last executing test programs: 7.593589578s ago: executing program 3 (id=859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d00200800183a"], 0xfdef) 7.445471469s ago: executing program 3 (id=861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 7.108535965s ago: executing program 3 (id=862): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x453, 0x1, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x4004004) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x3, 0x14, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x24, 0x301, 0x0, 0xec0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) 6.986346549s ago: executing program 3 (id=863): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000880)=ANY=[@ANYBLOB="600e04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0x23, 0x72, {0x72, 0x31, "878e80162690cba5033bae356b58f146280410a01041772bf8940460301b78938c2524c401c8b44191b5da72bb860caf4e97a7e3eb3afd9ecb51febc7a2c6f0de4ecff3d2882b2e10387cd86d92f5a045da47f78f8a6398757bd8873c96f8268280691c00998f8e8d5d997743d6c53de"}}, &(0x7f00000000c0)={0x0, 0x3, 0xe5, @string={0xe5, 0x3, "2f1cb5edd73d8ff513dc08fc5d71ceddcec818bfec94a3333ddb961236ccbcc49fd067fc458ac2a5389f2a1fd635db8f6d396a05f1d78276f7d60658ac031fe82c6d21d8021225f833f5b6506c83f77784bfdf71802c9ae8e092396f39679ae1c0be58ecaf9851f379e1fb5e0b39b3409b4fae4db7cc6ec028eed53ff8dfd273cc2745c0aa2b92a8136a08c02868368b272d3cbfcdc8b219f5df859f2203605a3f08dd4db96edf0228719ad515ec2f7e7c7608882dbc3f7af766e0c7b36dc1c3319479207dbb22a6be8422f88afc1b1a8956d360602dd6e418c5ee254fe23ded70b531"}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0xb, 0x51, "64a9280bef03dd1246ad84a73f0417fea925929f7d5563c82027414e44eebf8b8635895299035cb2fb51d42d49b36862d11fcb1758e5f77b486ab11eb01eb99a4cb56fc22147e0e040d3ef949e40298919"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x81, 0x3, "8f83cc"}, &(0x7f0000000400)={0x20, 0x82, 0x2, "e416"}, &(0x7f0000000440)={0x20, 0x83, 0x1, "f1"}, &(0x7f0000000540)={0x20, 0x84, 0x3, "cd39ba"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "163158"}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="bc1605"], 0x0, 0x0, 0x0, 0x0, 0x0}) 5.055857468s ago: executing program 0 (id=875): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x7}, 0x1c, &(0x7f0000001b40)}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)='\"', 0x1}], 0x1}}], 0x2, 0x40) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784b", 0x4a}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22f", 0x6f}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, 0x0, 0x0) (async) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r8 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8) (async) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000240), 0x4) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x48, 0x325, 0xc008, 0x8, 0x2, 0x5, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={r9, 0x2}, &(0x7f0000000340)=0x8) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000600)) 5.035213373s ago: executing program 0 (id=876): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lblc\x00', 0x3, 0x10000004, 0x8}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x18, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x41001}, 0x8000) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0x64000000}, 0x0) connect$inet6(r0, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000080)="4e13229b0d007c340d61394df6c64ea4f3d00fce401560b76f45f8830653c951b62dddb2b00a8bec080b3cb5d833ab8c7b4b6fbb685127b841258e20ac355501ab83fae89bc393527c54a9ddb0ae7d13a6999e963c7e76fe7f71a491cb2a3198257d82d72d6571d72cbb0a3203d2ffb822a5b3c6fbdeb85ad6f08c6596128f9e4a6b45e7a543666d201c8c69ac86be891eebee44170ee12a7cf010e9e20c480446801ad12da51bee53d6fc1860260b94b71a8033172a9f74442a1e43007f7e9f7fc6a74498968d6aa3e7f7dbaa54b68f") sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x3ff, @loopback, 0xfffffffe}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @remote, 0xe3c}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000002900000043000000ef070000000000001400000000000000290000003400000000020000000000001400000000000000290000000b0000000000000500000000140000000000000029000000080000000500000000000000140000000000000029000000340000000c0000000000000060000000000000002900000004000000880800000000000001040000000001040000000004355510f4a5"], 0xd8}}], 0x2, 0x4080084) 4.933795947s ago: executing program 0 (id=877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000003c0)={@val={0xa, 0xb3f0}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0xa, 0x6, 'Pof', 0x14, 0x6, 0x0, @empty, @mcast2, {[], {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x1, 0x0, 0x6}}}}}}}}, 0x4e) (async) syz_usb_connect(0x2, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x2, 0x15, 0xb1, 0x20, 0x4dd, 0x8001, 0x289a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x2, 0x60, 0x6, "", [{{0x9, 0x4, 0xd6, 0x6, 0x0, 0xff, 0x2, 0x2, 0x5}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) 4.73386959s ago: executing program 0 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x700}, 0x0) 4.535340631s ago: executing program 0 (id=883): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000400)={0xa88, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff8e, 0x73}}}}, [@NL80211_ATTR_TID_CONFIG={0x424, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbe}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x4, 0x60, 0x12, 0x3, 0x48, 0x48, 0x36, 0x18, 0x48, 0x4, 0x9, 0x48, 0x24, 0x6c, 0x1b, 0x9, 0x3, 0x24, 0x30, 0x60, 0x16, 0x0]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x6c, 0x30, 0x48, 0x18, 0x1b, 0x9, 0x10, 0x9, 0x30, 0x9, 0xb, 0x1b, 0x36, 0x1b, 0x30, 0x24, 0xc, 0x63, 0x1, 0x36, 0x5, 0x44]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7638, 0xfe55, 0x9, 0xc, 0x2, 0x6, 0xa5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x6, 0x5, 0xfffc, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x4e979eab61f76577, 0x1, 0x37, 0x24, 0x9, 0x3, 0x6, 0x18, 0x5, 0x14, 0x1b, 0x4, 0x1, 0x6c, 0x24, 0x16, 0x60, 0x6, 0x67, 0x4]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0xb, 0x16, 0x2031674c90133add, 0x4, 0x1, 0x24, 0x3a]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7fff, 0x1ff, 0x6, 0x9, 0x4, 0x6, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x9}, {0x5, 0x9}, {0x5, 0x8}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x3}, {0x3, 0x5}, {0x7, 0x2}, {0x6, 0x3}, {0x1, 0xa}, {0x6, 0x2}, {0x4, 0xa}, {0x7, 0x8}, {0x0, 0x1}, {0x5, 0x9}, {0x1, 0x1}, {0x6, 0x1}, {0x0, 0x4}, {0x4, 0x1}, {0x7, 0x17}, {0x7, 0x7}, {0x4, 0x2}, {0x3, 0x9}, {0x6, 0x6}, {0x6, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0x2}, {0x6, 0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5c, 0xd, 0x8, 0x1ff, 0x3ff, 0x5, 0x5, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x4, 0xb, 0xc, 0x1b, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x8, 0x5, 0xfff9, 0x3, 0x3, 0x6]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x2}, {0x4, 0x5}, {0x6}, {0x4, 0x5}, {0x1, 0x7}, {0x6, 0xa}, {}, {0x4, 0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x5, 0x9}, {0x1, 0x3}, {}, {0x5, 0x1}, {0x4, 0x6}, {0x0, 0x9}, {0x3, 0x8}, {0x3, 0x8}, {0x1}, {0x2, 0x5}, {0x1, 0x1}, {0x4, 0x3}, {0x0, 0x3}, {0x4}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x3}, {0x3, 0x4}, {0x6, 0x9}, {0x2, 0x5}, {0x3, 0x7}, {0x3, 0x9}, {0x0, 0x2}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x2, 0x6}, {0x4, 0x8}, {0x6, 0xa}, {0x7}, {0x3, 0x6}, {0x4, 0x8}, {0x5, 0xa}, {0x2, 0x4}, {0x0, 0x4}, {0x6, 0x2}, {0x3, 0x5}, {0x2, 0x2}, {0x0, 0xa}, {0x7}, {0x0, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x36, 0x5, 0x1, 0x5, 0x48, 0xc, 0x12, 0xc, 0x16, 0x60, 0x1b, 0x4, 0x4, 0x16, 0x36, 0x24, 0x16, 0xb, 0x2, 0x3, 0x4, 0x1, 0x1, 0x5, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x7, 0x100, 0x8, 0x7fb, 0x80]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x2, 0x3, 0x7ff, 0x7ff, 0x1000, 0x101, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x86}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9f}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x51}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x24}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0xb, 0x3, 0x0, 0x5, 0xff81, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x12, 0x60, 0xb, 0x2, 0x60, 0xb, 0x0, 0x6c, 0x5, 0x6, 0x6, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0xa}, {0x6, 0x1}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x5}, {}, {0x1, 0x1}, {0x0, 0x6}, {0x5, 0x8}, {0x7, 0xa}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x6}, {0x2, 0x5}, {0x1, 0x4}, {0x4, 0xa}, {0x6, 0x3}, {0x4, 0xa}, {0x3, 0x1}, {0x5, 0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x3, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x0, 0x7}, {0x6}, {0x6, 0x2}, {0x5, 0x6}, {0x7, 0x9}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x2}, {0x3, 0x5}, {0x2, 0x7}, {0x4, 0x6}, {0x4, 0x3}, {0x2, 0xa}, {0x5, 0x5}, {0x4, 0x9}, {0x2, 0x3}, {0x3, 0x1}, {0x5, 0x3}, {0x4, 0x4}, {0x3, 0x8}, {0x5, 0x1}, {0x1, 0x9}, {0x2, 0x4}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x2}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3ae5, 0x200, 0x1, 0x2, 0x4, 0x7, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x2, 0x9, 0xc, 0x81, 0x2448, 0x5]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0x16, 0xc, 0x31, 0x1b, 0x0, 0x9, 0x4, 0x3, 0xc, 0x1, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x4, 0x3, 0x1, 0x0, 0x4, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x644, 0x11d, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x110, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x214, 0x3, 0x6, 0x4993, 0x0, 0xee, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x7}, {0x1, 0x6}, {0x7, 0x7}, {0x4, 0x4}, {0x6, 0x3}, {0x0, 0x9}, {0x6, 0x3}, {0x4, 0x8}, {0x1}, {0x5, 0x6}, {0x5, 0x9}, {0x6, 0xa}, {0x2, 0x2}, {0x0, 0x6}, {0x1, 0x1}, {0x1}, {0x5, 0x8}, {0x7, 0x4}, {0x5}, {0x1, 0x9}, {0x3, 0x1}, {0x3, 0x2}, {0x1, 0x5}, {0x4, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x4, 0x4}, {0x6, 0x5}, {0x4, 0x5}, {0x1, 0xa}, {0x2, 0x9}, {0x3, 0x1}, {0x7, 0x8}, {0x5, 0x2}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x3}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x1}, {0x7, 0x8}, {0x6, 0xa}, {0x6, 0x3}, {0x6, 0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x4, 0x8}, {0x2, 0x8}, {0x0, 0x9}, {}, {0x5, 0x2}, {0x6, 0x3}, {0x2, 0x7}, {0x2, 0xa}, {0x1, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x0, 0x1, 0x8, 0x2, 0x401, 0x4]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0x6}, {0x3}, {0x4, 0xa}, {0x1, 0x6}]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x30, 0x37, 0x1b, 0xb, 0x4, 0x30, 0x24, 0xb, 0x1b, 0xdd, 0x9, 0xb, 0x2, 0x2, 0x16, 0xb, 0x2, 0x1b, 0x1, 0x30, 0x3, 0x16, 0x12, 0x1, 0x4, 0x1, 0x0, 0x9, 0x6, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x0, 0x3, 0xf90, 0x8, 0x81, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x2, 0x24, 0x4, 0xc, 0x2, 0x0, 0x16, 0x78, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdf}]}, {0x2a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x28c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x6, 0x8000, 0x400, 0xfffa, 0x5, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0x30, 0x4, 0x30, 0x30, 0x1, 0x18, 0x6c, 0x12, 0x60, 0x1b, 0x30, 0x1b, 0x9, 0xac, 0x3, 0x2, 0x5, 0x9, 0x16, 0x6c, 0x0, 0x30, 0x18, 0x1b]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0xa}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x8}, {0x4, 0x8}, {0x1, 0x3}, {0x2, 0xa}, {0x2, 0x3}, {0x0, 0x3}, {0x4, 0x2}, {0x3, 0xa}, {0x3}, {0x5, 0x9}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x2}, {0x3, 0x4}, {0x1, 0x7}, {0x7}, {0x0, 0x7}, {0x1, 0x4}, {0x2}, {0x1, 0x6}, {0x6, 0xa}, {0x6, 0x4}, {0x7, 0x9}, {0x4}, {0x7, 0x3}, {0x6, 0x9}, {0x5, 0x5}, {0x5, 0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x7, 0x7}, {0x5, 0x8}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x4}, {0x7, 0x9}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xd050, 0x65, 0x8, 0xa0, 0xd06f, 0xffff, 0x4]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x3}, {0x1, 0x7}, {0x1, 0x8}, {0x1}, {0x2, 0x6}, {0x4, 0x5}, {0x6, 0x1}, {0x1, 0x8}, {0x5}, {0x2, 0x6}, {0x1, 0x3}, {0x4, 0xa}, {0x2, 0x4}, {0x5, 0x6}, {0x3, 0x7}, {0x6, 0x2}, {}, {0x4, 0x5}, {0x0, 0x2}, {0x3, 0xa}, {0x7, 0x5}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x2}, {0x7, 0x6}, {0x4, 0x6}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x3}, {0x7, 0x6}, {0x2, 0x4}, {0x4, 0x7}, {0x0, 0x6}, {0x4, 0x6}, {0x6, 0x2}, {0x5, 0xa}, {0x6, 0x5}, {0x1}, {0x1, 0x2}, {0x7, 0x5}]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x6, 0x3, 0x5, 0x7, 0x101, 0x2125, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x18, 0xc, 0x30, 0x4, 0x6, 0x5, 0x4, 0x5, 0x18, 0x36, 0x9, 0x9, 0x2, 0x60, 0x4, 0x2, 0x31, 0x33c44bea7a9a05f, 0x6c, 0x3, 0x64, 0x18, 0x24, 0x36, 0x82a5beed0fdfaf5d, 0x0, 0x16, 0x77]}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x6}, {0x3, 0x1}, {0x1, 0x4}, {0x5, 0x2}, {0x3, 0x7}, {0x2, 0x8}, {0x3, 0x2}, {0x0, 0x8}, {0x7}, {0x7, 0x5}, {0x2, 0x7}, {0x5, 0x6}, {0x1, 0x4}, {0x6, 0xa}, {0x7, 0x6}, {0x4}, {0x4}, {0x1, 0x2}, {0x3, 0x4}, {0x6, 0x8}, {0x1, 0x7}, {0x1, 0x2}, {0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x2, 0x7}, {0x2, 0x9}, {0x5, 0x9}, {0x7}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x5}, {0x4, 0x6}, {0x2, 0x4}, {0x1, 0xa}, {0x4, 0x3}, {0x1, 0x18}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0xa}, {0x2, 0x6}, {0x1}, {0x1, 0x8}, {0x6, 0x14}, {0x4, 0x9}, {0x3, 0x8}, {0x7, 0x9}, {0x4, 0x9}, {0x4, 0x4}, {0x1}, {0x1, 0x8}, {0x6, 0x3}, {0x3, 0x8}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x7}, {0x6, 0x3}, {}, {0x2, 0x4}, {0x3, 0x2}, {0x7, 0x7}, {0x4, 0x6}, {0x7}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0x2}, {0x7, 0x7}, {0x0, 0x9}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x2}, {0x5, 0x6}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x7}, {0x5, 0x7}, {0x3, 0x6}, {0x1, 0x1}, {0x4, 0x7}, {0x7, 0x6}, {0x5, 0x2}, {0x5, 0x8}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x5}, {0x0, 0x1}, {0x2, 0x9}, {0x1}, {0x7, 0x7}, {0x3, 0x3}, {0x3, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x0, 0x8}, {0x2, 0x5}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x5}, {0x2, 0x7}, {0x1, 0x2}, {0x1, 0x6}, {0x5, 0xa}, {0x3, 0x1}, {}, {0x3, 0x9}, {0x7, 0x3}, {0x2, 0x3}, {0x4, 0x2}, {0x4, 0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x2}, {0x6, 0x5}, {0x4, 0x9}, {0x2, 0x1}, {0x1, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x5, 0x2, 0x8aaa, 0x8, 0x2, 0x7f, 0x8]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xc426, 0x200, 0x0, 0x5, 0x8, 0x9, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x7, 0x0, 0x176, 0x5, 0x8, 0x0, 0x1000]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0xb, 0x1b, 0x2, 0x16, 0x1b, 0x3, 0x6c, 0x2, 0x6, 0x48, 0xb, 0x30, 0x0, 0x6c, 0x1b, 0x48, 0x48, 0x0, 0xc, 0x3, 0x18, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3f, 0x2, [{}, {0x7, 0x1}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x4}, {0x3, 0x5}, {0x6, 0x2}, {0x1, 0x2}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x5}, {0x6, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x1}, {0x4, 0x7}, {0x1, 0xa}, {0x7, 0x6}, {0x1, 0x3}, {0x5, 0x6}, {0x0, 0x5}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x2}, {0x5, 0x4}, {0x7, 0x1}, {0x6, 0x2}, {0x1, 0x3}, {0x1}, {0x6, 0x3}, {0x3, 0x5}, {0x1, 0x4}, {0x6, 0x1}, {0x7, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x5, 0x6}, {0x7}, {0x7, 0x2}, {0x2, 0x6}, {0x0, 0x8}, {0x6, 0x5}, {0x5, 0xa}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0x8}, {0x3, 0x3}, {0x6, 0x9}, {0x6, 0x4}, {0x3, 0x2}, {0x7}, {0x4, 0x1}, {0x1, 0x5}, {0x5, 0x9}, {0x4, 0x9}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x5, 0x65, 0xc, 0x1, 0x16, 0x36, 0x1, 0xb, 0x33]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x6, 0x8001, 0x0, 0xe555, 0x596, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x1}, {0x3, 0x8}, {0x7, 0x4}, {0x2, 0x3}, {0x6, 0x6}, {0x1}, {0x5, 0x9}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x3}, {0x6, 0x9}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x5}, {0x6, 0x5}, {0x6, 0x8}, {0x5, 0x5}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x4}, {0x1, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0xfff8, 0xff, 0x7fff, 0x3, 0x0, 0x7fff]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe256}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x3}, {0x1}, {0x7}, {0x0, 0x8}, {0x5, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x3, 0x3}, {0x6, 0x7}, {0x4}, {0x5, 0x2}, {0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0xa}, {0x7, 0x1}, {0x1, 0xc}, {0x6, 0x6}, {}, {0x3, 0xa}, {0x4, 0x9}, {0x1, 0x8}, {0x2, 0xa}, {0x1}, {0x2, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0x6, 0xa}, {0x4, 0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x2}, {0x1, 0x3}, {0x2, 0x5}, {0x0, 0xa}, {0x4}, {0x1, 0x8}, {0x2, 0x5}, {0x7, 0x7}, {0x4, 0x1}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x9}, {0x0, 0xa}, {0x2, 0x9}, {0x4, 0x8}, {0x3, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x5}, {0x4, 0x3}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x8}, {0x7, 0x5}, {0x3, 0x7}, {0x2, 0x6}, {0x7, 0x3}, {0x5, 0x4}, {0x2, 0x6}, {0x7, 0x9}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff8, 0x0, 0x8, 0x1, 0x4, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x6}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7}, {0x4, 0x6}, {0x1, 0x8}, {0x4, 0x7}, {0x0, 0x8}, {0x3, 0x2}, {0x7, 0xa}, {0x1, 0x9}, {0x2, 0x6}, {}, {0x2, 0x3}, {0x7, 0x7}, {0x2, 0x5}, {0x6, 0x9}, {0x6, 0x2}, {0x7}, {0x5, 0x1}, {0x6}, {0x7, 0xa}, {0x7, 0x3}, {0x6}, {0x6, 0x5}, {0x1, 0x2}, {0x2}, {0x2, 0xa}, {0x3, 0x7}]}]}]}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x5, 0x16, 0x30, 0x16, 0x18, 0xadb5c752d66710c8, 0x6, 0x60, 0x9, 0x48, 0x24, 0x48, 0x6c, 0x4, 0x16]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x9, 0x6, 0x4, 0xb, 0x16, 0x24, 0x16, 0xc, 0xc, 0x36, 0x12, 0x9, 0x6, 0x6, 0x1b, 0x48, 0x36, 0x60, 0x65]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8f5, 0xd, 0x8f0f, 0xf801, 0x40, 0xb, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x4}]}]}, 0xa88}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000440)={0x20, 0x15, 0x6, "13284d70fafc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x40, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]]}, 0x40}, 0x1, 0x0, 0x0, 0x40c5}, 0x44044) 4.40796083s ago: executing program 2 (id=886): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf016", 0x59}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8da", 0x41}, {&(0x7f0000000c80)}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) syz_usb_connect(0x5, 0xaaf, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2735], &(0x7f0000000ec0)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x310, 0x0, 0xa, 0x46, 0x8}, 0x103, &(0x7f0000000d00)={0x5, 0xf, 0x103, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xfb, 0x3, 0xcd, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x4, 0x7}, @generic={0xe9, 0x10, 0x3, "ea9092216e36327788b053b20a591dff71bbd8e81be4f449e44f81cadfac23858e61015262500cc9799d5d4ef551499dd55017b878f2df74939d19e11a769ee6ff7ae33c5fac9d73e1b043a2b060ee5ec6fbd51361214d59b4a5449974f23dc60e64c585285818fcb1972ed295e159e8a5e6b4a92e12ce098d02bda65f847c8abf93fcbbaa7e87c9fb8348a52295c02c289ad2220249d42856a20652a221c780caf9d72291d35248ce3cde70c20fdd800ea760efbc6458358675ee4ee4d4305a81e945ae00e7f7c3baa68296af452e4105d45da1d5009ffc2943d14d28d44582ad18ca6615d8"}]}, 0x2, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x3801}}]}) 3.851606774s ago: executing program 3 (id=889): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)={0x1c4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xa8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x100, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/137, &(0x7f00000000c0)=0x89) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x24, r5, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x48814) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3.081473018s ago: executing program 1 (id=893): r0 = socket$kcm(0xf, 0x3, 0x2) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000}) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x25, &(0x7f0000000140)={0x1, 0x1, 0x9, 0x15}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) (async) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x40000) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) (async) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, &(0x7f00000005c0)={0x2, 0x4e21, @multicast1}, 0x1c) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x3}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x339a, 0x2002, 0x40, 0x0, 0x0, 0x1, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r9, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x8}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x3e4, 0x800, 0x4, 0x0, 0x4, 0x3}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/481], 0x170}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) close_range(r7, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 3.000764425s ago: executing program 1 (id=894): mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0xe4ffffff) 2.651515425s ago: executing program 2 (id=895): syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000500)={0x40, 0xa1f1d142bafbb59e, 0x1, ','}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000500)={0x40, 0xa1f1d142bafbb59e, 0x1, ','}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4004814) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4004814) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x3c644) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3", 0x3}], 0x1}}], 0x1, 0x20008000) shutdown(r4, 0x1) (async) shutdown(r4, 0x1) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x2000}) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xac, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) (async) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000000240)=""/72, &(0x7f00000002c0)=0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r5) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) setfsgid(0xee00) (async) setfsgid(0xee00) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x101, 0x9, 0x9, 0xc, 0xfffffffffffffffc}) (async) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x101, 0x9, 0x9, 0xc, 0xfffffffffffffffc, 0x0}) r7 = syz_open_procfs(r6, &(0x7f00000000c0)='net/udplite\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r8, &(0x7f0000000300)='personality\x00') 2.298900761s ago: executing program 3 (id=896): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$uac2(0x0, 0x100, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7104, 0x2202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x4, 0x18, 0xd, {0x8, 0xb, 0x1, 0x0, 0x1, 0x1e, 0x20, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x6, 0x18, 0x5}, [@sample_rate={0xf, 0x24, 0xd, 0x4, 0x2, 0x3, [0x3, 0x2, 0x0, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x1, 0x2, 0xd, 0x9, "c3f385", "601815"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0xff, 0x3, 0x3}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x7, 0xdb, "272a0c8d9482fc9a"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x80, 0x2, 0x8, 0xfe, "75b1"}, @as_header={0x10, 0x24, 0x1, 0x8, 0x2, 0x2, 0x3, 0xc7, 0x1, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x70, 0x52, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0xc, 0xb180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0xe, 0x1, 0x2, 0x0, 0x3, 0x2a5, 0xf3}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0x3, 0x2, "ca0dd708"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0xd7, 0xeb, "d4"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x2, 0x9, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe, 0x2, {0x8, 0x25, 0x1, 0x0, 0xc, 0x7, 0x800}}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0xe, 0x0, 0x71, 0x10, 0x3}, 0xd4, &(0x7f0000000540)={0x5, 0xf, 0xd4, 0x1, [@generic={0xcf, 0x10, 0x2, "dcd24a83ef46ef96ccb8e232b4aebdf131f07c0f3678808241dfd041bcbd0aa7faadf3dd88c1d984da38e1a0a86853b6fb0a8fe397a2cc95d701a918ba0d7c6342bb03a5cc93f55c015892899b70b895a52041f81c1cb6126a8430803c6a74fc98fb84f9932ebfeac354cc57fc70a52b69e8b2e1a5e7ca92a9fb9aa82e6adf43b571a5361217274d4d0d493cfb5c0aa874f7207ce7d486ab36af438b0985e5ef58f4dcee117f2289adffcf1a99370cb66d76ec61bb5d0e265f128dc06d644f0ce99657cf5f55d90c45e8b3d1"}]}, 0x2, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x801}}]}) syz_usb_control_io$uac2(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000006400)={{0x1, 0x1, 0x18, r3, {r5, r6}}, './file0\x00'}) syz_fuse_handle_req(r3, &(0x7f0000002100)="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", 0x2000, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006880)={0x20, 0x0, 0x3, {0xa, 0x0, 0x3, 0x9}}, 0x0}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0xfc5, 0x201, 0x803, 0xb653, 0x6, "7f5972d49b67661c0196fe1d42d7d7cf39f600"}) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) read$dsp(r8, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x15, "00000000000700000000fffe00"}) r9 = syz_open_pts(r2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000240)=0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000006c0)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x9, 0xffffffffffffffe3, 0x81}, 0x0, 0x0, &(0x7f0000001bc0)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f00000014c0)={0x2c, &(0x7f0000000040)={0x40, 0x2, 0x39, {0x39, 0xc, "9370b2f793b046559187b6cb08fccf8812945cf7832137d934197debd9dea1258e63da50406a531300114e4c29d9120520cda5ba7d5284"}}, &(0x7f00000012c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x145f}}, &(0x7f0000001300)={0x0, 0xf, 0x100, {0x5, 0xf, 0x100, 0x4, [@ptm_cap={0x3}, @generic={0xda, 0x10, 0x8, "878e1e4fc9f59ce8ccc7f1c74015d56b9757d1a1a29072cedaf9dff631e350001605c79b0fd0527b96ae11df0cdaa94882b4c5c68e97764306b11f837349ce7f785c0b64c75f8bac4718118d085b055ff17090ef6b58a5d557ad9f0cae732418560e320515b1d08d172980884b6f97532f4aa37e565a57996a61f1b2cfa94ff3e7cb1018aa0fb48b1e4b5bde7b7f08d1a729a5906f32de6785d4f018f79d62b78dd63d16b44264ce960b6c157c3c3e7cb0a96831ae186b9d362d8afc71f9b37f1fa443f6616c082edcfed3d303ac12000107da4eed9532"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x40, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0x17, 0x2, 0x0, 0xf0f, 0x94, [0xc00f, 0x0]}]}}, &(0x7f0000001440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x0, 0x0, 0x10, "14baba9e", "71a28d28"}}, &(0x7f0000001480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x37, 0x18, 0x81, 0x3, 0x7f, 0x3ff}}}, &(0x7f0000001940)={0x84, &(0x7f0000001500)={0x20, 0x12, 0x3e, "00c78122263183feb8561730d286e48b8a20c528e4e3fc65e8dbdf6578eeaa0f7dbf4432abd07d29a1e7f4577cad126fd65343c99b5b5f66748fcb81bc42"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001600)={0x20, 0x0, 0x4}, &(0x7f0000001640)=ANY=[@ANYBLOB="20000400657320013a00"], &(0x7f0000001680)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f00000016c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001700)={0x40, 0xb, 0x2, "46e9"}, &(0x7f0000001740)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000001780)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000017c0)={0x40, 0x17, 0x6, @random="3a4381db33a5"}, &(0x7f0000001800)={0x40, 0x19, 0x2, "fd4e"}, &(0x7f0000001840)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001880)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000018c0)={0x40, 0x1e, 0x1, 0x9d}, &(0x7f0000001900)={0x40, 0x21, 0x1, 0x1}}) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') syz_usb_connect$cdc_ncm(0x1, 0x92, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x2, 0x1, 0xcc, 0x80, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "96348be3"}, {0x5, 0x24, 0x0, 0x484c}, {0xd, 0x24, 0xf, 0x1, 0xb5abf1b6, 0x4, 0x200, 0xe}, {0x6, 0x24, 0x1a, 0xffff, 0x3d}, [@dmm={0x7, 0x24, 0x14, 0x10}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x6, 0x2}, @obex={0x5, 0x24, 0x15, 0x3}, @dmm={0x7, 0x24, 0x14, 0x3, 0xfffb}, @obex={0x5, 0x24, 0x15, 0x10}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x4d, 0x7f, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7b, 0x81, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xfc, 0x5, 0xbd}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x310, 0x1b, 0x7, 0x7, 0x10, 0x9}, 0x20, &(0x7f0000000840)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x9c, "fbcebcbe852aaa2825adb99e280977f7"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x2, 0x4}]}, 0x3, [{0xf, &(0x7f00000008c0)=@string={0xf, 0x3, "caff6ba9f304207eceb3e59e1d"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x480a}}, {0x54, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"]}]}) 1.5416698s ago: executing program 1 (id=897): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x2, 0x2, 0x7, 0x6, 0x7c4, 0xf37}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) shmget$private(0x0, 0xfffffffffeffffff, 0x4000000, &(0x7f0000ffc000/0x3000)=nil) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x3, 0x0, 0x98, &(0x7f0000000140)={0x3000000, 0x1000, 0x5}}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000000c0)=0x17, 0x4) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x268, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x5e, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x8, 0x0, 0xfffff024}, {0x26, 0x0, 0x1}]}, 0x10) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd25, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x44}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x1a) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.486263068s ago: executing program 0 (id=898): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 1.167342577s ago: executing program 1 (id=899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd2a, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)={0x3c, 0x10, 0x1, 0x70bd2b, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @fd=r3}, @nested={0x20, 0x125, 0x0, 0x1, [@nested={0x8, 0x2e, 0x0, 0x1, [@typed={0x4, 0x92, 0x0, 0x0, @binary}]}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/4125, 0x101d}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000003840)=""/4160, 0x1040}, {&(0x7f0000000000)=""/115, 0x73}, {&(0x7f00000000c0)=""/223, 0xdf}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000480)=""/64, 0x40}], 0x7}, 0x12120) 704.431891ms ago: executing program 2 (id=900): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848482100005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 649.987732ms ago: executing program 1 (id=901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d00200800183a"], 0xfdef) 420.282696ms ago: executing program 2 (id=902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f826e376464f30f11745a2f660fc73166edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0xaaaaaaaaaaaad67, 0x11, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x37, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xff7f000000000000) 325.736687ms ago: executing program 1 (id=903): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, 0x0, 0xfffffd96) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xf) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (async) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r3, 0x400455c8, 0x4) (async) r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000002480)=ANY=[@ANYRES64=r1], &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0xa, [{0x4, &(0x7f0000002000)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000002080)=@lang_id={0x4, 0x3, 0x1809}}, {0x23, &(0x7f00000020c0)=@string={0x23, 0x3, "342ed84eff35b588b838c224493ec9d35d43a7ca03c530e85fd06dd9c67e2923cf"}}, {0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x457}}, {0xde, &(0x7f0000002580)=@string={0xde, 0x3, "50512a5a92ae6dbf3246a83b90ee30d708a74e029dd708b61a5678773e3c77ac1734506e90e78c0f7864bb9a486f4351f120b4d7ea3ba8e1d1a81de4eb42d806fd159649e43d9bcb2e5c930d90526c6219a0eefed5d682dbee77d21dfc2ac44adcfd98a79f93097918e304079da3e97fb422b1efdf2532c240ab05997c087eeeb066880f1d4ea406fb8956a4c3a9bfec44d6f54dda6f826ed9e9acb7ba6cd3478e6c4b58631c1507d25d080c4d6131e3c03fe79f3867b280c3051124a8ff9270088f8c578eb52879a3ef30e3e7463a956b618cd79e51827ff5436f00"}}, {0x4, &(0x7f0000002200)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x1b, &(0x7f0000002240)=@string={0x1b, 0x3, "e2e50c090709850ba7a852e70ff4e01731348c27e896a2b123"}}]}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) sendto$inet(r5, 0x0, 0x0, 0x4c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) syz_usb_control_io(r4, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="400d02000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000061c0), r6) sendmsg$FOU_CMD_GET(r6, &(0x7f0000006300)={0x0, 0x0, &(0x7f00000062c0)={&(0x7f0000006240)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x44490) r8 = socket$inet_udp(0x2, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={[{@clone_children}]}) (async) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000001180)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000002540)={@multicast1, @initdev={0xac, 0x1e, 0x4, 0x0}, r9}, 0xc) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x54, r7, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x48080) 181.508595ms ago: executing program 2 (id=904): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x1, 0x7ff, 0x10, @local, @private0, 0x8000, 0x40, 0x8001, 0xfffffff8}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x27, r1}) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r4, 0x2) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0xf5c, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3}], 0x2c) listen(r3, 0x3) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r2, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) 0s ago: executing program 2 (id=905): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r2, 0x1, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r4, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.264517][ T5911] usb 1-1: config 0 descriptor?? [ 179.287772][ T24] usb 4-1: Product: syz [ 179.292757][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 179.298619][ T24] usb 4-1: Manufacturer: syz [ 179.303686][ T24] usb 4-1: SerialNumber: syz [ 179.721330][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 179.748551][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 179.763660][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00 [ 180.128575][ T7336] cgroup: fork rejected by pids controller in /syz1 [ 180.534891][ T5936] usb 3-1: USB disconnect, device number 43 [ 180.746961][ T7377] netlink: 'syz.2.517': attribute type 10 has an invalid length. [ 180.762187][ T7377] bond0: (slave wlan1): Releasing backup interface [ 180.770261][ T7377] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 180.983412][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 181.160670][ T7387] FAULT_INJECTION: forcing a failure. [ 181.160670][ T7387] name failslab, interval 1, probability 0, space 0, times 0 [ 181.177206][ T7387] CPU: 0 UID: 0 PID: 7387 Comm: syz.2.521 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.177240][ T7387] Tainted: [L]=SOFTLOCKUP [ 181.177248][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 181.177261][ T7387] Call Trace: [ 181.177269][ T7387] [ 181.177277][ T7387] dump_stack_lvl+0xe8/0x150 [ 181.177313][ T7387] should_fail_ex+0x412/0x560 [ 181.177346][ T7387] should_failslab+0xa8/0x100 [ 181.177367][ T7387] ? skb_clone+0x212/0x3a0 [ 181.177393][ T7387] kmem_cache_alloc_noprof+0x87/0x650 [ 181.177423][ T7387] ? sk_filter_trim_cap+0x1e1/0xd90 [ 181.177457][ T7387] skb_clone+0x212/0x3a0 [ 181.177486][ T7387] __netlink_deliver_tap+0x404/0x850 [ 181.177519][ T7387] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.177542][ T7387] netlink_deliver_tap+0x19c/0x1b0 [ 181.177565][ T7387] netlink_dump+0x926/0xe80 [ 181.177597][ T7387] ? __pfx_netlink_dump+0x10/0x10 [ 181.177642][ T7387] netlink_recvmsg+0x690/0xa50 [ 181.177663][ T7387] ? __might_fault+0xaf/0x130 [ 181.177699][ T7387] ? __pfx_netlink_recvmsg+0x10/0x10 [ 181.177725][ T7387] ? __lock_acquire+0x6b5/0x2cf0 [ 181.177761][ T7387] ? __pfx_netlink_recvmsg+0x10/0x10 [ 181.177783][ T7387] sock_recvmsg_nosec+0x10c/0x140 [ 181.177817][ T7387] ____sys_recvmsg+0x3e3/0x4a0 [ 181.177852][ T7387] ? __pfx_____sys_recvmsg+0x10/0x10 [ 181.177893][ T7387] ? import_iovec+0x73/0xa0 [ 181.177929][ T7387] ___sys_recvmsg+0x215/0x590 [ 181.177961][ T7387] ? __pfx____sys_recvmsg+0x10/0x10 [ 181.177992][ T7387] ? ktime_get_ts64+0xa9/0x410 [ 181.178048][ T7387] do_recvmmsg+0x334/0x800 [ 181.178083][ T7387] ? __pfx_do_recvmmsg+0x10/0x10 [ 181.178131][ T7387] ? _copy_from_user+0x94/0xb0 [ 181.178167][ T7387] __x64_sys_recvmmsg+0x1b7/0x250 [ 181.178192][ T7387] ? __irq_exit_rcu+0xca/0x220 [ 181.178223][ T7387] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 181.178248][ T7387] ? handle_softirqs+0x715/0x840 [ 181.178286][ T7387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.178309][ T7387] do_syscall_64+0x15f/0xf80 [ 181.178338][ T7387] ? clear_bhb_loop+0x40/0x90 [ 181.178364][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.178384][ T7387] RIP: 0033:0x7fc4ea39c819 [ 181.178403][ T7387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.178419][ T7387] RSP: 002b:00007fc4eb2cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 181.178440][ T7387] RAX: ffffffffffffffda RBX: 00007fc4ea615fa0 RCX: 00007fc4ea39c819 [ 181.178455][ T7387] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 181.178468][ T7387] RBP: 00007fc4eb2cb090 R08: 0000200000000080 R09: 0000000000000000 [ 181.178481][ T7387] R10: 0000000000012022 R11: 0000000000000246 R12: 0000000000000002 [ 181.178493][ T7387] R13: 00007fc4ea616038 R14: 00007fc4ea615fa0 R15: 00007ffd70a0ae58 [ 181.178525][ T7387] [ 181.203733][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 181.533701][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 181.551171][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 181.570829][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 181.592943][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 181.636924][ T24] usb 4-1: USB disconnect, device number 45 [ 181.680881][ T5911] pwc: recv_control_msg error -71 req 02 val 2700 [ 181.691339][ T5911] pwc: recv_control_msg error -71 req 02 val 2c00 [ 181.718074][ T5911] pwc: recv_control_msg error -71 req 04 val 1000 [ 181.748192][ T5911] pwc: recv_control_msg error -71 req 04 val 1300 [ 181.764222][ T5911] pwc: recv_control_msg error -71 req 04 val 1400 [ 181.785850][ T5911] pwc: recv_control_msg error -71 req 02 val 2000 [ 181.817352][ T5911] pwc: recv_control_msg error -71 req 02 val 2100 [ 181.849049][ T5911] pwc: recv_control_msg error -71 req 04 val 1500 [ 181.857111][ T5911] pwc: recv_control_msg error -71 req 02 val 2500 [ 181.872523][ T5911] pwc: recv_control_msg error -71 req 02 val 2400 [ 181.891504][ T5911] pwc: recv_control_msg error -71 req 02 val 2600 [ 181.905835][ T5911] pwc: recv_control_msg error -71 req 02 val 2900 [ 181.926537][ T5911] pwc: recv_control_msg error -71 req 02 val 2800 [ 181.945541][ T5911] pwc: recv_control_msg error -71 req 04 val 1100 [ 181.975152][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 182.045277][ T5911] pwc: Registered as video103. [ 182.106506][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 182.312536][ T5911] usb 1-1: USB disconnect, device number 44 [ 182.658164][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 182.767368][ T5856] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 182.807044][ T7425] use of bytesused == 0 is deprecated and will be removed in the future, [ 182.816400][ T7425] use the actual size instead. [ 182.835042][ T7425] netlink: 168 bytes leftover after parsing attributes in process `syz.2.534'. [ 182.917666][ T5856] usb 2-1: device descriptor read/64, error -71 [ 182.968308][ T808] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 183.059987][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'. [ 183.123718][ T7437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.131751][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 183.138665][ T7437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.147694][ T808] usb 1-1: config 4 has an invalid interface number: 21 but max is 3 [ 183.155864][ T808] usb 1-1: config 4 has an invalid interface number: 196 but max is 3 [ 183.166395][ T808] usb 1-1: config 4 has an invalid interface number: 223 but max is 3 [ 183.174744][ T5856] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 183.186111][ T808] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 183.195556][ T808] usb 1-1: config 4 has an invalid descriptor of length 29, skipping remainder of the config [ 183.206563][ T808] usb 1-1: config 4 has 3 interfaces, different from the descriptor's value: 4 [ 183.215671][ T808] usb 1-1: config 4 has no interface number 0 [ 183.222286][ T808] usb 1-1: config 4 has no interface number 1 [ 183.228628][ T808] usb 1-1: config 4 has no interface number 2 [ 183.234818][ T808] usb 1-1: config 4 interface 21 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 183.246478][ T808] usb 1-1: config 4 interface 21 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 183.258286][ T808] usb 1-1: config 4 interface 21 altsetting 14 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 183.271707][ T808] usb 1-1: config 4 interface 21 altsetting 14 endpoint 0x87 has invalid maxpacket 1023, setting to 64 [ 183.282842][ T808] usb 1-1: config 4 interface 21 altsetting 14 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 183.293840][ T808] usb 1-1: config 4 interface 21 altsetting 14 endpoint 0x5 has invalid maxpacket 903, setting to 64 [ 183.305237][ T808] usb 1-1: config 4 interface 21 altsetting 14 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 183.316453][ T808] usb 1-1: config 4 interface 21 altsetting 14 has a duplicate endpoint with address 0x5, skipping [ 183.327608][ T5856] usb 2-1: device descriptor read/64, error -71 [ 183.333987][ T808] usb 1-1: config 4 interface 21 altsetting 14 has 8 endpoint descriptors, different from the interface descriptor's value: 16 [ 183.349070][ T808] usb 1-1: too many endpoints for config 4 interface 196 altsetting 172: 82, using maximum allowed: 30 [ 183.360622][ T808] usb 1-1: config 4 interface 196 altsetting 172 has a duplicate endpoint with address 0xA, skipping [ 183.372208][ T808] usb 1-1: config 4 interface 196 altsetting 172 has an endpoint descriptor with address 0x5B, changing to 0xB [ 183.377621][ T5911] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 183.384831][ T808] usb 1-1: config 4 interface 196 altsetting 172 endpoint 0xB has invalid maxpacket 45731, setting to 1024 [ 183.403275][ T808] usb 1-1: config 4 interface 196 altsetting 172 bulk endpoint 0xB has invalid maxpacket 1024 [ 183.413641][ T808] usb 1-1: config 4 interface 196 altsetting 172 endpoint 0xC has invalid maxpacket 991, setting to 64 [ 183.424800][ T808] usb 1-1: config 4 interface 196 altsetting 172 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 183.436770][ T808] usb 1-1: config 4 interface 196 altsetting 172 has a duplicate endpoint with address 0x7, skipping [ 183.449122][ T5856] usb usb2-port1: attempt power cycle [ 183.455266][ T808] usb 1-1: config 4 interface 196 altsetting 172 bulk endpoint 0xD has invalid maxpacket 8 [ 183.466441][ T808] usb 1-1: config 4 interface 196 altsetting 172 has 9 endpoint descriptors, different from the interface descriptor's value: 82 [ 183.479900][ T808] usb 1-1: config 4 interface 223 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 183.490646][ T808] usb 1-1: config 4 interface 223 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 183.503935][ T808] usb 1-1: config 4 interface 21 has no altsetting 0 [ 183.511648][ T808] usb 1-1: config 4 interface 196 has no altsetting 0 [ 183.520453][ T808] usb 1-1: config 4 interface 223 has no altsetting 0 [ 183.529768][ T808] usb 1-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=11.15 [ 183.539022][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.547040][ T808] usb 1-1: Product: syz [ 183.551262][ T808] usb 1-1: Manufacturer: 㠁 [ 183.555881][ T808] usb 1-1: SerialNumber: syz [ 183.568010][ T7418] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 183.582490][ T5911] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 183.605247][ T5911] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 183.618892][ T5911] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 183.629577][ T5911] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 183.641487][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.664220][ T5911] hub 3-1:32.0: Invalid hub with more than one config or interface [ 183.681849][ T5911] hub 3-1:32.0: probe with driver hub failed with error -22 [ 183.788154][ T5856] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 183.821653][ T5856] usb 2-1: device descriptor read/8, error -71 [ 183.850623][ T808] usb 1-1: USB disconnect, device number 45 [ 183.860423][ T9] usb 3-1: USB disconnect, device number 44 [ 183.904368][ T7442] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 184.068914][ T5856] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 184.088208][ T5856] usb 2-1: device descriptor read/8, error -71 [ 184.198779][ T5856] usb usb2-port1: unable to enumerate USB device [ 184.288101][ T5911] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 184.458544][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 184.467156][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 184.488471][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 184.501455][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 184.511899][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 184.542206][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 184.573282][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'. [ 184.584453][ T5911] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 184.608342][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.616525][ T5911] usb 4-1: Product: syz [ 184.622264][ T5911] usb 4-1: Manufacturer: syz [ 184.627419][ T5911] usb 4-1: SerialNumber: syz [ 184.647951][ T5911] usb 4-1: config 0 descriptor?? [ 184.865967][ T7444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.542'. [ 185.084515][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.097048][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.105639][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.112349][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.119314][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.125874][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.134617][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.141398][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.148614][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.155356][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.162361][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.172871][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.183436][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.191473][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.198324][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.205227][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.214292][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.221105][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.228159][ T5911] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.234369][ T5911] input input20: Timeout waiting for response from device. [ 185.253558][ T5911] usb 4-1: USB disconnect, device number 46 [ 185.460557][ T29] audit: type=1326 audit(1776089709.712:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ea39c819 code=0x7fc00000 [ 185.485094][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 185.495528][ T29] audit: type=1326 audit(1776089709.712:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4ea39c819 code=0x7fc00000 [ 185.524038][ T29] audit: type=1326 audit(1776089709.712:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ea39c819 code=0x7fc00000 [ 185.552648][ T29] audit: type=1326 audit(1776089709.712:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ea39c819 code=0x7fc00000 [ 185.576263][ T29] audit: type=1326 audit(1776089709.712:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ea39c819 code=0x7fc00000 [ 185.616928][ T29] audit: type=1326 audit(1776089709.712:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ea39c819 code=0x7fc00000 [ 185.695971][ T29] audit: type=1326 audit(1776089709.712:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ea39c819 code=0x7fc00000 [ 185.731108][ T29] audit: type=1326 audit(1776089709.712:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ea39c819 code=0x7fc00000 [ 185.777343][ T29] audit: type=1326 audit(1776089709.712:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ea39c819 code=0x7fc00000 [ 185.839675][ T29] audit: type=1326 audit(1776089709.712:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.2.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ea39c819 code=0x7fc00000 [ 185.930891][ T7468] netlink: 'syz.1.549': attribute type 12 has an invalid length. [ 185.948109][ T7472] netlink: 'syz.2.552': attribute type 10 has an invalid length. [ 185.967323][ T7468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.549'. [ 185.986796][ T7472] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 186.008523][ T7472] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 186.280782][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 186.439215][ T24] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 186.456369][ T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 186.468397][ T24] usb 2-1: can't read configurations, error -22 [ 186.473092][ T5911] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 186.597949][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 186.607395][ T808] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 186.617357][ T5911] usb 3-1: device descriptor read/64, error -71 [ 186.748084][ T24] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 186.757443][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 186.762755][ T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 186.771003][ T24] usb 2-1: can't read configurations, error -22 [ 186.779539][ T24] usb usb2-port1: attempt power cycle [ 186.785131][ T808] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 186.793981][ T808] usb 4-1: config 0 has no interface number 0 [ 186.800242][ T808] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.807582][ T5936] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 186.811452][ T808] usb 4-1: config 0 interface 85 has no altsetting 0 [ 186.828450][ T808] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 186.837611][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.846163][ T808] usb 4-1: Product: syz [ 186.850436][ T808] usb 4-1: Manufacturer: syz [ 186.855057][ T808] usb 4-1: SerialNumber: syz [ 186.862886][ T808] usb 4-1: config 0 descriptor?? [ 186.877470][ T5911] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 186.979353][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.991373][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.001489][ T5936] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 187.010783][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.019004][ T5911] usb 3-1: device descriptor read/64, error -71 [ 187.028276][ T5936] usb 1-1: config 0 descriptor?? [ 187.127367][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 187.137944][ T5911] usb usb3-port1: attempt power cycle [ 187.148761][ T24] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 187.160922][ T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 187.169075][ T24] usb 2-1: can't read configurations, error -22 [ 187.278007][ T7491] netlink: 'syz.3.561': attribute type 83 has an invalid length. [ 187.297433][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 187.319886][ T24] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 187.329910][ T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 187.338021][ T24] usb 2-1: can't read configurations, error -22 [ 187.345513][ T24] usb usb2-port1: unable to enumerate USB device [ 187.477440][ T5911] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 187.498046][ T5911] usb 3-1: device descriptor read/8, error -71 [ 187.643070][ T808] appletouch 4-1:0.85: Geyser mode initialized. [ 187.651962][ T5936] hid-led 0003:27B8:01ED.0008: probe with driver hid-led failed with error -71 [ 187.659526][ T808] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input21 [ 187.678116][ C1] appletouch 4-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 187.700109][ T5936] usb 1-1: USB disconnect, device number 46 [ 187.750670][ T5911] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 187.798117][ T5911] usb 3-1: device descriptor read/8, error -71 [ 187.908811][ T5911] usb usb3-port1: unable to enumerate USB device [ 189.258774][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 189.481478][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.521976][ T24] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.588817][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 189.625908][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.634427][ T24] usb 2-1: Product: syz [ 189.641531][ T24] usb 2-1: Manufacturer: syz [ 189.646464][ T24] usb 2-1: SerialNumber: syz [ 189.652331][ T5911] usb 4-1: USB disconnect, device number 47 [ 189.822017][ T5911] appletouch 4-1:0.85: input: appletouch disconnected [ 189.991884][ T24] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 190.118169][ T24] usb 2-1: USB disconnect, device number 40 [ 190.205868][ T6010] udevd[6010]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.403804][ T7533] FAULT_INJECTION: forcing a failure. [ 190.403804][ T7533] name failslab, interval 1, probability 0, space 0, times 0 [ 190.437010][ T7533] CPU: 1 UID: 0 PID: 7533 Comm: syz.2.575 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.437042][ T7533] Tainted: [L]=SOFTLOCKUP [ 190.437051][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 190.437063][ T7533] Call Trace: [ 190.437071][ T7533] [ 190.437080][ T7533] dump_stack_lvl+0xe8/0x150 [ 190.437115][ T7533] should_fail_ex+0x412/0x560 [ 190.437150][ T7533] should_failslab+0xa8/0x100 [ 190.437175][ T7533] __kmalloc_cache_noprof+0x88/0x660 [ 190.437206][ T7533] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 190.437235][ T7533] ? sctp_add_bind_addr+0x8c/0x370 [ 190.437272][ T7533] sctp_add_bind_addr+0x8c/0x370 [ 190.437304][ T7533] sctp_copy_local_addr_list+0x314/0x4f0 [ 190.437336][ T7533] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 190.437362][ T7533] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 190.437403][ T7533] ? sctp_v4_is_any+0x35/0x60 [ 190.437431][ T7533] ? sctp_copy_one_addr+0x93/0x360 [ 190.437460][ T7533] sctp_bind_addr_copy+0xb3/0x3c0 [ 190.437488][ T7533] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 190.437517][ T7533] sctp_connect_new_asoc+0x2ff/0x6b0 [ 190.437541][ T7533] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 190.437563][ T7533] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 190.437585][ T7533] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 190.437615][ T7533] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 190.437636][ T7533] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 190.437655][ T7533] ? security_sctp_bind_connect+0x7e/0x2c0 [ 190.437686][ T7533] sctp_sendmsg+0x1528/0x2c10 [ 190.437731][ T7533] ? __pfx_sctp_sendmsg+0x10/0x10 [ 190.437763][ T7533] ? aa_sk_perm+0x6d5/0x900 [ 190.437791][ T7533] ? __pfx_aa_sk_perm+0x10/0x10 [ 190.437813][ T7533] ? sock_rps_record_flow+0x19/0x350 [ 190.437840][ T7533] ? inet_sendmsg+0x2f4/0x370 [ 190.437862][ T7533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.437895][ T7533] ____sys_sendmsg+0x80a/0x9f0 [ 190.437929][ T7533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.437964][ T7533] ? import_iovec+0x73/0xa0 [ 190.437999][ T7533] ___sys_sendmsg+0x2a5/0x360 [ 190.438022][ T7533] ? __lock_acquire+0x6b5/0x2cf0 [ 190.438055][ T7533] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.438085][ T7533] ? kstrtouint+0x6e/0xe0 [ 190.438136][ T7533] ? __fget_files+0x2a/0x420 [ 190.438160][ T7533] ? __fget_files+0x3a0/0x420 [ 190.438195][ T7533] __sys_sendmmsg+0x27c/0x4e0 [ 190.438226][ T7533] ? __pfx___sys_sendmmsg+0x10/0x10 [ 190.438248][ T7533] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 190.438304][ T7533] ? ksys_write+0x242/0x270 [ 190.438326][ T7533] ? __pfx_ksys_write+0x10/0x10 [ 190.438353][ T7533] __x64_sys_sendmmsg+0xa0/0xc0 [ 190.438386][ T7533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.438407][ T7533] do_syscall_64+0x15f/0xf80 [ 190.438432][ T7533] ? trace_irq_disable+0x3b/0x140 [ 190.438457][ T7533] ? clear_bhb_loop+0x40/0x90 [ 190.438482][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.438500][ T7533] RIP: 0033:0x7fc4ea39c819 [ 190.438519][ T7533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.438536][ T7533] RSP: 002b:00007fc4eb2aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 190.438556][ T7533] RAX: ffffffffffffffda RBX: 00007fc4ea616090 RCX: 00007fc4ea39c819 [ 190.438570][ T7533] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 190.438581][ T7533] RBP: 00007fc4eb2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 190.438593][ T7533] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 190.438604][ T7533] R13: 00007fc4ea616128 R14: 00007fc4ea616090 R15: 00007ffd70a0ae58 [ 190.438635][ T7533] [ 190.577835][ T5936] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 190.971420][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'. [ 191.007551][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 191.016581][ T5936] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 191.029480][ T5936] usb 4-1: config 0 has no interface number 0 [ 191.042437][ T5936] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.071275][ T5936] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.086917][ T5936] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 191.103426][ T5936] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 191.115937][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.151707][ T5936] usb 4-1: config 0 descriptor?? [ 191.399400][ T24] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 191.457441][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 191.522788][ T7563] loop2: detected capacity change from 0 to 4095 [ 191.560030][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 191.586213][ T24] usb 3-1: config 0 has no interface number 0 [ 191.604209][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.626764][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 191.627679][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 191.639141][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.654753][ T9] usb 2-1: Product: syz [ 191.660798][ T9] usb 2-1: Manufacturer: syz [ 191.665613][ T9] usb 2-1: SerialNumber: syz [ 191.671176][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 191.693272][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 191.704900][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 191.716101][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.729476][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 191.738629][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.752476][ T24] usb 3-1: config 0 descriptor?? [ 191.768474][ T7548] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.775984][ T7548] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.792183][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 191.808197][ T5936] usbhid 4-1:0.4: can't add hid device: -71 [ 191.814682][ T5936] usbhid 4-1:0.4: probe with driver usbhid failed with error -71 [ 191.840461][ T5936] usb 4-1: USB disconnect, device number 48 [ 192.002067][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-1) [ 192.011241][ T24] usb 3-1: USB disconnect, device number 49 [ 192.028802][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 192.116469][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 192.128845][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 192.617579][ T5936] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 192.780355][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 192.792038][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.806787][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.821322][ T5936] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 192.831133][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.844032][ T5936] usb 4-1: config 0 descriptor?? [ 192.859325][ T5936] hub 4-1:0.0: USB hub found [ 193.055315][ T5936] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 193.190917][ T7587] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 193.349633][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 193.484922][ T5936] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 193.570725][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 193.593161][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 193.633067][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 193.645128][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 193.662332][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 193.690622][ T9] usb 2-1: USB disconnect, device number 41 [ 193.978095][ T5936] usb 4-1: USB disconnect, device number 49 [ 194.313689][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.323979][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.386131][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 194.532540][ T7640] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.615'. [ 194.757558][ T7649] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 194.767416][ T5936] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 194.815628][ T7649] team0: Device vxcan1 is of different type [ 194.929516][ T5936] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 194.959828][ T5936] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 194.989189][ T5936] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.017292][ T5936] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 195.047131][ T5936] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.064428][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.093285][ T5936] usbtmc 2-1:16.0: bulk endpoints not found [ 195.278799][ T7671] syzkaller1: entered promiscuous mode [ 195.284463][ T7671] syzkaller1: entered allmulticast mode [ 195.295541][ T9] usb 2-1: USB disconnect, device number 42 [ 195.707396][ T5846] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 195.858109][ T5846] usb 3-1: device descriptor read/64, error -71 [ 195.996261][ T7684] fuse: Bad value for 'user_id' [ 196.002705][ T7684] fuse: Bad value for 'user_id' [ 196.013821][ T7684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.059618][ T7684] pim6reg1: entered promiscuous mode [ 196.066485][ T7684] pim6reg1: entered allmulticast mode [ 196.129554][ T7688] netlink: 72 bytes leftover after parsing attributes in process `syz.3.634'. [ 196.147402][ T5846] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 196.308459][ T5846] usb 3-1: device descriptor read/64, error -71 [ 196.330849][ T7699] FAULT_INJECTION: forcing a failure. [ 196.330849][ T7699] name failslab, interval 1, probability 0, space 0, times 0 [ 196.344435][ T7699] CPU: 1 UID: 0 PID: 7699 Comm: syz.1.638 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.344465][ T7699] Tainted: [L]=SOFTLOCKUP [ 196.344473][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.344485][ T7699] Call Trace: [ 196.344492][ T7699] [ 196.344500][ T7699] dump_stack_lvl+0xe8/0x150 [ 196.344535][ T7699] should_fail_ex+0x412/0x560 [ 196.344567][ T7699] should_failslab+0xa8/0x100 [ 196.344588][ T7699] ? skb_clone+0x212/0x3a0 [ 196.344614][ T7699] kmem_cache_alloc_noprof+0x87/0x650 [ 196.344642][ T7699] ? sk_filter_trim_cap+0x1e1/0xd90 [ 196.344677][ T7699] skb_clone+0x212/0x3a0 [ 196.344707][ T7699] __netlink_deliver_tap+0x404/0x850 [ 196.344740][ T7699] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.344762][ T7699] netlink_deliver_tap+0x19c/0x1b0 [ 196.344784][ T7699] netlink_dump+0x926/0xe80 [ 196.344815][ T7699] ? __pfx_netlink_dump+0x10/0x10 [ 196.344850][ T7699] ? netlink_recvmsg+0x5d6/0xa50 [ 196.344869][ T7699] ? kmem_cache_free+0x182/0x650 [ 196.344895][ T7699] netlink_recvmsg+0x690/0xa50 [ 196.344925][ T7699] ? __pfx_netlink_recvmsg+0x10/0x10 [ 196.344951][ T7699] ? __lock_acquire+0x6b5/0x2cf0 [ 196.344987][ T7699] ? __pfx_netlink_recvmsg+0x10/0x10 [ 196.345008][ T7699] sock_recvmsg_nosec+0x10c/0x140 [ 196.345042][ T7699] ____sys_recvmsg+0x3e3/0x4a0 [ 196.345081][ T7699] ? __pfx_____sys_recvmsg+0x10/0x10 [ 196.345121][ T7699] ? import_iovec+0x73/0xa0 [ 196.345164][ T7699] ___sys_recvmsg+0x215/0x590 [ 196.345194][ T7699] ? __pfx____sys_recvmsg+0x10/0x10 [ 196.345225][ T7699] ? ktime_get_ts64+0xa9/0x410 [ 196.345278][ T7699] do_recvmmsg+0x334/0x800 [ 196.345313][ T7699] ? __pfx_do_recvmmsg+0x10/0x10 [ 196.345352][ T7699] ? _copy_from_user+0x94/0xb0 [ 196.345387][ T7699] __x64_sys_recvmmsg+0x1b7/0x250 [ 196.345417][ T7699] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 196.345453][ T7699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.345474][ T7699] do_syscall_64+0x15f/0xf80 [ 196.345501][ T7699] ? trace_irq_disable+0x3b/0x140 [ 196.345525][ T7699] ? clear_bhb_loop+0x40/0x90 [ 196.345550][ T7699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.345570][ T7699] RIP: 0033:0x7f284fd9c819 [ 196.345589][ T7699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.345606][ T7699] RSP: 002b:00007f2850bbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 196.345626][ T7699] RAX: ffffffffffffffda RBX: 00007f2850015fa0 RCX: 00007f284fd9c819 [ 196.345641][ T7699] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 196.345654][ T7699] RBP: 00007f2850bbd090 R08: 0000200000003700 R09: 0000000000000000 [ 196.345667][ T7699] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 196.345678][ T7699] R13: 00007f2850016038 R14: 00007f2850015fa0 R15: 00007fff8633ff48 [ 196.345710][ T7699] [ 196.448233][ T7701] FAULT_INJECTION: forcing a failure. [ 196.448233][ T7701] name failslab, interval 1, probability 0, space 0, times 0 [ 196.657397][ T7701] CPU: 1 UID: 0 PID: 7701 Comm: syz.0.637 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.657428][ T7701] Tainted: [L]=SOFTLOCKUP [ 196.657436][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.657447][ T7701] Call Trace: [ 196.657455][ T7701] [ 196.657463][ T7701] dump_stack_lvl+0xe8/0x150 [ 196.657497][ T7701] should_fail_ex+0x412/0x560 [ 196.657529][ T7701] should_failslab+0xa8/0x100 [ 196.657552][ T7701] __kmalloc_cache_noprof+0x88/0x660 [ 196.657581][ T7701] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 196.657610][ T7701] ? sctp_add_bind_addr+0x8c/0x370 [ 196.657640][ T7701] sctp_add_bind_addr+0x8c/0x370 [ 196.657672][ T7701] sctp_copy_local_addr_list+0x314/0x4f0 [ 196.657705][ T7701] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 196.657735][ T5846] usb usb3-port1: attempt power cycle [ 196.657731][ T7701] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 196.657763][ T7701] ? sctp_v4_is_any+0x35/0x60 [ 196.657873][ T7701] ? sctp_copy_one_addr+0x93/0x360 [ 196.657969][ T7701] sctp_bind_addr_copy+0xb3/0x3c0 [ 196.658049][ T7701] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 196.658131][ T7701] sctp_connect_new_asoc+0x2ff/0x6b0 [ 196.658193][ T7701] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 196.658247][ T7701] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 196.658306][ T7701] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 196.658355][ T7701] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 196.658418][ T7701] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 196.658471][ T7701] ? security_sctp_bind_connect+0x7e/0x2c0 [ 196.658555][ T7701] sctp_sendmsg+0x1528/0x2c10 [ 196.658677][ T7701] ? __pfx_sctp_sendmsg+0x10/0x10 [ 196.658755][ T7701] ? aa_sk_perm+0x6d5/0x900 [ 196.658834][ T7701] ? __pfx_aa_sk_perm+0x10/0x10 [ 196.658899][ T7701] ? sock_rps_record_flow+0x19/0x350 [ 196.658961][ T7701] ? inet_sendmsg+0x2f4/0x370 [ 196.659022][ T7701] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.659123][ T7701] ____sys_sendmsg+0x80a/0x9f0 [ 196.659214][ T7701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.659335][ T7701] ? import_iovec+0x73/0xa0 [ 196.659423][ T7701] ___sys_sendmsg+0x2a5/0x360 [ 196.659493][ T7701] ? __lock_acquire+0x6b5/0x2cf0 [ 196.659576][ T7701] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.659654][ T7701] ? kstrtouint+0x6e/0xe0 [ 196.659793][ T7701] ? __fget_files+0x2a/0x420 [ 196.659859][ T7701] ? __fget_files+0x3a0/0x420 [ 196.659926][ T7701] __sys_sendmmsg+0x27c/0x4e0 [ 196.659996][ T7701] ? __pfx___sys_sendmmsg+0x10/0x10 [ 196.660059][ T7701] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 196.660214][ T7701] ? ksys_write+0x242/0x270 [ 196.660309][ T7701] ? __pfx_ksys_write+0x10/0x10 [ 196.660375][ T7701] __x64_sys_sendmmsg+0xa0/0xc0 [ 196.660440][ T7701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.660502][ T7701] do_syscall_64+0x15f/0xf80 [ 196.660576][ T7701] ? clear_bhb_loop+0x40/0x90 [ 196.660649][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.660721][ T7701] RIP: 0033:0x7f770179c819 [ 196.660784][ T7701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.660826][ T7701] RSP: 002b:00007f77026e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 196.660875][ T7701] RAX: ffffffffffffffda RBX: 00007f7701a16090 RCX: 00007f770179c819 [ 196.660915][ T7701] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 196.660947][ T7701] RBP: 00007f77026e9090 R08: 0000000000000000 R09: 0000000000000000 [ 196.660999][ T7701] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 196.661031][ T7701] R13: 00007f7701a16128 R14: 00007f7701a16090 R15: 00007ffef7c76848 [ 196.661123][ T7701] [ 197.134777][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 197.317664][ T7712] netlink: 52 bytes leftover after parsing attributes in process `syz.0.643'. [ 197.338856][ T7718] cgroup: noprefix used incorrectly [ 197.345436][ T7712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.643'. [ 197.357807][ T5846] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 197.366106][ T7720] block nbd0: Unsupported socket: should be TCP or UNIX. [ 197.388050][ T5846] usb 3-1: device descriptor read/8, error -71 [ 197.427494][ T7719] block nbd1: Unsupported socket: should be TCP or UNIX. [ 197.455155][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 197.455173][ T29] audit: type=1326 audit(1776089721.702:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f284fd9c819 code=0x0 [ 197.592904][ T7728] Set syz1 is full, maxelem 65536 reached [ 197.637359][ T5846] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 197.657952][ T5846] usb 3-1: device descriptor read/8, error -71 [ 197.757347][ T5936] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 197.767751][ T5846] usb usb3-port1: unable to enumerate USB device [ 197.887342][ T5936] usb 1-1: device descriptor read/64, error -71 [ 198.127399][ T5936] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 198.257337][ T5936] usb 1-1: device descriptor read/64, error -71 [ 198.274976][ T7732] FAULT_INJECTION: forcing a failure. [ 198.274976][ T7732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.288952][ T7732] CPU: 1 UID: 0 PID: 7732 Comm: syz.1.649 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.288984][ T7732] Tainted: [L]=SOFTLOCKUP [ 198.288991][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 198.289004][ T7732] Call Trace: [ 198.289012][ T7732] [ 198.289020][ T7732] dump_stack_lvl+0xe8/0x150 [ 198.289055][ T7732] should_fail_ex+0x412/0x560 [ 198.289090][ T7732] _copy_to_user+0x31/0xb0 [ 198.289123][ T7732] move_addr_to_user+0x13a/0x210 [ 198.289148][ T7732] ____sys_recvmsg+0x245/0x4a0 [ 198.289182][ T7732] ? __pfx_____sys_recvmsg+0x10/0x10 [ 198.289223][ T7732] ? import_iovec+0x73/0xa0 [ 198.289258][ T7732] ___sys_recvmsg+0x215/0x590 [ 198.289289][ T7732] ? __pfx____sys_recvmsg+0x10/0x10 [ 198.289318][ T7732] ? __fget_files+0x2a/0x420 [ 198.289361][ T7732] ? __fget_files+0x3a0/0x420 [ 198.289398][ T7732] do_recvmmsg+0x334/0x800 [ 198.289432][ T7732] ? __pfx_do_recvmmsg+0x10/0x10 [ 198.289470][ T7732] ? _copy_from_user+0x94/0xb0 [ 198.289510][ T7732] __x64_sys_recvmmsg+0x1b7/0x250 [ 198.289539][ T7732] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 198.289574][ T7732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.289596][ T7732] do_syscall_64+0x15f/0xf80 [ 198.289626][ T7732] ? trace_irq_disable+0x3b/0x140 [ 198.289652][ T7732] ? clear_bhb_loop+0x40/0x90 [ 198.289676][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.289696][ T7732] RIP: 0033:0x7f284fd9c819 [ 198.289715][ T7732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.289732][ T7732] RSP: 002b:00007f2850bbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 198.289752][ T7732] RAX: ffffffffffffffda RBX: 00007f2850015fa0 RCX: 00007f284fd9c819 [ 198.289766][ T7732] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 198.289796][ T7732] RBP: 00007f2850bbd090 R08: 0000200000003700 R09: 0000000000000000 [ 198.289810][ T7732] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 198.289822][ T7732] R13: 00007f2850016038 R14: 00007f2850015fa0 R15: 00007fff8633ff48 [ 198.289854][ T7732] [ 198.379064][ T5936] usb usb1-port1: attempt power cycle [ 198.582200][ T7734] sp0: Synchronizing with TNC [ 198.595749][ T7734] netlink: 'syz.1.650': attribute type 10 has an invalid length. [ 198.605685][ T7734] netlink: 40 bytes leftover after parsing attributes in process `syz.1.650'. [ 198.616034][ T7734] team0: entered promiscuous mode [ 198.623113][ T7734] team_slave_0: entered promiscuous mode [ 198.629485][ T7734] team_slave_1: entered promiscuous mode [ 198.635380][ T7734] team0: entered allmulticast mode [ 198.640971][ T7734] team_slave_0: entered allmulticast mode [ 198.646767][ T7734] team_slave_1: entered allmulticast mode [ 198.653527][ T7734] bridge0: port 3(team0) entered blocking state [ 198.668369][ T7734] bridge0: port 3(team0) entered disabled state [ 198.706333][ T7735] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 198.706333][ T7735] program syz.1.650 not setting count and/or reply_len properly [ 198.730040][ T7734] bridge0: port 3(team0) entered blocking state [ 198.736210][ T7735] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 198.738521][ T7734] bridge0: port 3(team0) entered forwarding state [ 198.937436][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 198.957459][ T5936] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 198.981662][ T5936] usb 1-1: device descriptor read/8, error -71 [ 199.090199][ T9] usb 4-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.104215][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 199.114167][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.40 [ 199.129546][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.138524][ T9] usb 4-1: Product: syz [ 199.142762][ T9] usb 4-1: Manufacturer: syz [ 199.147807][ T9] usb 4-1: SerialNumber: syz [ 199.227344][ T5936] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 199.259083][ T5936] usb 1-1: device descriptor read/8, error -71 [ 199.368695][ T5936] usb usb1-port1: unable to enumerate USB device [ 199.391618][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 199.404525][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 199.424264][ T9] usb 4-1: USB disconnect, device number 50 [ 199.545493][ T7757] bpf: Bad value for 'gid' [ 199.747836][ T7762] netlink: 104 bytes leftover after parsing attributes in process `syz.2.661'. [ 200.067985][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 200.217068][ T7774] netlink: 'syz.1.667': attribute type 39 has an invalid length. [ 200.235948][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.249403][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 200.268152][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.291182][ T9] usb 3-1: config 0 descriptor?? [ 200.301030][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 200.317580][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 200.475009][ T7776] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 200.488795][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 200.499678][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 200.509093][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 200.528754][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 200.556461][ T9] pwc: recv_control_msg error -71 req 02 val 2700 [ 200.565209][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.585719][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 200.602045][ T24] usb 4-1: Product: syz [ 200.611288][ T24] usb 4-1: Manufacturer: syz [ 200.623553][ T24] usb 4-1: SerialNumber: syz [ 200.626885][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 200.642579][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 200.658177][ T24] usb 4-1: config 0 descriptor?? [ 200.659386][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 200.682110][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 200.685458][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 200.728323][ T7783] netlink: 'syz.1.671': attribute type 2 has an invalid length. [ 200.741958][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 200.750441][ T7783] netlink: 'syz.1.671': attribute type 11 has an invalid length. [ 200.758985][ T7783] netlink: 112 bytes leftover after parsing attributes in process `syz.1.671'. [ 200.763289][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 200.795890][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 200.813510][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 200.835016][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 200.850649][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 200.864296][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 200.880318][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 200.891702][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 200.929573][ T9] pwc: Registered as video103. [ 200.956545][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23 [ 200.991827][ T9] usb 3-1: USB disconnect, device number 54 [ 201.060450][ T7785] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 201.133403][ T7785] CIFS mount error: No usable UNC path provided in device string! [ 201.133403][ T7785] [ 201.174749][ T7785] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 201.388565][ T5942] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 201.557353][ T5942] usb 1-1: Using ep0 maxpacket: 16 [ 201.574845][ T5942] usb 1-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 201.595332][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 201.607100][ T5942] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 25 [ 201.634612][ T5942] usb 1-1: config 0 interface 0 has no altsetting 0 [ 201.646234][ T5942] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 201.656890][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.669906][ T5942] usb 1-1: config 0 descriptor?? [ 201.689201][ T5942] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 201.749038][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 201.763097][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 201.788726][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.821563][ T9] usb 3-1: config 0 descriptor?? [ 201.915182][ T24] gspca_zc3xx: reg_w_i err -71 [ 202.041785][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 202.074308][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.099869][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 202.117410][ T9] usb 3-1: media controller created [ 202.154973][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.197334][ T7804] netlink: 42496 bytes leftover after parsing attributes in process `syz.3.665'. [ 202.276760][ T7808] fuse: Unknown parameter 'rotmfde' [ 202.517482][ T5846] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 202.527362][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 202.533771][ T24] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 202.546340][ T24] usb 4-1: USB disconnect, device number 51 [ 202.667370][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 202.674239][ T5846] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 202.682975][ T5846] usb 2-1: config 0 has no interface number 0 [ 202.689441][ T5846] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.701600][ T5846] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 202.715505][ T5846] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.726905][ T5846] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 202.740647][ T5846] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 202.750102][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.765645][ T5846] usb 2-1: config 0 descriptor?? [ 202.791963][ T5846] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 202.888180][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 203.039146][ T5846] usb 2-1: USB disconnect, device number 43 [ 203.045218][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 203.058408][ T24] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 203.078069][ T9] stb0899_attach: Driver disabled by Kconfig [ 203.085884][ T24] usb 4-1: config index 0 descriptor too short (expected 65505, got 72) [ 203.099830][ T9] az6027: no front-end attached [ 203.099830][ T9] [ 203.109047][ T24] usb 4-1: config index 1 descriptor too short (expected 65505, got 72) [ 203.118784][ T24] usb 4-1: config index 2 descriptor too short (expected 65505, got 72) [ 203.128817][ T9] az6027: usb out operation failed. (-71) [ 203.135885][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 203.140351][ T24] usb 4-1: config index 3 descriptor too short (expected 65505, got 72) [ 203.158543][ T24] usb 4-1: config index 4 descriptor too short (expected 65505, got 72) [ 203.159256][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 203.173135][ T24] usb 4-1: config index 5 descriptor too short (expected 65505, got 72) [ 203.189785][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 203.206754][ T24] usb 4-1: config index 6 descriptor too short (expected 65505, got 72) [ 203.210358][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 203.223263][ T24] usb 4-1: config index 7 descriptor too short (expected 65505, got 72) [ 203.231803][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 203.231833][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.231854][ T24] usb 4-1: Product: syz [ 203.231871][ T24] usb 4-1: Manufacturer: syz [ 203.231887][ T24] usb 4-1: SerialNumber: syz [ 203.314876][ T9] usb 3-1: USB disconnect, device number 55 [ 203.341693][ T24] usb 4-1: can't set config #1, error -71 [ 203.389432][ T24] usb 4-1: USB disconnect, device number 52 [ 203.514515][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 204.135398][ T24] usb 1-1: USB disconnect, device number 51 [ 204.298399][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 204.459195][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.483039][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 204.505811][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.530296][ T9] usb 4-1: config 0 descriptor?? [ 204.546057][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 204.777385][ T5936] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 204.917355][ T5936] usb 1-1: device descriptor read/64, error -71 [ 204.949414][ T7823] capability: warning: `syz.3.679' uses 32-bit capabilities (legacy support in use) [ 205.157583][ T5936] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 205.172946][ T9] pwc: recv_control_msg error -71 req 02 val 2700 [ 205.181408][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 205.188780][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 205.195932][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 205.203656][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 205.211623][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 205.219939][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 205.227101][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 205.234494][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 205.242630][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 205.249861][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 205.257069][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 205.275819][ T5846] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 205.287508][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 205.297340][ T5936] usb 1-1: device descriptor read/64, error -71 [ 205.310878][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 205.329992][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 205.351852][ T9] pwc: Registered as video103. [ 205.392544][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 205.410121][ T5936] usb usb1-port1: attempt power cycle [ 205.438208][ T9] usb 4-1: USB disconnect, device number 53 [ 205.757603][ T5936] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 205.811246][ T5936] usb 1-1: device descriptor read/8, error -71 [ 205.825176][ T7853] comedi comedi1: comedi_config --init_data is deprecated [ 205.846515][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.868020][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.057386][ T5936] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 206.067307][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 206.097940][ T5936] usb 1-1: device descriptor read/8, error -71 [ 206.207973][ T5936] usb usb1-port1: unable to enumerate USB device [ 206.217852][ T24] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 206.230817][ T9] usb 2-1: config 118 has an invalid interface number: 48 but max is 0 [ 206.247392][ T9] usb 2-1: config 118 has no interface number 0 [ 206.255393][ T9] usb 2-1: too many endpoints for config 118 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 206.278830][ T9] usb 2-1: config 118 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 206.313280][ T9] usb 2-1: config 118 interface 48 has no altsetting 0 [ 206.329566][ T9] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 206.347472][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.358884][ T9] usb 2-1: Product: syz [ 206.367666][ T24] usb 3-1: device descriptor read/64, error -71 [ 206.368242][ T9] usb 2-1: Manufacturer: syz [ 206.390582][ T9] usb 2-1: SerialNumber: syz [ 206.627377][ T24] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 206.628685][ T9] usb 2-1: USB disconnect, device number 44 [ 206.757326][ T24] usb 3-1: device descriptor read/64, error -71 [ 206.868421][ T24] usb usb3-port1: attempt power cycle [ 207.166274][ T7871] NILFS (nullb0): couldn't find nilfs on the device [ 207.217602][ T24] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 207.265039][ T24] usb 3-1: device descriptor read/8, error -71 [ 207.372568][ T7879] tipc: Started in network mode [ 207.382213][ T7879] tipc: Node identity , cluster identity 4711 [ 207.388611][ T7879] tipc: Failed to obtain node identity [ 207.394482][ T7879] tipc: Enabling of bearer rejected, failed to enable media [ 207.445747][ T7883] netlink: 'syz.3.703': attribute type 10 has an invalid length. [ 207.517330][ T24] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 207.539665][ T24] usb 3-1: device descriptor read/8, error -71 [ 207.627490][ T5856] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 207.658067][ T24] usb usb3-port1: unable to enumerate USB device [ 207.788280][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 207.795534][ T5856] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 207.804463][ T5856] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 207.816062][ T5856] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 207.824706][ T5856] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 207.833226][ T5856] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 207.843502][ T5856] usb 2-1: config 0 has no interface number 0 [ 207.849939][ T5856] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 207.861469][ T5856] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 207.871808][ T5856] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.882105][ T5856] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.895554][ T5856] usb 2-1: config 0 interface 125 has no altsetting 0 [ 207.903873][ T5856] usb 2-1: config 0 interface 125 has no altsetting 2 [ 207.914382][ T5856] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 207.924868][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.933707][ T5856] usb 2-1: Product: syz [ 207.939042][ T5856] usb 2-1: Manufacturer: syz [ 207.943777][ T5856] usb 2-1: SerialNumber: syz [ 207.952821][ T5856] usb 2-1: config 0 descriptor?? [ 207.962594][ T5856] usb 2-1: selecting invalid altsetting 2 [ 208.260883][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 208.407998][ T7899] FAULT_INJECTION: forcing a failure. [ 208.407998][ T7899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.424260][ T7899] CPU: 1 UID: 0 PID: 7899 Comm: syz.3.710 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.424291][ T7899] Tainted: [L]=SOFTLOCKUP [ 208.424302][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 208.424314][ T7899] Call Trace: [ 208.424322][ T7899] [ 208.424331][ T7899] dump_stack_lvl+0xe8/0x150 [ 208.424366][ T7899] should_fail_ex+0x412/0x560 [ 208.424399][ T7899] _copy_from_user+0x2d/0xb0 [ 208.424419][ T7899] restore_altstack+0xab/0x4c0 [ 208.424447][ T7899] ? __pfx_restore_altstack+0x10/0x10 [ 208.424476][ T7899] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.424504][ T7899] __ia32_sys_rt_sigreturn+0x2bd/0x8e0 [ 208.424532][ T7899] ? ktime_get+0x45/0x220 [ 208.424562][ T7899] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 208.424587][ T7899] ? kvm_sched_clock_read+0x11/0x20 [ 208.424611][ T7899] ? sched_clock+0x3f/0x60 [ 208.424635][ T7899] ? sched_clock_cpu+0x74/0x440 [ 208.424664][ T7899] ? lapic_next_event+0x11/0x20 [ 208.424692][ T7899] ? clockevents_program_event+0x3ba/0x4b0 [ 208.424726][ T7899] ? __pfx_sched_clock_cpu+0x10/0x10 [ 208.424765][ T7899] ? __irq_exit_rcu+0xca/0x220 [ 208.424813][ T7899] ? lockdep_softirqs_on+0x11d/0x180 [ 208.424841][ T7899] ? handle_softirqs+0x715/0x840 [ 208.424878][ T7899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.424901][ T7899] do_syscall_64+0x15f/0xf80 [ 208.424930][ T7899] ? clear_bhb_loop+0x40/0x90 [ 208.424956][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.424977][ T7899] RIP: 0033:0x7fc0d193db99 [ 208.424995][ T7899] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 208.425012][ T7899] RSP: 002b:00007fc0d283ba80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 208.425039][ T7899] RAX: ffffffffffffffda RBX: 00007fc0d1c15fa0 RCX: 00007fc0d193db99 [ 208.425055][ T7899] RDX: 00007fc0d283ba80 RSI: 00007fc0d283bbb0 RDI: 0000000000000021 [ 208.425068][ T7899] RBP: 00007fc0d283c090 R08: 0000000000000000 R09: 0000000000000000 [ 208.425080][ T7899] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 208.425091][ T7899] R13: 00007fc0d1c16038 R14: 00007fc0d1c15fa0 R15: 00007ffdd27c9fd8 [ 208.425123][ T7899] [ 208.761846][ T7902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.711'. [ 209.107040][ T5935] usb 2-1: USB disconnect, device number 45 [ 209.275973][ T7912] netlink: 45 bytes leftover after parsing attributes in process `syz.3.716'. [ 209.356548][ T7916] syzkaller1: entered promiscuous mode [ 209.365339][ T7916] syzkaller1: entered allmulticast mode [ 209.777369][ T9] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 209.928932][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.939257][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 209.950285][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.960369][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.973282][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 209.982657][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.994888][ T9] usb 1-1: config 0 descriptor?? [ 210.408214][ T9] hid_parser_main: 32 callbacks suppressed [ 210.408237][ T9] hid-u2fzero 0003:10C4:8ACF.000A: unknown main item tag 0x0 [ 210.422312][ T9] hid-u2fzero 0003:10C4:8ACF.000A: unknown main item tag 0x0 [ 210.431002][ T9] hid-u2fzero 0003:10C4:8ACF.000A: unknown main item tag 0x0 [ 210.439696][ T9] hid-u2fzero 0003:10C4:8ACF.000A: unknown main item tag 0x0 [ 210.451272][ T9] hid-u2fzero 0003:10C4:8ACF.000A: unknown main item tag 0x0 [ 210.474601][ T9] hid-u2fzero 0003:10C4:8ACF.000A: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 210.505979][ T9] hid-u2fzero 0003:10C4:8ACF.000A: U2F Zero LED initialised [ 210.523860][ T9] hid-u2fzero 0003:10C4:8ACF.000A: U2F Zero RNG initialised [ 210.616313][ T9] usb 1-1: USB disconnect, device number 56 [ 210.827343][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 210.851828][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.731'. [ 210.924071][ T7957] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 210.932247][ T7956] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 210.987838][ T24] usb 3-1: no configurations [ 210.992960][ T24] usb 3-1: can't read configurations, error -22 [ 211.127820][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 211.147347][ T9] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 211.298248][ T24] usb 3-1: no configurations [ 211.302641][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 211.303317][ T24] usb 3-1: can't read configurations, error -22 [ 211.314432][ T9] usb 2-1: config 1 has an invalid interface number: 118 but max is 0 [ 211.322333][ T24] usb usb3-port1: attempt power cycle [ 211.326543][ T5936] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 211.340317][ T9] usb 2-1: config 1 has no interface number 0 [ 211.346548][ T9] usb 2-1: config 1 interface 118 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 211.358644][ T9] usb 2-1: config 1 interface 118 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 211.369605][ T9] usb 2-1: config 1 interface 118 has no altsetting 0 [ 211.379513][ T9] usb 2-1: string descriptor 0 read error: -22 [ 211.385870][ T9] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=7a.eb [ 211.394958][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.406567][ T7954] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.420157][ T9] kobil_sct 2-1:1.118: KOBIL USB smart card terminal converter detected [ 211.434002][ T9] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 211.468068][ T5856] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 211.508712][ T5936] usb 4-1: too many configurations: 125, using maximum allowed: 8 [ 211.527933][ T5936] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 211.537089][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.545225][ T5936] usb 4-1: Product: syz [ 211.549475][ T5936] usb 4-1: Manufacturer: syz [ 211.554075][ T5936] usb 4-1: SerialNumber: syz [ 211.565211][ T5936] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 211.581830][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 211.619733][ T5856] usb 1-1: config 0 has no interfaces? [ 211.626270][ T5856] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 211.631608][ T5936] usb 2-1: USB disconnect, device number 46 [ 211.637485][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.666609][ T5856] usb 1-1: config 0 descriptor?? [ 211.678197][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 211.693821][ T5936] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 211.710829][ T24] usb 3-1: no configurations [ 211.715490][ T24] usb 3-1: can't read configurations, error -22 [ 211.724195][ T5936] kobil_sct 2-1:1.118: device disconnected [ 211.747458][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 211.753295][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.753796][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 211.793893][ T7968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.812023][ T7968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.822787][ T5856] usb 4-1: USB disconnect, device number 54 [ 211.868559][ T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 211.880627][ T5935] usb 1-1: USB disconnect, device number 57 [ 211.891149][ T24] usb 3-1: no configurations [ 211.895808][ T24] usb 3-1: can't read configurations, error -22 [ 211.904837][ T24] usb usb3-port1: unable to enumerate USB device [ 212.262042][ T7970] loop2: detected capacity change from 0 to 4095 [ 212.327470][ T5935] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 212.500987][ T5935] usb 1-1: config 0 has no interfaces? [ 212.517382][ T5935] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 212.533485][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.565474][ T5935] usb 1-1: config 0 descriptor?? [ 212.607381][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 212.627475][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 212.634628][ T9] ath9k_htc: Failed to initialize the device [ 212.642465][ T5856] usb 4-1: ath9k_htc: USB layer deinitialized [ 212.725378][ T7986] mmap: syz.3.743 (7986): VmData 37593088 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 212.774065][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 212.789577][ T24] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 212.802937][ T7966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.804431][ T24] usb 2-1: config 0 has no interface number 0 [ 212.827383][ T24] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.839444][ T7966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.861422][ T24] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 212.887572][ T24] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 65307, setting to 1024 [ 212.903307][ T5935] usb 1-1: USB disconnect, device number 58 [ 212.917338][ T24] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 212.932828][ T24] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.967047][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 212.976682][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.985304][ T24] usb 2-1: Product: syz [ 212.989889][ T24] usb 2-1: Manufacturer: syz [ 212.994603][ T24] usb 2-1: SerialNumber: syz [ 213.007982][ T24] usb 2-1: config 0 descriptor?? [ 213.014727][ T7972] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 213.029482][ T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input27 [ 213.042396][ T5197] usb 2-1: BOGUS urb xfer, pipe 1 != type 3 [ 213.078219][ C0] bcm5974 2-1:0.119: trackpad urb failed: -1 [ 213.229002][ T24] usb 2-1: USB disconnect, device number 47 [ 213.387365][ T5935] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 213.539622][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.552796][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.564084][ T5935] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice= 0.40 [ 213.575437][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.590989][ T5935] usb 1-1: config 0 descriptor?? [ 213.812156][ T5935] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 213.826883][ T5935] usbhid 1-1:0.0: can't add hid device: -71 [ 213.827644][ T24] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 213.841714][ T5935] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 213.853916][ T5935] usb 1-1: USB disconnect, device number 59 [ 213.990078][ T24] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 213.999870][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.012419][ T5856] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 214.020192][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.032709][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 214.045892][ T24] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 214.055356][ T24] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 214.063505][ T24] usb 4-1: Manufacturer: syz [ 214.071300][ T24] usb 4-1: config 0 descriptor?? [ 214.077281][ T8002] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 214.087519][ T24] igorplugusb 4-1:0.0: endpoint incorrect [ 214.188969][ T5856] usb 3-1: too many configurations: 70, using maximum allowed: 8 [ 214.198490][ T5856] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 214.206469][ T5856] usb 3-1: can't read configurations, error -22 [ 214.286903][ T24] usb 4-1: USB disconnect, device number 55 [ 214.337802][ T5856] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 214.422370][ T8011] FAULT_INJECTION: forcing a failure. [ 214.422370][ T8011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.435852][ T8011] CPU: 1 UID: 0 PID: 8011 Comm: syz.0.751 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.435882][ T8011] Tainted: [L]=SOFTLOCKUP [ 214.435890][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 214.435902][ T8011] Call Trace: [ 214.435910][ T8011] [ 214.435918][ T8011] dump_stack_lvl+0xe8/0x150 [ 214.435952][ T8011] should_fail_ex+0x412/0x560 [ 214.435985][ T8011] _copy_from_user+0x2d/0xb0 [ 214.436005][ T8011] __sys_connect+0x156/0x450 [ 214.436028][ T8011] ? __pfx___sys_connect+0x10/0x10 [ 214.436062][ T8011] ? __pfx_ksys_write+0x10/0x10 [ 214.436086][ T8011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.436108][ T8011] __x64_sys_connect+0x7a/0x90 [ 214.436131][ T8011] do_syscall_64+0x15f/0xf80 [ 214.436156][ T8011] ? trace_irq_disable+0x3b/0x140 [ 214.436181][ T8011] ? clear_bhb_loop+0x40/0x90 [ 214.436205][ T8011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.436225][ T8011] RIP: 0033:0x7f770179c819 [ 214.436243][ T8011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.436260][ T8011] RSP: 002b:00007f770270a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 214.436281][ T8011] RAX: ffffffffffffffda RBX: 00007f7701a15fa0 RCX: 00007f770179c819 [ 214.436295][ T8011] RDX: 0000000000000020 RSI: 0000200000000f40 RDI: 0000000000000003 [ 214.436307][ T8011] RBP: 00007f770270a090 R08: 0000000000000000 R09: 0000000000000000 [ 214.436318][ T8011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.436329][ T8011] R13: 00007f7701a16038 R14: 00007f7701a15fa0 R15: 00007ffef7c76848 [ 214.436361][ T8011] [ 214.698211][ T8014] netlink: 104 bytes leftover after parsing attributes in process `syz.0.752'. [ 214.709018][ T5856] usb 3-1: too many configurations: 70, using maximum allowed: 8 [ 214.722252][ T5856] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 214.730274][ T5856] usb 3-1: can't read configurations, error -22 [ 214.736877][ T5856] usb usb3-port1: attempt power cycle [ 214.950160][ T5935] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 214.981637][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.996328][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.007090][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.016049][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.077368][ T5856] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 215.098317][ T5856] usb 3-1: too many configurations: 70, using maximum allowed: 8 [ 215.107353][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 215.110573][ T5856] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 215.120223][ T5935] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 215.121579][ T808] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 215.129130][ T5935] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 215.129154][ T5935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.142808][ T5856] usb 3-1: can't read configurations, error -22 [ 215.147937][ T5935] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 215.172035][ T5935] usb 2-1: config 0 has no interface number 0 [ 215.180462][ T5935] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 215.189721][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.197974][ T5935] usb 2-1: Product: syz [ 215.202241][ T5935] usb 2-1: Manufacturer: syz [ 215.206883][ T5935] usb 2-1: SerialNumber: syz [ 215.214547][ T5935] usb 2-1: config 0 descriptor?? [ 215.227369][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 215.288008][ T5856] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 215.308907][ T5856] usb 3-1: too many configurations: 70, using maximum allowed: 8 [ 215.317536][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.327820][ T808] usb 1-1: config 0 has no interfaces? [ 215.333403][ T808] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 215.343031][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.351694][ T5856] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 215.361072][ T5856] usb 3-1: can't read configurations, error -22 [ 215.362003][ T808] usb 1-1: config 0 descriptor?? [ 215.374941][ T5856] usb usb3-port1: unable to enumerate USB device [ 215.390373][ T24] usb 4-1: config 253 has an invalid interface number: 130 but max is 0 [ 215.400310][ T24] usb 4-1: config 253 has no interface number 0 [ 215.409048][ T24] usb 4-1: config 253 interface 130 has no altsetting 0 [ 215.418700][ T24] usb 4-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 215.428602][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.436908][ T24] usb 4-1: Product: syz [ 215.441212][ T24] usb 4-1: Manufacturer: syz [ 215.446043][ T24] usb 4-1: SerialNumber: syz [ 215.663819][ T24] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 215.718472][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 215.727648][ T24] dib0700: firmware download failed at 7 with -22 [ 215.738987][ T24] usb 4-1: USB disconnect, device number 56 [ 216.226949][ T8032] netlink: 'syz.3.759': attribute type 11 has an invalid length. [ 216.331912][ T8035] bond0: entered promiscuous mode [ 216.338824][ T8035] bond_slave_0: entered promiscuous mode [ 216.344712][ T8035] bond_slave_1: entered promiscuous mode [ 217.706358][ T5935] usb 2-1: USB disconnect, device number 48 [ 218.468061][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 218.469676][ T8037] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 219.329372][ T8037] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 219.336463][ T8037] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 219.348234][ T8037] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 219.354550][ T8037] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 219.365258][ T8037] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 219.371359][ T8037] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 219.382203][ T8037] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 219.444474][ T24] usb 1-1: USB disconnect, device number 60 [ 219.501272][ T8048] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.764'. [ 219.657360][ T8054] fuse: Bad value for 'fd' [ 219.658733][ T808] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 219.817515][ T24] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 219.976052][ T8067] FAULT_INJECTION: forcing a failure. [ 219.976052][ T8067] name failslab, interval 1, probability 0, space 0, times 0 [ 219.992721][ T8067] CPU: 1 UID: 0 PID: 8067 Comm: syz.2.771 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.992745][ T8067] Tainted: [L]=SOFTLOCKUP [ 219.992750][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 219.992760][ T8067] Call Trace: [ 219.992765][ T8067] [ 219.992772][ T8067] dump_stack_lvl+0xe8/0x150 [ 219.992799][ T8067] should_fail_ex+0x412/0x560 [ 219.992828][ T8067] should_failslab+0xa8/0x100 [ 219.992847][ T8067] __kmalloc_cache_noprof+0x88/0x660 [ 219.992869][ T8067] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 219.992891][ T8067] ? sctp_add_bind_addr+0x8c/0x370 [ 219.992915][ T8067] sctp_add_bind_addr+0x8c/0x370 [ 219.992937][ T8067] sctp_copy_local_addr_list+0x314/0x4f0 [ 219.992961][ T8067] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 219.992981][ T8067] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 219.993015][ T8067] ? sctp_v4_is_any+0x35/0x60 [ 219.993036][ T8067] ? sctp_copy_one_addr+0x93/0x360 [ 219.993058][ T8067] sctp_bind_addr_copy+0xb3/0x3c0 [ 219.993079][ T8067] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 219.993100][ T8067] sctp_connect_new_asoc+0x2ff/0x6b0 [ 219.993118][ T8067] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 219.993134][ T8067] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 219.993149][ T8067] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 219.993163][ T8067] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 219.993178][ T8067] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 219.993194][ T8067] ? security_sctp_bind_connect+0x7e/0x2c0 [ 219.993217][ T8067] sctp_sendmsg+0x1528/0x2c10 [ 219.993253][ T8067] ? __pfx_sctp_sendmsg+0x10/0x10 [ 219.993307][ T8067] ? aa_sk_perm+0x6d5/0x900 [ 219.993335][ T8067] ? __pfx_aa_sk_perm+0x10/0x10 [ 219.993364][ T8067] ? sock_rps_record_flow+0x19/0x350 [ 219.993398][ T8067] ? inet_sendmsg+0x2f4/0x370 [ 219.993414][ T8067] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.993457][ T8067] ____sys_sendmsg+0x80a/0x9f0 [ 219.993493][ T8067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.993528][ T8067] ? import_iovec+0x73/0xa0 [ 219.993567][ T8067] ___sys_sendmsg+0x2a5/0x360 [ 219.993584][ T8067] ? __lock_acquire+0x6b5/0x2cf0 [ 219.993608][ T8067] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.993630][ T8067] ? kstrtouint+0x6e/0xe0 [ 219.993667][ T8067] ? __fget_files+0x2a/0x420 [ 219.993686][ T8067] ? __fget_files+0x3a0/0x420 [ 219.993712][ T8067] __sys_sendmmsg+0x27c/0x4e0 [ 219.993734][ T8067] ? __pfx___sys_sendmmsg+0x10/0x10 [ 219.993751][ T8067] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 219.993790][ T8067] ? ksys_write+0x242/0x270 [ 219.993805][ T8067] ? __pfx_ksys_write+0x10/0x10 [ 219.993824][ T8067] __x64_sys_sendmmsg+0xa0/0xc0 [ 219.993842][ T8067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.993857][ T8067] do_syscall_64+0x15f/0xf80 [ 219.993876][ T8067] ? trace_irq_disable+0x3b/0x140 [ 219.993894][ T8067] ? clear_bhb_loop+0x40/0x90 [ 219.993911][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.993926][ T8067] RIP: 0033:0x7fc4ea39c819 [ 219.993939][ T8067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.993952][ T8067] RSP: 002b:00007fc4eb2cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 219.993967][ T8067] RAX: ffffffffffffffda RBX: 00007fc4ea615fa0 RCX: 00007fc4ea39c819 [ 219.993977][ T8067] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 219.993987][ T8067] RBP: 00007fc4eb2cb090 R08: 0000000000000000 R09: 0000000000000000 [ 219.993995][ T8067] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 219.994009][ T8067] R13: 00007fc4ea616038 R14: 00007fc4ea615fa0 R15: 00007ffd70a0ae58 [ 219.994033][ T8067] [ 219.995521][ T24] usb 1-1: config 2 has an invalid interface number: 174 but max is 0 [ 220.367046][ T24] usb 1-1: config 2 has no interface number 0 [ 220.373268][ T24] usb 1-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 220.387104][ T24] usb 1-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 1023, setting to 64 [ 220.401297][ T24] usb 1-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 220.413867][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 220.423343][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.445267][ T24] usb 1-1: Product: syz [ 220.456275][ T24] usb 1-1: Manufacturer: syz [ 220.462870][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 220.466892][ T24] usb 1-1: SerialNumber: syz [ 220.487858][ T8070] syzkaller1: entered promiscuous mode [ 220.493458][ T8070] syzkaller1: entered allmulticast mode [ 220.518782][ T8050] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 220.554035][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 220.612952][ T8074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.774'. [ 220.734645][ T24] usb 1-1: probing VID:PID(0424:012C) [ 220.759216][ T8079] netlink: 'syz.3.775': attribute type 10 has an invalid length. [ 220.773110][ T24] usb 1-1: vub300 testing BULK IN EndPoint(0) 8E [ 220.792216][ T24] usb 1-1: vub300 testing BULK IN EndPoint(1) 82 [ 220.807948][ T24] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 220.841859][ T24] vub300 1-1:2.174: probe with driver vub300 failed with error -22 [ 220.872923][ T24] usb 1-1: USB disconnect, device number 61 [ 220.953413][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.3.779'. [ 220.975843][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.3.779'. [ 220.986756][ T8088] netlink: 60 bytes leftover after parsing attributes in process `syz.3.779'. [ 221.377069][ T8099] netlink: 260 bytes leftover after parsing attributes in process `syz.0.783'. [ 221.428154][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 221.434354][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 221.494203][ T8101] netlink: 104 bytes leftover after parsing attributes in process `syz.1.784'. [ 222.134256][ T8126] netlink: 'syz.0.795': attribute type 10 has an invalid length. [ 222.357312][ T5936] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 222.527327][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 222.542547][ T5936] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 222.562113][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.580402][ T5936] usb 3-1: Product: syz [ 222.587503][ T5936] usb 3-1: Manufacturer: syz [ 222.597472][ T5936] usb 3-1: SerialNumber: syz [ 222.614746][ T5936] r8152-cfgselector 3-1: Unknown version 0x0000 [ 222.630085][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 222.636232][ T5936] r8152-cfgselector 3-1: config 0 descriptor?? [ 222.914965][ T8132] binder: 8131:8132 ioctl c0306201 2000000001c0 returned -22 [ 223.499969][ T8149] netlink: 72 bytes leftover after parsing attributes in process `syz.3.804'. [ 223.508471][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 223.515007][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 223.622284][ T8151] FAULT_INJECTION: forcing a failure. [ 223.622284][ T8151] name failslab, interval 1, probability 0, space 0, times 0 [ 223.635385][ T8151] CPU: 0 UID: 0 PID: 8151 Comm: syz.3.805 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.635414][ T8151] Tainted: [L]=SOFTLOCKUP [ 223.635421][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 223.635432][ T8151] Call Trace: [ 223.635440][ T8151] [ 223.635448][ T8151] dump_stack_lvl+0xe8/0x150 [ 223.635481][ T8151] should_fail_ex+0x412/0x560 [ 223.635511][ T8151] should_failslab+0xa8/0x100 [ 223.635531][ T8151] ? skb_clone+0x212/0x3a0 [ 223.635554][ T8151] kmem_cache_alloc_noprof+0x87/0x650 [ 223.635580][ T8151] ? sk_filter_trim_cap+0x1e1/0xd90 [ 223.635611][ T8151] skb_clone+0x212/0x3a0 [ 223.635637][ T8151] __netlink_deliver_tap+0x404/0x850 [ 223.635667][ T8151] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.635687][ T8151] netlink_deliver_tap+0x19c/0x1b0 [ 223.635706][ T8151] netlink_dump+0x926/0xe80 [ 223.635735][ T8151] ? __pfx_netlink_dump+0x10/0x10 [ 223.635765][ T8151] ? netlink_recvmsg+0x5d6/0xa50 [ 223.635782][ T8151] ? kmem_cache_free+0x182/0x650 [ 223.635805][ T8151] netlink_recvmsg+0x690/0xa50 [ 223.635831][ T8151] ? __pfx_netlink_recvmsg+0x10/0x10 [ 223.635854][ T8151] ? __lock_acquire+0x6b5/0x2cf0 [ 223.635885][ T8151] ? __pfx_netlink_recvmsg+0x10/0x10 [ 223.635904][ T8151] sock_recvmsg_nosec+0x10c/0x140 [ 223.635933][ T8151] ____sys_recvmsg+0x3e3/0x4a0 [ 223.635970][ T8151] ? __pfx_____sys_recvmsg+0x10/0x10 [ 223.636007][ T8151] ? import_iovec+0x73/0xa0 [ 223.636037][ T8151] ___sys_recvmsg+0x215/0x590 [ 223.636064][ T8151] ? __pfx____sys_recvmsg+0x10/0x10 [ 223.636092][ T8151] ? ktime_get_ts64+0xa9/0x410 [ 223.636140][ T8151] do_recvmmsg+0x334/0x800 [ 223.636171][ T8151] ? __pfx_do_recvmmsg+0x10/0x10 [ 223.636204][ T8151] ? _copy_from_user+0x94/0xb0 [ 223.636235][ T8151] __x64_sys_recvmmsg+0x1b7/0x250 [ 223.636261][ T8151] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 223.636296][ T8151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.636316][ T8151] do_syscall_64+0x15f/0xf80 [ 223.636340][ T8151] ? trace_irq_disable+0x3b/0x140 [ 223.636361][ T8151] ? clear_bhb_loop+0x40/0x90 [ 223.636383][ T8151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.636400][ T8151] RIP: 0033:0x7fc0d199c819 [ 223.636417][ T8151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.636434][ T8151] RSP: 002b:00007fc0d283c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 223.636454][ T8151] RAX: ffffffffffffffda RBX: 00007fc0d1c15fa0 RCX: 00007fc0d199c819 [ 223.636467][ T8151] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 223.636480][ T8151] RBP: 00007fc0d283c090 R08: 0000200000003700 R09: 0000000000000000 [ 223.636492][ T8151] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 223.636503][ T8151] R13: 00007fc0d1c16038 R14: 00007fc0d1c15fa0 R15: 00007ffdd27c9fd8 [ 223.636531][ T8151] [ 224.172820][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'. [ 224.250410][ T29] audit: type=1800 audit(1776089748.502:20): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.802" name="/" dev="fuse" ino=4 res=0 errno=0 [ 224.460178][ T29] audit: type=1326 audit(1776089748.712:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770179c819 code=0x7ffc0000 [ 224.494162][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.516847][ T29] audit: type=1326 audit(1776089748.732:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f770179c819 code=0x7ffc0000 [ 224.541688][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.555245][ T29] audit: type=1326 audit(1776089748.732:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770179c819 code=0x7ffc0000 [ 224.577817][ T29] audit: type=1326 audit(1776089748.732:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770179c819 code=0x7ffc0000 [ 224.619740][ T8155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.630310][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.638702][ T8155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.646872][ T29] audit: type=1326 audit(1776089748.732:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f770179c819 code=0x7ffc0000 [ 224.670560][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.679098][ T29] audit: type=1326 audit(1776089748.732:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770179c819 code=0x7ffc0000 [ 224.701975][ T29] audit: type=1326 audit(1776089748.732:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f770179c819 code=0x7ffc0000 [ 224.728166][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 224.734939][ T29] audit: type=1326 audit(1776089748.732:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770179c819 code=0x7ffc0000 [ 224.757193][ T994] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 224.765867][ T29] audit: type=1326 audit(1776089748.742:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.0.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f770179c819 code=0x7ffc0000 [ 224.907343][ T994] usb 1-1: Using ep0 maxpacket: 32 [ 224.914560][ T994] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 224.924229][ T994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.944045][ T994] usb 1-1: config 0 descriptor?? [ 224.986975][ T5935] r8152-cfgselector 3-1: USB disconnect, device number 69 [ 225.067336][ T5936] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 225.172516][ T994] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 225.173639][ T994] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 225.173657][ T994] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 225.232888][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 225.239865][ T5936] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 225.248861][ T5936] usb 4-1: config 0 has no interface number 0 [ 225.256343][ T5936] usb 4-1: config 0 interface 184 has no altsetting 0 [ 225.280682][ T5936] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 225.308352][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.316432][ T5936] usb 4-1: Product: syz [ 225.326014][ T5936] usb 4-1: Manufacturer: syz [ 225.330961][ T5936] usb 4-1: SerialNumber: syz [ 225.350615][ T5936] usb 4-1: config 0 descriptor?? [ 225.461097][ T8171] syzkaller1: entered promiscuous mode [ 225.466769][ T8171] syzkaller1: entered allmulticast mode [ 225.587511][ T5853] Bluetooth: hci3: command 0x0c1a tx timeout [ 225.602329][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 225.779263][ T5936] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 225.812719][ T8179] tipc: Started in network mode [ 225.820902][ T8179] tipc: Node identity , cluster identity 4711 [ 225.821565][ T5936] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 225.845711][ T8179] tipc: Failed to obtain node identity [ 225.855143][ T5936] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 225.862001][ T8179] tipc: Enabling of bearer rejected, failed to enable media [ 225.873801][ T5936] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 225.889784][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 225.949270][ T5935] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 226.070068][ T8188] kvm: apic: phys broadcast and lowest prio [ 226.097410][ T5935] usb 2-1: device descriptor read/64, error -71 [ 226.229901][ T808] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 226.337354][ T5935] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 226.401278][ T808] usb 3-1: unable to get BOS descriptor or descriptor too short [ 226.410401][ T808] usb 3-1: config 1 interface 0 has no altsetting 0 [ 226.419773][ T808] usb 3-1: string descriptor 0 read error: -22 [ 226.426186][ T808] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.40 [ 226.435467][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.468974][ T5935] usb 2-1: device descriptor read/64, error -71 [ 226.587748][ T5935] usb usb2-port1: attempt power cycle [ 226.787315][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 226.864268][ T808] wacom 0003:056A:0022.000B: unknown main item tag 0x0 [ 226.871305][ T808] wacom 0003:056A:0022.000B: unknown main item tag 0x0 [ 226.878312][ T808] wacom 0003:056A:0022.000B: unknown main item tag 0x0 [ 226.886064][ T808] wacom 0003:056A:0022.000B: unknown main item tag 0x0 [ 226.893060][ T808] wacom 0003:056A:0022.000B: unknown main item tag 0x0 [ 226.899971][ T808] wacom 0003:056A:0022.000B: unknown main item tag 0x0 [ 226.906831][ T808] wacom 0003:056A:0022.000B: unknown main item tag 0x0 [ 226.913765][ T808] wacom 0003:056A:0022.000B: unknown main item tag 0x0 [ 226.920712][ T808] wacom 0003:056A:0022.000B: unknown main item tag 0x0 [ 226.927561][ T5935] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 226.935223][ T808] wacom 0003:056A:0022.000B: unknown main item tag 0x0 [ 226.949326][ T5935] usb 2-1: device descriptor read/8, error -71 [ 227.054935][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.064071][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.075527][ T808] usb 3-1: USB disconnect, device number 70 [ 227.184764][ T8200] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 227.192483][ T5935] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 227.217961][ T5935] usb 2-1: device descriptor read/8, error -71 [ 227.329976][ T5935] usb usb2-port1: unable to enumerate USB device [ 227.478608][ T8204] infiniband syz2: set down [ 227.484068][ T8204] infiniband syz2: added ipvlan0 [ 227.512458][ T8204] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 227.533131][ T8204] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 227.550425][ T8204] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 227.584103][ T8204] RDS/IB: syz2: added [ 227.588692][ T8204] smc: adding ib device syz2 with port count 1 [ 227.596236][ T8204] smc: ib device syz2 port 1 has no pnetid [ 227.874321][ T9] usb 4-1: USB disconnect, device number 57 [ 227.891714][ T8213] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.192941][ T8222] binder: 8221:8222 ioctl c0306201 0 returned -14 [ 228.203743][ T8224] binder: 8223:8224 ioctl 4018620d 0 returned -22 [ 228.270845][ T8222] netlink: 'syz.2.833': attribute type 2 has an invalid length. [ 228.297518][ T8222] netlink: 'syz.2.833': attribute type 2 has an invalid length. [ 228.306328][ T9] IPVS: starting estimator thread 0... [ 228.313832][ T8222] netlink: 'syz.2.833': attribute type 2 has an invalid length. [ 228.337438][ T8222] netlink: 44 bytes leftover after parsing attributes in process `syz.2.833'. [ 228.407510][ T8229] IPVS: using max 27 ests per chain, 64800 per kthread [ 228.867476][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 228.877353][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 228.984603][ T8244] netlink: 72 bytes leftover after parsing attributes in process `syz.1.841'. [ 229.038683][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 229.047026][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 229.073535][ T9] usb 3-1: config 0 has no interface number 0 [ 229.089981][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 229.108863][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 229.118447][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.842'. [ 229.134385][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.152083][ T9] usb 3-1: Product: syz [ 229.161846][ T9] usb 3-1: Manufacturer: syz [ 229.171014][ T9] usb 3-1: SerialNumber: syz [ 229.195661][ T9] usb 3-1: config 0 descriptor?? [ 229.427473][ T5936] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 229.577306][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 229.584173][ T5936] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.594096][ T5936] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 229.603978][ T5936] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.618242][ T5936] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 229.627712][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 229.638749][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.647186][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 229.657036][ T5936] usb 4-1: Product: syz [ 229.661324][ T5936] usb 4-1: Manufacturer: syz [ 229.665959][ T5936] usb 4-1: SerialNumber: syz [ 229.670873][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 229.686088][ T5936] usb 4-1: config 0 descriptor?? [ 229.691212][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 230.097304][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 230.097322][ T29] audit: type=1800 audit(1776089754.342:56): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.845" name="/" dev="fuse" ino=4 res=0 errno=0 [ 230.106881][ T5936] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 230.241801][ T8259] netlink: 'syz.1.847': attribute type 23 has an invalid length. [ 230.250776][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 230.336931][ T5936] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 230.346180][ T5936] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 230.527329][ T5935] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 230.548336][ T5936] usb 4-1: USB disconnect, device number 58 [ 230.687418][ T5935] usb 2-1: device descriptor read/64, error -71 [ 230.927368][ T5935] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 230.947335][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 231.058684][ T5935] usb 2-1: device descriptor read/64, error -71 [ 231.168289][ T5935] usb usb2-port1: attempt power cycle [ 231.507475][ T5935] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 231.528608][ T5935] usb 2-1: device descriptor read/8, error -71 [ 231.654475][ T9] usb 3-1: USB disconnect, device number 71 [ 231.719076][ T8285] syzkaller1: entered promiscuous mode [ 231.724789][ T8285] syzkaller1: entered allmulticast mode [ 231.767552][ T5935] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 231.788293][ T5935] usb 2-1: device descriptor read/8, error -71 [ 231.901252][ T5935] usb usb2-port1: unable to enumerate USB device [ 232.056018][ T8291] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 232.065833][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 232.632684][ T8299] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 232.935674][ T8295] Set syz1 is full, maxelem 65536 reached [ 232.949807][ T5935] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 233.027974][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 233.117437][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 233.124293][ T5935] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 233.132884][ T5935] usb 4-1: config 0 has no interface number 0 [ 233.139295][ T5935] usb 4-1: config 0 interface 184 has no altsetting 0 [ 233.148896][ T5935] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 233.158165][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.166179][ T5935] usb 4-1: Product: syz [ 233.170408][ T5935] usb 4-1: Manufacturer: syz [ 233.175023][ T5935] usb 4-1: SerialNumber: syz [ 233.182669][ T5935] usb 4-1: config 0 descriptor?? [ 233.327408][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 233.460428][ T8309] overlayfs: missing 'lowerdir' [ 233.487402][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 233.499605][ T9] usb 3-1: config 4 has an invalid interface number: 21 but max is 3 [ 233.517324][ T9] usb 3-1: config 4 has an invalid interface number: 196 but max is 3 [ 233.529585][ T9] usb 3-1: config 4 has an invalid interface number: 223 but max is 3 [ 233.550310][ T9] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 233.559127][ T9] usb 3-1: config 4 has an invalid descriptor of length 29, skipping remainder of the config [ 233.569485][ T9] usb 3-1: config 4 has 3 interfaces, different from the descriptor's value: 4 [ 233.578619][ T9] usb 3-1: config 4 has no interface number 0 [ 233.584788][ T9] usb 3-1: config 4 has no interface number 1 [ 233.591328][ T9] usb 3-1: config 4 has no interface number 2 [ 233.599612][ T8312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.601783][ T5935] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 233.612843][ T8312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.621714][ T9] usb 3-1: config 4 interface 21 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 233.640428][ T5935] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 233.650752][ T9] usb 3-1: config 4 interface 21 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 233.662801][ T5935] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 233.674468][ T9] usb 3-1: config 4 interface 21 altsetting 14 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 233.686824][ T5935] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 233.696867][ T9] usb 3-1: config 4 interface 21 altsetting 14 endpoint 0x87 has invalid maxpacket 1023, setting to 64 [ 233.709569][ T9] usb 3-1: config 4 interface 21 altsetting 14 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 233.721511][ T9] usb 3-1: config 4 interface 21 altsetting 14 endpoint 0x5 has invalid maxpacket 903, setting to 64 [ 233.732624][ T9] usb 3-1: config 4 interface 21 altsetting 14 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 233.744523][ T9] usb 3-1: config 4 interface 21 altsetting 14 has a duplicate endpoint with address 0x5, skipping [ 233.761594][ T9] usb 3-1: config 4 interface 21 altsetting 14 has 8 endpoint descriptors, different from the interface descriptor's value: 16 [ 233.775581][ T9] usb 3-1: too many endpoints for config 4 interface 196 altsetting 172: 82, using maximum allowed: 30 [ 233.787624][ T9] usb 3-1: config 4 interface 196 altsetting 172 has a duplicate endpoint with address 0xA, skipping [ 233.798649][ T9] usb 3-1: config 4 interface 196 altsetting 172 has an endpoint descriptor with address 0x5B, changing to 0xB [ 233.810598][ T9] usb 3-1: config 4 interface 196 altsetting 172 endpoint 0xB has invalid maxpacket 45731, setting to 1024 [ 233.822325][ T9] usb 3-1: config 4 interface 196 altsetting 172 bulk endpoint 0xB has invalid maxpacket 1024 [ 233.834967][ T9] usb 3-1: config 4 interface 196 altsetting 172 endpoint 0xC has invalid maxpacket 991, setting to 64 [ 233.846874][ T9] usb 3-1: config 4 interface 196 altsetting 172 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 233.858199][ T5911] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 233.871498][ T9] usb 3-1: config 4 interface 196 altsetting 172 has a duplicate endpoint with address 0x7, skipping [ 233.892697][ T9] usb 3-1: config 4 interface 196 altsetting 172 bulk endpoint 0xD has invalid maxpacket 8 [ 233.903580][ T9] usb 3-1: config 4 interface 196 altsetting 172 has 9 endpoint descriptors, different from the interface descriptor's value: 82 [ 233.917122][ T9] usb 3-1: config 4 interface 223 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 233.928253][ T9] usb 3-1: config 4 interface 223 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 233.942433][ T9] usb 3-1: config 4 interface 21 has no altsetting 0 [ 233.955497][ T9] usb 3-1: config 4 interface 196 has no altsetting 0 [ 233.962388][ T9] usb 3-1: config 4 interface 223 has no altsetting 0 [ 233.972610][ T9] usb 3-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=11.15 [ 233.996208][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.004481][ T9] usb 3-1: Product: syz [ 234.009014][ T9] usb 3-1: Manufacturer: 㠁 [ 234.013702][ T9] usb 3-1: SerialNumber: syz [ 234.023550][ T8305] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 234.027864][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 234.039694][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.050537][ T5911] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.060480][ T5911] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.073665][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.083509][ T5911] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 234.092868][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.101185][ T5911] usb 2-1: Product: syz [ 234.105537][ T5911] usb 2-1: Manufacturer: syz [ 234.110287][ T5911] usb 2-1: SerialNumber: syz [ 234.119226][ T5911] usb 2-1: config 0 descriptor?? [ 234.130622][ T5911] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 234.294419][ T9] usb 3-1: USB disconnect, device number 72 [ 234.326466][ T5911] snd_usb_toneport 2-1:0.0: set_interface failed [ 234.335987][ T5911] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 234.351897][ T5911] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 234.376286][ T5911] usb 2-1: USB disconnect, device number 57 [ 235.056146][ T8352] comedi comedi4: bad chanlist[0]=0x0000009c chan=156 range length=2 [ 235.116950][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 235.362244][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.887'. [ 235.537360][ T808] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 235.697368][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 235.705860][ T808] usb 3-1: config 4 has an invalid interface number: 21 but max is 3 [ 235.716392][ T808] usb 3-1: config 4 has an invalid interface number: 196 but max is 3 [ 235.725019][ T808] usb 3-1: config 4 has an invalid interface number: 223 but max is 3 [ 235.734077][ T808] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 235.743235][ T808] usb 3-1: config 4 has an invalid descriptor of length 29, skipping remainder of the config [ 235.753966][ T808] usb 3-1: config 4 has 3 interfaces, different from the descriptor's value: 4 [ 235.763457][ T808] usb 3-1: config 4 has no interface number 0 [ 235.770051][ T808] usb 3-1: config 4 has no interface number 1 [ 235.774912][ T9] usb 4-1: USB disconnect, device number 59 [ 235.776369][ T808] usb 3-1: config 4 has no interface number 2 [ 235.801232][ T808] usb 3-1: config 4 interface 21 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 235.833185][ T808] usb 3-1: config 4 interface 21 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 235.857862][ T808] usb 3-1: config 4 interface 21 altsetting 14 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 235.887334][ T808] usb 3-1: config 4 interface 21 altsetting 14 endpoint 0x87 has invalid maxpacket 1023, setting to 64 [ 235.899892][ T808] usb 3-1: config 4 interface 21 altsetting 14 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 235.916780][ T808] usb 3-1: config 4 interface 21 altsetting 14 endpoint 0x5 has invalid maxpacket 903, setting to 64 [ 235.930037][ T808] usb 3-1: config 4 interface 21 altsetting 14 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 235.941744][ T808] usb 3-1: config 4 interface 21 altsetting 14 has a duplicate endpoint with address 0x5, skipping [ 235.959516][ T808] usb 3-1: config 4 interface 21 altsetting 14 has 8 endpoint descriptors, different from the interface descriptor's value: 16 [ 235.977328][ T808] usb 3-1: too many endpoints for config 4 interface 196 altsetting 172: 82, using maximum allowed: 30 [ 235.989891][ T808] usb 3-1: config 4 interface 196 altsetting 172 has a duplicate endpoint with address 0xA, skipping [ 236.002276][ T808] usb 3-1: config 4 interface 196 altsetting 172 has an endpoint descriptor with address 0x5B, changing to 0xB [ 236.014514][ T808] usb 3-1: config 4 interface 196 altsetting 172 endpoint 0xB has invalid maxpacket 45731, setting to 1024 [ 236.028615][ T808] usb 3-1: config 4 interface 196 altsetting 172 bulk endpoint 0xB has invalid maxpacket 1024 [ 236.041207][ T808] usb 3-1: config 4 interface 196 altsetting 172 endpoint 0xC has invalid maxpacket 991, setting to 64 [ 236.052714][ T808] usb 3-1: config 4 interface 196 altsetting 172 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 236.064584][ T808] usb 3-1: config 4 interface 196 altsetting 172 has a duplicate endpoint with address 0x7, skipping [ 236.075898][ T808] usb 3-1: config 4 interface 196 altsetting 172 bulk endpoint 0xD has invalid maxpacket 8 [ 236.086278][ T808] usb 3-1: config 4 interface 196 altsetting 172 has 9 endpoint descriptors, different from the interface descriptor's value: 82 [ 236.101104][ T808] usb 3-1: config 4 interface 223 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 236.112230][ T808] usb 3-1: config 4 interface 223 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 236.125967][ T808] usb 3-1: config 4 interface 21 has no altsetting 0 [ 236.133513][ T808] usb 3-1: config 4 interface 196 has no altsetting 0 [ 236.155711][ T808] usb 3-1: config 4 interface 223 has no altsetting 0 [ 236.169488][ T808] usb 3-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=11.15 [ 236.187303][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.187553][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 236.195625][ T808] usb 3-1: Product: syz [ 236.210786][ T808] usb 3-1: Manufacturer: 㠁 [ 236.217306][ T808] usb 3-1: SerialNumber: syz [ 236.232414][ T8361] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 236.364201][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 236.373634][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.390803][ T9] usb 4-1: config 0 descriptor?? [ 236.505927][ T808] usb 3-1: USB disconnect, device number 73 [ 236.603050][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 236.809186][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 236.886508][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 236.900785][ T9] [drm] Initialized udl on minor 2 [ 236.912873][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 236.945413][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 236.967087][ T9] usb 4-1: USB disconnect, device number 60 [ 236.974359][ T5911] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 236.982602][ T5935] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 236.993230][ T5911] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 237.086767][ T8389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.100283][ T8389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.149776][ T5935] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.160991][ T5935] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 237.171705][ T5935] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.180888][ T5935] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.193801][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 237.201062][ T5935] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 237.212524][ T5935] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 237.227080][ T5935] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 237.237084][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 237.246410][ T5935] usb 2-1: Product: syz [ 237.250923][ T5935] usb 2-1: Manufacturer: syz [ 237.259487][ T8387] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 237.269882][ T5935] cdc_wdm 2-1:1.0: skipping garbage [ 237.275162][ T5935] cdc_wdm 2-1:1.0: skipping garbage [ 237.285115][ T5935] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 237.291499][ T5935] cdc_wdm 2-1:1.0: Unknown control protocol [ 237.327335][ T5911] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 237.471571][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 237.478246][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 237.484583][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 237.491224][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 237.497593][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 237.504237][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 237.510467][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 237.510585][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 237.510604][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 237.515857][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 237.515881][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 237.522647][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 237.522668][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 237.528889][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 237.528915][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 237.535647][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 237.535670][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 237.542325][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 237.542347][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 237.549094][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 237.549119][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 237.609706][ T5856] usb 2-1: USB disconnect, device number 58 [ 237.611541][ T5911] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 237.629584][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.643664][ T5911] usb 3-1: config 0 descriptor?? [ 237.658511][ T808] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 237.830385][ T808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 237.842452][ T808] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 237.852107][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.856172][ T5911] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 237.861181][ T808] usb 4-1: Product: syz [ 237.871410][ T808] usb 4-1: Manufacturer: syz [ 237.876070][ T808] usb 4-1: SerialNumber: syz [ 237.881839][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.892302][ T5911] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 237.899763][ T5911] usb 3-1: media controller created [ 237.931378][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.109726][ T8392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.118946][ T8392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.274213][ T8399] netlink: 'syz.0.898': attribute type 10 has an invalid length. [ 238.289023][ T8399] netlink: 55 bytes leftover after parsing attributes in process `syz.0.898'. [ 238.417432][ T8403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.431986][ T8403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.528665][ T12] smc: removing ib device syz2 [ 238.635653][ T5911] az6027: usb out operation failed. (-71) [ 238.650879][ T5911] stb0899_attach: Driver disabled by Kconfig [ 238.670609][ T8410] netlink: 'syz.1.899': attribute type 28 has an invalid length. [ 238.674769][ T5911] az6027: no front-end attached [ 238.674769][ T5911] [ 238.690261][ T5911] az6027: usb out operation failed. (-71) [ 238.698625][ T5911] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 238.715015][ T5911] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 238.739157][ T5911] dvb-usb: schedule remote query interval to 400 msecs. [ 238.752027][ T12] smbdirect: ib_dev[syz2] removed [ 238.757480][ T5911] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 238.793606][ T5911] usb 3-1: USB disconnect, device number 74 [ 238.919899][ T5911] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 239.150200][ T8415] netlink: 'syz.2.900': attribute type 10 has an invalid length. [ 239.268451][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 239.569739][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 239.938612][ T5942] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 240.100174][ T5942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.110706][ T5942] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 240.120441][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.205578][ T5942] usb 3-1: config 0 descriptor?? [ 240.222061][ T5942] pwc: Askey VC010 type 2 USB webcam detected. [ 240.366342][ T12] ================================================================== [ 240.374464][ T12] BUG: KASAN: invalid-free in gid_table_release_one+0x384/0x470 [ 240.382114][ T12] Free of addr ffff88807c4980d8 by task kworker/u8:0/12 [ 240.389066][ T12] [ 240.391410][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.391433][ T12] Tainted: [L]=SOFTLOCKUP [ 240.391439][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 240.391451][ T12] Workqueue: ib-unreg-wq ib_unregister_work [ 240.391475][ T12] Call Trace: [ 240.391482][ T12] [ 240.391489][ T12] dump_stack_lvl+0xe8/0x150 [ 240.391517][ T12] print_address_description+0x55/0x1e0 [ 240.391544][ T12] print_report+0x58/0x70 [ 240.391565][ T12] ? gid_table_release_one+0x384/0x470 [ 240.391581][ T12] kasan_report_invalid_free+0xea/0x110 [ 240.391599][ T12] ? gid_table_release_one+0x384/0x470 [ 240.391620][ T12] free_large_kmalloc+0x3c/0x110 [ 240.391637][ T12] gid_table_release_one+0x384/0x470 [ 240.391664][ T12] ib_device_release+0xd2/0x1c0 [ 240.391691][ T12] ? __pfx_ib_device_release+0x10/0x10 [ 240.391714][ T12] device_release+0xc4/0x1f0 [ 240.391731][ T12] kobject_put+0x228/0x560 [ 240.391756][ T12] ? process_scheduled_works+0xa70/0x1860 [ 240.391781][ T12] process_scheduled_works+0xb5d/0x1860 [ 240.391820][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 240.391846][ T12] ? assign_work+0x3d5/0x5e0 [ 240.391869][ T12] worker_thread+0xa53/0xfc0 [ 240.391902][ T12] kthread+0x388/0x470 [ 240.391930][ T12] ? __pfx_worker_thread+0x10/0x10 [ 240.391954][ T12] ? __pfx_kthread+0x10/0x10 [ 240.391972][ T12] ret_from_fork+0x514/0xb70 [ 240.391993][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 240.392014][ T12] ? __switch_to+0xc79/0x1410 [ 240.392032][ T12] ? __pfx_kthread+0x10/0x10 [ 240.392066][ T12] ret_from_fork_asm+0x1a/0x30 [ 240.392086][ T12] [ 240.392092][ T12] [ 240.559160][ T12] The buggy address belongs to the physical page: [ 240.565593][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c49ad80 pfn:0x7c498 [ 240.575672][ T12] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 240.584176][ T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 240.591758][ T12] page_type: f8(unknown) [ 240.596015][ T12] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 240.604618][ T12] raw: ffff88807c49ad80 0000000000000000 00000000f8000000 0000000000000000 [ 240.613225][ T12] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 240.621910][ T12] head: ffff88807c49ad80 0000000000000000 00000000f8000000 0000000000000000 [ 240.630606][ T12] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 240.639301][ T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 240.647983][ T12] page dumped because: kasan: bad access detected [ 240.654411][ T12] page_owner tracks the page as allocated [ 240.660130][ T12] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 8204, tgid 8203 (syz.0.826), ts 227315162358, free_ts 227312114908 [ 240.677950][ T12] post_alloc_hook+0x231/0x280 [ 240.682749][ T12] get_page_from_freelist+0x24ba/0x2540 [ 240.688310][ T12] __alloc_frozen_pages_noprof+0x18d/0x380 [ 240.694130][ T12] alloc_pages_mpol+0x235/0x490 [ 240.698990][ T12] ___kmalloc_large_node+0x4e/0x120 [ 240.704217][ T12] __kmalloc_large_node_noprof+0x18/0x90 [ 240.709867][ T12] __kmalloc_noprof+0x3e8/0x760 [ 240.714744][ T12] ib_cache_setup_one+0x198/0x570 [ 240.719780][ T12] ib_register_device+0xfbd/0x13e0 [ 240.724915][ T12] rxe_register_device+0x1e3/0x350 [ 240.730038][ T12] rxe_net_add+0x81/0x110 [ 240.734387][ T12] rxe_newlink+0xf4/0x1c0 [ 240.738730][ T12] nldev_newlink+0x5bc/0x650 [ 240.743350][ T12] rdma_nl_rcv+0x6d1/0xa10 [ 240.747784][ T12] netlink_unicast+0x80f/0x9b0 [ 240.752579][ T12] netlink_sendmsg+0x813/0xb40 [ 240.757372][ T12] page last free pid 8204 tgid 8203 stack trace: [ 240.763707][ T12] __free_frozen_pages+0xbc7/0xd30 [ 240.768837][ T12] stack_depot_save_flags+0x40e/0x810 [ 240.774229][ T12] kasan_save_track+0x4f/0x80 [ 240.778926][ T12] __kasan_slab_alloc+0x6c/0x80 [ 240.783795][ T12] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 240.789627][ T12] sock_alloc_inode+0x2c/0x190 [ 240.794415][ T12] alloc_inode+0x6a/0x1b0 [ 240.798763][ T12] __sock_create+0x12d/0x9d0 [ 240.803382][ T12] udp_sock_create4+0xca/0x480 [ 240.808169][ T12] rxe_setup_udp_tunnel+0x151/0x790 [ 240.813385][ T12] rxe_net_init+0xaf/0x330 [ 240.817814][ T12] rxe_newlink+0xd3/0x1c0 [ 240.822155][ T12] nldev_newlink+0x5bc/0x650 [ 240.826752][ T12] rdma_nl_rcv+0x6d1/0xa10 [ 240.831192][ T12] netlink_unicast+0x80f/0x9b0 [ 240.835983][ T12] netlink_sendmsg+0x813/0xb40 [ 240.840769][ T12] [ 240.843104][ T12] Memory state around the buggy address: [ 240.848743][ T12] ffff88807c497f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 240.856820][ T12] ffff88807c498000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 240.864895][ T12] >ffff88807c498080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 240.872973][ T12] ^ [ 240.879917][ T12] ffff88807c498100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 240.887985][ T12] ffff88807c498180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 240.896059][ T12] ================================================================== [ 240.924861][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 240.932120][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.943009][ T12] Tainted: [L]=SOFTLOCKUP [ 240.947360][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 240.957456][ T12] Workqueue: ib-unreg-wq ib_unregister_work [ 240.963406][ T12] Call Trace: [ 240.966714][ T12] [ 240.969670][ T12] vpanic+0x56c/0xa60 [ 240.973688][ T12] ? __pfx_vpanic+0x10/0x10 [ 240.978216][ T12] ? __pfx___schedule+0x10/0x10 [ 240.983099][ T12] panic+0xc5/0xd0 [ 240.986854][ T12] ? __pfx_panic+0x10/0x10 [ 240.991303][ T12] ? preempt_schedule_common+0x82/0xd0 [ 240.996809][ T12] check_panic_on_warn+0x89/0xb0 [ 241.001788][ T12] end_report+0x73/0x170 [ 241.006065][ T12] ? gid_table_release_one+0x384/0x470 [ 241.011571][ T12] kasan_report_invalid_free+0xfa/0x110 [ 241.017172][ T12] ? gid_table_release_one+0x384/0x470 [ 241.022668][ T12] free_large_kmalloc+0x3c/0x110 [ 241.027639][ T12] gid_table_release_one+0x384/0x470 [ 241.032970][ T12] ib_device_release+0xd2/0x1c0 [ 241.037867][ T12] ? __pfx_ib_device_release+0x10/0x10 [ 241.043396][ T12] device_release+0xc4/0x1f0 [ 241.048034][ T12] kobject_put+0x228/0x560 [ 241.052495][ T12] ? process_scheduled_works+0xa70/0x1860 [ 241.058253][ T12] process_scheduled_works+0xb5d/0x1860 [ 241.063851][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 241.069896][ T12] ? assign_work+0x3d5/0x5e0 [ 241.074544][ T12] worker_thread+0xa53/0xfc0 [ 241.079205][ T12] kthread+0x388/0x470 [ 241.083330][ T12] ? __pfx_worker_thread+0x10/0x10 [ 241.088492][ T12] ? __pfx_kthread+0x10/0x10 [ 241.093122][ T12] ret_from_fork+0x514/0xb70 [ 241.097748][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 241.102912][ T12] ? __switch_to+0xc79/0x1410 [ 241.107622][ T12] ? __pfx_kthread+0x10/0x10 [ 241.112243][ T12] ret_from_fork_asm+0x1a/0x30 [ 241.117048][ T12] [ 241.120691][ T12] Kernel Offset: disabled [ 241.125031][ T12] Rebooting in 86400 seconds..