last executing test programs: 3m51.962880545s ago: executing program 0 (id=1401): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x10f, 0x26, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000001400)={&(0x7f0000000000)={0xa, 0x4e20, 0x10001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="c00a7c4f41133309a5123236731050a063ad80d4fccf3f0666a87e42fbbae31e3f69941b77420b5d4e8a424f8efae3d7662012b68ee3d899bf09e744a46661068f5a2e40f838913e9318a2e53c6d37af9afad1772cfa", 0x56}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000100)="59fbebf6d536568dc3bcffb81237e1c0c19078bcd5e4919cd9a6efafa4755d6e694dd214b4512d936cb203ba008d5cbede5ec9a0a5ffc539b178f5d64d3f1f3bed868487cad94e7516b3a2dba78ba84053620e3a14a2ced5805e56b4d1748661cfffb8a3463502360ec7abe2292019120645ad51fa4d640260a6383220fdacc2a6893adf69c3bcd08ffb56555aac7e152e38acb4a46a87d73b0b73540c65eb79571baea8c0f1ab643ce5d5d16b173bd6093a26c1da88e1f5a050508f5e478c8cc2ef9af1281704344e7f30322e9016b22264473f6757", 0xd6}], 0x3, &(0x7f0000000240)=[@rthdr={{0x58, 0x29, 0x39, {0x88, 0x8, 0x1, 0x6, 0x0, [@mcast2, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0x15}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1ff}}, @rthdr={{0x88, 0x29, 0x39, {0x7c, 0xe, 0x0, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xc}, @dev={0xfe, 0x80, '\x00', 0x14}, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @remote]}}}, @rthdr={{0x38, 0x29, 0x39, {0x11, 0x4, 0x0, 0xc, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0x160}, 0x1001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) 3m51.910283592s ago: executing program 0 (id=1403): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000030000180080006000100000014000400fc020000000000000000000000000000060001000a000000060005"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5e84}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m51.834139046s ago: executing program 0 (id=1404): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000940)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r0, r0, 0x0, 0x7f03) 3m51.198718388s ago: executing program 0 (id=1406): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x401, 0x8080) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000100)={0x480, r1}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f00000000c0)={[], [{@uid_eq}]}) 3m50.913279985s ago: executing program 0 (id=1408): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001700)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m50.59610999s ago: executing program 0 (id=1410): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000019440)={0x2c, &(0x7f0000019480)=ANY=[@ANYRES16=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) socket(0x40000000015, 0x805, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000019640)={0x14, &(0x7f0000019540)={0x40, 0x3, 0xc9, {0xc9, 0x1, "6fabc4dab71910e5e278f83f56c979bd35953c7b8667ce5378e0191de08cc378208dca820dc4f29eb81a196a475c0242bf240788aad6c4bfc32c35ce4c4a6c39329d4cd7eb4f8f7f1b70343091bc53a41afd84033ae2c86d3521080be48130ea652996144ebd85c89070682b7a932dd7405c7be14e59748df43d63e29d3d5090ba7cac7bec1183ddfe6b0c2873cc135cfc6866b8cbefe726850b20d7cb0c7f3ecfb22f19ada7a1b6c5ed33953855a41b72ca47d6c704d98b6e7a9eac721dd647958ceb9f6e89a5"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000198c0)={0x44, &(0x7f0000019680)={0x40, 0xc, 0x74, "469cc713fdffbdb06b6c00372cf97dbf22994351b807cb2cdca901ecb4d106303753229bc767c1c5fec4866950bd0a26010527a1071ec726ba22e8acff99bbed26993ab940e92b8315eb75eda86fbe4a3c84d794f355df1972b43fd84e815928d04c66c9b76f2b5c078ea418257d04f8a54ab306"}, &(0x7f0000019700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000019740)={0x0, 0x8, 0x1, 0x2a}, &(0x7f0000019780)={0x20, 0x80, 0x1c, {0xa5, 0x2297, 0x9, 0x8, 0x8000, 0x4, 0x3, 0x7f, 0x7ff, 0x5, 0x9, 0x8}}, &(0x7f00000197c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000019800)={0x20, 0x83, 0x2}, &(0x7f0000019840)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000019880)={0x20, 0x89, 0x2}}) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x20, 0x1, 0x46, {0x46, 0xf, "197caa48abeb44f44f39c71be4484e0d97d180641bc22087ded330a14f8cf82ffe94abb683e24d6ec1e63568ace51df6a47d771c5baf084c09e45eb3a30d62f99d55ca1b"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003c8000000c803ce040f5ca2f28f61ef865fac91f389108060363fd3646f8f9b3e448c16ad346c67020c05035375f903e029ce6ec3879d851bf084feb8bcffc2468aa59f82984b68c3aadb4dd9393f40b834d444986e866dc15d01b186c8ad076fc09199f77c45f3709e7117000000002000000036a812fb73bc023a5330fac4d0a917e185ff7f0000303d58a3b3440128d5c291740d6493f611a262fc780f5f9ab1ff75daf8c12c4f8fedf6126f802ad35e713243be22fb3072da81ceb51c09407b74c6fb92287b602ef38ea5"]}, &(0x7f00000003c0)={0x44, &(0x7f0000000200)={0x40, 0x7, 0x20, "2c334e5909b7f779528f2a5f2e57bb82be5df7b87fdef674737499c839b1360e"}, 0xfffffffffffffffc, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x45}, &(0x7f00000194c0)=ANY=[@ANYBLOB="202a0000000000000022ee770b5f967f4202dc9b3126e56680578a47c693c11ed812d7cca674d15932a8b3e4c3652674ce079657dac279c25904c46ff6426bf29f7fd80e48dac928eff90cf0848bdfd1e11051e7c1f81c5357fe1b"], &(0x7f00000002c0)={0x20, 0x82, 0x1, "89"}, &(0x7f0000000300)={0x20, 0x83, 0x3, "ff6b81"}, &(0x7f0000000340)={0x20, 0x84, 0x3, "f8ad9b"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "3475d0"}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m50.337535574s ago: executing program 32 (id=1410): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000019440)={0x2c, &(0x7f0000019480)=ANY=[@ANYRES16=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) socket(0x40000000015, 0x805, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000019640)={0x14, &(0x7f0000019540)={0x40, 0x3, 0xc9, {0xc9, 0x1, "6fabc4dab71910e5e278f83f56c979bd35953c7b8667ce5378e0191de08cc378208dca820dc4f29eb81a196a475c0242bf240788aad6c4bfc32c35ce4c4a6c39329d4cd7eb4f8f7f1b70343091bc53a41afd84033ae2c86d3521080be48130ea652996144ebd85c89070682b7a932dd7405c7be14e59748df43d63e29d3d5090ba7cac7bec1183ddfe6b0c2873cc135cfc6866b8cbefe726850b20d7cb0c7f3ecfb22f19ada7a1b6c5ed33953855a41b72ca47d6c704d98b6e7a9eac721dd647958ceb9f6e89a5"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000198c0)={0x44, &(0x7f0000019680)={0x40, 0xc, 0x74, "469cc713fdffbdb06b6c00372cf97dbf22994351b807cb2cdca901ecb4d106303753229bc767c1c5fec4866950bd0a26010527a1071ec726ba22e8acff99bbed26993ab940e92b8315eb75eda86fbe4a3c84d794f355df1972b43fd84e815928d04c66c9b76f2b5c078ea418257d04f8a54ab306"}, &(0x7f0000019700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000019740)={0x0, 0x8, 0x1, 0x2a}, &(0x7f0000019780)={0x20, 0x80, 0x1c, {0xa5, 0x2297, 0x9, 0x8, 0x8000, 0x4, 0x3, 0x7f, 0x7ff, 0x5, 0x9, 0x8}}, &(0x7f00000197c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000019800)={0x20, 0x83, 0x2}, &(0x7f0000019840)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000019880)={0x20, 0x89, 0x2}}) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x20, 0x1, 0x46, {0x46, 0xf, "197caa48abeb44f44f39c71be4484e0d97d180641bc22087ded330a14f8cf82ffe94abb683e24d6ec1e63568ace51df6a47d771c5baf084c09e45eb3a30d62f99d55ca1b"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003c8000000c803ce040f5ca2f28f61ef865fac91f389108060363fd3646f8f9b3e448c16ad346c67020c05035375f903e029ce6ec3879d851bf084feb8bcffc2468aa59f82984b68c3aadb4dd9393f40b834d444986e866dc15d01b186c8ad076fc09199f77c45f3709e7117000000002000000036a812fb73bc023a5330fac4d0a917e185ff7f0000303d58a3b3440128d5c291740d6493f611a262fc780f5f9ab1ff75daf8c12c4f8fedf6126f802ad35e713243be22fb3072da81ceb51c09407b74c6fb92287b602ef38ea5"]}, &(0x7f00000003c0)={0x44, &(0x7f0000000200)={0x40, 0x7, 0x20, "2c334e5909b7f779528f2a5f2e57bb82be5df7b87fdef674737499c839b1360e"}, 0xfffffffffffffffc, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x45}, &(0x7f00000194c0)=ANY=[@ANYBLOB="202a0000000000000022ee770b5f967f4202dc9b3126e56680578a47c693c11ed812d7cca674d15932a8b3e4c3652674ce079657dac279c25904c46ff6426bf29f7fd80e48dac928eff90cf0848bdfd1e11051e7c1f81c5357fe1b"], &(0x7f00000002c0)={0x20, 0x82, 0x1, "89"}, &(0x7f0000000300)={0x20, 0x83, 0x3, "ff6b81"}, &(0x7f0000000340)={0x20, 0x84, 0x3, "f8ad9b"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "3475d0"}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 10.365574995s ago: executing program 1 (id=2180): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000280)={0x20, 0xb, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.502569607s ago: executing program 3 (id=2187): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat2(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x200000, 0x10, 0x21}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848390000005e140602000000000e0027", 0x23}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x4840) r2 = fsopen(&(0x7f0000000200)='hfsplus\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0xfe33) 7.397571682s ago: executing program 3 (id=2188): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(0x0, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) 7.289592058s ago: executing program 3 (id=2189): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000500)={0x0, 0xe, 0x28, "d7bb1486def9a5da4fc3fbd32aa954e52bff6aa7401869a99d5ea6b09dd55229af7a5deb1e4278e8"}, 0x0, 0x0, 0x0, 0x0}) 5.674246523s ago: executing program 1 (id=2190): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') exit(0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0x4142, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f00001aa000/0x2000)=nil, 0x2000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xbf, 0x9}]}, 0x10) readv(r1, &(0x7f0000000080), 0x0) 5.60658871s ago: executing program 4 (id=2191): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x802}, 0x80, 0x0}, 0xe07e872420dfefca) write(r1, &(0x7f00000000c0)="673aaa44fa73c2d18f929b3e9c4f093461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e513", 0x33) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x10001, 0x6, 0x1, 0x11, 0xb7, "1c8049689ddb51559c9c411085242fafeec915", 0x0, 0x7ff}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x9, 0x0, [{0xbc5, 0x0, 0xf}, {0x1a6, 0x0, 0x7fffffff}, {0x176, 0x0, 0xc5}, {0x926, 0x0, 0xffffffffffffffff}, {0xb7c, 0x0, 0x6917}, {0xa31, 0x0, 0x3}, {0xb23, 0x0, 0xacb}, {0xbc9, 0x0, 0xd}, {0xb2f, 0x0, 0x1}]}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000f80)={0x1c, &(0x7f0000000080)={0x0, 0x30, 0x1, "89"}, 0x0, 0x0}) 5.365012458s ago: executing program 2 (id=2192): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2={0xff, 0x3}}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2={0xff, 0x3}}, 0x1c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x4c040, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x4c040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x2e, 0x2, @thr={0x0, 0x0}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$tipc(0x1e, 0x5, 0x0) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}}}, 0x10) bind$tipc(r4, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000003c0)={0x0, 0x2, 0x3, 0x2006}) fcntl$lock(r6, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x3}) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = accept$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)) sendto$packet(r8, &(0x7f0000000080)="1003eb04004788aa81a13b132314ef4fb40ba97026f56f11be910a07d2df3202b1586399b66641ac3341181db073c31565db105b572acf0afd6b00b71eeda2fe3d738c827bc8fd3b6990200ee61b9c8ac1a0a8c306960c592b5113f35faa808661d5ec3dda70421faa278cb0467cbc98", 0xfffffffffffffd69, 0x0, &(0x7f0000000040)={0x11, 0x6, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x14) 5.249508567s ago: executing program 2 (id=2193): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63d, 0x1, 0x2, 0xd59f83, 0x19f2, 0x8, 0x19ef, 0x7, 0x6a, 0x24, 0x2800, 0x2, 0xba2, 0x0, 0x10000000, {0x800, 0xffffffff}, 0xd1, 0xa}}) 5.238999077s ago: executing program 2 (id=2194): socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000940)='./file0\x00', 0x40) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, 0x0, 0x24060884) 5.197473496s ago: executing program 2 (id=2195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async, rerun: 64) listen(r1, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x7, &(0x7f00000000c0)=""/178, &(0x7f0000000180)=0xb2) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) (async) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) (async) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000500)={0xe3, 0x2db2, 0x3, 0x3bdc, 0x16, "7f5972d49b67f3661c015ac7a228c5d7cf38f6"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) (async, rerun: 32) r4 = syz_open_pts(r3, 0x0) (rerun: 32) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) (async) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x1, &(0x7f00000001c0)=""/14, &(0x7f0000000200)=0xe) sendto$inet6(r5, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) (async) accept(r0, 0x0, 0x0) 5.113883089s ago: executing program 2 (id=2196): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x7f, r0, 0x80000}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf250200000005002f00000000000a000900000000000000000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x12, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x0, 0x0) syz_usb_control_io$printer(r6, &(0x7f00000002c0)={0x14, &(0x7f0000000240)={0x20, 0xa, 0x2, {0x2, 0x8}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}}, &(0x7f0000000580)={0x34, &(0x7f0000000300)={0x20, 0xf, 0x33, "97b569cf719c87333093ef18ce15a6e0b0e68eba8914b72de3eb3669ccd624d636d22e4c0f15b6d79f3054cd918bf216de29c4"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xde}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000440)={0x20, 0x0, 0xea, {0xe8, "716d1d691981cb4759f79975ee7a2b06d75d8339b62a846cd289097a12453170db6d962c5a14bbf1fbda9e046944062fbb00593b86c49cbe7da0fa026072ca7e8b8205f9a711480a13b37f116ef2a01645cf5649b47801add2c6a9236fc2d0a66fef8204be3eb81cda71247485c8d6bdc2f2c191b6d4935462cc774735a256b1396163893a379af4833c1549621e5eb5feaa70350964af8d4842e83a80c86480ef4f3b0e550f20eebe059e3995576544b2c734d88daac2011b9b59515da6c6855f102a897a153ca2916977989bfde9ba96c649c87e81ce8a27805782a69783eddc642a5f4dfe5315"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x1}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008004) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x4b3f079f13ae1c46, 0x2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, &(0x7f0000000000)=0xffffffffffffff4f) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) 4.721880974s ago: executing program 1 (id=2197): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.226580351s ago: executing program 3 (id=2198): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file3\x00', &(0x7f0000000280)={0x400500, 0x10, 0x4}, 0x18) umount2(&(0x7f0000000140)='./file2\x00', 0xd) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000440)='./bus\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd611, 0x10000006, 0x9, 0x0, 0x8000, 0x0, 0xee00, 0xee00, 0x3ff, 0x1}}, {0x0, 0x4}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 4.029879624s ago: executing program 3 (id=2199): r0 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.194916767s ago: executing program 1 (id=2200): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x0, 0xf}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xc9}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0xff}, &(0x7f0000000400)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "59de5732af96a82c8052fb8d8dbced725cb5bf92c8b803603239a050095ba49a44edf9ed443cc239047150a1434eaa"}}) 2.528045664s ago: executing program 4 (id=2201): fcntl$setpipe(0xffffffffffffffff, 0x407, 0x40) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x743000, 0x28) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xb, 0x103, 0x2, {0x4, 0x6, 0x3, 0x3}}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RSTAT(r1, &(0x7f00000000c0)={0x41, 0x7d, 0x2, {0x0, 0x3a, 0x7, 0x3, {0x40, 0x0, 0x1}, 0x0, 0xff, 0x5, 0x8000000000000001, 0x1, '\x00', 0x1, '\x00', 0x4, '%*)}', 0x1, '\x00'}}, 0x41) (async) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x4000000000, 0xa, 0xa, 0x4, 0xfffffffffffffff9]}, &(0x7f00000001c0)=0x78) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000240)={0x60, 0x2, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x12f7193, &(0x7f0000000200)=[{0x5, 0x0, 0x7}], 0x1, 0x19d2c68a, 0x2, 0x14, 0x50, 0x18}) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) (async) r3 = syz_clone(0x1820000, &(0x7f0000000340)="6dcdc5e45cc7bcd4c9c950338a66f062919b17d5bc9aa53bb214c09075c89e0103522aac8b8417b531827841fa0341f851a4444616f1c2c55b57f045eb9d753d91a0940543ba0a2a6836623e5cddc13f6ec532ac197112fd384ff2660d1b8a1ce3d4393ddd49e2d4c8c89d17409edd6cc81e9d3e3bd33d02919a7ee148c55d6adf02eec63ca25b9cdb84c174784ef8a3410211993ba7f47237b3f8130a8411899fd08591d3e4e0fb7524eeda2bdc5221e1ce92854dfde7c2cb3a61de2ea9e5defe5072f35e0d52cf726ee6e9161ce930d6129c4f862058bbb132", 0xda, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="e196692356ed4ee972baa674798636cde7caf2c339b1464ebd2e3781bd3348d1ec556bf427b57636278a8915fcfbe172914f1510bf3f349016f4a4dce26d302a532fe0096ecd158a6e44") sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd8, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x70f) (async, rerun: 32) sched_setscheduler(r3, 0x6, &(0x7f00000006c0)=0x2) (rerun: 32) r4 = syz_usb_connect(0x0, 0x2bd, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x6d, 0x68, 0x73, 0x20, 0x2013, 0x259, 0xbdd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2ab, 0x1, 0x8d, 0x1, 0x10, 0x7, [{{0x9, 0x4, 0x6d, 0x6, 0x4, 0xa3, 0x2a, 0x6a, 0xfd, [@generic={0x5d, 0x8, "2bdf94c1ff1246c85685f6a5261b0808f2542e73d342662d40ba4c9812db0824d41ec36be28e316520abcaa33c6145b37d4d0ba01731932322d4f4c98c0eec9aa7184e0f1797a4992cd5bc71a4b9f2360e44f79e5304b2994482a5"}], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x7, 0x6, 0x4, [@generic={0x3, 0x21, "ef"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x9, 0x7, 0x0, [@generic={0xf7, 0x21, "cfaf0c79c1e2f06333a9601b2c3768ac81faa45f888044095f085759a3b6afb81983982778538ed5644349703962644f04d3389727e0f417d5c7337f615ae3d7d79623b27ff92e48f64815dea8be7889a806332b04c232a24bb408f03626c8f7d45fdc7e0fe7f4c43179641d9aa37036763831ac452f2f81883a6e77e3a895923bbadb3173673245064a31d47d677661162428ba33f3a865c7ad6d0a61be96f27aec69b98567bf5a0a6f8c7bbe716f22264739e3b1eab67604d4d5d9a8ac532ff6048d6edbfe6c1915fcb96fe215501282ed71cc53b39faf15aa1a8a2f755783992d6289197b0431dc9b2c8b64f26e40b46a9f12d2"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x3, 0x8, 0x2, [@generic={0x53, 0x8, "806c7b3ad4ff03b043b3de307f59db8dfa4417077b2ff1de25671c0f7199749a831c2dd8ff0dc7f6ddfdba1e22a364b4b886ac4c9e2df3efc7698b0d703e04d6c33986c5c9aa8f068a61456196b6e2ef25"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x5, 0x9c, 0x1, [@generic={0xbd, 0x30, "9f02610a254616b39761128be31bcb35415357f18d32320f0b5d64812578946d139fe2f668ae66236c364f89e0dcfaadc66fbf118435f28e87c90f5676426ded3021f129b48194ef27a7683c2496b53247c4679a30d1fbb5ee3876d5958e6299a8ea0c94b81d395655455f5c7fd3935db98d0343f66665975545a4daa6c3fea35ec9a5b11afb5666ae33e7efe72e6f8e30ec366fc98f0d70c04fec4de534ba6986cf90630f890f88bf5d84654e1235575aff11727ec25590a3f8c0"}]}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x201, 0x7e, 0x3, 0xf, 0xff, 0x6}, 0x5d, &(0x7f0000000a00)={0x5, 0xf, 0x5d, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0x2, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xd, 0x5, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x1a, 0x2, 0x6, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x1, 0xf, 0x72ee, [0xf, 0x7, 0x1fecf, 0xc0, 0x0, 0xc0c0]}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "499209715ee5e6b38563d153a98875f1"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x9, 0x7, 0x8001}]}, 0xa, [{0x27, &(0x7f0000000a80)=@string={0x27, 0x3, "6c6d15511843f7431c68d26d2945ee75fbe7e7434460e34782b97e60d06f06563ef04d460d"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xc0c}}, {0xfc, &(0x7f0000000b00)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x23671769dd4052bc}}, {0xe4, &(0x7f0000000c80)=@string={0xe4, 0x3, "6bd45737464007d467e3763979adc1c50d34be42b33008344cf9e5465435cd6ac91e83c10304073a9a7321ec1705802018645a57e5b5c5d16397116d553c382c54e7d2adb8c327cbacb5fd764ee0ea23bcee9375f851762a90c27864bc8f06410fd91c737a77857788822cd9aea74107869670ac2682676172efd7f9d7c850fe324fb7afac712d5daa8a08e98df6ca132a19e64c81cfce499b5be9e7bfe61db496fb6c4b1ba2d567676efcec6eca406d012084439c21336cdfe8a153a08c2f7de003d028d262b0140ca63828d9e761857d3eb327ab708f4c29f57f0d111bb6e011ac"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xc07}}, {0xc7, &(0x7f0000000e00)=@string={0xc7, 0x3, "5d94bdf09ca9bc47519bdf2f91347dccf6bfd5ab9d4f20c0ad24fb6d8724aef69f3ff51376cd237ace1e55637fc7b919e3f888f296b2ccf9072865525ca64e11620c3bec93712e4c290f6e09d35b49e1035fe714d5468535d7b9d502ba9c4a881d3d1bdd5d332cf9cf676d54a670f55ec8903950da02330132d7ae25e5aae880dd6bea3109c5a0aef440341e784454b0a3a3335c7e21809fa7f91b1553aca99f474cbbeb04812921e1ee71f282af4222a2c2b6a3d6d10c95dbe8b62fe4a49dbc7facb18072"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x41c}}]}) syz_usb_control_io$sierra_net(r4, &(0x7f0000001180)={0x14, &(0x7f0000001000)={0x20, 0xf, 0x8f, {0x8f, 0x24, "8a9aeff057aa6c2f1e51c32300ce1f3b5c9923bce2d268c252b1b23fbc24ffbcd005e4e3f3d67d828caa937cd368b13e60b42a7ef1f802e6af404f6695a05115fc9acb3eb8bd80eb87a891b7a4086114aaffd5a3769591ea62120e94f10bcc2fb65c6b0b17da89a0248e0f31908c1ecc15d9a6993c483787c4f30f44c8874ef9fe2b60dc2e348b9e88be2d2536"}}, &(0x7f00000010c0)={0x0, 0x3, 0x9c, @string={0x9c, 0x3, "a2b55c7474611e640793dc45a1e7016836029386d2ed81e2367ffb171e025bb214b29f602cee3511003b22162c4c23f9646c14fdfa181144f3e437b86771518bd8fd8619f974af2b4cd5d7de65bfd36cd2fe103638aef44cfb9c58534c72bfeae5ac969b1f2cf8f838892e59db790096979ec188c79a381f62cdea65058bf1db9821400f5a18a14cae6ead08b7ad3127ac4dd6c81eea9221fa4d"}}}, &(0x7f0000001680)={0x1c, &(0x7f00000011c0)={0x0, 0x5, 0x26, "6212faeacf541f09a1222c9f753b9f08e2ad2f4e37f3f2a12b18ac4289e6534e37bd9d5edd30"}, &(0x7f0000001200)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001640)={0x21, 0x0, 0x3, "51d430"}}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000001840)={0x5, 0x0, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x44, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40848}, 0x4004040) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000001a00)=0x9) (async) clock_gettime(0x0, &(0x7f0000001a40)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000001a80)=@mmap={0x1, 0x0, 0x4, 0x0, 0xffff, {r7, r8/1000+60000}, {0x1, 0x2, 0x0, 0x8, 0xa, 0x0, "0449f82a"}, 0x6, 0x1, {}, 0x0, 0x0, r6}) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b40), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r9, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x68, r10, 0x600, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x40}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000884}, 0x400c000) (async) prlimit64(r3, 0x8, &(0x7f0000001c80)={0xfffffffe, 0x6}, &(0x7f0000001cc0)) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d40), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x2c, r11, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x20000800) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000002040)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001e80)={0x160, 0x7, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x74, 0x7, 0x1, 0x0, "089dab2e0e059f2ece990e67d44f5eb9fba632262916b3b713740fb9a73e6dcefe244b74c9e168df9cc02aea93839c543baa52ae94c34ed706d1c43e176419aa13904cc6335b4a9330ba250a03b4f5005fd7f5b6e3221ed393ea82b08ef4c48ce6972135608d9cfdfcaa8faffed59eba"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_USERDATA={0x8d, 0x7, 0x1, 0x0, "b9478d81288caecc32abe209d116c2cd71a1663ed85587a7fdb4f9cfd64ae847969c8842df056f9506cd7104d20807ed973e91b13e46f90bc94ab9d13b07ab1b65f3daafa3e564e6dbceb49433c9a2738092a540c8fcab8d4019b1c9b13432fb03d9ec26e26ffc7ee5255b46f8592b5eebb5e84237fec42211340484ce5acb5d06f6fa735e0de04651"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x160}, 0x1, 0x0, 0x0, 0x400c070}, 0x4) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000002240)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x60, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x40085) 1.925126098s ago: executing program 2 (id=2202): syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b4001020f905ffff5b340102030109021b0001000010000904"], 0x0) mount(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x27, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000240)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xd, @a_listen={0x81, 0x2, 0x0, 0x80, 0xdf, 0x6, 0xb, "", 0x3, 0xdf, 0x2, 0xf2, 0x52, "ed870b29f691d16e1a708e42ed1e79c97d50215fb8736e5fe136a21f4a7f9a84d98f2d851f50aeddbe85645eadaf7baca652bab049e36b064bea772df4ded5471dd8837c34fd789369d0ca98b2528b1d1c0b"}}, 0x61) syz_usb_connect(0x2, 0x2d, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x1, 0x1, 0x3, 0x67, 0x2, [], [{{0x9, 0x5, 0xa, 0x2, 0x20, 0x1, 0x10}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000240)=0x3ac) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r5, 0x0, 0x0, 0x4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/57, 0x39}], 0x1, 0x33, 0x51b) read$char_usb(r6, &(0x7f0000000180)=""/134, 0x86) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.543023733s ago: executing program 4 (id=2203): socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000940)='./file0\x00', 0x40) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, 0x0, 0x24060884) 1.435540073s ago: executing program 4 (id=2204): r0 = eventfd2(0x0, 0x80801) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8503, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000440)={r0, 0x1ff, 0x2, r0}) (async) write$eventfd(r0, &(0x7f0000000040), 0x8) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) (async) shutdown(r3, 0x0) 1.247185091s ago: executing program 4 (id=2205): mknod$loop(&(0x7f0000000b00)='./file0\x00', 0x2, 0x0) (async) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) syz_open_dev$video(&(0x7f0000002140), 0x1ad, 0x84400) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) (async) futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, &(0x7f00000001c0), 0x0) semget(0x1, 0x3, 0x201) (async) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) (async) futex(&(0x7f0000000b40)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)={0x0, 0x16, 0x5, "92d8fc134a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x151, 0x0, 0x0, 0x0, 0x8, 0x543, 0xe621, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe, 0x50, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x4d, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0x34b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x1, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x2a0, 0xb, 0xff, 0x6}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x211, 0xfb, 0x9, 0x7, 0xff, 0x81}, 0x10d, &(0x7f0000000380)={0x5, 0xf, 0x10d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x24, 0x7, 0x8, 0x3}, @generic={0xed, 0x10, 0xa, "d4e1a1206351fcb96a699935630b426169f796eb05d95e514dbd4d964d30a7f623a862b9e0a3f38cd5dad05b67a9c518e35c484c9166943df8eb8e4a3f4ab7e1a9cc3ff5dd06f3ec790d86813447435c13628d4324b73a595451428914672690ccad07d8370395c639aad17fa3c7f987f3b5a39823e298ec926b9a7851ef700e3e2b8902a18955cee5b464a3adbb23147351a69862fa0e15f917fc4b54d87baccca70c61a1b17520ca4da64303dfdcc4aeff3c5317573ba496de9cd187c58082ef4aed1987a390904c2b171a464967077d5fa4608a9fd02a27108292971aa4a0c4fae978cfb9faa12301"}, @ss_container_id={0x14, 0x10, 0x4, 0x6b, "110f3a06000000000000005af15cc3e4"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000b80)=@string={0x0, 0x3, "44f6c2c1726930"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc91}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000800)={0x24, &(0x7f0000000580)={0x40, 0x3, 0x91, {0x91, 0x24, "db95a3ccb6edbb560a68d10fdd76a1028cd6cd978cfb05811ed21704ab02aac153a9dfb97acb88cf7cd1e59b18a42dd8b9771fe1014dff24f4a5634369b98c774bd1d10fb827f1547e2d8ef66c29e846f5ca9dcda668121bc98932da947b6a0e1024687e353e14bae7e59b9c00acc5382abecae1df2454166b1bfe3352d8a638b4c285f43e4e2da16f94ccc3c83c72"}}, &(0x7f0000000700)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "94e58ee90aa312e604e0cabede39a531ae14216faddb1ff561782f20e7aecbec43868c09811f23c0e6ce852ff01892d548f8d59d728699578dd104bb74b9b49921e14bd0f23b23219c676199edca6ee4197beb672820b4bdc84ee57f0cd750e5d54feec51609a7e6429699de2da0fc9a714835f59f756af3f65ef843857cb6061db2a725c0a39e351b"}}, &(0x7f0000000640)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, '>lid'}, @local=@item_4={0x3, 0x2, 0x4, "6e575da9"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x5, 0x1, {0x22, 0xd81}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000840)={0x0, 0xf, 0xb3, "6b6204afc33daf85fca8820ec185e1c1666c0b134742bb0b36bb18fca082cb054e65b9653e63fa33b8edcd57eec47710e78105945022c2e6e4643dc5277e941c1256d3387a7feb50e5b8e956e5ada3fa880107ee66bf7f8d9665ea9b47e22434ebbc541e22d53e3ddd1f2401e3447e2a23e81df1aa8567517479dd321979d98921c889a0dfa1f5d8821b181a3e39f20c72e175cdbb3b41082694d6423e9d131c0f69ec5d09466dc807fa80273316e65f2d498e"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x13}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000980)={0x20, 0x1, 0xdf, "d2b921e03707cf03d0d2d05d7eb7f64b75094022e715b5b896675f278b684801deb02b0462f7005aad851209d4887473f4ab783946ffdfaddfba0a90871f08dd9b84fdc576cbe7577c9dd0021ed434148c39dfb211d2761a9abc8a63df398310be4aec7c5fe09ad1776b0a9a81204a557de391d2ed300cae593bc49c058ce549fd09af3a32b5354d7e4f70e99a40e5c9a4a3683245b056b7fd4dbfbec41134e283e12a8e9ebace69d086f7de1cd058f01fce9a76689cea05e0079895953fe75144832ba00536ffd27167a67af8b5954d691c135c1c409dcbaf23c8dc1715f3"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x2}}) 1.17671117s ago: executing program 4 (id=2206): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000500)={0x0, 0xe, 0x28, "d7bb1486def9a5da4fc3fbd32aa954e52bff6aa7401869a99d5ea6b09dd55229af7a5deb1e4278e8"}, 0x0, 0x0, 0x0, 0x0}) 959.725238ms ago: executing program 3 (id=2207): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) chdir(0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r6, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x3, 0x9, 0x8, 0x77, 0x3, 0x6, 0x2eef5e15, 0x200025a, 0x38, 0x1030b, 0x8, 0xae1, 0x20, 0x1, 0x1, 0x407, 0x3}, [{0x3, 0xe3d, 0x5, 0xc92, 0x26e, 0x2, 0x3, 0x6}]}, 0x58) close(r6) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = fanotify_init(0xf00, 0x0) fanotify_mark(r8, 0x1, 0x10001011, r7, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x189) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x0) 138.699542ms ago: executing program 1 (id=2208): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x8) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) 0s ago: executing program 1 (id=2209): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): o 0x83 [ 459.128447][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 459.143453][ T5896] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 459.153102][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.161410][ T5896] usb 3-1: Product: syz [ 459.166858][ T5896] usb 3-1: Manufacturer: syz [ 459.171605][ T5896] usb 3-1: SerialNumber: syz [ 459.180833][ T5896] usb 3-1: config 0 descriptor?? [ 459.192618][ T5896] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 459.202017][ T5896] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 459.386074][ T5916] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 459.397124][ T5916] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 459.405210][ T5916] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 459.413847][ T5916] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 459.421592][ T5916] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 459.429516][ T5916] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 459.437062][ T5916] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 459.444682][ T5916] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 459.452224][ T5916] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 459.460123][ T5916] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 459.484079][ T5916] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 459.502580][ T5929] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 459.645522][ T5829] usb 2-1: USB disconnect, device number 30 [ 459.658303][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 459.679414][ T5929] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 459.687501][ T5929] usb 4-1: config 0 has no interface number 0 [ 459.701488][ T5929] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 459.712779][ T5929] usb 4-1: config 0 interface 1 has no altsetting 0 [ 459.724716][ T5929] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 459.734098][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.742586][ T5929] usb 4-1: Product: syz [ 459.746794][ T5929] usb 4-1: Manufacturer: syz [ 459.752319][ T5929] usb 4-1: SerialNumber: syz [ 459.760235][ T5929] usb 4-1: config 0 descriptor?? [ 459.806118][ T5896] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 459.813545][ T5896] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 459.975058][ T5929] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 459.987129][ T5929] cx231xx 4-1:0.1: bad scenario!!!!! [ 459.987129][ T5929] config_info=0 [ 459.996015][ T5929] cx231xx 4-1:0.1: Failed to read PCB config [ 460.199653][ T5916] usb 4-1: USB disconnect, device number 8 [ 460.469863][ T5899] pegasus 5-1:0.0: setup Pegasus II specific registers [ 460.625124][ T5896] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 460.634199][ T5896] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 460.641284][ T5896] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 460.649543][ T5896] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 460.657465][ T5896] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 460.664649][ T5896] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 460.676102][ T5896] usb 3-1: USB disconnect, device number 16 [ 460.749711][ T7192] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 460.921970][ T7192] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 460.941684][ T7192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.970006][ T7192] usb 2-1: config 0 descriptor?? [ 461.118476][T11193] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2004'. [ 461.379015][T11202] can0: slcan on ttyS3. [ 461.391766][ T30] audit: type=1400 audit(6060774223.551:103): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=11201 comm="syz.3.2007" [ 461.468031][T11202] can0 (unregistered): slcan off ttyS3. [ 461.492322][T11204] can0: slcan on ttyS3. [ 461.590399][T11203] can0 (unregistered): slcan off ttyS3. [ 461.760195][T11211] netlink: 'syz.2.2011': attribute type 31 has an invalid length. [ 461.768322][T11211] netlink: 'syz.2.2011': attribute type 1 has an invalid length. [ 461.776520][T11211] bridge0: port 1(bridge_slave_0) entered learning state [ 461.787722][T11211] netlink: 'syz.2.2011': attribute type 21 has an invalid length. [ 461.826984][ T7959] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 461.903852][ T5899] pegasus 5-1:0.0: can't locate MII phy, using default [ 461.931141][ T5899] pegasus 5-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 92:df:b0:79:f6:86 [ 461.959921][ T5899] usb 5-1: USB disconnect, device number 97 [ 461.986780][ T7959] usb 4-1: Using ep0 maxpacket: 16 [ 461.995707][ T7959] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 461.999934][T11215] FAULT_INJECTION: forcing a failure. [ 461.999934][T11215] name failslab, interval 1, probability 0, space 0, times 0 [ 462.009746][ T7959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 462.020208][T11215] CPU: 1 UID: 0 PID: 11215 Comm: syz.2.2013 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.020242][T11215] Tainted: [L]=SOFTLOCKUP [ 462.020251][T11215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 462.020289][T11215] Call Trace: [ 462.020361][T11215] [ 462.020398][T11215] dump_stack_lvl+0xe8/0x150 [ 462.020500][T11215] should_fail_ex+0x412/0x560 [ 462.020604][T11215] should_failslab+0xa8/0x100 [ 462.020674][T11215] __kmalloc_noprof+0xe8/0x760 [ 462.020728][T11215] ? iter_file_splice_write+0x1d4/0x1100 [ 462.020821][T11215] iter_file_splice_write+0x1d4/0x1100 [ 462.020908][T11215] ? __lock_acquire+0x6b5/0x2cf0 [ 462.021002][T11215] ? cap_inode_need_killpriv+0x51/0x60 [ 462.021076][T11215] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 462.021149][T11215] ? security_inode_need_killpriv+0x71/0x240 [ 462.021232][T11215] ? file_remove_privs_flags+0x458/0x640 [ 462.021343][T11215] ? __pfx_iter_file_splice_write+0x10/0x10 [ 462.021420][T11215] ? ovl_splice_write+0x45b/0x5b0 [ 462.021494][T11215] ? ovl_splice_write+0x45b/0x5b0 [ 462.021594][T11215] backing_file_splice_write+0x3c0/0x5d0 [ 462.021699][T11215] ovl_splice_write+0x45b/0x5b0 [ 462.021820][T11215] ? __pfx_ovl_splice_write+0x10/0x10 [ 462.021915][T11215] ? __pfx_ovl_file_end_write+0x10/0x10 [ 462.021988][T11215] ? direct_splice_actor+0x49/0x160 [ 462.022094][T11215] ? __pfx_ovl_splice_write+0x10/0x10 [ 462.022166][T11215] direct_splice_actor+0x101/0x160 [ 462.022249][T11215] splice_direct_to_actor+0x53a/0xc70 [ 462.022362][T11215] ? __pfx_direct_splice_actor+0x10/0x10 [ 462.022458][T11215] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 462.022569][T11215] do_splice_direct+0x195/0x290 [ 462.022653][T11215] ? __pfx_do_splice_direct+0x10/0x10 [ 462.022718][T11215] ? common_file_perm+0x1b4/0x220 [ 462.022774][T11215] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 462.022876][T11215] ? rw_verify_area+0x255/0x4d0 [ 462.022969][T11215] do_sendfile+0x535/0x7c0 [ 462.023061][T11215] ? __pfx_do_sendfile+0x10/0x10 [ 462.023178][T11215] __se_sys_sendfile64+0xdf/0x1a0 [ 462.023270][T11215] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 462.023378][T11215] do_syscall_64+0xe2/0xf80 [ 462.023453][T11215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.023508][T11215] ? clear_bhb_loop+0x40/0x90 [ 462.023580][T11215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.023641][T11215] RIP: 0033:0x7f461d59acb9 [ 462.023694][T11215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.023739][T11215] RSP: 002b:00007f461e4ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 462.023804][T11215] RAX: ffffffffffffffda RBX: 00007f461d815fa0 RCX: 00007f461d59acb9 [ 462.023845][T11215] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 462.023884][T11215] RBP: 00007f461e4ba090 R08: 0000000000000000 R09: 0000000000000000 [ 462.023916][T11215] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 462.023948][T11215] R13: 00007f461d816038 R14: 00007f461d815fa0 R15: 00007ffebb89b768 [ 462.024038][T11215] [ 462.351060][ T7959] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 462.360225][ T7959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.368643][ T7959] usb 4-1: Product: syz [ 462.372854][ T7959] usb 4-1: Manufacturer: syz [ 462.392436][ T7959] usb 4-1: SerialNumber: syz [ 462.409073][ T7959] usb 4-1: config 0 descriptor?? [ 462.423933][ T7959] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 462.434644][ T7959] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 462.836328][ T5899] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 462.924215][T11231] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2018'. [ 462.998140][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 463.014660][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 463.026797][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 463.039584][ T7959] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 463.048789][ T7959] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 463.058485][ T5899] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 463.068206][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.077028][ T5899] usb 5-1: Product: syz [ 463.081296][ T5899] usb 5-1: Manufacturer: syz [ 463.086764][ T5899] usb 5-1: SerialNumber: syz [ 463.095231][ T5899] usb 5-1: config 0 descriptor?? [ 463.115545][ T5899] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 463.129404][ T5899] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 463.326463][ T7192] pegasus 2-1:0.0: setup Pegasus II specific registers [ 463.406043][ T5896] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 463.557788][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 463.570499][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.580866][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 463.590062][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.601369][ T5896] usb 3-1: config 0 descriptor?? [ 463.615698][ T5896] hub 3-1:0.0: USB hub found [ 463.680625][ T7959] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 463.716899][ T5899] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 463.723938][ T5899] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 463.818702][ T5896] hub 3-1:0.0: 1 port detected [ 463.889981][ T7959] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 463.900601][ T7959] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 463.911653][ T7959] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 463.919433][ T7959] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 463.926692][ T7959] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 463.944227][ T7959] usb 4-1: USB disconnect, device number 9 [ 464.134441][ T5899] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 464.141646][ T5899] em28xx 5-1:0.0: No AC97 audio processor [ 464.528669][T11239] virtio-fs: tag not found [ 464.735345][ T5896] hub 3-1:0.0: activate --> -90 [ 464.885291][ T7303] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 464.943892][ T7192] pegasus 2-1:0.0: can't locate MII phy, using default [ 464.971530][ T7192] pegasus 2-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 26:2b:36:82:d1:38 [ 464.982742][ T7192] usb 2-1: USB disconnect, device number 31 [ 465.048279][ T7303] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 465.058045][ T7303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.070565][ T7303] usb 4-1: config 0 descriptor?? [ 465.435058][ T5896] usb 3-1-port1: cannot reset (err = -71) [ 465.444128][ T5896] usb 3-1-port1: Cannot enable. Maybe the USB cable is bad? [ 465.452780][ T7959] usb 3-1: USB disconnect, device number 17 [ 465.459861][ T5896] usb 3-1-port1: attempt power cycle [ 465.543970][ T5899] usb 5-1: USB disconnect, device number 98 [ 465.557490][ T5899] em28xx 5-1:0.0: Disconnecting em28xx [ 465.566341][ T5899] em28xx 5-1:0.0: Freeing device [ 465.632213][ T1128] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xdb [ 466.045958][T11258] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2029'. [ 466.600325][T11275] FAULT_INJECTION: forcing a failure. [ 466.600325][T11275] name failslab, interval 1, probability 0, space 0, times 0 [ 466.614388][T11275] CPU: 1 UID: 0 PID: 11275 Comm: syz.1.2037 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.614422][T11275] Tainted: [L]=SOFTLOCKUP [ 466.614430][T11275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 466.614444][T11275] Call Trace: [ 466.614453][T11275] [ 466.614461][T11275] dump_stack_lvl+0xe8/0x150 [ 466.614497][T11275] should_fail_ex+0x412/0x560 [ 466.614532][T11275] should_failslab+0xa8/0x100 [ 466.614555][T11275] __kmalloc_noprof+0xe8/0x760 [ 466.614585][T11275] ? iter_file_splice_write+0x1d4/0x1100 [ 466.614619][T11275] iter_file_splice_write+0x1d4/0x1100 [ 466.614650][T11275] ? __lock_acquire+0x6b5/0x2cf0 [ 466.614686][T11275] ? cap_inode_need_killpriv+0x51/0x60 [ 466.614715][T11275] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 466.614744][T11275] ? security_inode_need_killpriv+0x71/0x240 [ 466.614775][T11275] ? file_remove_privs_flags+0x458/0x640 [ 466.614812][T11275] ? __pfx_iter_file_splice_write+0x10/0x10 [ 466.614840][T11275] ? ovl_splice_write+0x45b/0x5b0 [ 466.614858][ T7959] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 466.614867][T11275] ? ovl_splice_write+0x45b/0x5b0 [ 466.614908][T11275] backing_file_splice_write+0x3c0/0x5d0 [ 466.615047][T11275] ovl_splice_write+0x45b/0x5b0 [ 466.615143][T11275] ? __pfx_ovl_splice_write+0x10/0x10 [ 466.615225][T11275] ? __pfx_ovl_file_end_write+0x10/0x10 [ 466.615297][T11275] ? direct_splice_actor+0x49/0x160 [ 466.615405][T11275] ? __pfx_ovl_splice_write+0x10/0x10 [ 466.615480][T11275] direct_splice_actor+0x101/0x160 [ 466.615565][T11275] splice_direct_to_actor+0x53a/0xc70 [ 466.615674][T11275] ? __pfx_direct_splice_actor+0x10/0x10 [ 466.615770][T11275] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 466.615873][T11275] do_splice_direct+0x195/0x290 [ 466.615942][T11275] ? __pfx_do_splice_direct+0x10/0x10 [ 466.616012][T11275] ? common_file_perm+0x1b4/0x220 [ 466.616076][T11275] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 466.616182][T11275] ? rw_verify_area+0x255/0x4d0 [ 466.616269][T11275] do_sendfile+0x535/0x7c0 [ 466.616364][T11275] ? __pfx_do_sendfile+0x10/0x10 [ 466.616497][T11275] __se_sys_sendfile64+0xdf/0x1a0 [ 466.616578][T11275] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 466.616681][T11275] do_syscall_64+0xe2/0xf80 [ 466.616757][T11275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.616804][T11275] ? trace_irq_disable+0x37/0x100 [ 466.616859][T11275] ? clear_bhb_loop+0x40/0x90 [ 466.616937][T11275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.616991][T11275] RIP: 0033:0x7f204f99acb9 [ 466.617045][T11275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.617097][T11275] RSP: 002b:00007f2050887028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 466.617161][T11275] RAX: ffffffffffffffda RBX: 00007f204fc15fa0 RCX: 00007f204f99acb9 [ 466.617196][T11275] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 466.617236][T11275] RBP: 00007f2050887090 R08: 0000000000000000 R09: 0000000000000000 [ 466.617268][T11275] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 466.617300][T11275] R13: 00007f204fc16038 R14: 00007f204fc15fa0 R15: 00007ffd25a5b098 [ 466.617392][T11275] [ 466.725344][ T5829] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 466.914493][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 466.955482][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.970423][ T5829] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 466.980907][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.993018][ T5829] usb 3-1: Product: syz [ 466.997351][ T5829] usb 3-1: Manufacturer: syz [ 467.002082][ T5829] usb 3-1: SerialNumber: syz [ 467.012978][ T5829] usb 3-1: config 0 descriptor?? [ 467.030876][ T5829] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 467.037615][ T5829] usb 3-1: selecting invalid altsetting 1 [ 467.065316][ T7959] usb 5-1: Using ep0 maxpacket: 16 [ 467.072568][ T7959] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 467.084327][ T7959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 467.097931][ T7959] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 467.108954][ T7959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.117923][ T7959] usb 5-1: Product: syz [ 467.122150][ T7959] usb 5-1: Manufacturer: syz [ 467.126856][ T7959] usb 5-1: SerialNumber: syz [ 467.139875][ T7959] usb 5-1: config 0 descriptor?? [ 467.150396][ T7959] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 467.161576][ T7959] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 467.235647][ T5829] gspca_stk014: init reg: 0x00 [ 467.240628][ T5829] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 467.355518][ T7303] pegasus 4-1:0.0: setup Pegasus II specific registers [ 467.464481][ T5896] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 467.475532][T11271] VFS: Mount too revealing [ 467.629411][ T5896] usb 2-1: config 2 has an invalid interface number: 169 but max is 0 [ 467.637917][ T5896] usb 2-1: config 2 has no interface number 0 [ 467.644627][ T5896] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 467.656687][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.677822][ T5896] cypress_m8 2-1:2.169: DeLorme Earthmate USB converter detected [ 467.704921][ T5896] earthmate ttyUSB0: required endpoint is missing [ 467.751956][ T7959] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 467.759546][ T7959] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 467.893855][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.902873][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.915901][ T7192] usb 2-1: USB disconnect, device number 32 [ 467.925130][ T7192] cypress_m8 2-1:2.169: device disconnected [ 468.125212][T11285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.135991][T11285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.172024][ T7959] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 468.181656][ T7959] em28xx 5-1:0.0: No AC97 audio processor [ 468.352078][T11285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.362931][T11285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.725056][ T7959] usb 3-1: USB disconnect, device number 22 [ 468.763516][ T5829] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 468.781665][ T7303] pegasus 4-1:0.0: can't locate MII phy, using default [ 468.802474][ T7303] pegasus 4-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 1e:76:24:2b:38:45 [ 468.816971][ T7303] usb 4-1: USB disconnect, device number 10 [ 468.933599][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 468.942311][ T5829] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 468.951997][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.975094][ T5829] usb 2-1: config 0 descriptor?? [ 468.988297][ T5829] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 469.253075][ T7303] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 469.385422][ T7192] usb 5-1: USB disconnect, device number 99 [ 469.404570][ T7192] em28xx 5-1:0.0: Disconnecting em28xx [ 469.423941][ T7303] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 469.436920][ T7192] em28xx 5-1:0.0: Freeing device [ 469.456865][ T7303] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.471470][ T7303] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 469.489216][ T7303] usb 3-1: config 0 interface 0 has no altsetting 0 [ 469.496356][ T7303] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 469.506858][ T7303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.531412][ T7303] usb 3-1: config 0 descriptor?? [ 469.559333][ T7303] usbhid 3-1:0.0: can't add hid device: -22 [ 469.565951][ T7303] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 469.741709][T11304] FAULT_INJECTION: forcing a failure. [ 469.741709][T11304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.755229][T11304] CPU: 0 UID: 0 PID: 11304 Comm: syz.3.2050 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.755261][T11304] Tainted: [L]=SOFTLOCKUP [ 469.755269][T11304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 469.755282][T11304] Call Trace: [ 469.755291][T11304] [ 469.755300][T11304] dump_stack_lvl+0xe8/0x150 [ 469.755333][T11304] should_fail_ex+0x412/0x560 [ 469.755367][T11304] _copy_to_user+0x31/0xb0 [ 469.755393][T11304] simple_read_from_buffer+0xe1/0x170 [ 469.755423][T11304] proc_fail_nth_read+0x1bb/0x230 [ 469.755448][T11304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.755476][T11304] ? rw_verify_area+0x2a6/0x4d0 [ 469.755504][T11304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.755528][T11304] vfs_read+0x20c/0xa70 [ 469.755553][T11304] ? fdget_pos+0x246/0x320 [ 469.755583][T11304] ? __pfx___mutex_lock+0x10/0x10 [ 469.755614][T11304] ? __pfx_vfs_read+0x10/0x10 [ 469.755645][T11304] ? __fget_files+0x2a/0x420 [ 469.755692][T11304] ? __fget_files+0x3a0/0x420 [ 469.755715][T11304] ? __fget_files+0x2a/0x420 [ 469.755757][T11304] ksys_read+0x150/0x270 [ 469.755791][T11304] ? __pfx_ksys_read+0x10/0x10 [ 469.755820][T11304] ? __pfx_v4l2_ioctl+0x10/0x10 [ 469.755852][T11304] do_syscall_64+0xe2/0xf80 [ 469.755879][T11304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.755900][T11304] ? trace_irq_disable+0x37/0x100 [ 469.755922][T11304] ? clear_bhb_loop+0x40/0x90 [ 469.755947][T11304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.755967][T11304] RIP: 0033:0x7ff01395b58e [ 469.755987][T11304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 469.756005][T11304] RSP: 002b:00007ff0147eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.756027][T11304] RAX: ffffffffffffffda RBX: 00007ff0147eb6c0 RCX: 00007ff01395b58e [ 469.756044][T11304] RDX: 000000000000000f RSI: 00007ff0147eb0a0 RDI: 0000000000000004 [ 469.756056][T11304] RBP: 00007ff0147eb090 R08: 0000000000000000 R09: 0000000000000000 [ 469.756067][T11304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.756079][T11304] R13: 00007ff013c16038 R14: 00007ff013c15fa0 R15: 00007ffc24da6f78 [ 469.756112][T11304] [ 469.773679][ T7192] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 470.155152][ T7192] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 470.163099][ T7192] usb 5-1: can't read configurations, error -61 [ 470.202621][ T7274] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 470.292763][ T7192] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 470.352565][ T7274] usb 4-1: Using ep0 maxpacket: 32 [ 470.360627][ T7274] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 470.369172][ T7274] usb 4-1: config 0 has no interface number 0 [ 470.375550][ T7274] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 470.386796][ T7274] usb 4-1: config 0 interface 1 has no altsetting 0 [ 470.396281][ T7274] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 470.405572][ T7274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.413761][ T7274] usb 4-1: Product: syz [ 470.417965][ T7274] usb 4-1: Manufacturer: syz [ 470.424185][ T7274] usb 4-1: SerialNumber: syz [ 470.432095][ T7274] usb 4-1: config 0 descriptor?? [ 470.446428][ T7192] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 470.455298][ T7192] usb 5-1: can't read configurations, error -61 [ 470.462022][ T7192] usb usb5-port1: attempt power cycle [ 470.627951][T11287] tipc: Started in network mode [ 470.639410][T11287] tipc: Node identity ee07f29cade, cluster identity 4711 [ 470.648270][T11287] tipc: Enabled bearer , priority 0 [ 470.666635][T11287] tipc: Disabling bearer [ 470.676565][ T7274] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 470.686385][ T7274] cx231xx 4-1:0.1: Failed to read PCB config [ 470.693068][ T7274] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 470.708770][ T7274] usb 4-1: USB disconnect, device number 11 [ 470.743034][ T5829] gspca_sonixj: i2c_w8 err -71 [ 470.765035][ T5829] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 470.779346][ T5829] usb 2-1: USB disconnect, device number 33 [ 470.812491][ T7192] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 470.854556][ T7192] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 470.865289][ T7192] usb 5-1: can't read configurations, error -61 [ 471.002353][ T7192] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 471.025364][ T7192] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 471.033207][ T7192] usb 5-1: can't read configurations, error -61 [ 471.040240][ T7192] usb usb5-port1: unable to enumerate USB device [ 471.183865][ T7274] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 471.232111][ T5829] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 471.342043][ T7274] usb 4-1: Using ep0 maxpacket: 32 [ 471.351407][ T7274] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 471.359905][ T7274] usb 4-1: config 0 has no interface number 0 [ 471.366139][ T7274] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 471.376943][ T7274] usb 4-1: config 0 interface 1 has no altsetting 0 [ 471.385735][ T7274] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 471.394978][ T7274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.403072][ T7274] usb 4-1: Product: syz [ 471.407262][ T7274] usb 4-1: Manufacturer: syz [ 471.411867][ T7274] usb 4-1: SerialNumber: syz [ 471.417643][ T5829] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 471.427738][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.436516][ T7274] usb 4-1: config 0 descriptor?? [ 471.448563][ T5829] usb 2-1: config 0 descriptor?? [ 471.656944][ T7274] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 471.668484][ T7274] cx231xx 4-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 471.782083][ T7274] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 471.790603][ T7274] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 471.799231][ T7274] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 471.807884][ T7274] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 471.816898][ T7274] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 471.824825][ T7274] cx231xx 4-1:0.1: Failed to set devmode to analog: error: -32 [ 471.848168][ T7274] i2c i2c-11: Added multiplexed i2c bus 13 [ 471.860750][ T7274] i2c i2c-11: Added multiplexed i2c bus 14 [ 471.867257][ T7274] cx231xx 4-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 471.877701][ T7274] cx231xx 4-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 471.909420][ T7274] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -32 [ 471.924158][ T7274] usb 4-1: USB disconnect, device number 12 [ 472.068502][ T7959] usb 3-1: USB disconnect, device number 23 [ 472.461652][ T7959] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 472.625378][ T7959] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 472.634787][ T7959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.646692][ T7959] usb 3-1: config 0 descriptor?? [ 472.671351][ T5930] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 472.831304][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 472.839268][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 472.851388][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 472.866087][ T5930] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 472.876433][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.885088][ T5930] usb 4-1: Product: syz [ 472.890619][ T5930] usb 4-1: Manufacturer: syz [ 472.896576][ T5930] usb 4-1: SerialNumber: syz [ 472.905519][ T5930] usb 4-1: config 0 descriptor?? [ 472.923101][ T5930] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 472.932631][ T5930] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 472.971462][ T7274] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 473.111195][ T7274] usb 5-1: device descriptor read/64, error -71 [ 473.352108][ T7274] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 473.491017][ T7274] usb 5-1: device descriptor read/64, error -71 [ 473.524873][ T5930] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 473.533484][ T5930] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 473.601291][ T7274] usb usb5-port1: attempt power cycle [ 473.699152][ T5829] pegasus 2-1:0.0: setup Pegasus II specific registers [ 473.940742][ T7274] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 473.947015][ T5930] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 473.955715][ T5930] em28xx 4-1:0.0: No AC97 audio processor [ 473.961895][ T7274] usb 5-1: device descriptor read/8, error -71 [ 474.200660][ T7274] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 474.221467][ T7274] usb 5-1: device descriptor read/8, error -71 [ 474.330941][ T7274] usb usb5-port1: unable to enumerate USB device [ 474.890648][ T7959] pegasus 3-1:0.0: setup Pegasus II specific registers [ 475.113598][ T5829] pegasus 2-1:0.0: can't locate MII phy, using default [ 475.140419][ T5829] pegasus 2-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 3e:a1:e3:a6:ae:07 [ 475.153088][ T5829] usb 2-1: USB disconnect, device number 34 [ 475.456544][ T5829] usb 4-1: USB disconnect, device number 13 [ 475.464836][ T5829] em28xx 4-1:0.0: Disconnecting em28xx [ 475.473410][ T5829] em28xx 4-1:0.0: Freeing device [ 476.140219][ T7192] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 476.302822][ T7192] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 476.311171][ T7192] usb 5-1: config 0 has no interface number 0 [ 476.317652][ T7192] usb 5-1: New USB device found, idVendor=0922, idProduct=866a, bcdDevice=9b.b9 [ 476.326955][ T7192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.338397][ T7192] usb 5-1: config 0 descriptor?? [ 476.348247][ T7192] usb-storage 5-1:0.105: USB Mass Storage device detected [ 476.517625][ T7959] pegasus 3-1:0.0: can't locate MII phy, using default [ 476.554099][ T7192] usb 5-1: USB disconnect, device number 108 [ 476.558787][ T7959] pegasus 3-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 3a:43:bf:24:3c:1d [ 476.602964][ T7959] usb 3-1: USB disconnect, device number 24 [ 476.773878][T11346] FAULT_INJECTION: forcing a failure. [ 476.773878][T11346] name failslab, interval 1, probability 0, space 0, times 0 [ 476.786763][T11346] CPU: 1 UID: 0 PID: 11346 Comm: syz.3.2066 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.786794][T11346] Tainted: [L]=SOFTLOCKUP [ 476.786801][T11346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 476.786814][T11346] Call Trace: [ 476.786823][T11346] [ 476.786831][T11346] dump_stack_lvl+0xe8/0x150 [ 476.786864][T11346] should_fail_ex+0x412/0x560 [ 476.786900][T11346] should_failslab+0xa8/0x100 [ 476.786925][T11346] __kmalloc_noprof+0xe8/0x760 [ 476.786954][T11346] ? iter_file_splice_write+0x1d4/0x1100 [ 476.786988][T11346] iter_file_splice_write+0x1d4/0x1100 [ 476.787026][T11346] ? __lock_acquire+0x6b5/0x2cf0 [ 476.787061][T11346] ? cap_inode_need_killpriv+0x51/0x60 [ 476.787090][T11346] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 476.787117][T11346] ? security_inode_need_killpriv+0x71/0x240 [ 476.787147][T11346] ? file_remove_privs_flags+0x458/0x640 [ 476.787187][T11346] ? __pfx_iter_file_splice_write+0x10/0x10 [ 476.787217][T11346] ? ovl_splice_write+0x45b/0x5b0 [ 476.787246][T11346] ? ovl_splice_write+0x45b/0x5b0 [ 476.787287][T11346] backing_file_splice_write+0x3c0/0x5d0 [ 476.787323][T11346] ovl_splice_write+0x45b/0x5b0 [ 476.787357][T11346] ? __pfx_ovl_splice_write+0x10/0x10 [ 476.787384][T11346] ? __pfx_ovl_file_end_write+0x10/0x10 [ 476.787412][T11346] ? direct_splice_actor+0x49/0x160 [ 476.787454][T11346] ? __pfx_ovl_splice_write+0x10/0x10 [ 476.787483][T11346] direct_splice_actor+0x101/0x160 [ 476.787515][T11346] splice_direct_to_actor+0x53a/0xc70 [ 476.787555][T11346] ? __pfx_direct_splice_actor+0x10/0x10 [ 476.787592][T11346] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 476.787633][T11346] do_splice_direct+0x195/0x290 [ 476.787664][T11346] ? __pfx_do_splice_direct+0x10/0x10 [ 476.787690][T11346] ? common_file_perm+0x1b4/0x220 [ 476.787714][T11346] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 476.787752][T11346] ? rw_verify_area+0x255/0x4d0 [ 476.787787][T11346] do_sendfile+0x535/0x7c0 [ 476.787824][T11346] ? __pfx_do_sendfile+0x10/0x10 [ 476.787863][T11346] __se_sys_sendfile64+0xdf/0x1a0 [ 476.787891][T11346] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 476.787927][T11346] do_syscall_64+0xe2/0xf80 [ 476.787956][T11346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.787977][T11346] ? trace_irq_disable+0x37/0x100 [ 476.787997][T11346] ? clear_bhb_loop+0x40/0x90 [ 476.788030][T11346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.788052][T11346] RIP: 0033:0x7ff01399acb9 [ 476.788073][T11346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.788091][T11346] RSP: 002b:00007ff0147eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 476.788114][T11346] RAX: ffffffffffffffda RBX: 00007ff013c15fa0 RCX: 00007ff01399acb9 [ 476.788131][T11346] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 476.788144][T11346] RBP: 00007ff0147eb090 R08: 0000000000000000 R09: 0000000000000000 [ 476.788158][T11346] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 476.788172][T11346] R13: 00007ff013c16038 R14: 00007ff013c15fa0 R15: 00007ffc24da6f78 [ 476.788207][T11346] [ 477.229091][ T7192] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 477.273698][T11360] netlink: 'syz.3.2069': attribute type 1 has an invalid length. [ 477.286282][T11360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2069'. [ 477.388963][ T7192] usb 2-1: Using ep0 maxpacket: 32 [ 477.396911][ T7192] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 477.405101][ T7192] usb 2-1: config 0 has no interface number 0 [ 477.411377][ T7192] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 477.422234][ T7192] usb 2-1: config 0 interface 1 has no altsetting 0 [ 477.439255][ T7959] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 477.442901][ T7192] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 477.458985][ T7192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.467067][ T7192] usb 2-1: Product: syz [ 477.471482][ T7192] usb 2-1: Manufacturer: syz [ 477.476124][ T7192] usb 2-1: SerialNumber: syz [ 477.489572][ T7192] usb 2-1: config 0 descriptor?? [ 477.638864][ T7959] usb 3-1: Using ep0 maxpacket: 16 [ 477.650634][ T7959] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 477.670782][ T7959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 477.692570][ T7959] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 477.716784][ T7192] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 477.717706][ T7959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.749817][ T7192] cx231xx 2-1:0.1: Failed to read PCB config [ 477.759156][ T7959] usb 3-1: Product: syz [ 477.763400][ T7959] usb 3-1: Manufacturer: syz [ 477.769302][ T7192] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 477.781495][ T7959] usb 3-1: SerialNumber: syz [ 477.793952][ T7192] usb 2-1: USB disconnect, device number 35 [ 477.810925][ T7959] usb 3-1: config 0 descriptor?? [ 477.831173][ T7959] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 477.840636][ T5896] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 477.854851][ T7959] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 478.010904][ T5896] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 478.027510][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.045197][ T5896] usb 4-1: config 0 descriptor?? [ 478.228596][ T7192] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 478.388721][ T7192] usb 2-1: Using ep0 maxpacket: 32 [ 478.401648][ T7192] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 478.416357][ T7192] usb 2-1: config 0 has no interface number 0 [ 478.422742][ T7192] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 478.433609][ T7192] usb 2-1: config 0 interface 1 has no altsetting 0 [ 478.442994][ T7192] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 478.452309][ T7192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.461275][ T7959] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 478.462098][ T7192] usb 2-1: Product: syz [ 478.471721][ T7192] usb 2-1: Manufacturer: syz [ 478.476711][ T7192] usb 2-1: SerialNumber: syz [ 478.476748][ T7959] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 478.494925][ T7192] usb 2-1: config 0 descriptor?? [ 478.628429][ T5899] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 478.719814][ T7192] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 478.730742][ T7192] cx231xx 2-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 478.791181][ T5899] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 478.800613][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.819172][ T5899] usb 5-1: config 0 descriptor?? [ 478.858559][ T7192] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 478.867091][ T7192] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 478.876464][ T7192] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 478.884878][ T7192] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 478.893230][ T7192] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 478.900811][ T7959] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 478.902512][ T7192] cx231xx 2-1:0.1: Failed to set devmode to analog: error: -32 [ 478.912197][ T7959] em28xx 3-1:0.0: No AC97 audio processor [ 478.935224][ T7192] i2c i2c-11: Added multiplexed i2c bus 13 [ 478.957551][ T7192] i2c i2c-11: Added multiplexed i2c bus 14 [ 478.972934][ T7192] cx231xx 2-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 478.983736][ T7192] cx231xx 2-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 479.010603][ T7192] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 479.023021][ T7192] usb 2-1: USB disconnect, device number 36 [ 479.641767][ T5899] pegasus 5-1:0.0: probe with driver pegasus failed with error -121 [ 479.957868][ T5899] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 480.124646][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 480.133808][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 480.141915][ T5899] usb 2-1: can't read configurations, error -71 [ 480.210342][ T7959] usb 3-1: USB disconnect, device number 25 [ 480.239039][ T7959] em28xx 3-1:0.0: Disconnecting em28xx [ 480.263837][ T7959] em28xx 3-1:0.0: Freeing device [ 480.305067][ T5896] pegasus 4-1:0.0: setup Pegasus II specific registers [ 480.415092][T11414] netlink: 'syz.2.2080': attribute type 1 has an invalid length. [ 481.007354][ T5899] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 481.167167][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 481.180877][ T5899] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 481.197269][ T5899] usb 2-1: config 0 has no interface number 0 [ 481.203553][ T5899] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 481.218279][ T5899] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 481.239433][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.281811][ T5899] usb 2-1: Product: syz [ 481.298066][ T5899] usb 2-1: Manufacturer: syz [ 481.325444][ T5899] usb 2-1: SerialNumber: syz [ 481.350636][ T5899] usb 2-1: config 0 descriptor?? [ 481.429624][ T5829] usb 5-1: USB disconnect, device number 109 [ 481.580895][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'. [ 481.590199][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'. [ 481.740694][ T5896] pegasus 4-1:0.0: can't locate MII phy, using default [ 481.770476][ T5896] pegasus 4-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, e6:bb:d5:8e:90:4e [ 481.787090][ T5829] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 481.787134][ T5896] usb 4-1: USB disconnect, device number 14 [ 481.806467][ T5899] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 481.856435][ T5899] usb 2-1: USB disconnect, device number 38 [ 481.946769][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 481.954025][ T5829] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 481.962286][ T5829] usb 5-1: config 0 has no interface number 0 [ 481.968448][ T5829] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 481.980423][ T5829] usb 5-1: config 0 interface 1 has no altsetting 0 [ 481.990429][ T5829] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 481.999895][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.007966][ T5829] usb 5-1: Product: syz [ 482.012290][ T5829] usb 5-1: Manufacturer: syz [ 482.017070][ T5829] usb 5-1: SerialNumber: syz [ 482.024927][ T5829] usb 5-1: config 0 descriptor?? [ 482.138093][ T5883] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 482.240399][ T5829] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 482.249987][ T5829] cx231xx 5-1:0.1: Failed to read PCB config [ 482.256056][ T5829] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 482.275399][ T5829] usb 5-1: USB disconnect, device number 110 [ 482.308245][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 482.337680][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 482.366732][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 482.393370][ T5883] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 482.414084][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.423868][ T5883] usb 3-1: Product: syz [ 482.428584][ T5883] usb 3-1: Manufacturer: syz [ 482.433227][ T5883] usb 3-1: SerialNumber: syz [ 482.441696][ T5883] usb 3-1: config 0 descriptor?? [ 482.466982][ T5883] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 482.478124][T11437] FAULT_INJECTION: forcing a failure. [ 482.478124][T11437] name failslab, interval 1, probability 0, space 0, times 0 [ 482.492132][T11437] CPU: 0 UID: 0 PID: 11437 Comm: syz.1.2089 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.492156][T11437] Tainted: [L]=SOFTLOCKUP [ 482.492162][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 482.492172][T11437] Call Trace: [ 482.492178][T11437] [ 482.492185][T11437] dump_stack_lvl+0xe8/0x150 [ 482.492210][T11437] should_fail_ex+0x412/0x560 [ 482.492237][T11437] should_failslab+0xa8/0x100 [ 482.492254][T11437] __kmalloc_noprof+0xe8/0x760 [ 482.492276][T11437] ? iter_file_splice_write+0x1d4/0x1100 [ 482.492301][T11437] iter_file_splice_write+0x1d4/0x1100 [ 482.492322][T11437] ? __lock_acquire+0x6b5/0x2cf0 [ 482.492349][T11437] ? cap_inode_need_killpriv+0x51/0x60 [ 482.492369][T11437] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 482.492390][T11437] ? security_inode_need_killpriv+0x71/0x240 [ 482.492412][T11437] ? file_remove_privs_flags+0x458/0x640 [ 482.492440][T11437] ? __pfx_iter_file_splice_write+0x10/0x10 [ 482.492462][T11437] ? ovl_splice_write+0x45b/0x5b0 [ 482.492483][T11437] ? ovl_splice_write+0x45b/0x5b0 [ 482.492513][T11437] backing_file_splice_write+0x3c0/0x5d0 [ 482.492538][T11437] ovl_splice_write+0x45b/0x5b0 [ 482.492562][T11437] ? __pfx_ovl_splice_write+0x10/0x10 [ 482.492581][T11437] ? __pfx_ovl_file_end_write+0x10/0x10 [ 482.492600][T11437] ? direct_splice_actor+0x49/0x160 [ 482.492630][T11437] ? __pfx_ovl_splice_write+0x10/0x10 [ 482.492649][T11437] direct_splice_actor+0x101/0x160 [ 482.492672][T11437] splice_direct_to_actor+0x53a/0xc70 [ 482.492700][T11437] ? __pfx_direct_splice_actor+0x10/0x10 [ 482.492726][T11437] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 482.492760][T11437] do_splice_direct+0x195/0x290 [ 482.492782][T11437] ? __pfx_do_splice_direct+0x10/0x10 [ 482.492800][T11437] ? common_file_perm+0x1b4/0x220 [ 482.492818][T11437] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 482.492846][T11437] ? rw_verify_area+0x255/0x4d0 [ 482.492872][T11437] do_sendfile+0x535/0x7c0 [ 482.492896][T11437] ? __pfx_do_sendfile+0x10/0x10 [ 482.492923][T11437] __se_sys_sendfile64+0xdf/0x1a0 [ 482.492942][T11437] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 482.492968][T11437] do_syscall_64+0xe2/0xf80 [ 482.492988][T11437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.493003][T11437] ? trace_irq_disable+0x37/0x100 [ 482.493018][T11437] ? clear_bhb_loop+0x40/0x90 [ 482.493036][T11437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.493051][T11437] RIP: 0033:0x7f204f99acb9 [ 482.493066][T11437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.493079][T11437] RSP: 002b:00007f2050887028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 482.493096][T11437] RAX: ffffffffffffffda RBX: 00007f204fc15fa0 RCX: 00007f204f99acb9 [ 482.493107][T11437] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 482.493116][T11437] RBP: 00007f2050887090 R08: 0000000000000000 R09: 0000000000000000 [ 482.493125][T11437] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 482.493135][T11437] R13: 00007f204fc16038 R14: 00007f204fc15fa0 R15: 00007ffd25a5b098 [ 482.493158][T11437] [ 482.805985][ T5883] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 483.006177][ T5829] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 483.083569][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 483.093468][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 483.103751][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 483.112352][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 483.121557][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 483.128954][ T7192] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 483.156191][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 483.166682][ T5829] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 483.187707][ T5829] usb 5-1: config 0 has no interface number 0 [ 483.193914][ T5829] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 483.221870][ T5829] usb 5-1: config 0 interface 1 has no altsetting 0 [ 483.222046][ T5883] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 483.235425][ T5883] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 483.247947][ T5829] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 483.268933][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.285986][ T5829] usb 5-1: Product: syz [ 483.296141][ T5829] usb 5-1: Manufacturer: syz [ 483.302974][ T7192] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 483.315968][ T5829] usb 5-1: SerialNumber: syz [ 483.321669][ T7192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.343484][ T5829] usb 5-1: config 0 descriptor?? [ 483.373279][ T7192] usb 2-1: config 0 descriptor?? [ 483.568384][ T5829] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 483.588271][ T5829] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 483.605539][T11443] chnl_net:caif_netlink_parms(): no params data found [ 483.658460][ T5883] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 483.664427][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.669162][ T5883] em28xx 3-1:0.0: No AC97 audio processor [ 483.706833][ T5829] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 483.721150][ T5829] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 483.730600][ T5829] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 483.739585][ T5829] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 483.748509][ T5829] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 483.756580][ T5829] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -32 [ 483.798110][ T5829] i2c i2c-11: Added multiplexed i2c bus 13 [ 483.819923][ T5829] i2c i2c-11: Added multiplexed i2c bus 14 [ 483.820656][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.832900][ T5829] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 483.848313][ T5829] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 483.884435][ T5829] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 483.909920][ T5829] usb 5-1: USB disconnect, device number 111 [ 483.933916][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.037042][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.076876][T11443] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.084443][T11443] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.093194][T11443] bridge_slave_0: entered allmulticast mode [ 484.101802][T11443] bridge_slave_0: entered promiscuous mode [ 484.110936][T11443] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.118835][T11443] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.126771][T11443] bridge_slave_1: entered allmulticast mode [ 484.134744][T11443] bridge_slave_1: entered promiscuous mode [ 484.177732][T11443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.191960][T11443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.258347][T11443] team0: Port device team_slave_0 added [ 484.283328][T11443] team0: Port device team_slave_1 added [ 484.371018][ T13] bridge_slave_1: left allmulticast mode [ 484.377794][ T13] bridge_slave_1: left promiscuous mode [ 484.383763][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.401214][ T13] bridge_slave_0: left allmulticast mode [ 484.407441][ T13] bridge_slave_0: left promiscuous mode [ 484.413394][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.458523][T11452] overlayfs: failed to resolve './file0': -2 [ 484.815395][ T5930] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 484.877816][ T13] ***** Releasing 0 refcount on 0000000000000000 [ 484.888695][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.902627][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.929646][ T13] bond0 (unregistering): Released all slaves [ 484.943621][ T5896] usb 3-1: USB disconnect, device number 26 [ 484.961576][ T5896] em28xx 3-1:0.0: Disconnecting em28xx [ 484.968131][T11443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.979085][ T5896] em28xx 3-1:0.0: Freeing device [ 484.989388][ T5930] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 485.007196][T11443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.015626][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.044823][T11443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.071333][T11443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.078848][T11443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.123821][ T5930] usb 5-1: config 0 descriptor?? [ 485.156040][T11443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.177857][ T5151] Bluetooth: hci4: command tx timeout [ 485.217941][ T13] IPVS: stopping backup sync thread 5959 ... [ 485.362898][T11443] hsr_slave_0: entered promiscuous mode [ 485.373582][T11443] hsr_slave_1: entered promiscuous mode [ 485.381084][T11443] debugfs: 'hsr0' already exists in 'hsr' [ 485.386968][T11443] Cannot create hsr debugfs directory [ 485.504937][ T5896] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 485.549743][ T13] hsr_slave_0: left promiscuous mode [ 485.556604][ T13] hsr_slave_1: left promiscuous mode [ 485.562836][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.572132][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.581865][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.590205][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.614659][ T13] veth1_macvtap: left promiscuous mode [ 485.620431][ T13] veth0_macvtap: left promiscuous mode [ 485.628479][ T13] veth1_vlan: left promiscuous mode [ 485.633838][ T13] veth0_vlan: left promiscuous mode [ 485.667013][ T5896] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 485.688263][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.708826][ T7192] pegasus 2-1:0.0: setup Pegasus II specific registers [ 485.713329][ T5896] usb 3-1: config 0 has no interface number 0 [ 485.722575][ T5896] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 485.751942][ T5896] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.790804][ T5896] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 485.808477][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.829395][ T5896] usb 3-1: Product: syz [ 485.833692][ T5896] usb 3-1: Manufacturer: syz [ 485.857858][ T5896] usb 3-1: SerialNumber: syz [ 485.874108][ T5896] usb 3-1: config 0 descriptor?? [ 485.977301][ T5930] pegasus 5-1:0.0: probe with driver pegasus failed with error -121 [ 486.109990][T11458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.141935][T11458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.158291][ T5896] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 486.196750][ T5896] usb 3-1: USB disconnect, device number 27 [ 486.529414][ T13] team0 (unregistering): Port device team_slave_1 removed [ 486.593215][ T13] team0 (unregistering): Port device team_slave_0 removed [ 487.020231][ T5829] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 487.147957][ T7192] pegasus 2-1:0.0: can't locate MII phy, using default [ 487.182701][ T7192] pegasus 2-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, f2:f4:cb:2d:6f:88 [ 487.221254][ T5829] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 487.238945][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.254411][ T5151] Bluetooth: hci4: command tx timeout [ 487.263525][ T5829] usb 3-1: Product: syz [ 487.268327][ T5829] usb 3-1: Manufacturer: syz [ 487.273194][ T5829] usb 3-1: SerialNumber: syz [ 487.372282][ T7192] usb 2-1: USB disconnect, device number 39 [ 487.618195][ T5896] usb 5-1: USB disconnect, device number 112 [ 487.925463][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2097'. [ 487.946995][T11475] netlink: 'syz.2.2097': attribute type 8 has an invalid length. [ 487.978027][ T5829] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 488.013058][T11443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 488.029829][ T5829] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 488.051767][T11443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 488.065170][ T5829] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 488.088027][ T5829] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 488.115804][ T5829] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 488.118549][T11443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 488.137888][T11443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 488.148645][ T5829] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 488.192398][ T5829] usb 3-1: USB disconnect, device number 28 [ 488.313596][ T5896] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 488.327971][T11443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.353568][ T7959] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 488.363521][T11443] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.378747][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.386100][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.403246][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.410517][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.493703][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 488.500938][ T5896] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 488.512841][ T5896] usb 2-1: config 0 has no interface number 0 [ 488.525747][ T7959] usb 5-1: Using ep0 maxpacket: 16 [ 488.538317][ T5896] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 488.555170][ T7959] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 488.584157][ T5896] usb 2-1: config 0 interface 1 has no altsetting 0 [ 488.591443][ T7959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 488.620132][ T5896] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 488.630676][ T7959] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 488.643507][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.651575][ T5896] usb 2-1: Product: syz [ 488.658492][ T7959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.672760][ T7959] usb 5-1: Product: syz [ 488.680505][ T5896] usb 2-1: Manufacturer: syz [ 488.685737][ T7959] usb 5-1: Manufacturer: syz [ 488.690478][ T5896] usb 2-1: SerialNumber: syz [ 488.696438][ T7959] usb 5-1: SerialNumber: syz [ 488.706049][ T5896] usb 2-1: config 0 descriptor?? [ 488.716575][ T7959] usb 5-1: config 0 descriptor?? [ 488.737102][ T7959] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 488.747757][ T7959] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 488.877847][T11520] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2104'. [ 488.950269][ T5896] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 488.972171][T11443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.977042][ T5896] cx231xx 2-1:0.1: Failed to read PCB config [ 489.001563][ T5896] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 489.034128][ T5896] usb 2-1: USB disconnect, device number 40 [ 489.156824][T11443] veth0_vlan: entered promiscuous mode [ 489.198445][T11443] veth1_vlan: entered promiscuous mode [ 489.256014][T11443] veth0_macvtap: entered promiscuous mode [ 489.270062][T11443] veth1_macvtap: entered promiscuous mode [ 489.300647][T11443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.320199][T11443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.333680][ T5151] Bluetooth: hci4: command tx timeout [ 489.342480][ T7959] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 489.352068][ T7959] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 489.362344][ T3541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.376926][ T3541] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.387240][ T3541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.400511][ T3541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.445744][ T5896] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 489.463981][ T5829] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 489.518505][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.533009][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.589448][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.600191][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.622943][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 489.634839][ T5896] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 489.636798][ T5829] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 489.656278][ T5896] usb 2-1: config 0 has no interface number 0 [ 489.662489][ T5896] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 489.693693][ T5896] usb 2-1: config 0 interface 1 has no altsetting 0 [ 489.694692][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.728219][ T5896] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 489.731453][ T5829] usb 3-1: config 0 descriptor?? [ 489.777656][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.788874][ T7959] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 489.814395][ T5896] usb 2-1: Product: syz [ 489.818650][ T5896] usb 2-1: Manufacturer: syz [ 489.825986][ T7959] em28xx 5-1:0.0: No AC97 audio processor [ 489.849625][ T5896] usb 2-1: SerialNumber: syz [ 489.893305][ T5896] usb 2-1: config 0 descriptor?? [ 490.109359][ T5896] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 490.134696][ T5896] cx231xx 2-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 490.253086][ T5896] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 490.262280][ T5896] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 490.276461][ T5896] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 490.286962][ T5896] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 490.299437][ T5896] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 490.312858][ T5896] cx231xx 2-1:0.1: Failed to set devmode to analog: error: -32 [ 490.350602][ T5896] i2c i2c-11: Added multiplexed i2c bus 13 [ 490.361720][ T5896] i2c i2c-11: Added multiplexed i2c bus 14 [ 490.369638][ T5896] cx231xx 2-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 490.382055][ T5896] cx231xx 2-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 490.424295][ T5896] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 490.443618][ T5896] usb 2-1: USB disconnect, device number 41 [ 490.503552][ T5930] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 490.690856][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 490.713896][ T5930] usb 4-1: can't read configurations, error -71 [ 490.783896][ T5829] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 491.082453][ T5896] usb 5-1: USB disconnect, device number 113 [ 491.094897][ T5896] em28xx 5-1:0.0: Disconnecting em28xx [ 491.109533][ T5896] em28xx 5-1:0.0: Freeing device [ 491.142883][ T5829] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 491.304428][ T5829] usb 2-1: device descriptor read/64, error -71 [ 491.412032][ T5151] Bluetooth: hci4: command tx timeout [ 491.452778][ T5896] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 491.583489][ T5829] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 491.722085][ T5829] usb 2-1: device descriptor read/64, error -71 [ 491.832068][ T5829] usb usb2-port1: attempt power cycle [ 492.151633][ T7959] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 492.171618][ T5829] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 492.192395][ T5829] usb 2-1: device descriptor read/8, error -71 [ 492.248161][ T7192] usb 3-1: USB disconnect, device number 29 [ 492.326690][ T7959] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 492.337032][ T7959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.349191][ T7959] usb 4-1: config 0 descriptor?? [ 492.431552][ T5829] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 492.452721][ T5829] usb 2-1: device descriptor read/8, error -71 [ 492.562318][ T5829] usb usb2-port1: unable to enumerate USB device [ 492.592596][ T7192] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 492.753752][ T7192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 492.765451][ T7192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.776485][ T7192] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 492.786029][ T7192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.797303][ T7192] usb 3-1: config 0 descriptor?? [ 492.808383][ T7192] hub 3-1:0.0: USB hub found [ 493.011463][T11574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.030050][T11574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.043379][ T7192] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 493.260622][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 493.267967][ T7192] usbhid 3-1:0.0: can't add hid device: -32 [ 493.274079][ T7192] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 493.306711][ T7192] usb 3-1: USB disconnect, device number 30 [ 493.880864][T11576] overlayfs: missing 'lowerdir' [ 494.330975][ T7192] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 494.338981][ T5930] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 494.490542][ T7192] usb 3-1: Using ep0 maxpacket: 16 [ 494.495972][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 494.503943][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 494.515861][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 494.528372][ T7192] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 494.540334][ T7192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 494.551983][ T5930] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 494.562068][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.570271][ T5930] usb 2-1: Product: syz [ 494.576644][ T5930] usb 2-1: Manufacturer: syz [ 494.581818][ T5930] usb 2-1: SerialNumber: syz [ 494.586976][ T7192] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 494.598050][ T7192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.607414][ T5930] usb 2-1: config 0 descriptor?? [ 494.613304][ T7192] usb 3-1: Product: syz [ 494.614054][ T7959] pegasus 4-1:0.0: setup Pegasus II specific registers [ 494.617767][ T7192] usb 3-1: Manufacturer: syz [ 494.629349][ T7192] usb 3-1: SerialNumber: syz [ 494.639769][ T5930] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 494.652497][ T5930] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 494.667056][ T7192] usb 3-1: config 0 descriptor?? [ 494.678053][ T7192] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 494.688569][ T7192] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 494.702046][ T5896] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 494.860313][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 494.870496][ T5896] usb 5-1: config 7 has an invalid interface number: 245 but max is 0 [ 494.878982][ T5896] usb 5-1: config 7 has no interface number 0 [ 494.888619][ T5896] usb 5-1: New USB device found, idVendor=177f, idProduct=0163, bcdDevice=52.89 [ 494.898009][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.906232][ T5896] usb 5-1: Product: ␃߉g⡎ࣈ峉裣⿜㰁茛☂㙻᭎䨐颉쇒援 [ 494.915399][ T5896] usb 5-1: Manufacturer: 콊愞ậᰕﵩ킼⎴◽샵택ᒰ备봸꿍䶡탩빿珬㓀妐颭됣ᅪ墎囿敧陙膍ₛ酎앉䱒㼱ᇃ侗ۿ崮檽緵狀 [ 494.932785][ T5896] usb 5-1: SerialNumber: ⚑䏔쟪䪣낏멕枴耀뽶鴴檻뫚੻軠弸㠤眴脙骮騑鎲얞压懂鵢䰷꯲坴菉끈朓釡쐉裘൞뻇ᡓﹿᄅ턏᜕罳ㅣ逓㘴緢歋餙쓤ូ霭뚎ꓢ꛺聗殦㶼됣赼ﴸ零;仙쬬杹✛勽웉ꮳ鎟훳ᝀ틋Ớ㴧胷稛㙒ㅻꕋ䵐 [ 495.241044][ T5930] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 495.248322][ T5930] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 495.290470][ T7192] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 495.298248][ T7192] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 495.306787][ T7192] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 495.314412][ T7192] em28xx 3-1:0.0: No AC97 audio processor [ 495.376378][T11586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.388324][T11586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.400804][T11586] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2119'. [ 495.663278][T11578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.674605][T11578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.691306][ T5930] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 495.698754][ T5930] em28xx 2-1:0.0: No AC97 audio processor [ 495.775128][ T5896] usb 5-1: USB disconnect, device number 115 [ 496.045029][ T7959] pegasus 4-1:0.0: can't locate MII phy, using default [ 496.071607][ T7959] pegasus 4-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 1a:26:fa:21:1b:42 [ 496.091302][ T7959] usb 4-1: USB disconnect, device number 17 [ 496.611021][T11596] netlink: 'syz.3.2122': attribute type 46 has an invalid length. [ 496.659509][ T5896] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 496.741798][T11600] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 496.750846][T11600] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 496.822220][ T5896] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 496.832596][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.844956][ T5896] usb 5-1: config 0 descriptor?? [ 497.049203][ T7959] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 497.089341][ T5930] usb 2-1: USB disconnect, device number 46 [ 497.096879][ T5930] em28xx 2-1:0.0: Disconnecting em28xx [ 497.112740][ T5930] em28xx 2-1:0.0: Freeing device [ 497.157674][ T5883] usb 3-1: USB disconnect, device number 31 [ 497.181645][T11604] FAULT_INJECTION: forcing a failure. [ 497.181645][T11604] name failslab, interval 1, probability 0, space 0, times 0 [ 497.186149][ T5883] em28xx 3-1:0.0: Disconnecting em28xx [ 497.194418][T11604] CPU: 1 UID: 0 PID: 11604 Comm: syz.1.2126 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.194510][T11604] Tainted: [L]=SOFTLOCKUP [ 497.194533][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 497.194584][T11604] Call Trace: [ 497.194625][T11604] [ 497.194655][T11604] dump_stack_lvl+0xe8/0x150 [ 497.194736][T11604] should_fail_ex+0x412/0x560 [ 497.194835][T11604] should_failslab+0xa8/0x100 [ 497.194900][T11604] __kmalloc_noprof+0xe8/0x760 [ 497.194983][T11604] ? iter_file_splice_write+0x1d4/0x1100 [ 497.195073][T11604] iter_file_splice_write+0x1d4/0x1100 [ 497.195155][T11604] ? __lock_acquire+0x6b5/0x2cf0 [ 497.195242][T11604] ? cap_inode_need_killpriv+0x51/0x60 [ 497.195318][T11604] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 497.195392][T11604] ? security_inode_need_killpriv+0x71/0x240 [ 497.195468][T11604] ? file_remove_privs_flags+0x458/0x640 [ 497.195585][T11604] ? __pfx_iter_file_splice_write+0x10/0x10 [ 497.195667][T11604] ? ovl_splice_write+0x45b/0x5b0 [ 497.195742][T11604] ? ovl_splice_write+0x45b/0x5b0 [ 497.195847][T11604] backing_file_splice_write+0x3c0/0x5d0 [ 497.195958][T11604] ovl_splice_write+0x45b/0x5b0 [ 497.196066][T11604] ? __pfx_ovl_splice_write+0x10/0x10 [ 497.196144][T11604] ? __pfx_ovl_file_end_write+0x10/0x10 [ 497.196216][T11604] ? direct_splice_actor+0x49/0x160 [ 497.196324][T11604] ? __pfx_ovl_splice_write+0x10/0x10 [ 497.196399][T11604] direct_splice_actor+0x101/0x160 [ 497.196484][T11604] splice_direct_to_actor+0x53a/0xc70 [ 497.196607][T11604] ? __pfx_direct_splice_actor+0x10/0x10 [ 497.196703][T11604] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 497.196810][T11604] do_splice_direct+0x195/0x290 [ 497.196897][T11604] ? __pfx_do_splice_direct+0x10/0x10 [ 497.196968][T11604] ? common_file_perm+0x1b4/0x220 [ 497.197032][T11604] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 497.197126][T11604] ? rw_verify_area+0x255/0x4d0 [ 497.197255][T11604] do_sendfile+0x535/0x7c0 [ 497.197364][T11604] ? __pfx_do_sendfile+0x10/0x10 [ 497.197484][T11604] __se_sys_sendfile64+0xdf/0x1a0 [ 497.197565][T11604] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 497.197660][T11604] do_syscall_64+0xe2/0xf80 [ 497.197734][T11604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.197794][T11604] ? trace_irq_disable+0x37/0x100 [ 497.197847][T11604] ? clear_bhb_loop+0x40/0x90 [ 497.197914][T11604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.197975][T11604] RIP: 0033:0x7f204f99acb9 [ 497.198029][T11604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.198074][T11604] RSP: 002b:00007f2050887028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 497.198135][T11604] RAX: ffffffffffffffda RBX: 00007f204fc15fa0 RCX: 00007f204f99acb9 [ 497.198177][T11604] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 497.198210][T11604] RBP: 00007f2050887090 R08: 0000000000000000 R09: 0000000000000000 [ 497.198248][T11604] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 497.198281][T11604] R13: 00007f204fc16038 R14: 00007f204fc15fa0 R15: 00007ffd25a5b098 [ 497.198375][T11604] [ 497.390235][T11606] netlink: 'syz.2.2127': attribute type 4 has an invalid length. [ 497.410178][ T7959] usb 4-1: Using ep0 maxpacket: 16 [ 497.417488][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 497.433860][ T7959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.557441][ T7959] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 497.571586][ T5883] em28xx 3-1:0.0: Freeing device [ 497.578754][ T7959] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 497.589220][ T7959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.607514][ T7959] usb 4-1: config 0 descriptor?? [ 497.618260][ T7959] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 497.959546][ T5896] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 498.048909][ T5883] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 498.198644][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 498.206085][ T5883] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 498.215338][ T5883] usb 3-1: config 0 has no interface number 0 [ 498.221831][ T5883] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 498.232765][ T5883] usb 3-1: config 0 interface 1 has no altsetting 0 [ 498.241943][ T5883] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 498.251201][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.259633][ T5883] usb 3-1: Product: syz [ 498.264176][ T5883] usb 3-1: Manufacturer: syz [ 498.268911][ T5883] usb 3-1: SerialNumber: syz [ 498.276013][ T5883] usb 3-1: config 0 descriptor?? [ 498.492957][ T5883] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 498.502514][ T5883] cx231xx 3-1:0.1: Failed to read PCB config [ 498.510753][ T5883] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 498.522220][ T5883] usb 3-1: USB disconnect, device number 32 [ 498.678453][ T5829] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 498.830034][ T5829] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 498.840353][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.852168][ T5829] usb 2-1: config 0 descriptor?? [ 498.988369][ T5883] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 499.148175][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 499.156236][ T5883] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 499.164507][ T5883] usb 3-1: config 0 has no interface number 0 [ 499.170828][ T5883] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 499.182172][ T5883] usb 3-1: config 0 interface 1 has no altsetting 0 [ 499.192335][ T5883] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 499.201602][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.210062][ T5883] usb 3-1: Product: syz [ 499.214306][ T5883] usb 3-1: Manufacturer: syz [ 499.219015][ T5883] usb 3-1: SerialNumber: syz [ 499.227598][ T5883] usb 3-1: config 0 descriptor?? [ 499.445645][ T5883] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 499.459578][ T7959] usb 5-1: USB disconnect, device number 116 [ 499.478910][ T5883] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 499.608154][ T5883] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 499.622795][ T5883] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 499.631767][ T5883] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 499.642765][ T5883] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 499.653788][ T5883] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 499.662064][ T5883] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -32 [ 499.663104][T11624] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 499.679587][T11624] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 499.710223][ T5883] i2c i2c-11: Added multiplexed i2c bus 13 [ 499.721705][ T5883] i2c i2c-11: Added multiplexed i2c bus 14 [ 499.728844][ T5883] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 499.737622][ T5883] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 499.774257][ T5883] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 499.788690][ T5883] usb 3-1: USB disconnect, device number 33 [ 499.810385][T11626] infiniband: Added to hash: ib_dev=ffff888059660000 (0)() ndev=ffff888076948000 (21)(wg0) [ 499.823796][T11626] wg0 speed is unknown, defaulting to 1000 [ 499.830269][T11626] wg0 speed is unknown, defaulting to 1000 [ 499.854947][T11626] wg0 speed is unknown, defaulting to 1000 [ 499.881092][ T7959] usb 4-1: USB disconnect, device number 18 [ 499.901365][T11626] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 499.955109][T11626] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 500.045832][T11626] wg0 speed is unknown, defaulting to 1000 [ 500.054899][T11626] wg0 speed is unknown, defaulting to 1000 [ 500.064138][T11626] wg0 speed is unknown, defaulting to 1000 [ 500.073304][T11626] wg0 speed is unknown, defaulting to 1000 [ 500.177700][ T7192] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 500.284616][T11635] netlink: 'syz.2.2136': attribute type 9 has an invalid length. [ 500.295365][T11635] netlink: 'syz.2.2136': attribute type 11 has an invalid length. [ 500.303927][T11635] netlink: 'syz.2.2136': attribute type 12 has an invalid length. [ 500.313592][T11635] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.2136'. [ 500.317792][ T7959] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 500.332328][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2136'. [ 500.363933][ T7192] usb 5-1: config 16 has an invalid interface number: 19 but max is 0 [ 500.373369][ T7192] usb 5-1: config 16 has no interface number 0 [ 500.382273][ T7192] usb 5-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 500.396757][ T7192] usb 5-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 500.414538][ T7192] usb 5-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 500.425016][ T7192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.434357][ T7192] usb 5-1: Product: syz [ 500.440616][ T7192] usb 5-1: Manufacturer: syz [ 500.445321][ T7192] usb 5-1: SerialNumber: syz [ 500.458158][T11635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2136'. [ 500.487542][ T7959] usb 4-1: Using ep0 maxpacket: 16 [ 500.495007][ T7959] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 500.507025][ T7959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 500.523166][ T7959] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 500.532892][ T7959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.541521][ T7959] usb 4-1: Product: syz [ 500.545753][ T7959] usb 4-1: Manufacturer: syz [ 500.550837][ T7959] usb 4-1: SerialNumber: syz [ 500.561029][ T7959] usb 4-1: config 0 descriptor?? [ 500.571819][ T7959] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 500.581218][ T7959] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 500.717694][ T7303] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 500.742331][ T7192] usb 5-1: USB disconnect, device number 117 [ 500.765525][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.888348][ T7303] usb 3-1: too many configurations: 194, using maximum allowed: 8 [ 500.899244][ T7303] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 500.908213][ T7303] usb 3-1: can't read configurations, error -61 [ 501.037227][ T7303] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 501.128528][ T5829] pegasus 2-1:0.0: setup Pegasus II specific registers [ 501.198038][ T7303] usb 3-1: too many configurations: 194, using maximum allowed: 8 [ 501.198402][ T7959] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 501.213167][ T7959] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 501.221165][ T7959] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 501.229460][ T7959] em28xx 4-1:0.0: No AC97 audio processor [ 501.238213][ T7303] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 501.268660][ T7303] usb 3-1: can't read configurations, error -61 [ 501.278914][ T7303] usb usb3-port1: attempt power cycle [ 501.606954][ T7192] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 501.617250][ T7303] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 501.638682][ T7303] usb 3-1: too many configurations: 194, using maximum allowed: 8 [ 501.651963][ T7303] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 501.659667][ T7303] usb 3-1: can't read configurations, error -61 [ 501.758745][ T7192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 501.769981][ T7192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.780057][ T7192] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 501.789324][ T7192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.799174][ T7303] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 501.808179][ T7192] usb 5-1: config 0 descriptor?? [ 501.819852][ T7192] hub 5-1:0.0: USB hub found [ 501.828183][ T7303] usb 3-1: too many configurations: 194, using maximum allowed: 8 [ 501.839194][ T7303] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 501.847563][ T7303] usb 3-1: can't read configurations, error -61 [ 501.854343][ T7303] usb usb3-port1: unable to enumerate USB device [ 502.021584][ T7192] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 502.041414][ T7192] usbhid 5-1:0.0: can't add hid device: -71 [ 502.048674][ T7192] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 502.250475][ T7192] usb 5-1: reset full-speed USB device number 118 using dummy_hcd [ 502.262419][ T7192] usb 5-1: device reset changed ep0 maxpacket size! [ 502.274808][ T7192] usb 5-1: USB disconnect, device number 118 [ 502.542941][ T5829] pegasus 2-1:0.0: can't locate MII phy, using default [ 502.568686][ T5829] pegasus 2-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, a6:c3:64:68:16:68 [ 502.583138][ T5829] usb 2-1: USB disconnect, device number 47 [ 502.591746][ T7192] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 503.039177][ T5883] usb 4-1: USB disconnect, device number 19 [ 503.049521][ T5883] em28xx 4-1:0.0: Disconnecting em28xx [ 503.057499][ T5883] em28xx 4-1:0.0: Freeing device [ 503.148844][T11645] netlink: 'syz.3.2139': attribute type 10 has an invalid length. [ 503.173948][T11645] team0: Port device macvlan0 added [ 503.284656][ T7192] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 503.296200][ T7192] usb 5-1: can't read configurations, error -71 [ 503.382177][T11654] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 503.397242][ T5883] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 503.401696][T11654] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 503.558612][ T5883] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 503.570019][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.581535][ T5883] usb 2-1: config 0 descriptor?? [ 503.715853][ T5829] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 503.726030][ T7303] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 503.875937][ T7303] usb 3-1: Using ep0 maxpacket: 16 [ 503.883712][ T7303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.894619][ T5829] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 503.903433][ T7303] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 503.916654][ T7303] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 503.926022][ T7303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.937650][ T5829] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 503.947505][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.956872][ T7303] usb 3-1: config 0 descriptor?? [ 503.962985][ T5829] usb 4-1: Product: syz [ 503.970000][ T5829] usb 4-1: Manufacturer: syz [ 503.975506][ T5829] usb 4-1: SerialNumber: syz [ 503.984222][ T7303] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 504.003531][ T5829] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 504.050964][ T7303] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 504.256354][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.267095][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.279703][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.289827][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.303699][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.316989][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.344729][ T7192] usb 4-1: USB disconnect, device number 20 [ 504.607829][ T5883] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 504.815313][ T5829] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 504.965268][ T5829] usb 5-1: Using ep0 maxpacket: 16 [ 504.972881][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 504.984626][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.998951][ T5829] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 505.008767][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.017569][ T5829] usb 5-1: Product: syz [ 505.021955][ T5829] usb 5-1: Manufacturer: syz [ 505.026685][ T5829] usb 5-1: SerialNumber: syz [ 505.033983][ T5829] usb 5-1: config 0 descriptor?? [ 505.044844][ T5829] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 505.054475][ T5829] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 505.085619][ T7303] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 505.092891][ T7303] ath9k_htc: Failed to initialize the device [ 505.102438][ T7192] usb 4-1: ath9k_htc: USB layer deinitialized [ 505.425292][ T7192] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 505.574999][ T7192] usb 4-1: Using ep0 maxpacket: 32 [ 505.583240][ T7192] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 505.599454][ T7192] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=d2.a2 [ 505.608753][ T7192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.617597][ T7192] usb 4-1: Product: syz [ 505.621900][ T7192] usb 4-1: Manufacturer: syz [ 505.627065][ T7192] usb 4-1: SerialNumber: syz [ 505.639735][ T7192] usb 4-1: config 0 descriptor?? [ 505.645681][ T5829] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 505.653487][ T7192] mos7840 4-1:0.0: required endpoints missing [ 505.660492][ T5829] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 505.677465][ T5829] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 505.686008][ T5829] em28xx 5-1:0.0: No AC97 audio processor [ 506.165680][ T5829] usb 2-1: USB disconnect, device number 48 [ 506.294235][T11674] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 506.305746][T11674] block device autoloading is deprecated and will be removed. [ 506.487598][ T5883] usb 3-1: USB disconnect, device number 38 [ 506.644404][ T5829] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 506.687250][ T7191] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 506.770888][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.777836][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.807307][ T5829] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 506.816739][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.828098][ T5829] usb 2-1: config 0 descriptor?? [ 506.889284][ T5883] usb 4-1: USB disconnect, device number 21 [ 507.119517][T11695] xt_HMARK: spi-set and port-set can't be combined [ 507.374123][ T7192] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 507.546133][ T7192] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 507.555209][ T7192] usb 4-1: config 0 has no interface number 0 [ 507.563370][ T7192] usb 4-1: too many endpoints for config 0 interface 46 altsetting 0: 223, using maximum allowed: 30 [ 507.593945][ T7192] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 507.619021][ T7303] usb 5-1: USB disconnect, device number 121 [ 507.625489][ T7192] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 507.651513][ T7303] em28xx 5-1:0.0: Disconnecting em28xx [ 507.674627][ T7192] usb 4-1: config 0 interface 46 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 223 [ 507.697314][ T7303] em28xx 5-1:0.0: Freeing device [ 507.702750][ T7192] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 507.726659][ T7192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.742791][ T7192] usb 4-1: Product: syz [ 507.747655][ T7192] usb 4-1: Manufacturer: syz [ 507.752349][ T7192] usb 4-1: SerialNumber: syz [ 507.768415][ T7192] usb 4-1: config 0 descriptor?? [ 507.785873][T11695] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 507.797129][ T7192] ums-karma 4-1:0.46: USB Mass Storage device detected [ 507.877891][ T7192] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5 [ 507.894394][ T5883] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 508.000902][ T7959] usb 4-1: USB disconnect, device number 22 [ 508.059255][ T5883] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 508.069308][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.080935][ T5883] usb 3-1: config 0 descriptor?? [ 508.183708][ T7303] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 508.333544][ T7303] usb 5-1: Using ep0 maxpacket: 16 [ 508.341838][ T7303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.352054][ T7303] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 508.365587][ T7303] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 508.376931][ T7303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.389029][ T7303] usb 5-1: config 0 descriptor?? [ 508.415780][ T7303] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 508.803750][T11719] netlink: 'syz.3.2162': attribute type 10 has an invalid length. [ 508.823378][T11719] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 509.085502][ T5829] pegasus 2-1:0.0: setup Pegasus II specific registers [ 509.098750][ T5883] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 509.163175][ T7959] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 509.315841][ T7959] usb 4-1: config 2 has an invalid interface number: 169 but max is 0 [ 509.324271][ T7959] usb 4-1: config 2 has no interface number 0 [ 509.330460][ T7959] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 509.339988][ T7959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.360386][ T7959] cypress_m8 4-1:2.169: DeLorme Earthmate USB converter detected [ 509.372273][ T7959] earthmate ttyUSB0: required endpoint is missing [ 509.558765][ T7959] usb 4-1: USB disconnect, device number 23 [ 509.569953][ T7959] cypress_m8 4-1:2.169: device disconnected [ 510.117262][T11727] FAULT_INJECTION: forcing a failure. [ 510.117262][T11727] name failslab, interval 1, probability 0, space 0, times 0 [ 510.131086][T11727] CPU: 1 UID: 0 PID: 11727 Comm: syz.3.2164 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.131111][T11727] Tainted: [L]=SOFTLOCKUP [ 510.131117][T11727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 510.131128][T11727] Call Trace: [ 510.131134][T11727] [ 510.131141][T11727] dump_stack_lvl+0xe8/0x150 [ 510.131167][T11727] should_fail_ex+0x412/0x560 [ 510.131197][T11727] should_failslab+0xa8/0x100 [ 510.131214][T11727] __kmalloc_noprof+0xe8/0x760 [ 510.131235][T11727] ? iter_file_splice_write+0x1d4/0x1100 [ 510.131261][T11727] iter_file_splice_write+0x1d4/0x1100 [ 510.131282][T11727] ? __lock_acquire+0x6b5/0x2cf0 [ 510.131314][T11727] ? cap_inode_need_killpriv+0x51/0x60 [ 510.131335][T11727] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 510.131357][T11727] ? security_inode_need_killpriv+0x71/0x240 [ 510.131379][T11727] ? file_remove_privs_flags+0x458/0x640 [ 510.131407][T11727] ? __pfx_iter_file_splice_write+0x10/0x10 [ 510.131428][T11727] ? ovl_splice_write+0x45b/0x5b0 [ 510.131488][T11727] ? ovl_splice_write+0x45b/0x5b0 [ 510.131529][T11727] backing_file_splice_write+0x3c0/0x5d0 [ 510.131563][T11727] ovl_splice_write+0x45b/0x5b0 [ 510.131595][T11727] ? __pfx_ovl_splice_write+0x10/0x10 [ 510.131625][T11727] ? __pfx_ovl_file_end_write+0x10/0x10 [ 510.131644][T11727] ? direct_splice_actor+0x49/0x160 [ 510.131676][T11727] ? __pfx_ovl_splice_write+0x10/0x10 [ 510.131695][T11727] direct_splice_actor+0x101/0x160 [ 510.131719][T11727] splice_direct_to_actor+0x53a/0xc70 [ 510.131747][T11727] ? __pfx_direct_splice_actor+0x10/0x10 [ 510.131773][T11727] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 510.131801][T11727] do_splice_direct+0x195/0x290 [ 510.131822][T11727] ? __pfx_do_splice_direct+0x10/0x10 [ 510.131841][T11727] ? common_file_perm+0x1b4/0x220 [ 510.131858][T11727] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 510.131885][T11727] ? rw_verify_area+0x255/0x4d0 [ 510.131910][T11727] do_sendfile+0x535/0x7c0 [ 510.131933][T11727] ? __pfx_do_sendfile+0x10/0x10 [ 510.131960][T11727] __se_sys_sendfile64+0xdf/0x1a0 [ 510.131979][T11727] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 510.132004][T11727] do_syscall_64+0xe2/0xf80 [ 510.132024][T11727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.132040][T11727] ? clear_bhb_loop+0x40/0x90 [ 510.132060][T11727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.132075][T11727] RIP: 0033:0x7fc06ad9acb9 [ 510.132090][T11727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.132103][T11727] RSP: 002b:00007fc06bc20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 510.132119][T11727] RAX: ffffffffffffffda RBX: 00007fc06b015fa0 RCX: 00007fc06ad9acb9 [ 510.132131][T11727] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 510.132140][T11727] RBP: 00007fc06bc20090 R08: 0000000000000000 R09: 0000000000000000 [ 510.132150][T11727] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 510.132159][T11727] R13: 00007fc06b016038 R14: 00007fc06b015fa0 R15: 00007fffe5810c08 [ 510.132183][T11727] [ 510.656910][ T5829] pegasus 2-1:0.0: can't locate MII phy, using default [ 510.683291][ T5829] pegasus 2-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, c6:63:81:6f:ae:fd [ 510.698509][ T5829] usb 2-1: USB disconnect, device number 49 [ 510.701691][ T5896] usb 3-1: USB disconnect, device number 39 [ 510.753410][ T7303] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 510.868490][ T7959] usb 5-1: USB disconnect, device number 122 [ 510.913142][ T7303] usb 4-1: Using ep0 maxpacket: 16 [ 510.924411][ T7303] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 510.937547][ T7303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 510.953244][ T7303] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 510.962697][ T7303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.971782][ T7303] usb 4-1: Product: syz [ 510.976249][ T7303] usb 4-1: Manufacturer: syz [ 510.980897][ T7303] usb 4-1: SerialNumber: syz [ 510.994850][ T7303] usb 4-1: config 0 descriptor?? [ 511.005164][ T7303] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 511.017044][ T7303] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 511.092209][ T5896] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 511.242384][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 511.259674][ T5896] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.276538][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 511.284013][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 511.294309][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.307637][ T5896] usb 3-1: config 0 descriptor?? [ 511.628840][ T7303] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 511.636588][ T7303] em28xx 4-1:0.0: Config register raw data: 0x00 [ 511.691877][ T5929] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 511.748072][T11733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.758947][T11733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.841748][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 511.849443][ T5929] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 511.859756][ T5929] usb 5-1: config 0 has no interface number 0 [ 511.866388][ T5929] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 511.880418][ T5929] usb 5-1: config 0 interface 1 has no altsetting 0 [ 511.887974][ T5896] usbhid 3-1:0.0: can't add hid device: -71 [ 511.909566][ T5929] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 511.916129][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 511.926790][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.935342][ T5929] usb 5-1: Product: syz [ 511.939606][ T5929] usb 5-1: Manufacturer: syz [ 511.944828][ T5929] usb 5-1: SerialNumber: syz [ 511.959238][ T5929] usb 5-1: config 0 descriptor?? [ 511.963480][ T5896] usb 3-1: USB disconnect, device number 40 [ 512.185681][ T5929] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 512.198662][ T5929] cx231xx 5-1:0.1: Failed to read PCB config [ 512.205264][ T5929] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 512.217501][ T5929] usb 5-1: USB disconnect, device number 123 [ 512.491457][ T5896] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 512.641460][ T5896] usb 2-1: Invalid ep0 maxpacket: 32 [ 512.661778][ T5829] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 512.721400][ T5929] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 512.771335][ T5896] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 512.813950][ T5829] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 512.823199][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.833900][ T5829] usb 3-1: config 0 descriptor?? [ 512.881279][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 512.888484][ T5929] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 512.898365][ T5929] usb 5-1: config 0 has no interface number 0 [ 512.910768][ T5929] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 512.921613][ T5896] usb 2-1: Invalid ep0 maxpacket: 32 [ 512.927171][ T5929] usb 5-1: config 0 interface 1 has no altsetting 0 [ 512.931896][ T5896] usb usb2-port1: attempt power cycle [ 512.942318][ T5929] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 512.951619][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.959652][ T5929] usb 5-1: Product: syz [ 512.963955][ T5929] usb 5-1: Manufacturer: syz [ 512.968605][ T5929] usb 5-1: SerialNumber: syz [ 512.976115][ T5929] usb 5-1: config 0 descriptor?? [ 513.191495][ T5929] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 513.201436][ T5929] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 513.271110][ T5896] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 513.291764][ T5896] usb 2-1: Invalid ep0 maxpacket: 32 [ 513.311283][ T5929] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 513.319921][ T5929] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 513.328770][ T5929] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 513.337505][ T5929] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 513.346515][ T5929] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 513.354460][ T5929] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -32 [ 513.374923][ T5929] i2c i2c-11: Added multiplexed i2c bus 13 [ 513.384383][ T5929] i2c i2c-11: Added multiplexed i2c bus 14 [ 513.391489][ T5929] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 513.400137][ T5929] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 513.420987][ T5896] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 513.435892][ T5929] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -32 [ 513.444845][ T5896] usb 2-1: Invalid ep0 maxpacket: 32 [ 513.452819][ T5929] usb 5-1: USB disconnect, device number 124 [ 513.462375][ T5896] usb usb2-port1: unable to enumerate USB device [ 513.530095][ T5896] usb 4-1: USB disconnect, device number 24 [ 513.539347][ T5896] em28xx 4-1:0.0: Disconnecting em28xx [ 513.548449][ T5896] em28xx 4-1:0.0: Freeing device [ 513.861459][ T5829] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 513.950916][ T5896] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 514.102894][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.113355][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.128200][ T5896] usb 4-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00 [ 514.138026][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.146399][ T5896] usb 4-1: Product: syz [ 514.150752][ T5896] usb 4-1: Manufacturer: syz [ 514.155402][ T5896] usb 4-1: SerialNumber: syz [ 514.168737][ T5896] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 514.175878][ T5896] cdc_mbim 4-1:1.0: bind() failure [ 514.260689][ T5829] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 514.369423][ T5896] usb 4-1: USB disconnect, device number 25 [ 514.413186][ T5829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.424951][ T5829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 514.434608][ T5829] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 514.445908][ T5829] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 514.455248][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.466849][T11762] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 514.478263][ T5829] hub 5-1:1.0: bad descriptor, ignoring hub [ 514.484365][ T5829] hub 5-1:1.0: probe with driver hub failed with error -5 [ 514.493041][ T5829] cdc_wdm 5-1:1.0: skipping garbage [ 514.498310][ T5829] cdc_wdm 5-1:1.0: skipping garbage [ 514.509317][ T5829] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 514.515405][ T5829] cdc_wdm 5-1:1.0: Unknown control protocol [ 514.781772][ T5896] usb 5-1: USB disconnect, device number 125 [ 514.952897][T11762] cdc_wdm 5-1:1.0: Error autopm - -16 [ 515.100307][ T5896] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 515.200137][ T7192] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 515.230721][ T5896] usb 5-1: device descriptor read/64, error -71 [ 515.362499][ T7192] usb 4-1: config 0 has an invalid interface number: 82 but max is 0 [ 515.371887][ T7192] usb 4-1: config 0 has no interface number 0 [ 515.378034][ T7192] usb 4-1: config 0 interface 82 has no altsetting 0 [ 515.387449][ T7192] usb 4-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=22.6d [ 515.396568][ T7192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.404996][ T7192] usb 4-1: Product: syz [ 515.409175][ T7192] usb 4-1: Manufacturer: syz [ 515.413995][ T7192] usb 4-1: SerialNumber: syz [ 515.421253][ T7192] usb 4-1: config 0 descriptor?? [ 515.432350][ T7192] quatech2 4-1:0.82: Quatech 2nd gen USB to Serial Driver converter detected [ 515.466250][ T7959] usb 3-1: USB disconnect, device number 41 [ 515.476055][ T5896] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 515.619980][ T5896] usb 5-1: device descriptor read/64, error -71 [ 515.679973][ T5829] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 515.730604][ T5896] usb usb5-port1: attempt power cycle [ 515.831795][ T5829] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 515.841176][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.852902][ T5829] usb 2-1: config 0 descriptor?? [ 516.069902][ T5896] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 516.090692][ T5896] usb 5-1: device descriptor read/8, error -71 [ 516.329564][ T5896] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 516.350225][ T5929] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 516.351783][ T5896] usb 5-1: device descriptor read/8, error -71 [ 516.469698][ T5896] usb usb5-port1: unable to enumerate USB device [ 516.511792][ T5929] usb 3-1: config 1 interface 0 has no altsetting 0 [ 516.521526][ T5929] usb 3-1: New USB device found, idVendor=056a, idProduct=00c7, bcdDevice= 0.40 [ 516.530862][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.539510][ T5929] usb 3-1: Product: syz [ 516.543800][ T5929] usb 3-1: Manufacturer: 쵺죻㣋䥾뒽릆쟨诸猟肆荳Иᒔ뿣ꇏ촼꫋큒򝦄 [ 516.554380][ T5929] usb 3-1: SerialNumber: syz [ 516.780477][ T5929] usbhid 3-1:1.0: can't add hid device: -71 [ 516.787108][ T5929] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 516.798957][ T5929] usb 3-1: USB disconnect, device number 42 [ 517.439112][ T5929] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 517.579225][ T5930] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 517.620821][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.631135][ T5929] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 517.644374][ T5929] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 517.653585][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.661907][ T5929] usb 5-1: Product: syz [ 517.666145][ T5929] usb 5-1: Manufacturer: syz [ 517.671267][ T5929] usb 5-1: SerialNumber: syz [ 517.680166][ T5929] usb 5-1: config 0 descriptor?? [ 517.758804][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 517.766113][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 517.777871][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 517.791219][ T5930] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 517.801132][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.809727][ T5930] usb 3-1: Product: syz [ 517.813978][ T5930] usb 3-1: Manufacturer: syz [ 517.818801][ T5930] usb 3-1: SerialNumber: syz [ 517.827223][ T5930] usb 3-1: config 0 descriptor?? [ 517.837984][ T5930] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 517.847477][ T5930] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 517.925856][ T7192] usb 4-1: qt2_attach - failed to power on unit: -71 [ 517.933120][ T7192] quatech2 4-1:0.82: probe with driver quatech2 failed with error -71 [ 517.954434][ T7192] usb 4-1: USB disconnect, device number 26 [ 518.084482][ T5829] pegasus 2-1:0.0: setup Pegasus II specific registers [ 518.241970][T11791] netlink: 'syz.3.2187': attribute type 39 has an invalid length. [ 518.260005][T11791] tipc: Started in network mode [ 518.264986][T11791] tipc: Node identity ac14140f, cluster identity 4711 [ 518.274204][T11791] tipc: New replicast peer: 255.255.255.255 [ 518.284490][T11791] tipc: Enabled bearer , priority 10 [ 518.438857][ T5930] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 518.445761][ T5930] em28xx 3-1:0.0: Config register raw data: 0x00 [ 518.658380][ T5930] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 518.821119][ T5930] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 518.830316][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.842330][ T5930] usb 4-1: config 0 descriptor?? [ 519.411881][ T5883] tipc: Node number set to 2886997007 [ 519.510352][ T5829] pegasus 2-1:0.0: can't locate MII phy, using default [ 519.533398][ T5829] pegasus 2-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 62:b2:29:43:b1:30 [ 519.545919][ T5829] usb 2-1: USB disconnect, device number 54 [ 519.857110][ T5930] pegasus 4-1:0.0: probe with driver pegasus failed with error -32 [ 520.096595][ T5930] usb 5-1: USB disconnect, device number 4 [ 520.341533][ T7959] usb 3-1: USB disconnect, device number 43 [ 520.349949][ T7959] em28xx 3-1:0.0: Disconnecting em28xx [ 520.363511][ T7959] em28xx 3-1:0.0: Freeing device [ 520.447525][ T5930] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 520.607422][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 520.622071][ T5930] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 520.630262][ T5930] usb 5-1: config 0 has no interface number 0 [ 520.636424][ T5930] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 520.655115][ T5930] usb 5-1: config 0 interface 1 has no altsetting 0 [ 520.684179][ T5930] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 520.699689][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.710025][ T5930] usb 5-1: Product: syz [ 520.714228][ T5930] usb 5-1: Manufacturer: syz [ 520.719086][ T5930] usb 5-1: SerialNumber: syz [ 520.726827][ T5930] usb 5-1: config 0 descriptor?? [ 520.917525][ T7192] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 520.942943][ T5930] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 520.953852][ T5930] cx231xx 5-1:0.1: Failed to read PCB config [ 520.960052][ T5930] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 520.982831][ T5930] usb 5-1: USB disconnect, device number 5 [ 521.077304][ T7192] usb 3-1: Using ep0 maxpacket: 32 [ 521.085593][ T7192] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 521.093895][ T7192] usb 3-1: config 0 has no interface number 0 [ 521.103049][ T7192] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 521.112349][ T7192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.120610][ T7192] usb 3-1: Product: syz [ 521.124812][ T7192] usb 3-1: Manufacturer: syz [ 521.129496][ T7192] usb 3-1: SerialNumber: syz [ 521.136623][ T7192] usb 3-1: config 0 descriptor?? [ 521.150818][ T7192] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 521.267082][ T7959] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 521.351451][ T7192] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 521.365453][ T7192] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 521.436978][ T7959] usb 2-1: Using ep0 maxpacket: 16 [ 521.449057][ T7959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.464681][ T7959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.469343][ T5930] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 521.485404][ T5883] usb 4-1: USB disconnect, device number 27 [ 521.497194][ T7959] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 521.537409][ T7959] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 521.546615][ T7959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.568252][ T7959] usb 2-1: config 0 descriptor?? [ 521.656877][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 521.668775][ T5930] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 521.677053][ T5930] usb 5-1: config 0 has no interface number 0 [ 521.685818][ T5930] usb 5-1: config 0 interface 41 has no altsetting 0 [ 521.695981][ T5930] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 521.714084][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.731404][ T5930] usb 5-1: Product: syz [ 521.735675][ T5930] usb 5-1: Manufacturer: syz [ 521.740710][ T5930] usb 5-1: SerialNumber: syz [ 521.756827][ T5930] usb 5-1: config 0 descriptor?? [ 521.766239][ T5930] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 521.956778][ T5883] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 521.981977][ T7959] usbhid 2-1:0.0: can't add hid device: -71 [ 521.988196][ T7959] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 522.001823][ T7959] usb 2-1: USB disconnect, device number 55 [ 522.123641][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.147215][ T5883] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 522.170580][ T5883] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 522.190442][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.206753][ T5883] usb 4-1: Product: syz [ 522.216884][ T5883] usb 4-1: Manufacturer: syz [ 522.226872][ T5883] usb 4-1: SerialNumber: syz [ 522.243539][ T5883] usb 4-1: config 0 descriptor?? [ 522.796412][ T7303] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 522.956238][ T7303] usb 2-1: Using ep0 maxpacket: 16 [ 522.963502][ T7303] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 522.975335][ T7303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 522.988899][ T7303] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 522.998365][ T7303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.006488][ T7303] usb 2-1: Product: syz [ 523.010804][ T7303] usb 2-1: Manufacturer: syz [ 523.016199][ T7303] usb 2-1: SerialNumber: syz [ 523.029423][ T7303] usb 2-1: config 0 descriptor?? [ 523.042482][ T7303] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 523.053130][ T7303] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 523.175513][ T5899] usb 5-1: USB disconnect, device number 6 [ 523.565946][ T5899] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 523.607158][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 523.608539][ T5883] usb 3-1: USB disconnect, device number 44 [ 523.657090][ T7303] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 523.666583][ T7303] em28xx 2-1:0.0: Config register raw data: 0x00 [ 523.675346][ T5883] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 523.709704][ T5883] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 523.726029][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 523.749470][ T5899] usb 5-1: config 141 has an invalid interface number: 109 but max is 0 [ 523.770453][ T5883] quatech2 3-1:0.51: device disconnected [ 523.776722][ T5899] usb 5-1: config 141 has no interface number 0 [ 523.796147][ T5899] usb 5-1: config 141 interface 109 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 523.816357][ T5899] usb 5-1: config 141 interface 109 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 523.829514][ T5899] usb 5-1: config 141 interface 109 has no altsetting 0 [ 523.843881][ T5899] usb 5-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= b.dd [ 523.858137][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.866756][ T5899] usb 5-1: Product: 묃垷∰猔풤뱋।诡䜈귫穘宛ᐑ䮖⠨롽隟澬Ნ𣏕㣾蝅㴫푙仠ᩉ㑫핔䒄↘坌颏벜侉옼䶒䕚麷ᗊᒵꐧ흟鯅屝Ⅸᢩㅒ摴윹⬠蛋嘆쁢쫙幨翵獠쇬ɸ쀴娼呜༪ث꽂並㴉ⳉ쐓́㛖髦ᔀ횸녵驮⥮ꎿꦥ乎㖶ৌ솗쟫ᛁ૜陁嫤ᠽ砽魏灀㵷񻑒冣ទ摝蒖柶糃䯿䬪惗ᖞ幻訾埴錄ㅍ [ 523.905565][ T5899] usb 5-1: Manufacturer: ఌ [ 523.910412][ T5899] usb 5-1: SerialNumber: ဇ [ 524.180359][ T5883] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 524.199198][ T5899] usb 5-1: USB disconnect, device number 7 [ 524.365803][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 524.376788][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.390828][ T5883] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=34.5b [ 524.400077][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.408319][ T5883] usb 3-1: Product: syz [ 524.412526][ T5883] usb 3-1: Manufacturer: syz [ 524.420074][ T5883] usb 3-1: SerialNumber: syz [ 524.428177][ T5883] usb 3-1: config 0 descriptor?? [ 524.444123][ T5883] usbserial_generic 3-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 524.456152][ T5883] usbserial_generic 3-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 524.467745][ T5883] usbserial_generic 3-1:0.0: device has no bulk endpoints [ 524.740820][ T5930] usb 4-1: USB disconnect, device number 28 [ 524.750916][ T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 524.770997][T11872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.784657][T11872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.808442][T11872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.820194][T11872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.825509][ T5883] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 524.836130][T11872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.859389][T11872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.007341][ T5883] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 525.025342][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.046490][ T5883] usb 5-1: config 0 descriptor?? [ 525.565398][ T5929] usb 2-1: USB disconnect, device number 56 [ 525.582492][ T5929] em28xx 2-1:0.0: Disconnecting em28xx [ 525.592992][ T5929] em28xx 2-1:0.0: Freeing device [ 525.630756][T11878] kAFS: unable to lookup cell '' [ 525.641561][T11879] kAFS: unable to lookup cell '' [ 525.684895][ C0] ------------[ cut here ]------------ [ 525.690752][ C0] ODEBUG: activate active (active state 0) object: ffff88806a900dd8 object type: rcu_head hint: 0x0 [ 525.701778][ C0] WARNING: lib/debugobjects.c:615 at debug_object_activate+0x33b/0x580, CPU#0: syz-executor/5832 [ 525.712414][ C0] Modules linked in: [ 525.716748][ C0] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 525.728313][ C0] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 525.732687][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 525.742871][ C0] RIP: 0010:debug_object_activate+0x39c/0x580 [ 525.749101][ C0] Code: 30 00 74 08 4c 89 ef e8 e2 3b 7b fd 4d 8b 4d 00 4c 89 e7 48 c7 c6 60 65 09 8c 4c 89 fa 8b 4c 24 04 4c 8b 44 24 10 ff 74 24 08 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 7c 24 18 ff 05 4c 05 62 0b b8 ea [ 525.769011][ C0] RSP: 0018:ffffc90000007bf0 EFLAGS: 00010246 [ 525.775207][ C0] RAX: 1ffffffff175c3bc RBX: ffff88806a900dd8 RCX: 0000000000000000 [ 525.783230][ C0] RDX: ffffffff8c096b40 RSI: ffffffff8c096560 RDI: ffffffff901c4980 [ 525.791326][ C0] RBP: 0000000000000003 R08: ffff88806a900dd8 R09: ffffffff8bae1e40 [ 525.799393][ C0] R10: dffffc0000000000 R11: 0000000000000000 R12: ffffffff901c4980 [ 525.807576][ C0] R13: ffffffff8bae1de0 R14: dffffc0000000000 R15: ffffffff8c096b40 [ 525.815658][ C0] FS: 000055558f920500(0000) GS:ffff88812529d000(0000) knlGS:0000000000000000 [ 525.824717][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 525.831358][ C0] CR2: 00007f20507456b8 CR3: 0000000075706000 CR4: 00000000003526f0 [ 525.839456][ C0] Call Trace: [ 525.842780][ C0] [ 525.845734][ C0] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 525.851854][ C0] call_rcu+0x43/0x890 [ 525.856052][ C0] ? __kfree_rcu_sheaf+0x1f/0x5b0 [ 525.861143][ C0] delete_node+0x1b6/0xa50 [ 525.866448][ C0] radix_tree_delete_item+0x2e9/0x400 [ 525.871994][ C0] afs_cell_destroy+0x16f/0x2c0 [ 525.876981][ C0] ? rcu_core+0x751/0x1070 [ 525.881545][ C0] ? __pfx_afs_cell_destroy+0x10/0x10 [ 525.887034][ C0] rcu_core+0x7cd/0x1070 [ 525.891390][ C0] ? __pfx_rcu_core+0x10/0x10 [ 525.896226][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 525.902104][ C0] handle_softirqs+0x22a/0x7c0 [ 525.907008][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 525.911842][ C0] __irq_exit_rcu+0x5f/0x150 [ 525.916528][ C0] irq_exit_rcu+0x9/0x30 [ 525.920838][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 525.926597][ C0] [ 525.929585][ C0] [ 525.932562][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 525.938658][ C0] RIP: 0010:__page_table_check_ptes_set+0x190/0x320 [ 525.945354][ C0] Code: 00 00 00 00 00 00 94 4c 01 f8 48 c1 e8 3b 0f 94 c0 4d 39 e5 76 0f 84 c0 74 0b e8 3b 07 8c ff 90 0f 0b 90 eb 05 e8 30 07 8c ff <31> ff 89 ee e8 67 0b 8c ff 41 89 ef 85 ed 0f 84 a6 00 00 00 4c 89 [ 525.965246][ C0] RSP: 0018:ffffc9000411f2d0 EFLAGS: 00000293 [ 525.971368][ C0] RAX: ffffffff823719c5 RBX: 800000006375a007 RCX: ffff8880792f0000 [ 525.979449][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 525.987515][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 1ffffd400031bad0 [ 525.995770][ C0] R10: dffffc0000000000 R11: fffff9400031bad1 R12: dffffc0000000000 [ 526.003790][ C0] R13: 800000006375a007 R14: ffff888038eefaa8 R15: ffff88807e99ee40 [ 526.011908][ C0] ? __page_table_check_ptes_set+0x65/0x320 [ 526.017931][ C0] ? page_table_check_set+0x148/0x610 [ 526.023372][ C0] ? vm_normal_page+0x10d/0x240 [ 526.028352][ C0] copy_pmd_range+0x3b71/0x7e80 [ 526.033269][ C0] ? arch_stack_walk+0xfb/0x150 [ 526.038263][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 526.043279][ C0] ? kasan_save_track+0x4f/0x80 [ 526.048348][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 526.053605][ C0] ? kernel_clone+0x248/0x870 [ 526.058406][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 526.063420][ C0] ? mas_wr_store_type+0xcc2/0x19d0 [ 526.068717][ C0] copy_page_range+0xb8d/0x11c0 [ 526.073650][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 526.079048][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 526.085948][ C0] dup_mmap+0xf41/0x1d90 [ 526.090280][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 526.095097][ C0] ? copy_mm+0x130/0x4b0 [ 526.099392][ C0] ? copy_mm+0x130/0x4b0 [ 526.103711][ C0] copy_mm+0x13b/0x4b0 [ 526.107901][ C0] copy_process+0x18b5/0x3cf0 [ 526.112733][ C0] ? copy_process+0x921/0x3cf0 [ 526.117680][ C0] ? __pfx_copy_process+0x10/0x10 [ 526.122758][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 526.127834][ C0] kernel_clone+0x248/0x870 [ 526.132394][ C0] ? __hrtimer_run_queues+0x5f2/0xc30 [ 526.137894][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 526.143323][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 526.148498][ C0] __x64_sys_clone+0x1b6/0x230 [ 526.153318][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 526.158702][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 526.164940][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 526.169735][ C0] ? lockdep_softirqs_on+0x11d/0x180 [ 526.175210][ C0] do_syscall_64+0xe2/0xf80 [ 526.179815][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.185975][ C0] ? clear_bhb_loop+0x40/0x90 [ 526.190786][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.196757][ C0] RIP: 0033:0x7f204f9c3752 [ 526.201235][ C0] Code: 89 e7 e8 f1 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 526.220935][ C0] RSP: 002b:00007ffd25a5b2b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 526.229497][ C0] RAX: ffffffffffffffda RBX: 00007ffd25a5b2b0 RCX: 00007f204f9c3752 [ 526.237589][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 526.245686][ C0] RBP: 00007ffd25a5b43c R08: 0000000000000000 R09: 0000000000000001 [ 526.253818][ C0] R10: 000055558f9207d0 R11: 0000000000000246 R12: 0000000000000001 [ 526.261909][ C0] R13: 00000000000927c0 R14: 0000000000080555 R15: 00007ffd25a5b490 [ 526.270000][ C0] [ 526.273073][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 526.280401][ C0] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 526.291478][ C0] Tainted: [L]=SOFTLOCKUP [ 526.295844][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 526.305950][ C0] Call Trace: [ 526.309278][ C0] [ 526.312161][ C0] vpanic+0x1e0/0x670 [ 526.316205][ C0] panic+0xc5/0xd0 [ 526.319976][ C0] ? __pfx_panic+0x10/0x10 [ 526.324454][ C0] __warn+0x315/0x4a0 [ 526.328484][ C0] ? debug_object_activate+0x33b/0x580 [ 526.334007][ C0] ? debug_object_activate+0x33b/0x580 [ 526.339521][ C0] __report_bug+0x29a/0x540 [ 526.344138][ C0] ? __kernel_text_address+0xd/0x30 [ 526.349398][ C0] ? debug_object_activate+0x33b/0x580 [ 526.354918][ C0] ? __pfx___report_bug+0x10/0x10 [ 526.360098][ C0] ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0 [ 526.366407][ C0] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 526.373057][ C0] report_bug_entry+0x19a/0x290 [ 526.377962][ C0] ? debug_object_activate+0x39c/0x580 [ 526.383463][ C0] ? debug_object_activate+0x3a1/0x580 [ 526.388968][ C0] handle_bug+0xca/0x200 [ 526.393304][ C0] exc_invalid_op+0x1a/0x50 [ 526.397849][ C0] asm_exc_invalid_op+0x1a/0x20 [ 526.402916][ C0] RIP: 0010:debug_object_activate+0x39c/0x580 [ 526.409311][ C0] Code: 30 00 74 08 4c 89 ef e8 e2 3b 7b fd 4d 8b 4d 00 4c 89 e7 48 c7 c6 60 65 09 8c 4c 89 fa 8b 4c 24 04 4c 8b 44 24 10 ff 74 24 08 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 7c 24 18 ff 05 4c 05 62 0b b8 ea [ 526.429042][ C0] RSP: 0018:ffffc90000007bf0 EFLAGS: 00010246 [ 526.435140][ C0] RAX: 1ffffffff175c3bc RBX: ffff88806a900dd8 RCX: 0000000000000000 [ 526.443308][ C0] RDX: ffffffff8c096b40 RSI: ffffffff8c096560 RDI: ffffffff901c4980 [ 526.451305][ C0] RBP: 0000000000000003 R08: ffff88806a900dd8 R09: ffffffff8bae1e40 [ 526.459479][ C0] R10: dffffc0000000000 R11: 0000000000000000 R12: ffffffff901c4980 [ 526.467479][ C0] R13: ffffffff8bae1de0 R14: dffffc0000000000 R15: ffffffff8c096b40 [ 526.475494][ C0] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 526.481599][ C0] call_rcu+0x43/0x890 [ 526.485718][ C0] ? __kfree_rcu_sheaf+0x1f/0x5b0 [ 526.490795][ C0] delete_node+0x1b6/0xa50 [ 526.495261][ C0] radix_tree_delete_item+0x2e9/0x400 [ 526.500692][ C0] afs_cell_destroy+0x16f/0x2c0 [ 526.505672][ C0] ? rcu_core+0x751/0x1070 [ 526.510150][ C0] ? __pfx_afs_cell_destroy+0x10/0x10 [ 526.515751][ C0] rcu_core+0x7cd/0x1070 [ 526.520045][ C0] ? __pfx_rcu_core+0x10/0x10 [ 526.524837][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 526.531002][ C0] handle_softirqs+0x22a/0x7c0 [ 526.535805][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 526.540704][ C0] __irq_exit_rcu+0x5f/0x150 [ 526.545326][ C0] irq_exit_rcu+0x9/0x30 [ 526.549591][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 526.555252][ C0] [ 526.558206][ C0] [ 526.561164][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 526.567170][ C0] RIP: 0010:__page_table_check_ptes_set+0x190/0x320 [ 526.573786][ C0] Code: 00 00 00 00 00 00 94 4c 01 f8 48 c1 e8 3b 0f 94 c0 4d 39 e5 76 0f 84 c0 74 0b e8 3b 07 8c ff 90 0f 0b 90 eb 05 e8 30 07 8c ff <31> ff 89 ee e8 67 0b 8c ff 41 89 ef 85 ed 0f 84 a6 00 00 00 4c 89 [ 526.593420][ C0] RSP: 0018:ffffc9000411f2d0 EFLAGS: 00000293 [ 526.599523][ C0] RAX: ffffffff823719c5 RBX: 800000006375a007 RCX: ffff8880792f0000 [ 526.607518][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 526.615512][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 1ffffd400031bad0 [ 526.623508][ C0] R10: dffffc0000000000 R11: fffff9400031bad1 R12: dffffc0000000000 [ 526.631499][ C0] R13: 800000006375a007 R14: ffff888038eefaa8 R15: ffff88807e99ee40 [ 526.639503][ C0] ? __page_table_check_ptes_set+0x65/0x320 [ 526.645436][ C0] ? page_table_check_set+0x148/0x610 [ 526.650873][ C0] ? vm_normal_page+0x10d/0x240 [ 526.655756][ C0] copy_pmd_range+0x3b71/0x7e80 [ 526.660640][ C0] ? arch_stack_walk+0xfb/0x150 [ 526.665535][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 526.670540][ C0] ? kasan_save_track+0x4f/0x80 [ 526.675425][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 526.680667][ C0] ? kernel_clone+0x248/0x870 [ 526.685376][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 526.690339][ C0] ? mas_wr_store_type+0xcc2/0x19d0 [ 526.695567][ C0] copy_page_range+0xb8d/0x11c0 [ 526.700466][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 526.705794][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 526.712598][ C0] dup_mmap+0xf41/0x1d90 [ 526.716915][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 526.721675][ C0] ? copy_mm+0x130/0x4b0 [ 526.725957][ C0] ? copy_mm+0x130/0x4b0 [ 526.730249][ C0] copy_mm+0x13b/0x4b0 [ 526.736606][ C0] copy_process+0x18b5/0x3cf0 [ 526.741319][ C0] ? copy_process+0x921/0x3cf0 [ 526.746597][ C0] ? __pfx_copy_process+0x10/0x10 [ 526.751658][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 526.756626][ C0] kernel_clone+0x248/0x870 [ 526.761182][ C0] ? __hrtimer_run_queues+0x5f2/0xc30 [ 526.766589][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 526.771991][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 526.777054][ C0] __x64_sys_clone+0x1b6/0x230 [ 526.781955][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 526.787314][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 526.793527][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 526.798324][ C0] ? lockdep_softirqs_on+0x11d/0x180 [ 526.803668][ C0] do_syscall_64+0xe2/0xf80 [ 526.808235][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.814338][ C0] ? clear_bhb_loop+0x40/0x90 [ 526.819055][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.825005][ C0] RIP: 0033:0x7f204f9c3752 [ 526.829461][ C0] Code: 89 e7 e8 f1 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 526.849118][ C0] RSP: 002b:00007ffd25a5b2b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 526.857563][ C0] RAX: ffffffffffffffda RBX: 00007ffd25a5b2b0 RCX: 00007f204f9c3752 [ 526.865562][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 526.873566][ C0] RBP: 00007ffd25a5b43c R08: 0000000000000000 R09: 0000000000000001 [ 526.881606][ C0] R10: 000055558f9207d0 R11: 0000000000000246 R12: 0000000000000001 [ 526.889697][ C0] R13: 00000000000927c0 R14: 0000000000080555 R15: 00007ffd25a5b490 [ 526.897709][ C0] [ 526.901407][ C0] Kernel Offset: disabled [ 526.905764][ C0] Rebooting in 86400 seconds..