack_lvl+0x189/0x250 [ 431.436558][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.436584][ T31] ? __pfx__printk+0x10/0x10 [ 431.436623][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 431.436650][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 431.436675][ T31] ? __pfx__printk+0x10/0x10 [ 431.436706][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.436730][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 431.436756][ T31] sys_info+0x135/0x170 [ 431.436785][ T31] watchdog+0xfb5/0x1000 [ 431.436821][ T31] ? watchdog+0x20a/0x1000 [ 431.436860][ T31] kthread+0x711/0x8a0 [ 431.436894][ T31] ? __pfx_watchdog+0x10/0x10 [ 431.436922][ T31] ? __pfx_kthread+0x10/0x10 [ 431.436952][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.436977][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.437002][ T31] ? __pfx_kthread+0x10/0x10 [ 431.437032][ T31] ret_from_fork+0x599/0xb30 [ 431.437057][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 431.437091][ T31] ? __switch_to_asm+0x39/0x70 [ 431.437119][ T31] ? __switch_to_asm+0x33/0x70 [ 431.437146][ T31] ? __pfx_kthread+0x10/0x10 [ 431.437176][ T31] ret_from_fork_asm+0x1a/0x30 [ 431.437232][ T31] [ 431.437242][ T31] Sending NMI from CPU 0 to CPUs 1: [ 431.593864][ C1] NMI backtrace for cpu 1 [ 431.593884][ C1] CPU: 1 UID: 0 PID: 11541 Comm: syz.6.1953 Not tainted syzkaller #0 PREEMPT(full) [ 431.593906][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 431.593918][ C1] RIP: 0010:lock_acquire+0xc4/0x350 [ 431.593943][ C1] Code: 0f 85 eb 00 00 00 65 48 8b 04 25 08 20 bb 92 83 b8 2c 0b 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 <4c> 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 fa 48 c7 c7 f8 5e aa 8d e8 [ 431.593958][ C1] RSP: 0018:ffffc9000436fb40 EFLAGS: 00000046 [ 431.593976][ C1] RAX: ffff888025650000 RBX: 0000000000000000 RCX: 8f16a9e3562a7d00 [ 431.593990][ C1] RDX: 0000000000000000 RSI: ffffffff8b682ee7 RDI: 1ffffffff33e5545 [ 431.594003][ C1] RBP: ffffffff84a2ec55 R08: 0000000000000001 R09: 0000000000000000 [ 431.594015][ C1] R10: dffffc0000000000 R11: fffffbfff1f7f28f R12: 0000000000000000 [ 431.594027][ C1] R13: ffffffff99f2aa28 R14: 0000000000000000 R15: 0000000000000001 [ 431.594039][ C1] FS: 0000555586c5a500(0000) GS:ffff888125b6e000(0000) knlGS:0000000000000000 [ 431.594055][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.594067][ C1] CR2: 000000110c449e43 CR3: 000000005fb6e000 CR4: 00000000003526f0 [ 431.594084][ C1] DR0: 000000000000005a DR1: 0000000000000000 DR2: 0000000000000000 [ 431.594094][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 431.594106][ C1] Call Trace: [ 431.594121][ C1] [ 431.594131][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.594166][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 431.594186][ C1] ? __debug_object_init+0x85/0x3c0 [ 431.594214][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 431.594251][ C1] __debug_object_init+0x85/0x3c0 [ 431.594271][ C1] ? __might_fault+0xb0/0x130 [ 431.594303][ C1] hrtimer_nanosleep+0xab/0x360 [ 431.594330][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 431.594358][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 431.594377][ C1] ? irqentry_exit+0x5dd/0x660 [ 431.594399][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.594426][ C1] __se_sys_clock_nanosleep+0x339/0x390 [ 431.594460][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 431.594486][ C1] ? do_syscall_64+0xbe/0xfa0 [ 431.594518][ C1] do_syscall_64+0xfa/0xfa0 [ 431.594541][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.594559][ C1] ? clear_bhb_loop+0x60/0xb0 [ 431.594583][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.594601][ C1] RIP: 0033:0x7fde493c2005 [ 431.594616][ C1] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 431.594631][ C1] RSP: 002b:00007fffe921f530 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 431.594648][ C1] RAX: ffffffffffffffda RBX: 00007fde495e5fa0 RCX: 00007fde493c2005 [ 431.594661][ C1] RDX: 00007fffe921f570 RSI: 0000000000000000 RDI: 0000000000000000 [ 431.594673][ C1] RBP: 00007fde495e7da0 R08: 0000000000000000 R09: 3fffffffffffffff [ 431.594691][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000069676 [ 431.594702][ C1] R13: 00007fde495e6090 R14: ffffffffffffffff R15: 00007fffe921f6b0 [ 431.594730][ C1] [ 431.916212][ T5870] usb 3-1: USB disconnect, device number 16 [ 432.244156][ T5890] usb 5-1: USB disconnect, device number 53