last executing test programs: 21.360518604s ago: executing program 1 (id=305): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 21.223907925s ago: executing program 1 (id=306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%+C\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x9fs\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x2400c004) 21.135815176s ago: executing program 1 (id=307): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x7c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}, @CTA_EXPECT_NAT={0x8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xa, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x9, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$nfs4(&(0x7f0000000280)='/dev/iommu\x00', &(0x7f00000002c0)='./file2\x00', 0x0, 0x2084, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r4, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x80010, r0, 0xb3571000) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 19.999539322s ago: executing program 1 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000240)='.\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000600)=@arm64={0x6, 0x3, 0xa, '\x00', 0x4}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000301852c082505a3a497fd0102030109021b000102070006090408fa01a641a8ed090503010002011dfa"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000100)=@usbdevfs_connect={0x4}) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x8, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x82) fchdir(r3) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000000)=',)\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x679d8465409ab43a) read$FUSE(r3, &(0x7f0000000c40)={0x2020}, 0x2020) r4 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x400, 0x3, 0x222}, &(0x7f0000000280)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, r4, 0x0, 0x0, 0x8, 0x2, 0x1}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f000000b0c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000180)={0x50, 0x0, r9, {0x7, 0x9, 0xfffffffd, 0x110002, 0x10, 0x3, 0x3, 0xfffffffd, 0x0, 0x0, 0x80, 0x40}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x4, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r8, &(0x7f0000009080)={0x2020, 0x0, 0x0, 0x0}, 0xfffffdca) write$FUSE_INTERRUPT(r8, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r11}, 0x10) syz_fuse_handle_req(r8, &(0x7f0000002380)="d37f438c8ff0a793bb0fd85e80a3add0f8f65f17e46f60227e8b09439e47ae441d91f7c50d52383be1a08cfa58969071ef9251774b2aa82db4b537beb0834e94c9f625097a9fd8ae5d86ccc28ae9a5fbf7a931329d6c0aa28650849abea29afd035f5eb12f8126d5b8c277c8c14f25965396c229226cf8b0c6da769454f1981c1b0a8180b80469005a03d24fee1d6f5543a43d7156a0da6f40f6e4344cdfe5f96f373459fabd8c1fb029f3cbb965f11e04c92468dc54884926996135312816573b5f052907705fb31ed724a8097b4eb9a547bd0a4f9c66421393b19fe59fbc07bc8c6319225509823784428ca5f20741130774b9090811966d1de850ef61c965ba07e2fe52380c4bee79f58db0931b3d0c06cfac96c9e8676eb0e10ddcecb47f17e8c4ea80d3f67a9e04f5edae06ec33863b9fb5edf40c87fbdc5a00936d260eb32c3df5a905d3041a54d0fade7b220027169911111af6142645e771ce84efdff5ef5f3fe5b1efdb67ba83dd9f94008f787ecee2ec9849c34a8699900b3151e799fb1704100f2075cf313f719efba77efdfdf5e37379232785af24729608cf1099a9eeb643813fe492fbd86788f43e231fe0a6f3f0bf302efeaffa32890b1e48818959d7d2aabb83f062e356a81605f55da96df097b11471c46947910bb3e5e40a5a5c92077231d68efaec50b848907d1e37e18d885f5bd95d939ade1852a5e2f516781e1868f0894c8c0872c84d9c80fcfe085ac88e2a8caf63b3444f6d5f63c4582e766f1fb06a204d7b8c266e29bb43e04f42dc241b0f6926ea4b0340f0b3ac232d92677f2ec099b17361d988b72311e5e93d6d93ca3bb711c5fb979684f67f6ba32901b8adb223fea467157c55e8d5540743af46d36e6670fe21254ed91e207044db3424d42a63d780f2269ca3417aeb73632fb93dd42b07eff0f5ed90707423066f834c2881ae5272af5b3c04c6b9cadb8b234d24c5341696960a23f242837d91d6751695e9f07577bb81aea171df43b27c44ca5b815e66f63848403320ffdf2926f500b16e7496b835ae7a09288847cbb232e2e271cd732e38309d41ffb55391dc4a157e0c02505f54430a70a9ac197f5573a0b11722aec13a9adea4d8e0022810ca28414964d40cbcbf9d2704aa82637e13d561c4fed2ed602be375e547a7fa7198e6a75293abb3903d0b8204ba21dd369a79159cdd810162c2a2ee722bf4e43b7679dfb8b4ac9e768fb3d391fc4f1839f2e91f1c62050b8154cafb6dd19a3f8716a5c072725c5dad281281605ac02632d041accf07bed8135f4cab566db7e01c6902be5728fb01cd6b17edb8870e3417897a604ec795c440334b1bf9b6180ac13d13298b80b8f4352b0bb36ac151607d6ebedae06f8a0582ecd3963a6df647c38c64402ab29ed79533efbe311df5c29d9f1928371e99094f3e7d8aa3d277fe0e3471c6746ca5dab72d6ec161e05b46829c7b437cbbfd82e8600e53f23205f051002e23a17906056a50a0d402814df2bfc1de9906b2ab651770a482315e06146af144acf0beea22a5a9bc61931d293483d0f3bf04e62e89cce3e3ee781b3340f59f8a026228e6f3cab05f23ea71334eadcaa1068f1b67f1eee3ee1698e92bc68759a3534069de9132ef7d853f4e20dc1cac32b42a995da861ee19c52e8387528db1ff0245807a1fb19c1670bc3c56f44db0333d7568eef79964f00d6d242a3735cf372c844d6cfcd9bd8934f14dbd5cb907108190fb7ed919840429d4da052d95a242e93db7f07c2c1f8f141026e15a767cc9386b31a18ecc82c4603354236446e9c79ad6899049648b4244446dad02225c5837fb8b033ce4db1fb044df7131bc99316434f232b8049701d33235e581341c5bb08208703e4daa83c0d4e1ab73e8c0724d0e9d6be114927acd0b792ab9464dd3b67963ed235243ebbc16e6af057e984fffc2554582cdd6548d9a929a89b39650a12511ea208ea9553703ec994318d50cea6a632724b08b0af3c11a4ca9d95dba675112563fbd166463cde649917402548547d54cede66d711d805060beed06c79be0c682dde2548a899bb121926ac690ecf1220764874c37810abc3c64291fef538f8959ed50a4b9f6058b8c45735fc783f3ec592c022b066583950037fed74e12f0fc8f04db78cae682c706fdc3783a206167336ff9e4707ce741893beec04916626c4ed07db0a73bfa5d786e3f3585e4b7b37f3968f08f8971963fefa07b7311d4bef7b5a5d72d3c40297da80d995d866220e005713d69b5dec9a4481301e9aa6ba8a6bb1f911c1d9f827838edb81348231f3da450c1044c9c722d31a1fadccbbac0d82de32f2a46c0a083ec89e2baf21b2b1655702e7d58b950df5904f76f129d15c93f95550e3b52c72eb79a1e09aa253c35fce97977f881f61acc6268c2596b755f18d1c95be938b390565d780929c4c6ba4c8d417775facfffce5c0bcc1f075913f5477563d06b3583c3bdcc7330bd6d1a8bdcce29f8452668a9f2a613f21d5195ba1a1bf134e80be88ee8fdd994936b1b40a0f2e98723d8bc53aef7b5af884f5fccd3eaf2dda01278be0b26eccd63cf68278e06e59889b8b9327550b615df368d99bd6d19636477c4d592e365b0c8c43a23d434ec3d622184f325d6d1c8b704aeac87359d9c09012deb32db9bc034fbf10b4662d6618b4d849a9546f00ed3265c22807072482b0ea4eacad35e10bded78ddc4e4025c7ba521b709e4923cfa8b6964fff4ef513965c4c71a77447daf08f7ddd10f2319b57c8075046ed4820e135f883fd4358edf30fc9965b16885aeb0f82cef2556f67bd33c44edad1a2e3bafe648f5e3797a62931218a468f637832f7ec481526824ebb8de5c207733c54313add8a24131f6de8eb8ddab462b5ac7693f7b278b38728449c9d595af99ba5b1548fd942b7b8538456a261a3ee3a7d18fb3e6180b6cfc9adc76a1defa797b57bcbcb9cb47fdeb2316fd2d913dd4aa0239638fc5c3d29df965aec2ade1f556ad58c9159c9f1b6e05691f476c5ff73230eb74a891f7b285de923d1cab7cf1fe2c82cc6ebcee9dd0be04bbc4d01b2ba8c2525fc4120ffae3df6bfe44663ee532ceb5a21db4f2204386f84e2f51666af55cda90dba169a9cd1adeadd7c90322af2656c3166fee2dc39b2db56e2e18b6f7a24bb7b0494320d2000d629e93427d224587dedb5c196b1796fec0c526a8a0355951045677733b33cb42ec170f137b934c4c6e141a8f8ebbeb1970797a29225901780f96521939b2edf85b1a456e9f97d02782104583757126159f264d9ed95e801561d63f0ca075543813c732e75deb01e585fb5b7bdbd7311d9f346e512b36e972489988f53f42118bbfefd3a52ff1fb97f47eaab7f8baa8e1f397bf877588c1c898690885273e47c1bdce3f220f80828fb7489283d5529756514842974a55cd95aa5a75a18627897836311486300bde4fec1c312c735e5ba3419028cbeeaef709d97752a12f83650aec7305232f22f90b8718113f06b3cf48cae0b365c456aa17610a78454fb81020c84ab51e27891dfe6e3820bb8c4ce0a5f72c72f2523b10be64a3c05f76e7bcb7b6c9aab9e49bc0c2b6044b66c475988f0a078f53912a9c442a40243da943376c8f75e74eac306c61004f6a88a818e3e992c0ccadf44e48c95472359c79f04462598dd467cc140e665e57b9b98702096750b82f291ee11b80a9064dc4a0c790107ac0aca2166e4a964aeadab9ec1ed1ca686b36ff00f75a3a131c09e3297d0471b689475941d09e09c62d94840a6083b1e8d80c22c9e10f3575cf53fe80702e0ef82f43bb13a1128a4f76a1728da93d86a5c86fe831334442deb1e003c96cc40a65ee721e219c06c01e75176d1035ec855258d3fc565f0d6eb31910c3c4e4450c65755ca563f0d877861df816160dbccce49865e0c6e9dc7cc281481b9f6bb8dee95d6a572421f1b2dc1995e0a3fde00ae6073015ae4176519e586ef434df534667d30ab103b7815f5a992e51004471ecdbbd8d9d464e7c24124a928b5aa925458825024ad03ad526a5b08ba1b30fef04288035749c266612bdd5caf4ed5245f67f5fccaabc6b2d8994c395dc7f8ce00089f4eacefb18e65a2d9d04136cd9172ce5aedad596d11fdd4b599f7f544f92a398042821b7c1e6ffdf053a35f95f9997791bbf6a0ecbc69531d14b2fd6b18dce4267816ef2fc135b24d76be1b59e35fd76796e9fd92dcb38c08968d9be724eb8a22575e7a7e2649f2a27fb3fac57f6aa53917ae27cd8efc4b6469de6155c3b9654a70ca7fa318682d1fbbf7e3e9f85f3fdf91f96eba538c899f3aebb79fa0ff96f122859061c2aca2a2fbac5640807cc7dec2a5f37a84cfe69af9775a703281d271a38ce08adcfe26ad3df7d0a1065393791dcb526634ceb5c33061fd83b4e1c72fa175585e0f839c9651002896fc7a6ced33919105de91d17083c8f6985e24ffd0fb35dd558af58cab9003e1fb7f87075704396ff677ae7a99725ac2c50c3a9edb15cce24de9a734f81f5187099b2ec316c6cf536c628445799bfc13803c6e94fa844de4b294b6f9b7f96ecf666c1088eee0997dc3d925e45fe9157ff86699e68ad786e973468de54ca6c9156c2e30541e97fb7b845ec2acdbfab05a03009de8260b444c48c0e64940a441d56446b33c698631f480dbcd6f8726e4c287c262bbb6de251c930e717797af777283e0575e8e1304af50cdc493f429dcbfa518e592550e980bf4516ff177a725c59ed0f8d9384bf9bbfe024560062eaf58bc6dd4ad29d71a39f02e00f6ca44ea68b9019387add513c767693d5535e46b3ff697aaeaeffe8e85b86ae877586fd706fbdcc492208c1b61556b80af1f80b018391a4d409030d89e57c8c8c323c23805551954bcfeffb2c08f9043f24db22a9285f9edb6c66e1091b9dd8e51a228dac137df945491c53014a79b3e033305b1678d7664afc79bd04b0c397c0fb4a12fe3116b24e4d42830e3fb611b337f449c1e0e9667b09690b37789e45cc3007f4a56539c782fa41cbc30f8b213f36e03a1bcee413ae9b4706561c5c68e0ad645423eb5e799ca52a0cbb7e9468a7a0e253b5ea76f6a79a5dc9d72d5aab07703a814922f1fbe1eba0336659ae0acc46b46088b895846435a02bbacd4663f652c0e1289411bada43f1335d48d8ca7a021a60c8a19a8a894aa3375758a140bd040e24aabb0736f79ad95f2090a78418360cfba57398dbf3645bd6c964e53923ded0751512e8cadb650ab833ec3167e8bf385bfbbba46e0845e745810d0133cea434ddab18ef066caea680f16604baf0ee56b1f631f5ccf754fc79285af9d17d99346f7bcd7048dcbb3f0fbd6c2aaa415821f73e4ef5c09fffa911a7ecda2961342d0db95a92d597e8755e41fda1e39c65efc82ca82b22172b3e2017ec5bfbbdbecccc318190eca29ca4dfe393afbbaede3fbc53aa54fde14a1d98a3f0e673bd710d73a978cd7b37901915811c1a8478c61c4021792bd07d42a0e4f7f367139fd78ad1b6cc23c94bfc98bf73c8891c5c69c00c0aa4ba3d76472543fd8d2fef44f4fa928906a60f726a7aed2c6435ea80ffa1d91efc4a605b48845a1e66a7a79c92a869549383256e7724f796aa893c3a86c8c501dcef329d79d7ad5836cd41d48d0ddee68cd5dce8e59724bcf7a0d6872deae7dd15939db46b978fdb77158c3076ecc720b3fe3fefff15b28f7f1304c375a435f20c714576dfc8c9f53af9b6dd7d7ba14d8fe4408f8ffbd61aa0f1194e3c57d63519f96e42fdc97e7adfd686fdbef39bdca9a2716b337e406a909f3b2eed19e24408e8dbe91b5aa98fa62b6fb6f9f13dee6a5da24b24cd2cd859029aabb2bace5492de4985a19c508d2062e6b580bac1a55a41aecabf0d63f48315a6497f11a5a09bdfd1649203eedcd03069cac0bde4f7691e57e2a054e1c192f6d78f2647af7cfffc4daad033521b87103c5bbb81eafb0ff72c4cfc7beab3cd7074ed50f23021e917e85a0ea2dec4dd0d7f8efa68f15a1296ca768fac34f630014743eeeed57f80165e268c1cef7d5d385edb955195a3e44b8b388dcab72083fc2dc23d71913bb98ef2a34ad6df1675b936e294ebba47dbd74daa8098fcb627a1e17616d8775cf1fdec8676d57ce31bd4bfbe821a03ef251f651ce97dbae57f99c6755470e9cdd17699c568ada69a64621dd5625d95b0b550c596292b1816b9516cc7d8f02f8be32afda1f4357419b28363ced9bf7429e7687531fb00de4d2e03fe4ca448e66ad17c58d909df244f4f7ed265164b42273187816e0872e6818b8bdf48097d108f4c67ffa10038f7d2a705b4489c9af1284a7b34dec3e5b56f350c880277fca26427e0746eece173de1ae1104b7822a9fd45b262e5f3ce16a64dfa69e84f077296144f0c119bd2aac2251f463b3e8177dc259088c8a1794953b248b95e7c6e6f91ed45a7d3bce7e91ec72b98c06ba6c625bfdefc69c7416d89a0b1f3bcab5aed96370d74c6812ef0338368756f83f4be0331cde6d11d9a917483f25beda96af71882c3d4d1b3785932fa0bc93d611c919dcb116699db1a3d26ad6826937a984fa121fac7a45ff220520f702ee942793dbf7023b98c9cca4f150bccd29f26aff58e2255aa73fb7a7abd24b501bd403f24900d42e88c57494ab5ef8bacc07ff9904b100d709cc9b1018cacfa42d839476b7aeceeb2236e2c1151d441b167036bef84069401d67a1473d5d11cc109bd39a1fca5d5aa347c4fd5f6f3c12a8f5d1ec344dc1717f5e8e1aae6d7b7c42aa633ffdcb46c32ac667d933cb9fdaf6d83eefe77d8733a59fcf394d063efa474df67697f881991a34fa79bb78f3b19e9b29cc7b03ca7390b0ca6064a961f3fed249db4ff2c01840373b6242034cbac645d59743f1a90f372ee0c17efade2cef03e3f0edc640dfb629c6b98dc2f28ce06aff3574a2cbdb4b06fba31b2dfe34bba7e34e02a786fa4473d5ba847f4f1e644c1bad62ebd5ca9306219ad6beacb8a54ba299e1bad887293f1b65ff956ea2a562e290df607a608503afee3ae180d600f1d14a9459cd5a399c7e2c7bbde19c11ac869d34ea5e990a759e346c3d538108a277894d6ec7bc6fcd65862a2d9d0696551a4a37379feafb313a09f2575c52641db9f46f4cc5e851f67ce633572b6ffcea7b7c24b44b40d32e55e4f3b426e464c07741648f30d51fe3eb162cadcecf21b7182cc915ffd887e85c385b5989f87910c5c990d639f8d2cd9234c534400088ef49733c94f39131fd51d784a407a07eae6d5359acfa35994ec3760ca3866404a5faed0fb210ce1b849868a6007c8e839ac7518172928277bf2dc43d163d2a0f6146cca1738ec3526762e8e2caf69606a3980bd08fba42ec7cbf48d315e45b834bfb14221de8259250c4ae9590520288c73bfc7d8076d3fe46b772491173ea0daa76cb5cb40637a038ce734d72c0c020494062843715e762d71a8f8518fa7d837391c06b62c96efc17651158657db8ea9a57634b0b5628b06fd5d568fb02185a63a6beb56013cfb4fd1695b102fb58f39161232af39f6d87c5ff6af247df3d549b7f6f81cddf4e3cb12b18634e69df5af55127f72670a3104ce5aba7877c32ee4b0cfa076247a95750e830a240b092baec2f473e83581e5799d69593247f0e78ad8e44c0e0d09fc55888107c4badcdb20b2c82d5915b3b03060e53d199b20b29ad6742655bf62343421f826daf1a3c0c493c96bf719bdf0a8dc9a4fc3f75bcebec3aebfd898ef161cd4e2e33a142c36f673cd8da72edae4f691a42a047562f91f0e87972e3ae5abb75e352f28c81351c4be6a34e5a01b8ed8461f14e21d1afc9260d838b43e9e2ae078d64b6c718232bcd2b26d3c57beb3c605e00c6f9c1031a3bae4b1872ba5d6c23199253929f1cf57a2e961d798ca9d315fa6b9855c8e7efcc24ccde498a3f1ba23755360044f024753f886f97016bd45a56d802f3e9e040a84f6c46cd5aa99fd4471b97cdb0bd8d265853fb79c42b4cad7eda49ca08d3cefffee2d3f1b5f083a06ea4be4b0acf84ca27e5a8d579d3135f3e59bd5b823b2bef7708189f54c8f0d576e4c6bdbf932b55bc792bb302cddc5c555e4903eff45b493f9498f7bf184035335ad1ba1547795a443c9afb30f932e7d1b042fe1690cd34d98e2331cbe38108be26f8ed615590e8bd99fd01b700b21e6ed61de92297d8b447c723089cee359ccd4517328d54ebc43a3f9173698c4362a6130508c9a0ea57b9a8a74a997a21e3e2a7223ad3debd80f70aff2eba5a862aa667052462bf6635eca2dd3350ef70fda58f8492d34c5b819c802f97b8765680c39fcab3b92f8a8be88a93b5bfc1dbba3fbfd3051c4443e766f4cc6a9d0f96b66a081e9316a44efe5973479ae74bf13c18711218f75d7f4e6f70b0a34ff2a1aec8d1e3181a65b4d5f21f0c19789a2ff90ae5e1298e707628e97e6a5048ac29d916193577506a7f5a9cfb0c73d16a67a2e1f872c8026891e98df07579877460c845bf967f87d75295ed29ddf626340f313bb35a04f9304e34773eda19650f25a08b2bd603297d9edd7f7d1b88d0b18e7bc35b0593961e7403a03550a20a0eab83cb00e659f5fccc189d14b28f11b8f55db517ab124b3718e70868d2131c74640bc682ee785a75cf960a79fead7965d0798d98e386598efb5ce92b0ceeec4e63e2eee3a15642ac72691517c4197a667de3e57a56e2d6e4ecb5a2bc401f90ec2239baf6a9a418267fe2228f7776c7f932a048cd9aada01c2e6d9466ecc434ba61eb97a0d6eb00e719940b3dca3ae25b94e9040ee238184eeaf46e51b61d855ce476d10dd9cb09df18c585304bc4f9e88060e4bdd6e624dd90d7ae8874c0af1e17e67d3bb27babd15880cc61f22b6a0b24df6d03faa13f0c918a7c8078706939934d9ae90edc40251fb53c9fde3ee255e49c8541d995a644d35b46ab202e56ad1de3da1c5ee587f167b398392d0fba4a43eedeaccb0ba16f571055381fe3885490c71e0805b1b3186bf2652b9a9df69d8d1232cf704fddfb5e7d3ff78ba5ae3b843f4f9b82161e223343240c33a9cd21eb312806163ebb2e60bc98b68b3d95bdd923f6ea831083c13ca65e4a06e999b2d014d0ed218d72c5b776fd21ae21d14e23e9074de20d6d16520b1061aa4db3b5b8077b1c43aa375c68a6243ad582a148dc6878ceb2ab6792cac38ef21765df51171436a412f60f5dc68fba51aae8c4909efa690340fd8a63cbfa4af6235c1c904a20578f54b9c91b1fb8017d05321e0bb9eda1502c1506f3d2939977af87d1f9329e237c129d5cb65e093396f016eb0c2f0aa5cab92a00259f6056532ef188be500fec4cd4614e29daf5b41da2b4742b02999e651c42d2f405344a232e36278785dc7a681d0ee2014ce3214f44ff9d2c3e083e18c299cd7cc8ddea4b805c673cb7479a553f28349235d37874ae3da878a5b6321e501c2b77470dd15b35ace69b1b8e3ba20cce47acb8350f206d136dfdcea697bf558bf3426bb1e0ebcf2797a1c7a181fad43b8c68633b361d40868c279896eb1c628656a9b57dcde8444ff92f2cc1d2dfa1998054487d8fcf11b852019ac21ae0582b1c8f4ff90f31d862e20740d7b803b0f109a8d1506137ca58167e8be1d13e6a5590e2bf2af5cbb7e79db2f4cdec83983463e1e830f54f8534e4c660039c0d372c7c757be3498f6be9ff6b6d13b88ca0ee07a0fd4df8cb13de0fa094cd3b9eb87032a6aaa757a6391ccf98fa7f9d99065b4f747e70ca497af77fbad520c589445d3401c67972ff7e274571b8c35a17ae78de90c81f791a69d70975208153f94ac7199c45de1ca5746887ec677452fd1a018b7287ac45e14ecdf1876229964153cfe6b39f1d50a9be63a0eb10016607ff338751cf9bb97c917d532be1174d0410e26dcfab873769b71db87758c0ad015b1db4b7565e244925ea0dc24313ac65f0355abcfa96c786b8ab7b32166bbf4c7ddae0d3f63d1aad63a9b105e05825aa012e075ba3e1c20b757e1dce75f6fe14e891a20988d365cb5e69206a1b7d8caf2effc73eb577330cb56495fbeaa6b7aef3467a32f53634e468208a8e55d626f98a2b51d39b48341c27306e59c0fc5c8058719b526eac245ce857288976abdfc9be1d4f220817f879c15cf0a258f89cd8269113821b0a1073165923748c6e8e0331ae9e7df11e62a80bf28559850cce385a98e0f48209ebcf69e8938a7605e96f4ffcf580b6c1df742766458763dc91b34035c12396b06ca5995b8feee35e1a3891cca0402fb9e739d8f8aa1a637b7c8c2c458493a323fbe5a76f866e2d9adf0d1d76950bc527a969f61c8519508eb5a93447d212e209c724aa16a949d8be1b14c8711d4c85e728e9d50b5b78b76242f9d59d866a86da0f129201a5b665611360ab3f4b678746cbba1b47884d2bfe4d3e38bf441fac354654c5077620cdf5870fda1fd5ca2bf4780d474a27cb660dd9d7ea83d423240c7ffe743dbefa3b922ac6d5f9544a7d5477dc44761a1d47633f67fe220f37630d678daeb62360b5f4f5d40493169f6554897c5d05c4909834fb2ef1494f8bbbf9e986761b931a26b0ab76b88d4f9b9bd9a024dc39819e0a139eefba8f617401811b4a7b97212aa82965e6008447979d19bfeacceedd48a24d65b8a1705d686fa8c44100d27dca9bc764b74345e1da71bfd9604e2f5bfdd28097f90e98f91ca81b08e827f7a3e742e6c019691afb612042a375985b01b94b3eb61a484fc2ece84f53ba5738273c80047663ec335d31f1ce43c6205a78fe7712626e8e6ff691b5bb9fe1a41909db60d8644d73936c4eb663bbfef030499c8c7d31f4eacae3cbf736a1eba6f85008139ba7eaf5f1ef8804f617e56c820c24f139b7036887f2ed2de32fd63574d0359ad4026e67c550b4ae960a2ce234a20e076da3f91a7ed60bd59a38e1acd7941a66bf3e755a431cead3f01600c6e47564167340f3f853efae37b036988bf4b30849d9dd5d0d09b1799bf9fadca76c497a1345018c8724065291bd8cc633e06359b72040a7673ffe5e86c240d043963bf2d76a0fbf50243a63d45d7f3358e1b9d1f3cbffd7e60429afee778f305e7d8f07c3e49a104f3a4e92118ce84cd11839f507656757d6e89ff296cf792ca2f1429aa80c8092b970d6f065eda3fb25b6b8a699561f8fe5236bbbc96f15860e29326a5a2671a88545a65e587d986615998a124a97820a65f81779b3101086e6f261177a66858d788c5c66521408a9e70238719614aa6232a3ef7a33e99d3b1dcdc20c33e8124b1dabe50ce9e4eadf34685560039e7d7e08f038f2004da7703bc4a30a28409719092e6640e743ee8a4e75dea106314a26ed5cae5d02bf9c8b0e96020a6b7941db7f0c311476f377a992caccff7f1919062f9db36ba72b29e9dc0880fb8eb24f41e0a6cbaa487058c6fbe6b062b372e0b84c9fcfd64d84724b6cda7fb3f582abaa6757782b20f9c1fad78f98273129caaa9496c1dbbbd167b52bae60dc327d1e18d82450ff9b6b108a0f20cbee500", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x5, 0x1, 0x4, 0x400000004, 0x401, 0xe767, 0x800, 0xe96, 0x8000, 0x2, r12, r10, 0x80000001, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.672974132s ago: executing program 2 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x7e, 0x21, 0xa, 0x20, 0x12d1, 0xb812, 0xe950, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xd, 0x1, 0x180, 0x8, "", [{{0x9, 0x4, 0xf1, 0x2, 0x0, 0xff, 0x3, 0x16, 0x80, [@hid_hid={0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x8a9}}]}}]}}]}}, 0x0) 16.935806444s ago: executing program 1 (id=318): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x40, 0x16, 0x2, "ddaa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) 15.839481892s ago: executing program 1 (id=320): syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x20040) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81) socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_procfs(0x0, &(0x7f0000000600)='attr/current\x00') socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newsa={0x144, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x180, 0x0, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x80}}, @tfcpad={0x8}]}, 0x144}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 15.678584121s ago: executing program 32 (id=320): syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x20040) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81) socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_procfs(0x0, &(0x7f0000000600)='attr/current\x00') socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newsa={0x144, 0x10, 0x713, 0x70bd27, 0x0, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x180, 0x0, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x80}}, @tfcpad={0x8}]}, 0x144}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 14.539340497s ago: executing program 2 (id=326): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040d9044aa000000000000109022d0001000080010904010002030002000921fd7f000122eb0009058103"], 0x0) syz_usb_connect$uac2(0x4, 0xa1, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x13e5, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x80, 0x10, 0x70, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x7, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x1}, @as_header={0x10, 0x24, 0x1, 0x6, 0x9, 0x0, 0x0, 0x4, 0x1200, 0x7f}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x80, 0x8, 0xfa, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x81}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x20, 0x1, 0x2, {0x8, 0x25, 0x1, 0x1, 0x3c, 0x81, 0x401}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x5, 0xa3, {0x8, 0x25, 0x1, 0x2, 0x0, 0x80, 0x8001}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x16, 0x0, 0x0, 0xff, 0x1}, 0xc5, &(0x7f00000003c0)={0x5, 0xf, 0xc5, 0x4, [@generic={0x4d, 0x10, 0xa, "26656c0ad9b0600a03eeb0d2323486d7d085239ce72c33a277c0a2a92dddd01d57ff9bceb9fb958430883de3510875d20c66c9d461b5f621cfdbbd641ed7e40a41808913a0ab17fe4e24"}, @ptm_cap={0x3}, @generic={0x5c, 0x10, 0x4, "2ec25054564ee822db134e53a160a1cfac8d50bdc7cd421527ce5fbc76a58bad1f53f075a2295d952cfe5504139e5ccdbdca2222873a6a59c173e66ee7d6aa5a9754cb90cf85a098638b6172347545995162ddfd96a9c88f53"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "779cf4d546c312129e2ec001ae9685a2"}]}, 0x1, [{0x0, 0xfffffffffffffffe}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0xb) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) (async) sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000340)=@in={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x44010) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x40, r2, 0x801, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "68ab8024df"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, 0x40}}, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x71, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003020000ff2505ffa440000102030109025f0002014020060904000001220d000008240600013d323d05240001ff"], 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r5, &(0x7f00000003c0)={0x14, &(0x7f0000000000)={0x0, 0x4, 0x2, {0x2, 0x4}}, 0x0}, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cfg/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r6, &(0x7f0000000280)="75b214", 0x3) write$char_usb(r6, &(0x7f0000000000)="662754f66b452a591f0947436ec64bad1fa6fe7a0b8288acff508787e3b334", 0x1f) 11.33599562s ago: executing program 2 (id=330): socket$alg(0x26, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000d40)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @loopback}, 0x486, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x2, 0x20e7}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b04, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="023cb682937f94a4d7d52db80ecc94037a110e852c5c5f2d1b1dd200b48e16c45bac9727574e1ec6df3a234701917bb83232c91b448ad0dd847a95be7c413a9e2dee211ee7c05b8acc67776991e7fd0f6d16158af75eae1a4ace5f9c9b97b8a20e3f213414d0fc2c67bfb05d256b19ed66e0430f6c40887976a14e36419c9536bb2ebbf954ef34eb6bb1d1d5bd315b21c71515ae760cfd990e0558f2f0caad917a7ec66074cebbc46046676e5c51afd6f80996849cca1bc7196d666fd04c38599f72fcedd2b7aa422cf3402bbfd6028cb30f39ee5ebbb9dda768e17df17f4c3ee923b2912b81da1b3821551390a2bd", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040089}, 0x8004) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, 0x1100) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28f00, 0xc8) r8 = socket$pptp(0x18, 0x1, 0x2) getsockname(r8, 0x0, &(0x7f0000000180)) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r5], 0x4) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x10, 0xe0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0xaf, 0x30, {0x7, 0x25, 0x1, 0x8, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x10, 0x7f, 0x8, {0x7, 0x25, 0x1, 0x8, 0x3, 0x7fff}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x19, 0x0, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x444}}, {0x0, 0x0}, {0x16, &(0x7f0000000400)=@string={0x16, 0x3, "03d3ebd8a9a588b01e83f1d2c1d78c5a37005464"}}]}) 8.043664303s ago: executing program 2 (id=335): socketpair(0x0, 0x5, 0xfffffffd, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x8, 0x6, 0x400, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x20000010) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1, &(0x7f00000009c0)=""/200, 0xc8}, 0x22) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r5, 0x5, 0x3e7, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x64, r5, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @device_b}, 0x4000000, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0xe, 0x2}}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0x64}}, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000a40)="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", 0x3b5}], 0x1}}], 0x1, 0x8040) 4.675941281s ago: executing program 2 (id=341): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a080001010000000001090212000101008032090400"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0', 0x1) 4.213389033s ago: executing program 0 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) modify_ldt$write(0x1, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.968006365s ago: executing program 0 (id=344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000000900)={0x0, 0x64, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x408c0) close_range(r5, r2, 0x2) r6 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x44, 0x8, 0x7f, '\x00', 0x8}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000a00)={{r6, &(0x7f0000000100)='.\x00', 0x40000, &(0x7f0000000140)={@_ha_fsid={[0x4304]}, {0x9, 0x8, 0xb, 0x8}}, 0x9, &(0x7f0000000180), &(0x7f00000001c0)=0x8}, 0x6, &(0x7f0000000940)=[{0x1, 0x3, &(0x7f0000000280)='/dev/kvm\x00', &(0x7f0000000380)="6c1a605db8edabe8c5659764bebdbdcc1d1b7a09a417fbc22ef879834b58702b63fcb341cc48af333957bde97b9069a549bf35e6cfe7a903f52185328ee79cb85f595b31325fd29c8f3f68740ddca541bb14516630e09a87c665279f2cfd7e42647f228b87347b100a9176b6c14d1c926740112adcfac00d1de927b8be395762df54e407b751e56a78788bc8fe608c47ba9d67afdf3175ee199c0e63f395bfece9d21b4b7155613f0717eb6b97aecdbd0ccb8cafd65e254ee1b2c9632033dfd4ca091f4b4cd395b07a43", 0xca, 0x20}, {0x2, 0x5, &(0x7f0000000480)='\'+\x00', &(0x7f00000004c0)="e2399e24b54ac33ca33c09d6e5ff41ff2c3c5138f0cc5f07bdb48e468a6af6969233878f3ecb6d745791a4b53a36d60b6dbf2aee5c3424c3f77ee6629429ed93359daecfbf004402bfa2a028b491eeb90431b248fc2019e9ecfc66f4dea228932200305ac5", 0x65, 0x32}, {0x3, 0xc0, &(0x7f0000000540)='\x00', &(0x7f0000000580)="547e999c4150310cd7536cf4f11dc3bf7e1712a0a7a4e411260290ed18e9af26b9ad43dea1eb45a0862beda69030c9a945d15ecc23829d06e532824668834a84f1184e6d", 0x44, 0x12}, {0x3, 0x2, &(0x7f0000000600)='\xf7&.&-)%@\x00', &(0x7f0000000640)="ea40841f0b10238281611b88d77df681b5b9d3e6d4f88d7b60b9bdd9356a6d6502e345e88373f8839d6d814d5cf6", 0x2e, 0x10}, {0x2, 0xa3, &(0x7f0000000680)='/dev/kvm\x00', &(0x7f00000006c0)="f2152f6d2af1b5433629c70a573d147a71fdafe24bd5c02244bd113fe4b445da60115235f81070201e0a1aa7a66685fa4e6501c0a6773e3330656897c36aed695043b881542eb580e1954f821c79bc0b8dc3b1db98532824", 0x58, 0x8}, {0x2, 0x2, &(0x7f0000000740)='\x00', &(0x7f0000000780)="1ea47322bb2d0e053da64e868d731d8ab27ea16df8e76e08af4703347dcd90422103e210791d381787a4c2535f34a4257a21f97714880fdaecdb27073d7c5b0b79fe8996496a46b285251c198fc9969a20b695f929c090e455b048c466c99d012a284713ffa567cc506ca6f37638f2b1baa40dd155ab4c008eb52c30c09f49e734fd585cb670a5111f39dd9459d30905f6a494513892b8816d9e8e34272ab304b4bb56e77ca85ff2a9ce2ebf191c29090a837965b261ca0eea09894e69ce2807d576e8cd699fdcbfaa4fa115d55841f1b31426", 0xd3, 0x18}]}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.77977638s ago: executing program 3 (id=345): setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x8001, 0x6, 0x4, 0x4, 0x1, 0x1, 0x80000001}, 0x20) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0xf2, @tick=0xe, 0x0, {0x0, 0x7f}, 0x0, 0x0, 0xff}) 3.50778849s ago: executing program 3 (id=346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) exit(0x7fff) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x2c00) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x2, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x100, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0xfffffffe, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x7f, 0xe, 0x8, 0x8000806f, 0x100007, 0x200, 0x1, 0x9, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x2000008, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0xffffffff, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0xa, 0x6c8, 0x9, 0xfffffffc, 0x8, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x3, 0x4, 0xb, 0x8001, 0x9, 0x7, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfffffffb, 0xffff, 0x3, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x9, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0x9, 0xffffff80, 0x4, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0xf3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0xc5f, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0x3, 0x80000000, 0xb, 0x2, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ef, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0xa001, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x3, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x5, 0xc8, 0x2001, 0xfffff000, 0x2, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x200f, 0x30b1d683, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x401]}, 0x45c) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) signalfd(r3, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) landlock_restrict_self(r3, 0xe) 3.336319984s ago: executing program 0 (id=347): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.18626293s ago: executing program 0 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%+C\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x9fs\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB="d801", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x2400c004) 3.055894932s ago: executing program 0 (id=350): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x40, 0x16, 0x3, "ddaad1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2.589560134s ago: executing program 3 (id=351): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x80, 0x0) tee(r0, r2, 0x60000000000, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) write$char_usb(r2, &(0x7f0000000100)="76e6b48d1d53014de7f77448fa2714bd19d046a1b04bb9b11ed7e9d54fa327945166b3e096d680361c779e42da076816ca70698b0fe2bd332498c84a2e8dee06a625bcd6d405a6c90f75bbb114189011c438d9b517a55473d440b6da065997b267cb15875cad14d8d44148bcfd4026342df824edbb64", 0x76) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2d) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2002, 0x0) write$dsp(r7, &(0x7f0000000040)='F', 0x1) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x10004) bind$unix(r6, &(0x7f0000000740)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000480)={0x5, 0x0, [{0xa, 0xffffffff, 0x1, 0xffffff89, 0x800, 0x6, 0x48d4}, {0x7, 0x4, 0x4, 0x7, 0x35, 0x7, 0x5}, {0x8000000e, 0x8, 0x1, 0x400, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0x2, 0x4, 0x4, 0xdf1, 0x2, 0x80000002}, {0xc0000000, 0x2bb, 0x1, 0x5, 0x3, 0x7ff, 0x8}]}) 1.698753734s ago: executing program 3 (id=352): r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)) (async) accept4(r1, &(0x7f0000000000), &(0x7f0000000080)=0x80, 0x800) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r2, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x120, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) (async) stat(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000240)={[], [{@uid_lt={'uid<', r3}}, {@uid_eq={'uid', 0x3d, r4}}]}) 1.563951658s ago: executing program 3 (id=353): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000002000/0x4000)=nil, 0x4000}, 0x6}) syz_genetlink_get_family_id$batadv(&(0x7f0000002080), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000002240), r1) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 1.553202168s ago: executing program 2 (id=354): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendfile(r0, r1, &(0x7f0000000640)=0xb, 0x2301bcf) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda39, 0x10, 0x5, 0x2eb}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000680)=@IORING_OP_PIPE={0x3e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x0, 0x0, 0x5}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x29, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x77, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) write$snapshot(r6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) listns(&(0x7f0000000140)={0x20, 0x0, 0x10001, 0x4000000}, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r9) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="08002abd7000fcdbdf250d00000008000500020000005c000380080001000000000014000600ff0200000000000000000000000000010800030002000000060007004e2200000800030004000000080001000100000008000300040000001400020067656e657665310000000000000000002800038014000600fe880000000000000000000000000101080001000100000008000300010000000800050008000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0xf) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$TCFLSH(r12, 0x400455c8, 0x1) setsockopt$inet6_tcp_int(r12, 0x6, 0xa, &(0x7f0000000280)=0xd34, 0x4) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) write$sequencer(r13, &(0x7f0000000100)=ANY=[@ANYBLOB="810100000000000081", @ANYRES32=r13], 0x10) setsockopt$sock_int(r9, 0x1, 0x9, &(0x7f0000000240)=0x5, 0x4) sendmsg$can_j1939(r8, &(0x7f0000000600)={&(0x7f0000000480)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x3}, 0xfe}, 0x18, &(0x7f00000005c0)={&(0x7f00000004c0)="6efde8fcbee4b216561fbab340e38ed5b60ffd10b3afff869cd619e0c819d3ce49dc153381b14d418d6c5b6bf21b80afe466be9c926fb0ef68c0b827726d0b2b763d57c31bc055cf71ff191c75b4f16100fc8b2a5487c3c504489f1c8160dac047859e65d92abec0c57e963a52d8d176ecb8aedb81bcfd9b3f6ce252e7f5e987999057dcd4a3b9094a2ad994a2d9a399dc5a8352c17fac15b68651ed02b67e047f2ef8f014c8c0d837fff09246dc2b31ba49cb9eaf6b2bfabda8b465794e1bfc1cda3587747a1b77fc28f2616f44476536e8f26054a905320342b7ba0eb0d173efecc2cc950142dcb9", 0xe9}, 0x1, 0x0, 0x0, 0x48800}, 0x10) r14 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r14, 0xc0305602, &(0x7f0000000040)={0x0, 0x76, 0x3004, 0x1000000}) ioctl$OCFS2_IOC_REFLINK(r8, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000000)='/dev/sequencer2\x00', &(0x7f0000000040)='\x00', 0xff}) 1.479724541s ago: executing program 3 (id=355): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRES8=r0]) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) syz_usb_connect(0x5, 0x164, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007af28810d30bf4055b000000000109025201010000000009044000000e0100008c2406"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r1) (async) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0xeb}) (async) add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3", 0x9, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 713.385831ms ago: executing program 4 (id=357): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 695.294384ms ago: executing program 4 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%+C\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x9fs\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB="d801", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x2400c004) 630.598432ms ago: executing program 4 (id=359): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockname$llc(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) sendmmsg$inet_sctp(r2, &(0x7f00000058c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x4}}], 0x18, 0x10}], 0x1, 0x1) ioctl$TCSBRK(r1, 0x5409, 0x0) 470.008879ms ago: executing program 4 (id=360): syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') close(r1) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x35c, 0x0) (async) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000002b80)=""/4096, 0x1000}], 0x1, 0x4, 0x200) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r5, r2, 0x68, 0x1) (async) syz_ublk_setup_queues(r0, r3, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b2d, &(0x7f0000000040)) (async) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x2c00, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xfd, 0xcdb9}]}, 0x10) (async) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 433.076797ms ago: executing program 4 (id=361): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xfffffff8, 0x0, 0x10001, 0x2, 0x4f, "0d41810700943aaa91e15b1b6f6ff88c6b00", 0x9, 0x140220}) r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) 348.959868ms ago: executing program 4 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a080001010000000001090212000101008032090400"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0', 0x1) 0s ago: executing program 0 (id=363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) read(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$kcm(0x1e, 0x1, 0x0) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. [ 91.769026][ T5578] cgroup: Unknown subsys name 'net' [ 91.947181][ T10] cfg80211: failed to load regulatory.db [ 92.033992][ T5578] cgroup: Unknown subsys name 'cpuset' [ 92.096275][ T5578] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.141818][ T5578] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.792465][ T4905] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.799058][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.818498][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.829064][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.841770][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.866027][ T4905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.898339][ T4905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.899549][ T4905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.906289][ T4905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.906827][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.938283][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.939592][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.941930][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.943650][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.975706][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.022204][ T4905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.078348][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.116846][ T5597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.146560][ T4905] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.147886][ T4905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.056520][ T5594] Bluetooth: hci0: command tx timeout [ 99.056526][ T4905] Bluetooth: hci2: command tx timeout [ 99.135813][ T4905] Bluetooth: hci1: command tx timeout [ 99.215163][ T4905] Bluetooth: hci3: command tx timeout [ 99.582145][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.582646][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.582902][ T5592] bridge_slave_0: entered allmulticast mode [ 99.593973][ T5592] bridge_slave_0: entered promiscuous mode [ 99.651104][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.651475][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.651765][ T5593] bridge_slave_0: entered allmulticast mode [ 99.657082][ T5593] bridge_slave_0: entered promiscuous mode [ 99.683438][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.683874][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.698622][ T5592] bridge_slave_1: entered allmulticast mode [ 99.701520][ T5592] bridge_slave_1: entered promiscuous mode [ 99.703570][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.703902][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.707249][ T5600] bridge_slave_0: entered allmulticast mode [ 99.729206][ T5600] bridge_slave_0: entered promiscuous mode [ 99.743909][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.745204][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.748208][ T5590] bridge_slave_0: entered allmulticast mode [ 99.760168][ T5590] bridge_slave_0: entered promiscuous mode [ 99.770078][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.772638][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.785598][ T5593] bridge_slave_1: entered allmulticast mode [ 99.788486][ T5593] bridge_slave_1: entered promiscuous mode [ 99.820615][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.820893][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.821117][ T5600] bridge_slave_1: entered allmulticast mode [ 99.823681][ T5600] bridge_slave_1: entered promiscuous mode [ 99.835040][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.835977][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.837764][ T5590] bridge_slave_1: entered allmulticast mode [ 99.849807][ T5590] bridge_slave_1: entered promiscuous mode [ 99.972457][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.025424][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.030759][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.042123][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.068355][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.073462][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.111866][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.124868][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.232486][ T5592] team0: Port device team_slave_0 added [ 100.281494][ T5593] team0: Port device team_slave_0 added [ 100.289902][ T5592] team0: Port device team_slave_1 added [ 100.293585][ T5600] team0: Port device team_slave_0 added [ 100.309863][ T5590] team0: Port device team_slave_0 added [ 100.313634][ T5593] team0: Port device team_slave_1 added [ 100.349266][ T5600] team0: Port device team_slave_1 added [ 100.361429][ T5590] team0: Port device team_slave_1 added [ 100.467711][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.467729][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.467749][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.541928][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.541942][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.541961][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.546267][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.546279][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.546299][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.552756][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.552797][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.552869][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.571978][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.572028][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.572127][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.589080][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.589128][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.589201][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.670646][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.670704][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.670777][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.690407][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.690449][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.690529][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.997811][ T5592] hsr_slave_0: entered promiscuous mode [ 100.999755][ T5592] hsr_slave_1: entered promiscuous mode [ 101.135293][ T5594] Bluetooth: hci2: command tx timeout [ 101.135393][ T4905] Bluetooth: hci0: command tx timeout [ 101.214361][ T4905] Bluetooth: hci1: command tx timeout [ 101.294394][ T4905] Bluetooth: hci3: command tx timeout [ 101.320279][ T5593] hsr_slave_0: entered promiscuous mode [ 101.322015][ T5593] hsr_slave_1: entered promiscuous mode [ 101.323601][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 101.323704][ T5593] Cannot create hsr debugfs directory [ 101.351591][ T5600] hsr_slave_0: entered promiscuous mode [ 101.353375][ T5600] hsr_slave_1: entered promiscuous mode [ 101.357735][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 101.357809][ T5600] Cannot create hsr debugfs directory [ 101.383804][ T5590] hsr_slave_0: entered promiscuous mode [ 101.390306][ T5590] hsr_slave_1: entered promiscuous mode [ 101.391781][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 101.391805][ T5590] Cannot create hsr debugfs directory [ 102.308383][ T5592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.361234][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.379916][ T5592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.410563][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.435807][ T5592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.460751][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.493051][ T5592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.530100][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.651853][ T5600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.705498][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.731870][ T5600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.753808][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.766449][ T5600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.809362][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.840736][ T5600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.872366][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.060956][ T5590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.090676][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.115778][ T5590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.151043][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.165960][ T5590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.209125][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.215071][ T4905] Bluetooth: hci0: command tx timeout [ 103.215105][ T4905] Bluetooth: hci2: command tx timeout [ 103.269710][ T5590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.294327][ T5594] Bluetooth: hci1: command tx timeout [ 103.317982][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.375406][ T5594] Bluetooth: hci3: command tx timeout [ 103.527899][ T5593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.561802][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.586845][ T5593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.637631][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.642541][ T5593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.682613][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.711892][ T5593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.739176][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.887731][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.976176][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.028003][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.102821][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.103035][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.169263][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.197279][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.198112][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.273553][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.276448][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.356342][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.360277][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.360420][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.519208][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.553377][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.592613][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.592790][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.648756][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.648900][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.787936][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.878437][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.878646][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.029832][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.029949][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.294607][ T5594] Bluetooth: hci2: command tx timeout [ 105.294643][ T5594] Bluetooth: hci0: command tx timeout [ 105.377559][ T4905] Bluetooth: hci1: command tx timeout [ 105.464367][ T4905] Bluetooth: hci3: command tx timeout [ 105.898053][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.133538][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.432782][ T5592] veth0_vlan: entered promiscuous mode [ 106.538427][ T5592] veth1_vlan: entered promiscuous mode [ 106.631347][ T5600] veth0_vlan: entered promiscuous mode [ 106.693969][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.746992][ T5600] veth1_vlan: entered promiscuous mode [ 106.833266][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.875815][ T5592] veth0_macvtap: entered promiscuous mode [ 106.957335][ T5592] veth1_macvtap: entered promiscuous mode [ 107.063483][ T5600] veth0_macvtap: entered promiscuous mode [ 107.093540][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.124598][ T5600] veth1_macvtap: entered promiscuous mode [ 107.133366][ T5590] veth0_vlan: entered promiscuous mode [ 107.163117][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.225159][ T5590] veth1_vlan: entered promiscuous mode [ 107.235602][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.268367][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.289309][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.302377][ T5593] veth0_vlan: entered promiscuous mode [ 107.322885][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.345410][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.445981][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.509345][ T5593] veth1_vlan: entered promiscuous mode [ 107.574688][ T153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.583762][ T153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.645737][ T153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.739235][ T153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.921948][ T5590] veth0_macvtap: entered promiscuous mode [ 108.026332][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.026353][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.113176][ T5590] veth1_macvtap: entered promiscuous mode [ 108.416055][ T5593] veth0_macvtap: entered promiscuous mode [ 108.458728][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.473940][ T5593] veth1_macvtap: entered promiscuous mode [ 108.492731][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.492752][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.571630][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.643404][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.643426][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.710103][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.732422][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.739026][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.757775][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.818922][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.874361][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.874383][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.975912][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.274615][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.288412][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.291965][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.359877][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.961974][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.961995][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.637421][ T5746] netlink: 'syz.3.5': attribute type 27 has an invalid length. [ 110.723925][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.723945][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.800356][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.800376][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.903007][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.096940][ T1192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.096962][ T1192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.149706][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 111.276721][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 111.276757][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 111.392464][ T45] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 111.392496][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.392531][ T45] usb 2-1: Product: syz [ 111.392546][ T45] usb 2-1: Manufacturer: syz [ 111.392560][ T45] usb 2-1: SerialNumber: syz [ 111.614606][ T5676] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 111.722057][ T45] usb 2-1: config 0 descriptor?? [ 111.820844][ T5676] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 111.820873][ T5676] usb 4-1: config 0 has no interface number 0 [ 111.821091][ T5676] usb 4-1: config 0 interface 5 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.873733][ T5676] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 111.873785][ T5676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.873807][ T5676] usb 4-1: Product: syz [ 111.873822][ T5676] usb 4-1: Manufacturer: syz [ 111.873837][ T5676] usb 4-1: SerialNumber: syz [ 112.244511][ T5756] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3'. [ 112.303843][ T5676] usb 4-1: config 0 descriptor?? [ 112.322213][ T45] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 112.327806][ T45] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 112.359520][ T5759] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 112.432977][ T5676] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 112.677973][ T5676] gspca_m5602: Failed to find a sensor [ 112.677988][ T5676] ALi m5602 4-1:0.5: ALi m5602 webcam failed [ 112.772211][ T45] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 112.773871][ T45] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 113.008177][ T45] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 113.008200][ T45] em28xx 2-1:0.0: No AC97 audio processor [ 113.085266][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.125151][ T5676] usb 4-1: USB disconnect, device number 2 [ 113.275185][ T9] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 113.275217][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.577046][ T9] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 113.736857][ T9] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 113.736887][ T9] usb 1-1: Falling back to sysfs fallback for: emi26/loader.fw [ 113.993079][ T5771] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.277957][ T1246] usb 2-1: USB disconnect, device number 2 [ 114.372160][ T1246] em28xx 2-1:0.0: Disconnecting em28xx [ 114.408329][ T5676] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 115.150820][ T1246] em28xx: Freeing device [ 115.733433][ T5785] binder: 5784:5785 ioctl 4018620d 0 returned -22 [ 115.782599][ T5792] binder: 5789:5792 ioctl 4018620d 0 returned -22 [ 115.784001][ T5791] FAULT_INJECTION: forcing a failure. [ 115.784001][ T5791] name failslab, interval 1, probability 0, space 0, times 1 [ 115.789585][ T5791] CPU: 1 UID: 0 PID: 5791 Comm: syz.2.16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.789667][ T5791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.789718][ T5791] Call Trace: [ 115.789741][ T5791] [ 115.789770][ T5791] dump_stack_lvl+0xe8/0x150 [ 115.789864][ T5791] should_fail_ex+0x467/0x600 [ 115.789949][ T5791] should_failslab+0xa8/0x100 [ 115.790004][ T5791] __kmalloc_noprof+0xfb/0x790 [ 115.790089][ T5791] ? tomoyo_realpath_from_path+0xef/0x640 [ 115.790180][ T5791] ? tomoyo_realpath_from_path+0xef/0x640 [ 115.790281][ T5791] tomoyo_realpath_from_path+0xef/0x640 [ 115.790395][ T5791] ? tomoyo_path_number_perm+0x219/0x5f0 [ 115.790488][ T5791] tomoyo_path_number_perm+0x246/0x5f0 [ 115.790577][ T5791] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 115.790658][ T5791] ? do_raw_spin_lock+0x12b/0x2f0 [ 115.790774][ T5791] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 115.790835][ T5791] ? lockdep_hardirqs_on+0x7a/0x110 [ 115.790936][ T5791] ? __fget_files+0x2a/0x420 [ 115.791011][ T5791] ? __fget_files+0x3a8/0x420 [ 115.791064][ T5791] ? __fget_files+0x2a/0x420 [ 115.791128][ T5791] security_file_ioctl+0xb9/0x260 [ 115.791209][ T5791] __se_sys_ioctl+0x47/0x170 [ 115.791300][ T5791] do_syscall_64+0x17b/0x530 [ 115.791354][ T5791] ? irqentry_exit+0x10f/0x8f0 [ 115.791406][ T5791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.791466][ T5791] ? clear_bhb_loop+0x40/0x90 [ 115.791581][ T5791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.791643][ T5791] RIP: 0033:0x7f637f1ede99 [ 115.791699][ T5791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.791751][ T5791] RSP: 002b:00007f637d446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.791833][ T5791] RAX: ffffffffffffffda RBX: 00007f637f475fa0 RCX: 00007f637f1ede99 [ 115.791876][ T5791] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 115.791915][ T5791] RBP: 00007f637d446090 R08: 0000000000000000 R09: 0000000000000000 [ 115.791949][ T5791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.791980][ T5791] R13: 00007f637f476038 R14: 00007f637f475fa0 R15: 00007ffce6ac52f8 [ 115.792066][ T5791] [ 115.792095][ T5791] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.607516][ T5803] binder: 5801:5803 ioctl 4018620d 0 returned -22 [ 116.658214][ T5806] binder: 5801:5806 ioctl 80049370 200000000000 returned -22 [ 116.802228][ T5813] comedi comedi4: bad chanlist[1]=0x0000b89f chan=47263 range length=2 [ 116.804281][ T5697] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.957592][ T5697] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 116.959547][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.043135][ T5817] FAULT_INJECTION: forcing a failure. [ 117.043135][ T5817] name failslab, interval 1, probability 0, space 0, times 0 [ 117.043179][ T5817] CPU: 1 UID: 0 PID: 5817 Comm: syz.1.26 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.043201][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.043212][ T5817] Call Trace: [ 117.043219][ T5817] [ 117.043226][ T5817] dump_stack_lvl+0xe8/0x150 [ 117.043254][ T5817] should_fail_ex+0x467/0x600 [ 117.043284][ T5817] should_failslab+0xa8/0x100 [ 117.043305][ T5817] __kmalloc_noprof+0xfb/0x790 [ 117.043333][ T5817] ? tomoyo_encode+0x2ad/0x570 [ 117.043360][ T5817] ? tomoyo_encode+0x2ad/0x570 [ 117.043394][ T5817] tomoyo_encode+0x2ad/0x570 [ 117.043428][ T5817] tomoyo_realpath_from_path+0x5fa/0x640 [ 117.043468][ T5817] ? tomoyo_path_number_perm+0x219/0x5f0 [ 117.043494][ T5817] tomoyo_path_number_perm+0x246/0x5f0 [ 117.043520][ T5817] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.043547][ T5817] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.043585][ T5817] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.043604][ T5817] ? lockdep_hardirqs_on+0x7a/0x110 [ 117.043635][ T5817] ? __fget_files+0x2a/0x420 [ 117.043661][ T5817] ? __fget_files+0x3a8/0x420 [ 117.043679][ T5817] ? __fget_files+0x2a/0x420 [ 117.043703][ T5817] security_file_ioctl+0xb9/0x260 [ 117.043728][ T5817] __se_sys_ioctl+0x47/0x170 [ 117.043754][ T5817] do_syscall_64+0x17b/0x530 [ 117.043772][ T5817] ? irqentry_exit+0x10f/0x8f0 [ 117.043795][ T5817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.043814][ T5817] ? clear_bhb_loop+0x40/0x90 [ 117.043838][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.043857][ T5817] RIP: 0033:0x7f000fb7de99 [ 117.043875][ T5817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.043890][ T5817] RSP: 002b:00007f000ddd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.043910][ T5817] RAX: ffffffffffffffda RBX: 00007f000fe05fa0 RCX: 00007f000fb7de99 [ 117.043924][ T5817] RDX: 0000200000000340 RSI: 0000000040246f4c RDI: 0000000000000003 [ 117.043936][ T5817] RBP: 00007f000ddd6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.043948][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.043960][ T5817] R13: 00007f000fe06038 R14: 00007f000fe05fa0 R15: 00007ffc7e6cf788 [ 117.043989][ T5817] [ 117.046617][ T5817] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.315422][ T5697] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 117.825532][ T5827] Zero length message leads to an empty skb [ 118.064213][ T199] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.194242][ T199] usb 4-1: device descriptor read/64, error -71 [ 118.467800][ T5676] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.478836][ T199] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.626879][ T199] usb 4-1: device descriptor read/64, error -71 [ 118.634216][ T5676] usb 2-1: Using ep0 maxpacket: 8 [ 118.646924][ T5676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.646974][ T5676] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.646998][ T5676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.689588][ T5676] usb 2-1: config 0 descriptor?? [ 118.735387][ T199] usb usb4-port1: attempt power cycle [ 118.995488][ T5676] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 119.074473][ T199] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.095556][ T199] usb 4-1: device descriptor read/8, error -71 [ 119.344400][ T199] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.369444][ T199] usb 4-1: device descriptor read/8, error -71 [ 119.480966][ T199] usb usb4-port1: unable to enumerate USB device [ 119.588866][ T5738] usb 2-1: USB disconnect, device number 3 [ 120.424319][ T5676] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.593424][ T5676] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 120.593456][ T5676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.633979][ T5676] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 120.828361][ T5851] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 120.870705][ T5697] usb 3-1: emi26_load_firmware - request_firmware() failed [ 120.870727][ T5697] usb 3-1: emi26_load_firmware - error loading firmware: error = -2 [ 120.870784][ T5697] emi26 - firmware loader 3-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 120.904381][ T5676] usb 2-1: emi26_load_firmware - request_firmware() failed [ 120.904405][ T5676] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 120.904468][ T5676] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 120.904925][ T5697] usb 3-1: USB disconnect, device number 2 [ 121.041435][ T5858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.40'. [ 121.092831][ T9] usb 1-1: emi26_load_firmware - request_firmware() failed [ 121.092854][ T9] usb 1-1: emi26_load_firmware - error loading firmware: error = -2 [ 121.092911][ T9] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 121.126457][ T5676] usb 2-1: USB disconnect, device number 4 [ 121.163518][ T9] usb 1-1: USB disconnect, device number 2 [ 121.471164][ T5697] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.634202][ T5697] usb 3-1: Using ep0 maxpacket: 32 [ 121.636132][ T5697] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 121.636158][ T5697] usb 3-1: config 0 has no interface number 0 [ 121.665452][ T5697] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 121.665484][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.665504][ T5697] usb 3-1: Product: syz [ 121.665519][ T5697] usb 3-1: Manufacturer: syz [ 121.665533][ T5697] usb 3-1: SerialNumber: syz [ 121.731287][ T5697] usb 3-1: config 0 descriptor?? [ 121.759497][ T5697] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 121.971810][ T5869] Bluetooth: MGMT ver 1.23 [ 122.064222][ T5753] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.233971][ T5697] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 122.234873][ T5753] usb 4-1: Using ep0 maxpacket: 16 [ 122.259616][ T5696] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.280073][ T5753] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 122.280105][ T5753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.311997][ T5753] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 122.312029][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.312050][ T5753] usb 4-1: Product: syz [ 122.312065][ T5753] usb 4-1: Manufacturer: syz [ 122.312079][ T5753] usb 4-1: SerialNumber: syz [ 122.393072][ T5753] usb 4-1: config 0 descriptor?? [ 122.400844][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 122.429618][ T5697] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 122.449877][ T5753] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 122.449912][ T5753] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 122.544189][ T5697] usb 3-1: USB disconnect, device number 3 [ 122.591662][ T5696] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 122.591693][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.591714][ T5696] usb 2-1: Product: syz [ 122.591729][ T5696] usb 2-1: Manufacturer: syz [ 122.591808][ T5696] usb 2-1: SerialNumber: syz [ 122.797170][ T5696] usb 2-1: config 0 descriptor?? [ 122.846987][ T5697] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 122.904288][ T5697] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 122.912349][ T5697] quatech2 3-1:0.51: device disconnected [ 123.031180][ T5869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.031960][ T5869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.034409][ T5696] usb 2-1: ignoring: probably an ADSL modem [ 123.137680][ T5753] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 123.142067][ T5753] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 123.355260][ T5753] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 123.355284][ T5753] em28xx 4-1:0.0: No AC97 audio processor [ 123.498781][ T5696] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 123.559388][ T5696] usb 2-1: USB disconnect, device number 5 [ 123.702759][ T5882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.49'. [ 124.024304][ T5594] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.024488][ T4905] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 124.767734][ T5902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.55'. [ 124.798052][ T5697] usb 4-1: USB disconnect, device number 8 [ 124.840184][ T5697] em28xx 4-1:0.0: Disconnecting em28xx [ 124.896546][ T5696] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.951796][ T5697] em28xx: Freeing device [ 125.081413][ T5696] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 125.081437][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.307472][ T5696] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 125.362906][ T5696] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 125.362934][ T5696] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 125.467874][ T5900] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 125.505910][ T5916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.58'. [ 125.531084][ T5696] usb 2-1: emi26_load_firmware - request_firmware() failed [ 125.531101][ T5696] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 125.531167][ T5696] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 125.573638][ T5696] usb 2-1: USB disconnect, device number 6 [ 125.821628][ T5921] netlink: 316 bytes leftover after parsing attributes in process `syz.2.61'. [ 126.144207][ T5753] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.304387][ T5753] usb 3-1: Using ep0 maxpacket: 16 [ 126.306884][ T5753] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.308040][ T5753] usb 3-1: config 7 interface 0 has no altsetting 0 [ 126.310137][ T5753] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0061, bcdDevice=76.09 [ 126.310157][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.310171][ T5753] usb 3-1: Product: syz [ 126.310181][ T5753] usb 3-1: Manufacturer: syz [ 126.310192][ T5753] usb 3-1: SerialNumber: syz [ 126.524240][ T5697] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 126.527748][ T5696] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.527971][ T5754] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.704486][ T5696] usb 1-1: Using ep0 maxpacket: 16 [ 126.706322][ T5697] usb 4-1: Using ep0 maxpacket: 32 [ 126.709039][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.709070][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.709109][ T5697] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 126.709130][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.717698][ T5696] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 126.717730][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 126.723550][ T5754] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.723764][ T5754] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 126.810580][ T5697] usb 4-1: config 0 descriptor?? [ 126.816015][ T5754] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 126.816222][ T5754] usb 2-1: config 0 has no interface number 0 [ 126.816451][ T5754] usb 2-1: config 0 interface 124 has no altsetting 0 [ 126.842227][ T5696] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 126.842454][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.842511][ T5696] usb 1-1: Product: syz [ 126.842664][ T5696] usb 1-1: Manufacturer: syz [ 126.842706][ T5696] usb 1-1: SerialNumber: syz [ 126.887688][ T5697] hub 4-1:0.0: USB hub found [ 126.918362][ T5754] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 126.918392][ T5754] usb 2-1: config 0 has no interface number 0 [ 126.918487][ T5754] usb 2-1: config 0 interface 124 has no altsetting 0 [ 126.923609][ T5754] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 126.923636][ T5754] usb 2-1: config 0 has no interface number 0 [ 126.923668][ T5754] usb 2-1: config 0 interface 124 has no altsetting 0 [ 126.947785][ T5754] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 126.947814][ T5754] usb 2-1: config 0 has no interface number 0 [ 126.947906][ T5754] usb 2-1: config 0 interface 124 has no altsetting 0 [ 126.957656][ T5754] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 126.957921][ T5754] usb 2-1: config 0 has no interface number 0 [ 126.957992][ T5754] usb 2-1: config 0 interface 124 has no altsetting 0 [ 126.993598][ T5754] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 126.993627][ T5754] usb 2-1: config 0 has no interface number 0 [ 126.993660][ T5754] usb 2-1: config 0 interface 124 has no altsetting 0 [ 127.002041][ T5754] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 127.002161][ T5754] usb 2-1: config 0 has no interface number 0 [ 127.002339][ T5754] usb 2-1: config 0 interface 124 has no altsetting 0 [ 127.078501][ T5697] hub 4-1:0.0: 1 port detected [ 127.079585][ T5754] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 127.079669][ T5754] usb 2-1: config 0 has no interface number 0 [ 127.079700][ T5754] usb 2-1: config 0 interface 124 has no altsetting 0 [ 127.138865][ T5696] usb 1-1: config 0 descriptor?? [ 127.160938][ T5754] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=4b.1c [ 127.161210][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.161237][ T5754] usb 2-1: Product: syz [ 127.161249][ T5754] usb 2-1: Manufacturer: syz [ 127.161260][ T5754] usb 2-1: SerialNumber: syz [ 127.320913][ T5696] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 127.320948][ T5696] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 127.380780][ T5754] usb 2-1: config 0 descriptor?? [ 127.669089][ T5937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.688870][ T5937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.847995][ T5696] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 127.850267][ T5696] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 128.022049][ T5697] usb 4-1: USB disconnect, device number 9 [ 128.054713][ T5696] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 128.054737][ T5696] em28xx 1-1:0.0: No AC97 audio processor [ 128.717846][ T5942] ======================================================= [ 128.717846][ T5942] WARNING: The mand mount option has been deprecated and [ 128.717846][ T5942] and is ignored by this kernel. Remove the mand [ 128.717846][ T5942] option from the mount to silence this warning. [ 128.717846][ T5942] ======================================================= [ 129.168946][ T5754] usb 2-1: USB disconnect, device number 7 [ 129.278866][ T5753] usb 3-1: USB disconnect, device number 4 [ 129.326517][ T5676] usb 1-1: USB disconnect, device number 3 [ 129.408527][ T5676] em28xx 1-1:0.0: Disconnecting em28xx [ 129.452782][ T5676] em28xx: Freeing device [ 129.638902][ T5955] netlink: 316 bytes leftover after parsing attributes in process `syz.1.70'. [ 130.114203][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 130.124224][ T5697] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 130.273207][ T9] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 130.273230][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.294879][ T5697] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.294900][ T5697] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 130.294913][ T5697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.294973][ T5697] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 130.296956][ T5697] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.296986][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.297017][ T5697] usb 1-1: Product: syz [ 130.297032][ T5697] usb 1-1: Manufacturer: syz [ 130.409980][ T5697] cdc_wdm 1-1:1.0: skipping garbage [ 130.410001][ T5697] cdc_wdm 1-1:1.0: skipping garbage [ 130.411109][ T9] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 130.427332][ T9] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 130.428103][ T9] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 130.463932][ T5697] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 130.463975][ T5697] cdc_wdm 1-1:1.0: Unknown control protocol [ 130.581125][ T5960] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 130.629766][ T9] usb 4-1: emi26_load_firmware - request_firmware() failed [ 130.629793][ T9] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 130.629855][ T9] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 130.703816][ T9] usb 4-1: USB disconnect, device number 10 [ 131.257347][ T5753] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.454239][ T5753] usb 3-1: Using ep0 maxpacket: 16 [ 131.456711][ T5753] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 131.456743][ T5753] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.461210][ T5753] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 131.461238][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.461259][ T5753] usb 3-1: Product: syz [ 131.461274][ T5753] usb 3-1: Manufacturer: syz [ 131.461289][ T5753] usb 3-1: SerialNumber: syz [ 131.547781][ T5753] usb 3-1: config 0 descriptor?? [ 131.564950][ C0] cdc_wdm 1-1:1.0: unknown notification 112 received: index 29797 len 25902 [ 131.583864][ T5753] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 131.583901][ T5753] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 132.071378][ T6001] netlink: 316 bytes leftover after parsing attributes in process `syz.1.80'. [ 132.176712][ T5753] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 132.177884][ T5753] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 132.234341][ T5676] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 132.380406][ T5753] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 132.380430][ T5753] em28xx 3-1:0.0: No AC97 audio processor [ 132.406785][ T5676] usb 4-1: device descriptor read/64, error -71 [ 132.558719][ T5594] Bluetooth: hci2: hardware error 0xd9 [ 132.654513][ T5676] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 132.791588][ T5676] usb 4-1: device descriptor read/64, error -71 [ 132.898168][ T5676] usb usb4-port1: attempt power cycle [ 132.923647][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.946527][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.251928][ T5753] usb 1-1: USB disconnect, device number 4 [ 133.284843][ T5676] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.307209][ T5676] usb 4-1: device descriptor read/8, error -71 [ 133.564352][ T5676] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 133.585171][ T5676] usb 4-1: device descriptor read/8, error -71 [ 133.705041][ T5676] usb usb4-port1: unable to enumerate USB device [ 134.010241][ T9] usb 3-1: USB disconnect, device number 5 [ 134.012443][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 134.055756][ T9] em28xx: Freeing device [ 134.414334][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.543790][ T6048] netlink: 84 bytes leftover after parsing attributes in process `syz.1.90'. [ 134.566964][ T9] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 134.566995][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.617118][ T9] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 134.618376][ T9] usb 3-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 134.618402][ T9] usb 3-1: Falling back to sysfs fallback for: emi26/loader.fw [ 134.815618][ T5594] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 134.832544][ T6042] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 134.872811][ T9] usb 3-1: emi26_load_firmware - request_firmware() failed [ 134.872836][ T9] usb 3-1: emi26_load_firmware - error loading firmware: error = -2 [ 134.872902][ T9] emi26 - firmware loader 3-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 134.931539][ T9] usb 3-1: USB disconnect, device number 6 [ 134.947837][ T5753] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 135.145321][ T5753] usb 2-1: Using ep0 maxpacket: 16 [ 135.154628][ T5753] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 135.154656][ T5753] usb 2-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 135.154676][ T5753] usb 2-1: config 0 has no interface number 0 [ 135.154723][ T5753] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 135.154749][ T5753] usb 2-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.202736][ T5753] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 135.202815][ T5753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.202869][ T5753] usb 2-1: Product: syz [ 135.202911][ T5753] usb 2-1: Manufacturer: syz [ 135.202952][ T5753] usb 2-1: SerialNumber: syz [ 135.254967][ T5753] usb 2-1: config 0 descriptor?? [ 135.257375][ T6050] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 135.280755][ T5753] asix 2-1:0.34: probe with driver asix failed with error -22 [ 135.364557][ T5322] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 135.524475][ T5322] usb 4-1: Using ep0 maxpacket: 8 [ 135.526503][ T5322] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 135.526593][ T5322] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.526633][ T5322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.526660][ T5322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.529477][ T5322] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 135.529505][ T5322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.529533][ T5322] usb 4-1: Product: syz [ 135.529547][ T5322] usb 4-1: Manufacturer: syz [ 135.529567][ T5322] usb 4-1: SerialNumber: syz [ 135.615610][ T5322] usb 4-1: config 0 descriptor?? [ 135.619913][ T6054] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.880253][ T5322] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 135.918055][ T5322] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 136.009512][ T5753] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.164090][ T5753] usb 3-1: Using ep0 maxpacket: 16 [ 136.169959][ T5753] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 136.169994][ T5753] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.217967][ T5753] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 136.217998][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.218019][ T5753] usb 3-1: Product: syz [ 136.218034][ T5753] usb 3-1: Manufacturer: syz [ 136.218050][ T5753] usb 3-1: SerialNumber: syz [ 136.248120][ T5753] usb 3-1: config 0 descriptor?? [ 136.318814][ T5753] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 136.318850][ T5753] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 136.319536][ C0] powermate: config urb returned -71 [ 136.319776][ C0] powermate: config urb returned -71 [ 136.320041][ C0] powermate: config urb returned -71 [ 136.356614][ T5322] usb 4-1: USB disconnect, device number 15 [ 136.356699][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 136.886016][ T5753] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 136.886771][ T5753] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 136.980046][ T6074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.97'. [ 137.088425][ T5753] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 137.088441][ T5753] em28xx 3-1:0.0: No AC97 audio processor [ 137.723920][ T5322] usb 2-1: USB disconnect, device number 8 [ 138.204291][ T5322] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 138.362126][ T5322] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 138.362160][ T5322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.401735][ T5322] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 138.402998][ T5322] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 138.403023][ T5322] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 138.630116][ T6098] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 138.703600][ T5322] usb 2-1: emi26_load_firmware - request_firmware() failed [ 138.703619][ T5322] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 138.703713][ T5322] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 138.790978][ T5322] usb 2-1: USB disconnect, device number 9 [ 138.869576][ T9] usb 3-1: USB disconnect, device number 7 [ 138.922606][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 138.944141][ T6107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.106'. [ 138.953642][ T9] em28xx: Freeing device [ 139.146896][ T5697] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 139.274198][ T5697] usb 4-1: device descriptor read/64, error -71 [ 139.514270][ T5697] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 139.644223][ T5697] usb 4-1: device descriptor read/64, error -71 [ 139.676485][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 139.754761][ T5697] usb usb4-port1: attempt power cycle [ 139.828898][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 139.837765][ T9] usb 2-1: config 123 interface 0 has no altsetting 0 [ 139.852656][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 139.852679][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.852694][ T9] usb 2-1: Product: syz [ 139.852704][ T9] usb 2-1: Manufacturer: syz [ 139.852715][ T9] usb 2-1: SerialNumber: syz [ 140.084675][ T5322] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 140.132915][ T9] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 140.163452][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.167078][ T9] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 140.167308][ T9] usb 2-1: media controller created [ 140.180241][ T5697] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 140.235588][ T5697] usb 4-1: device descriptor read/8, error -71 [ 140.260032][ T5322] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 140.260085][ T5322] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 140.292479][ T5322] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 140.292502][ T5322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.292516][ T5322] usb 1-1: Product: Б [ 140.292526][ T5322] usb 1-1: Manufacturer: й [ 140.292536][ T5322] usb 1-1: SerialNumber: 㻟뜷㇮ݷ쌔梥éŽé¡‚ᘯï­ä²žå¶ŽåŒ±ã¢šã‡î«»ê˜‹çºƒì…šî¶„⛃໚ㆿì™å³¶ä¬ëº©êŸäŽã˜‡ç½¾á„Žï£á¢¯é¶‰âžë¿¨áƒ•ç—…袋龕䵮껛黟í—ã¦é¹«é¨½à¯¾ê£“궣֗皋뷾ᬾᒿꯖ䖬㮦⯠[ 140.376247][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.484263][ T5697] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 140.505247][ T5753] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.507416][ T5697] usb 4-1: device descriptor read/8, error -71 [ 140.543560][ T9] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 140.543579][ T9] error writing reg: 0xff, val: 0x00 [ 140.632261][ T5697] usb usb4-port1: unable to enumerate USB device [ 140.654346][ T5753] usb 3-1: Using ep0 maxpacket: 16 [ 140.656762][ T5753] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 140.656797][ T5753] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.678604][ T6123] netlink: 184 bytes leftover after parsing attributes in process `syz.0.113'. [ 140.698284][ T5753] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 140.698314][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.698335][ T5753] usb 3-1: Product: syz [ 140.698350][ T5753] usb 3-1: Manufacturer: syz [ 140.698365][ T5753] usb 3-1: SerialNumber: syz [ 140.743763][ T6123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.762120][ T5322] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 140.781274][ T6123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.808317][ T5753] usb 3-1: config 0 descriptor?? [ 140.880293][ T5753] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 140.880328][ T5753] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 140.939318][ T9] dvb_usb_mxl111sf 2-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 141.017756][ T9] usb 2-1: USB disconnect, device number 10 [ 141.170356][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 141.463278][ T5753] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 141.473441][ T5753] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 141.557368][ T5322] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 141.614578][ T5322] usb 1-1: USB disconnect, device number 5 [ 141.760128][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.882934][ T5753] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 141.882957][ T5753] em28xx 3-1:0.0: No AC97 audio processor [ 142.274596][ T5322] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 142.324259][ T5753] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 142.426894][ T5322] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 142.426930][ T5322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.459484][ T5322] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 142.460727][ T5322] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 142.460752][ T5322] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 142.504964][ T5753] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.504993][ T5753] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.514352][ T5696] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 142.541276][ T5753] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.541299][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.541314][ T5753] usb 1-1: Product: syz [ 142.541324][ T5753] usb 1-1: Manufacturer: syz [ 142.541335][ T5753] usb 1-1: SerialNumber: syz [ 142.602457][ T5753] usb 1-1: 0:2 : does not exist [ 142.638280][ T6140] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 142.657421][ T5322] usb 4-1: emi26_load_firmware - request_firmware() failed [ 142.657444][ T5322] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 142.657505][ T5322] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 142.738242][ T32] usb 4-1: USB disconnect, device number 20 [ 142.747275][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 142.766483][ T5696] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 142.766504][ T5696] usb 2-1: config 0 has no interface number 0 [ 142.767008][ T5696] usb 2-1: config 0 interface 184 has no altsetting 0 [ 142.779441][ T5696] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 142.779474][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.779648][ T5696] usb 2-1: Product: syz [ 142.779692][ T5696] usb 2-1: Manufacturer: syz [ 142.779884][ T5696] usb 2-1: SerialNumber: syz [ 142.891938][ T5696] usb 2-1: config 0 descriptor?? [ 142.913601][ T5753] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 143.178355][ T5753] usb 1-1: USB disconnect, device number 6 [ 143.298420][ T5322] usb 3-1: USB disconnect, device number 8 [ 143.342211][ T5322] em28xx 3-1:0.0: Disconnecting em28xx [ 143.380852][ T5322] em28xx: Freeing device [ 143.829460][ T5696] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 143.829495][ T5696] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 143.830152][ T5696] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 143.830176][ T5696] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 143.830197][ T5696] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 143.830214][ T5696] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 143.830522][ T5696] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 143.968020][ T5696] usb 2-1: USB disconnect, device number 11 [ 144.136903][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.261480][ T6164] netlink: 'syz.2.128': attribute type 3 has an invalid length. [ 144.262327][ T6164] syz.2.128 uses obsolete (PF_INET,SOCK_PACKET) [ 145.150253][ T1020] Bluetooth: hci4: Frame reassembly failed (-84) [ 145.178266][ T1020] Bluetooth: hci4: Frame reassembly failed (-84) [ 145.196994][ T6168] pim6reg: entered allmulticast mode [ 145.584238][ T5322] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 145.664271][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 145.741257][ T5322] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 145.741290][ T5322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.814000][ T5322] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 145.814164][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 145.817927][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 145.817959][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.825613][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 145.825644][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.825669][ T9] usb 2-1: Product: syz [ 145.825680][ T9] usb 2-1: Manufacturer: syz [ 145.825690][ T9] usb 2-1: SerialNumber: syz [ 145.896460][ T5322] usb 3-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 145.896489][ T5322] usb 3-1: Falling back to sysfs fallback for: emi26/loader.fw [ 145.897383][ T9] usb 2-1: config 0 descriptor?? [ 145.931132][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 145.931167][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 145.994242][ T6177] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 146.038309][ T5322] usb 3-1: emi26_load_firmware - request_firmware() failed [ 146.038335][ T5322] usb 3-1: emi26_load_firmware - error loading firmware: error = -2 [ 146.038478][ T5322] emi26 - firmware loader 3-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 146.044405][ T5754] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 146.091838][ T5322] usb 3-1: USB disconnect, device number 9 [ 146.216650][ T5754] usb 1-1: config 3 interface 0 has no altsetting 0 [ 146.226628][ T5754] usb 1-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=5f.b0 [ 146.226661][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.226683][ T5754] usb 1-1: Product: syz [ 146.226698][ T5754] usb 1-1: Manufacturer: syz [ 146.226713][ T5754] usb 1-1: SerialNumber: syz [ 146.500045][ T5754] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 146.501583][ T5754] pwc: send_video_command error -71 [ 146.501599][ T5754] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 146.501697][ T5754] Philips webcam 1-1:3.0: probe with driver Philips webcam failed with error -71 [ 146.537260][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 146.538909][ T5754] usb 1-1: USB disconnect, device number 7 [ 146.560846][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 146.737674][ T6189] kvm: user requested TSC rate below hardware speed [ 146.965265][ T9] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 146.965282][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 146.994809][ T5753] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 147.124228][ T5753] usb 3-1: device descriptor read/64, error -71 [ 147.134329][ T5594] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 147.152409][ T4905] Bluetooth: hci4: command 0x1003 tx timeout [ 147.364170][ T5753] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 147.494246][ T5753] usb 3-1: device descriptor read/64, error -71 [ 147.605356][ T5753] usb usb3-port1: attempt power cycle [ 147.965037][ T5753] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 147.997454][ T5753] usb 3-1: device descriptor read/8, error -71 [ 148.165220][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'. [ 148.165245][ T6196] block nbd0: Unsupported socket: should be TCP or UNIX. [ 148.234172][ T5753] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 148.255718][ T5753] usb 3-1: device descriptor read/8, error -71 [ 148.327896][ T6200] FAULT_INJECTION: forcing a failure. [ 148.327896][ T6200] name failslab, interval 1, probability 0, space 0, times 0 [ 148.327933][ T6200] CPU: 0 UID: 0 PID: 6200 Comm: syz.3.142 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.327958][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 148.327970][ T6200] Call Trace: [ 148.327979][ T6200] [ 148.327988][ T6200] dump_stack_lvl+0xe8/0x150 [ 148.328022][ T6200] should_fail_ex+0x467/0x600 [ 148.328058][ T6200] should_failslab+0xa8/0x100 [ 148.328081][ T6200] __kmalloc_cache_noprof+0xa1/0x670 [ 148.328109][ T6200] ? snd_pcm_oss_change_params_locked+0x16d/0x3c80 [ 148.328131][ T6200] ? snd_pcm_oss_change_params_locked+0x16d/0x3c80 [ 148.328157][ T6200] snd_pcm_oss_change_params_locked+0x16d/0x3c80 [ 148.328184][ T6200] ? __lock_acquire+0x6df/0x2e40 [ 148.328208][ T6200] ? tomoyo_path_number_perm+0x219/0x5f0 [ 148.328234][ T6200] ? do_vfs_ioctl+0x1184/0x1550 [ 148.328263][ T6200] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 148.328284][ T6200] ? do_raw_spin_lock+0x12b/0x2f0 [ 148.328318][ T6200] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 148.328337][ T6200] ? lockdep_hardirqs_on+0x7a/0x110 [ 148.328362][ T6200] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 148.328386][ T6200] ? snd_pcm_oss_get_active_substream+0x198/0x280 [ 148.328413][ T6200] snd_pcm_oss_get_active_substream+0x20b/0x280 [ 148.328441][ T6200] snd_pcm_oss_get_formats+0x34/0x420 [ 148.328467][ T6200] snd_pcm_oss_set_format+0x41/0x510 [ 148.328487][ T6200] ? __might_fault+0xaf/0x130 [ 148.328515][ T6200] snd_pcm_oss_ioctl+0xbec/0xe00 [ 148.328536][ T6200] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 148.328555][ T6200] __se_sys_ioctl+0xff/0x170 [ 148.328581][ T6200] do_syscall_64+0x17b/0x530 [ 148.328598][ T6200] ? irqentry_exit+0x10f/0x8f0 [ 148.328614][ T6200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.328633][ T6200] ? clear_bhb_loop+0x40/0x90 [ 148.328654][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.328672][ T6200] RIP: 0033:0x7fb8c7f4de99 [ 148.328703][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.328718][ T6200] RSP: 002b:00007fb8c61a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.328736][ T6200] RAX: ffffffffffffffda RBX: 00007fb8c81d5fa0 RCX: 00007fb8c7f4de99 [ 148.328749][ T6200] RDX: 0000200000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 148.328761][ T6200] RBP: 00007fb8c61a6090 R08: 0000000000000000 R09: 0000000000000000 [ 148.328771][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.328781][ T6200] R13: 00007fb8c81d6038 R14: 00007fb8c81d5fa0 R15: 00007ffe439bb1e8 [ 148.328808][ T6200] [ 148.364951][ T5753] usb usb3-port1: unable to enumerate USB device [ 148.721633][ T5753] usb 2-1: USB disconnect, device number 12 [ 148.792168][ T5753] em28xx 2-1:0.0: Disconnecting em28xx [ 148.809883][ T5753] em28xx: Freeing device [ 149.114983][ T5754] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 149.274359][ T5753] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.277377][ T5754] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 149.277404][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.319168][ T5754] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 149.323904][ T5754] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 149.323977][ T5754] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 149.444214][ T5753] usb 1-1: Using ep0 maxpacket: 8 [ 149.445051][ T5753] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 149.449458][ T5753] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 149.449497][ T5753] usb 1-1: can't read configurations, error -61 [ 149.492897][ T6208] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 149.517703][ T5754] usb 4-1: emi26_load_firmware - request_firmware() failed [ 149.517728][ T5754] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 149.517802][ T5754] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 149.569198][ T5754] usb 4-1: USB disconnect, device number 21 [ 149.574395][ T5753] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 149.747484][ T5753] usb 1-1: Using ep0 maxpacket: 8 [ 149.748172][ T5753] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 149.750181][ T5753] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 149.750224][ T5753] usb 1-1: can't read configurations, error -61 [ 149.750579][ T5753] usb usb1-port1: attempt power cycle [ 149.967484][ T6224] warning: `syz.2.150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 150.099541][ T5753] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 150.121995][ T5753] usb 1-1: Using ep0 maxpacket: 8 [ 150.122716][ T5753] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 150.126293][ T5753] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 150.126388][ T5753] usb 1-1: can't read configurations, error -61 [ 150.219303][ T6229] process 'syz.3.151' launched './file1' with NULL argv: empty string added [ 150.265601][ T5753] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 150.287762][ T5753] usb 1-1: Using ep0 maxpacket: 8 [ 150.288799][ T5753] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 150.302462][ T5753] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 150.302500][ T5753] usb 1-1: can't read configurations, error -61 [ 150.309959][ T5753] usb usb1-port1: unable to enumerate USB device [ 150.639181][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 150.784162][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 150.786677][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 150.786711][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.791117][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.791184][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.791277][ T9] usb 2-1: Product: syz [ 150.791317][ T9] usb 2-1: Manufacturer: syz [ 150.791352][ T9] usb 2-1: SerialNumber: syz [ 150.867681][ T9] usb 2-1: config 0 descriptor?? [ 150.887819][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 150.887845][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 151.054295][ T5738] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 151.206187][ T5738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.206282][ T5738] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 151.206300][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.254882][ T5322] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 151.255055][ T5738] usb 4-1: config 0 descriptor?? [ 151.426038][ T5322] usb 3-1: config 0 has no interfaces? [ 151.428533][ T5322] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 151.428555][ T5322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.428625][ T5322] usb 3-1: Product: syz [ 151.428637][ T5322] usb 3-1: Manufacturer: syz [ 151.428648][ T5322] usb 3-1: SerialNumber: syz [ 151.477266][ T5322] usb 3-1: config 0 descriptor?? [ 151.493512][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 151.503347][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 151.535962][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.557878][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.574181][ T5738] usbhid 4-1:0.0: can't add hid device: -71 [ 151.574377][ T5738] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 151.607681][ T5738] usb 4-1: USB disconnect, device number 22 [ 151.688874][ T5753] usb 3-1: USB disconnect, device number 14 [ 151.907054][ T9] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 151.907070][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 152.054192][ T32] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 152.213052][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.213107][ T32] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 152.213133][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.256251][ T32] usb 4-1: config 0 descriptor?? [ 152.330876][ T6254] nbd: must specify an index to disconnect [ 152.501523][ T5753] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 152.669320][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.670154][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.691952][ T5753] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 152.692030][ T5753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.726928][ T5753] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 152.728869][ T5753] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 152.728897][ T5753] usb 1-1: Falling back to sysfs fallback for: emi26/loader.fw [ 152.804154][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 152.924321][ T6251] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 152.968189][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.968288][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 152.971622][ T5753] usb 1-1: emi26_load_firmware - request_firmware() failed [ 152.971647][ T5753] usb 1-1: emi26_load_firmware - error loading firmware: error = -2 [ 152.971777][ T5753] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 152.973737][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.973767][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.973789][ T9] usb 3-1: Product: syz [ 152.973804][ T9] usb 3-1: Manufacturer: syz [ 152.973819][ T9] usb 3-1: SerialNumber: syz [ 153.086655][ T5753] usb 1-1: USB disconnect, device number 12 [ 153.104753][ T9] cdc_mbim 3-1:1.0: skipping garbage [ 153.294873][ T6258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.296031][ T6258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.553898][ T5322] usb 2-1: USB disconnect, device number 13 [ 153.603070][ T5322] em28xx 2-1:0.0: Disconnecting em28xx [ 153.660152][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.661470][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.712514][ T6261] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 153.751689][ T5322] em28xx: Freeing device [ 154.126186][ T32] usbhid 4-1:0.0: can't add hid device: -71 [ 154.129991][ T32] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 154.143629][ T32] usb 4-1: USB disconnect, device number 23 [ 154.333468][ T9] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 154.342821][ T9] cdc_mbim 3-1:1.0: bind() failure [ 154.390043][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 154.390095][ T9] cdc_ncm 3-1:1.1: bind() failure [ 154.455538][ T9] usb 3-1: USB disconnect, device number 15 [ 154.592611][ T6280] sctp: [Deprecated]: syz.0.168 (pid 6280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.592611][ T6280] Use struct sctp_sack_info instead [ 154.933521][ T6286] capability: warning: `syz.0.170' uses deprecated v2 capabilities in a way that may be insecure [ 155.013646][ T6288] netlink: 380 bytes leftover after parsing attributes in process `syz.2.171'. [ 155.074213][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 155.225099][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 155.233289][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.233355][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.233379][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.273420][ T9] usb 2-1: config 0 descriptor?? [ 155.364578][ T5738] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 155.487228][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 155.524244][ T5738] usb 3-1: Using ep0 maxpacket: 16 [ 155.528126][ T5738] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 155.528160][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.534282][ T5738] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 155.534312][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.534333][ T5738] usb 3-1: Product: syz [ 155.534348][ T5738] usb 3-1: Manufacturer: syz [ 155.534362][ T5738] usb 3-1: SerialNumber: syz [ 155.593823][ T32] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 155.597381][ T5738] usb 3-1: config 0 descriptor?? [ 155.631390][ T5738] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 155.631425][ T5738] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 155.764501][ T32] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 155.764536][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.826410][ T32] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 155.831334][ T32] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 155.831363][ T32] usb 1-1: Falling back to sysfs fallback for: emi26/loader.fw [ 156.086459][ T32] usb 1-1: emi26_load_firmware - request_firmware() failed [ 156.086486][ T32] usb 1-1: emi26_load_firmware - error loading firmware: error = -12 [ 156.086796][ T32] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 156.126428][ T32] usb 1-1: USB disconnect, device number 13 [ 156.325135][ T5738] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 156.326321][ T5738] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 156.734451][ T5738] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 156.734476][ T5738] em28xx 3-1:0.0: No AC97 audio processor [ 156.926253][ T5753] usb 2-1: USB disconnect, device number 14 [ 157.026172][ T6309] ªªªªªª: renamed from vlan0 (while UP) [ 157.151725][ T6313] netlink: 380 bytes leftover after parsing attributes in process `syz.3.180'. [ 157.276861][ T6318] netlink: 'syz.3.182': attribute type 62 has an invalid length. [ 157.294446][ T5738] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 157.492636][ T5738] usb 1-1: config 0 has no interfaces? [ 157.503366][ T5738] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.503398][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.503419][ T5738] usb 1-1: Product: syz [ 157.503435][ T5738] usb 1-1: Manufacturer: syz [ 157.503450][ T5738] usb 1-1: SerialNumber: syz [ 157.566349][ T5738] usb 1-1: config 0 descriptor?? [ 157.771295][ T5738] usb 1-1: USB disconnect, device number 14 [ 157.867291][ T6330] netlink: 'syz.1.186': attribute type 10 has an invalid length. [ 157.867308][ T6330] netlink: 55 bytes leftover after parsing attributes in process `syz.1.186'. [ 157.964257][ T5753] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 158.116983][ T5753] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 158.117092][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.162270][ T5753] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 158.163084][ T5753] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 158.163100][ T5753] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 158.228886][ T5754] usb 3-1: USB disconnect, device number 16 [ 158.243805][ T5754] em28xx 3-1:0.0: Disconnecting em28xx [ 158.259882][ T5754] em28xx: Freeing device [ 158.615014][ T6336] syzkaller1: entered promiscuous mode [ 158.615040][ T6336] syzkaller1: entered allmulticast mode [ 158.917064][ T6343] netlink: 380 bytes leftover after parsing attributes in process `syz.0.189'. [ 159.210435][ T6347] netlink: 495 bytes leftover after parsing attributes in process `syz.0.192'. [ 159.314762][ T32] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 159.424286][ T5754] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 159.444230][ T32] usb 2-1: device descriptor read/64, error -71 [ 159.574268][ T5754] usb 3-1: Using ep0 maxpacket: 16 [ 159.576581][ T5754] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 159.576609][ T5754] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.576635][ T5754] usb 3-1: config 0 has no interface number 0 [ 159.576669][ T5754] usb 3-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 159.576685][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.581755][ T5754] usb 3-1: config 0 descriptor?? [ 159.605156][ T5696] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 159.617228][ T5754] uvcvideo 3-1:0.64: Found Unit with invalid ID 0 [ 159.617891][ T5754] uvcvideo 3-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 159.617973][ T5754] uvcvideo 3-1:0.64: No valid video chain found. [ 159.704293][ T32] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 159.754171][ T5696] usb 1-1: Using ep0 maxpacket: 16 [ 159.756311][ T5696] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 159.756349][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.758754][ T5696] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 159.758787][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.758801][ T5696] usb 1-1: Product: syz [ 159.758811][ T5696] usb 1-1: Manufacturer: syz [ 159.758821][ T5696] usb 1-1: SerialNumber: syz [ 159.782311][ T5696] usb 1-1: config 0 descriptor?? [ 159.836380][ T32] usb 2-1: device descriptor read/64, error -71 [ 159.842002][ T5696] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 159.842027][ T5696] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 159.906068][ T5754] usb 3-1: USB disconnect, device number 17 [ 159.949311][ T32] usb usb2-port1: attempt power cycle [ 160.295057][ T32] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 160.314899][ T32] usb 2-1: device descriptor read/8, error -71 [ 160.444530][ T5696] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 160.445436][ T5696] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 160.584212][ T32] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 160.605883][ T32] usb 2-1: device descriptor read/8, error -71 [ 160.714730][ T32] usb usb2-port1: unable to enumerate USB device [ 160.741062][ T6361] netlink: 44 bytes leftover after parsing attributes in process `syz.2.197'. [ 160.741119][ T6361] netlink: 43 bytes leftover after parsing attributes in process `syz.2.197'. [ 160.741139][ T6361] netlink: 'syz.2.197': attribute type 5 has an invalid length. [ 160.741153][ T6361] netlink: 43 bytes leftover after parsing attributes in process `syz.2.197'. [ 160.860699][ T5696] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 160.860716][ T5696] em28xx 1-1:0.0: No AC97 audio processor [ 161.474248][ T5697] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 161.627526][ T5697] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 161.627558][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.677243][ T5697] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 162.381775][ T1246] usb 1-1: USB disconnect, device number 15 [ 162.395685][ T1246] em28xx 1-1:0.0: Disconnecting em28xx [ 162.419445][ T1246] em28xx: Freeing device [ 163.044655][ T6395] binder: 6383:6395 ioctl c0189378 2000000002c0 returned -22 [ 163.334436][ T5696] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 163.364562][ T1246] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 163.484556][ T5696] usb 2-1: Using ep0 maxpacket: 16 [ 163.486982][ T5696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 163.489017][ T5696] usb 2-1: config index 0 descriptor too short (expected 22, got 18) [ 163.489081][ T5696] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 163.489099][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.537448][ T1246] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.538073][ T1246] usb 1-1: not running at top speed; connect to a high speed hub [ 163.541085][ T1246] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 163.541134][ T1246] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 163.599564][ T1246] usb 1-1: string descriptor 0 read error: -22 [ 163.599769][ T1246] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 163.599828][ T1246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.126138][ T5696] usb 2-1: string descriptor 0 read error: -71 [ 164.177796][ T5696] usb 2-1: USB disconnect, device number 19 [ 164.260326][ T1246] usb 1-1: unable to issue vendor read request (ret = -71) [ 164.260957][ T1246] usb 1-1: unable to issue vendor read request (ret = -71) [ 164.428977][ T1246] usb 1-1: USB disconnect, device number 16 [ 164.975758][ T6417] netlink: 'syz.1.216': attribute type 4 has an invalid length. [ 164.982912][ T6417] FAULT_INJECTION: forcing a failure. [ 164.982912][ T6417] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 164.982938][ T6417] CPU: 1 UID: 0 PID: 6417 Comm: syz.1.216 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.982955][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.982965][ T6417] Call Trace: [ 164.982970][ T6417] [ 164.982977][ T6417] dump_stack_lvl+0xe8/0x150 [ 164.983000][ T6417] should_fail_ex+0x467/0x600 [ 164.983025][ T6417] _copy_from_user+0x2d/0xb0 [ 164.983040][ T6417] kstrtouint_from_user+0xd6/0x180 [ 164.983064][ T6417] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 164.983084][ T6417] ? __lock_acquire+0x6df/0x2e40 [ 164.983100][ T6417] ? trace_raw_output_btrfs_log_inode_enter+0x500/0x500 [ 164.983130][ T6417] ? lock_acquire+0x115/0x350 [ 164.983159][ T6417] proc_fail_nth_write+0x8e/0x210 [ 164.983176][ T6417] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 164.983230][ T6417] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 164.983253][ T6417] vfs_write+0x29f/0xbb0 [ 164.983288][ T6417] ? __pfx_vfs_write+0x10/0x10 [ 164.983316][ T6417] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 164.983339][ T6417] ? lockdep_hardirqs_on+0x7a/0x110 [ 164.983360][ T6417] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 164.983381][ T6417] ? mutex_lock_nested+0x152/0x1d0 [ 164.983417][ T6417] ? fdget_pos+0x252/0x320 [ 164.983449][ T6417] ksys_write+0x156/0x270 [ 164.983478][ T6417] ? __pfx_ksys_write+0x10/0x10 [ 164.983516][ T6417] do_syscall_64+0x17b/0x530 [ 164.983539][ T6417] ? irqentry_exit+0x10f/0x8f0 [ 164.983560][ T6417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.983582][ T6417] ? clear_bhb_loop+0x40/0x90 [ 164.983610][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.983632][ T6417] RIP: 0033:0x7f000fb3e6ce [ 164.983652][ T6417] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.983669][ T6417] RSP: 002b:00007f000ddd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.983692][ T6417] RAX: ffffffffffffffda RBX: 00007f000ddd66c0 RCX: 00007f000fb3e6ce [ 164.983708][ T6417] RDX: 0000000000000001 RSI: 00007f000ddd60a0 RDI: 0000000000000006 [ 164.983721][ T6417] RBP: 00007f000ddd6090 R08: 0000000000000000 R09: 0000000000000000 [ 164.983734][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.983746][ T6417] R13: 00007f000fe06038 R14: 00007f000fe05fa0 R15: 00007ffc7e6cf788 [ 164.983781][ T6417] [ 165.262748][ T6419] syzkaller1: entered promiscuous mode [ 165.262775][ T6419] syzkaller1: entered allmulticast mode [ 166.338376][ T6449] netlink: 444 bytes leftover after parsing attributes in process `syz.1.227'. [ 166.434490][ T6451] netlink: 40 bytes leftover after parsing attributes in process `syz.1.228'. [ 166.495743][ T6453] capability: warning: `syz.0.229' uses 32-bit capabilities (legacy support in use) [ 166.754324][ T1246] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 166.914268][ T1246] usb 1-1: Using ep0 maxpacket: 32 [ 166.916608][ T1246] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.918919][ T1246] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 166.918944][ T1246] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 166.919025][ T1246] usb 1-1: config 14 has no interface number 0 [ 166.919042][ T1246] usb 1-1: config 14 has no interface number 1 [ 166.919104][ T1246] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 166.919127][ T1246] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 166.919153][ T1246] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 166.919180][ T1246] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 166.919209][ T1246] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 166.919235][ T1246] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.919263][ T1246] usb 1-1: config 14 interface 57 has no altsetting 0 [ 166.919281][ T1246] usb 1-1: config 14 interface 228 has no altsetting 0 [ 166.962038][ T1246] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 166.962118][ T1246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.962169][ T1246] usb 1-1: Product: syz [ 166.962215][ T1246] usb 1-1: Manufacturer: syz [ 166.962254][ T1246] usb 1-1: SerialNumber: syz [ 167.419169][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 167.419227][ T6469] block nbd0: Unsupported socket: should be TCP or UNIX. [ 167.581908][ T6473] netlink: 444 bytes leftover after parsing attributes in process `syz.2.236'. [ 167.608027][ T1246] legousbtower 1-1:14.57: interrupt endpoints not found [ 167.720416][ T1246] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 167.747323][ T1246] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 167.822407][ T6480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.238'. [ 167.837390][ T6480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.238'. [ 168.145567][ T1246] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 168.301119][ T1246] usb 2-1: Using ep0 maxpacket: 16 [ 168.309881][ T1246] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 168.309917][ T1246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.313376][ T1246] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 168.313406][ T1246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.313428][ T1246] usb 2-1: Product: syz [ 168.313444][ T1246] usb 2-1: Manufacturer: syz [ 168.313460][ T1246] usb 2-1: SerialNumber: syz [ 168.348128][ T1246] usb 2-1: config 0 descriptor?? [ 168.394639][ T1246] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 168.394677][ T1246] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 168.982018][ T1246] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 168.982901][ T1246] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 169.228509][ T6453] usb 1-1: LEGO USB Tower reset control request failed [ 169.293620][ T5754] usb 1-1: USB disconnect, device number 17 [ 169.383398][ T5754] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 169.612387][ T1246] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 169.818437][ T1246] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 169.821182][ T1246] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 169.821655][ T1246] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 169.823805][ T1246] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 169.824575][ T1246] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 169.875715][ T1246] usb 2-1: USB disconnect, device number 20 [ 170.484200][ T1246] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 170.533685][ T6505] netlink: 444 bytes leftover after parsing attributes in process `syz.1.248'. [ 170.638124][ T1246] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 170.638159][ T1246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.676833][ T1246] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 172.954069][ T5696] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 173.106140][ T5696] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 173.106164][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.128867][ T5696] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 174.008389][ C1] Unknown status report in ack skb [ 175.102582][ T6588] openvswitch: netlink: Message has 7 unknown bytes. [ 175.501321][ T6597] PM: Enabling pm_trace changes system date and time during resume. [ 175.501321][ T6597] PM: Correct system time has to be restored manually after resume. [ 178.095894][ T6612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.857344][ T6634] dvmrp12: entered allmulticast mode [ 179.956526][ T6632] syzkaller1: entered promiscuous mode [ 179.956555][ T6632] syzkaller1: entered allmulticast mode [ 181.987527][ T6657] netlink: 1232 bytes leftover after parsing attributes in process `syz.0.299'. [ 187.432111][ T5592] do_umount: task=syz-executor[5592] propagate_mount_busy()!=0 [ 187.433861][ T5592] do_umount: task=syz-executor[5592] propagate_mount_busy()!=0 [ 188.354869][ T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.770185][ T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.039562][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.042053][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.052802][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.088736][ T5594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.089731][ T5594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.267248][ T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.626377][ T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.450588][ T34] bridge_slave_1: left allmulticast mode [ 190.450756][ T34] bridge_slave_1: left promiscuous mode [ 190.475932][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.697937][ T34] bridge_slave_0: left allmulticast mode [ 190.697974][ T34] bridge_slave_0: left promiscuous mode [ 190.698427][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.888627][ T34] pim6reg: left allmulticast mode [ 191.224454][ T5594] Bluetooth: hci2: command tx timeout [ 191.773972][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.853591][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.885635][ T34] bond0 (unregistering): Released all slaves [ 191.956953][ T5251] 8021q: adding VLAN 0 to HW filter on device eth1 [ 192.892972][ T5251] 8021q: adding VLAN 0 to HW filter on device eth2 [ 193.137160][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.137522][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.137771][ T6709] bridge_slave_0: entered allmulticast mode [ 193.180135][ T6709] bridge_slave_0: entered promiscuous mode [ 193.284379][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.284693][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.284994][ T6709] bridge_slave_1: entered allmulticast mode [ 193.288290][ T6709] bridge_slave_1: entered promiscuous mode [ 193.299496][ T5594] Bluetooth: hci2: command tx timeout [ 193.391106][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.409082][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.473077][ T6709] team0: Port device team_slave_0 added [ 193.478619][ T6709] team0: Port device team_slave_1 added [ 193.877204][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.877219][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.877243][ T6709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.945062][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.945081][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.945111][ T6709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.343918][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.343993][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.353473][ T6709] hsr_slave_0: entered promiscuous mode [ 194.374696][ T6709] hsr_slave_1: entered promiscuous mode [ 194.376265][ T6709] debugfs: 'hsr0' already exists in 'hsr' [ 194.376290][ T6709] Cannot create hsr debugfs directory [ 194.378756][ T5251] 8021q: adding VLAN 0 to HW filter on device eth3 [ 194.612838][ T34] hsr_slave_0: left promiscuous mode [ 194.632838][ T34] hsr_slave_1: left promiscuous mode [ 194.634698][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.634848][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.675247][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.675274][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.757375][ T34] veth1_macvtap: left promiscuous mode [ 194.757649][ T34] veth0_macvtap: left promiscuous mode [ 194.759444][ T34] veth1_vlan: left promiscuous mode [ 194.760622][ T34] veth0_vlan: left promiscuous mode [ 195.372868][ T5594] Bluetooth: hci2: command tx timeout [ 195.503330][ T34] team0 (unregistering): Port device team_slave_1 removed [ 195.563582][ T34] team0 (unregistering): Port device team_slave_0 removed [ 197.179531][ T6709] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 197.228500][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.234971][ T6709] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 197.290571][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.295950][ T6709] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 197.398364][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 197.399847][ T6709] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 197.442108][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.452677][ T5594] Bluetooth: hci2: command tx timeout [ 197.481258][ T5251] 8021q: adding VLAN 0 to HW filter on device eth4 [ 197.726590][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.828084][ T6709] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.862145][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.862458][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.917677][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.917884][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.559994][ T6709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.874835][ T6709] veth0_vlan: entered promiscuous mode [ 198.909068][ T6709] veth1_vlan: entered promiscuous mode [ 198.959567][ T6709] veth0_macvtap: entered promiscuous mode [ 198.974136][ T6709] veth1_macvtap: entered promiscuous mode [ 199.019431][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.046235][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.078744][ T1032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.091169][ T1032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.102891][ T1032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.128961][ T1192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.999535][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.999557][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.122331][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.123418][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.536269][ T6878] mmap: syz.4.321 (6878) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 201.472517][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 201.649841][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.649876][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.649893][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.649923][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.649940][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.666618][ T9] usb 5-1: config 0 descriptor?? [ 202.141968][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 202.142008][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 202.142035][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 202.142064][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 202.142101][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 202.142128][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 202.142155][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 202.142182][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 202.142209][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 202.143084][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 202.303602][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 202.482990][ T9] usb 5-1: USB disconnect, device number 2 [ 202.977136][ T6914] random: crng reseeded on system resumption [ 203.527824][ T1192] Bluetooth: Error in BCSP hdr checksum [ 203.829598][ T1020] Bluetooth: Error in BCSP hdr checksum [ 204.412448][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 204.564168][ T9] usb 5-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 204.564203][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.579984][ T9] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 204.773046][ T5696] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 204.773070][ T5696] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 204.773090][ T5696] CPU: 1 UID: 0 PID: 5696 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.773111][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 204.773123][ T5696] Workqueue: usb_hub_wq hub_event [ 204.773149][ T5696] RIP: 0010:emi26_probe+0x283/0x1690 [ 204.773168][ T5696] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 204.773184][ T5696] RSP: 0018:ffffc900058fed20 EFLAGS: 00010247 [ 204.773198][ T5696] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 204.773210][ T5696] RDX: ffffc9001a429000 RSI: 000000000000e7cb RDI: 0000000000000004 [ 204.773222][ T5696] RBP: ffffc900058fee50 R08: 0000000000000000 R09: 0000000000000000 [ 204.773233][ T5696] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 204.773246][ T5696] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 204.773259][ T5696] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 204.773281][ T5696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.773293][ T5696] CR2: 000000110c47ae87 CR3: 0000000022b38000 CR4: 00000000003526f0 [ 204.773308][ T5696] Call Trace: [ 204.773315][ T5696] [ 204.773327][ T5696] ? __pfx_emi26_probe+0x10/0x10 [ 204.773344][ T5696] ? __pm_runtime_set_status+0x977/0xc40 [ 204.773370][ T5696] usb_probe_interface+0x788/0xe50 [ 204.773399][ T5696] ? __pfx_usb_probe_interface+0x10/0x10 [ 204.773425][ T5696] ? sysfs_do_create_link_sd+0xe0/0x110 [ 204.773443][ T5696] ? driver_sysfs_add+0x1fe/0x210 [ 204.773464][ T5696] ? __pfx_usb_probe_interface+0x10/0x10 [ 204.773487][ T5696] really_probe+0x254/0xae0 [ 204.773510][ T5696] __driver_probe_device+0x1e8/0x360 [ 204.773532][ T5696] driver_probe_device+0x4f/0x240 [ 204.773554][ T5696] __device_attach_driver+0x270/0x410 [ 204.773583][ T5696] bus_for_each_drv+0x25b/0x2f0 [ 204.773610][ T5696] ? __pfx___device_attach_driver+0x10/0x10 [ 204.773632][ T5696] ? __pfx_bus_for_each_drv+0x10/0x10 [ 204.773658][ T5696] ? rt_spin_unlock+0x163/0x200 [ 204.773684][ T5696] __device_attach+0x2c7/0x450 [ 204.773703][ T5696] ? rt_spin_unlock+0x157/0x200 [ 204.773726][ T5696] ? __pfx___device_attach+0x10/0x10 [ 204.773749][ T5696] device_initial_probe+0xa1/0xd0 [ 204.773772][ T5696] bus_probe_device+0x12d/0x220 [ 204.773799][ T5696] device_add+0x7d7/0xb80 [ 204.773817][ T5696] usb_set_configuration+0x1ad8/0x2180 [ 204.773850][ T5696] usb_generic_driver_probe+0x8d/0x150 [ 204.773873][ T5696] usb_probe_device+0x1c3/0x3b0 [ 204.773898][ T5696] ? __pfx_usb_probe_device+0x10/0x10 [ 204.773920][ T5696] really_probe+0x254/0xae0 [ 204.773942][ T5696] __driver_probe_device+0x1e8/0x360 [ 204.773964][ T5696] driver_probe_device+0x4f/0x240 [ 204.773986][ T5696] __device_attach_driver+0x270/0x410 [ 204.774009][ T5696] bus_for_each_drv+0x25b/0x2f0 [ 204.774036][ T5696] ? __pfx___device_attach_driver+0x10/0x10 [ 204.774058][ T5696] ? __pfx_bus_for_each_drv+0x10/0x10 [ 204.774084][ T5696] ? rt_spin_unlock+0x163/0x200 [ 204.774109][ T5696] __device_attach+0x2c7/0x450 [ 204.774130][ T5696] ? __pfx___device_attach+0x10/0x10 [ 204.774154][ T5696] device_initial_probe+0xa1/0xd0 [ 204.774175][ T5696] bus_probe_device+0x12d/0x220 [ 204.774202][ T5696] device_add+0x7d7/0xb80 [ 204.774220][ T5696] usb_new_device+0x98d/0x1610 [ 204.774237][ T5696] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 204.774255][ T5696] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 204.774287][ T5696] ? __pfx_usb_new_device+0x10/0x10 [ 204.774307][ T5696] hub_event+0x28cf/0x4cf0 [ 204.774351][ T5696] ? __pfx_hub_event+0x10/0x10 [ 204.774375][ T5696] ? rcu_is_watching+0x15/0xb0 [ 204.774396][ T5696] ? process_one_work+0x7fd/0x1480 [ 204.774413][ T5696] process_one_work+0xaaf/0x1480 [ 204.774438][ T5696] ? __pfx_process_one_work+0x10/0x10 [ 204.774454][ T5696] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.774481][ T5696] ? assign_work+0x3cf/0x5d0 [ 204.774498][ T5696] worker_thread+0xb05/0x10d0 [ 204.774526][ T5696] kthread+0x388/0x470 [ 204.774549][ T5696] ? __pfx_worker_thread+0x10/0x10 [ 204.774567][ T5696] ? __pfx_kthread+0x10/0x10 [ 204.774590][ T5696] ret_from_fork+0x514/0xb70 [ 204.774614][ T5696] ? __pfx_ret_from_fork+0x10/0x10 [ 204.774638][ T5696] ? __switch_to+0xc89/0x1420 [ 204.774658][ T5696] ? __pfx_kthread+0x10/0x10 [ 204.774681][ T5696] ret_from_fork_asm+0x1a/0x30 [ 204.774711][ T5696] [ 204.774717][ T5696] Modules linked in: [ 204.774737][ T5697] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] SMP KASAN PTI [ 204.774760][ T5696] ---[ end trace 0000000000000000 ]--- [ 204.774760][ T5697] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 204.774789][ T5697] CPU: 0 UID: 0 PID: 5697 Comm: kworker/0:5 Tainted: G D syzkaller #0 PREEMPT_{RT,(full)} [ 204.774815][ T5697] Tainted: [D]=DIE [ 204.774821][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 204.774833][ T5697] Workqueue: usb_hub_wq hub_event [ 204.774862][ T5697] RIP: 0010:emi26_probe+0x283/0x1690 [ 204.774879][ T5697] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 204.774894][ T5697] RSP: 0018:ffffc9000594ed20 EFLAGS: 00010247 [ 204.774908][ T5697] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 204.774920][ T5697] RDX: ffffc90019c28000 RSI: 000000000000ea4e RDI: 0000000000000004 [ 204.774932][ T5697] RBP: ffffc9000594ee50 R08: 0000000000000000 R09: 0000000000000000 [ 204.774943][ T5697] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 204.774956][ T5697] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 204.774969][ T5697] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 204.774984][ T5697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.774995][ T5697] CR2: 000000110c3103e0 CR3: 0000000022b38000 CR4: 00000000003526f0 [ 204.775010][ T5697] Call Trace: [ 204.775017][ T5697] [ 204.775028][ T5697] ? __pfx_emi26_probe+0x10/0x10 [ 204.775044][ T5697] ? __pm_runtime_set_status+0x977/0xc40 [ 204.775069][ T5697] usb_probe_interface+0x788/0xe50 [ 204.775097][ T5697] ? __pfx_usb_probe_interface+0x10/0x10 [ 204.775123][ T5697] ? sysfs_do_create_link_sd+0xe0/0x110 [ 204.775141][ T5697] ? driver_sysfs_add+0x1fe/0x210 [ 204.775161][ T5697] ? __pfx_usb_probe_interface+0x10/0x10 [ 204.775184][ T5697] really_probe+0x254/0xae0 [ 204.775207][ T5697] __driver_probe_device+0x1e8/0x360 [ 204.775229][ T5697] driver_probe_device+0x4f/0x240 [ 204.775252][ T5697] __device_attach_driver+0x270/0x410 [ 204.775276][ T5697] bus_for_each_drv+0x25b/0x2f0 [ 204.775303][ T5697] ? __pfx___device_attach_driver+0x10/0x10 [ 204.775324][ T5697] ? __pfx_bus_for_each_drv+0x10/0x10 [ 204.775350][ T5697] ? rt_spin_unlock+0x163/0x200 [ 204.775376][ T5697] __device_attach+0x2c7/0x450 [ 204.775395][ T5697] ? rt_spin_unlock+0x157/0x200 [ 204.775419][ T5697] ? __pfx___device_attach+0x10/0x10 [ 204.775444][ T5697] device_initial_probe+0xa1/0xd0 [ 204.775465][ T5697] bus_probe_device+0x12d/0x220 [ 204.775493][ T5697] device_add+0x7d7/0xb80 [ 204.775511][ T5697] usb_set_configuration+0x1ad8/0x2180 [ 204.775543][ T5697] usb_generic_driver_probe+0x8d/0x150 [ 204.775566][ T5697] usb_probe_device+0x1c3/0x3b0 [ 204.775590][ T5697] ? __pfx_usb_probe_device+0x10/0x10 [ 204.775612][ T5697] really_probe+0x254/0xae0 [ 204.775635][ T5697] __driver_probe_device+0x1e8/0x360 [ 204.775657][ T5697] driver_probe_device+0x4f/0x240 [ 204.775679][ T5697] __device_attach_driver+0x270/0x410 [ 204.775702][ T5697] bus_for_each_drv+0x25b/0x2f0 [ 204.775728][ T5697] ? __pfx___device_attach_driver+0x10/0x10 [ 204.775750][ T5697] ? __pfx_bus_for_each_drv+0x10/0x10 [ 204.775782][ T5697] ? rt_spin_unlock+0x163/0x200 [ 204.775808][ T5697] __device_attach+0x2c7/0x450 [ 204.775828][ T5697] ? __pfx___device_attach+0x10/0x10 [ 204.775852][ T5697] device_initial_probe+0xa1/0xd0 [ 204.775873][ T5697] bus_probe_device+0x12d/0x220 [ 204.775900][ T5697] device_add+0x7d7/0xb80 [ 204.775918][ T5697] usb_new_device+0x98d/0x1610 [ 204.775935][ T5697] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 204.775954][ T5697] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 204.775977][ T5697] ? __pfx_usb_new_device+0x10/0x10 [ 204.775998][ T5697] hub_event+0x28cf/0x4cf0 [ 204.776038][ T5697] ? __pfx_hub_event+0x10/0x10 [ 204.776061][ T5697] ? rcu_is_watching+0x15/0xb0 [ 204.776081][ T5697] ? process_one_work+0x7fd/0x1480 [ 204.776098][ T5697] process_one_work+0xaaf/0x1480 [ 204.776123][ T5697] ? __pfx_process_one_work+0x10/0x10 [ 204.776138][ T5697] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.776165][ T5697] ? assign_work+0x3cf/0x5d0 [ 204.776183][ T5697] worker_thread+0xb05/0x10d0 [ 204.776205][ T5697] ? __kthread_parkme+0x71/0x1f0 [ 204.776228][ T5697] kthread+0x388/0x470 [ 204.776251][ T5697] ? __pfx_worker_thread+0x10/0x10 [ 204.776270][ T5697] ? __pfx_kthread+0x10/0x10 [ 204.776293][ T5697] ret_from_fork+0x514/0xb70 [ 204.776318][ T5697] ? __pfx_ret_from_fork+0x10/0x10 [ 204.776341][ T5697] ? __switch_to+0xc89/0x1420 [ 204.776362][ T5697] ? __pfx_kthread+0x10/0x10 [ 204.776385][ T5697] ret_from_fork_asm+0x1a/0x30 [ 204.776416][ T5697] [ 204.776421][ T5697] Modules linked in: [ 204.776434][ T1246] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#3] SMP KASAN PTI [ 204.776456][ T5697] ---[ end trace 0000000000000000 ]--- [ 204.776455][ T1246] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 204.776476][ T1246] CPU: 1 UID: 0 PID: 1246 Comm: kworker/1:2 Tainted: G D syzkaller #0 PREEMPT_{RT,(full)} [ 204.776505][ T1246] Tainted: [D]=DIE [ 204.776513][ T1246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 204.776526][ T1246] Workqueue: usb_hub_wq hub_event [ 204.776553][ T1246] RIP: 0010:emi26_probe+0x283/0x1690 [ 204.776574][ T1246] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 204.776591][ T1246] RSP: 0018:ffffc90006c7ed20 EFLAGS: 00010247 [ 204.776605][ T1246] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 204.776617][ T1246] RDX: ffffc9001ac2a000 RSI: 000000000000df01 RDI: 0000000000000004 [ 204.776629][ T1246] RBP: ffffc90006c7ee50 R08: 0000000000000000 R09: 0000000000000000 [ 204.776640][ T1246] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 204.776653][ T1246] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 204.776666][ T1246] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 204.776681][ T1246] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.776693][ T1246] CR2: 000000110c47ae87 CR3: 0000000022b38000 CR4: 00000000003526f0 [ 204.776709][ T1246] Call Trace: [ 204.776715][ T1246] [ 204.776726][ T1246] ? __pfx_emi26_probe+0x10/0x10 [ 204.776742][ T1246] ? __pm_runtime_set_status+0x977/0xc40 [ 204.776767][ T1246] usb_probe_interface+0x788/0xe50 [ 204.776796][ T1246] ? __pfx_usb_probe_interface+0x10/0x10 [ 204.776823][ T1246] ? sysfs_do_create_link_sd+0xe0/0x110 [ 204.776842][ T1246] ? driver_sysfs_add+0x1fe/0x210 [ 204.776862][ T1246] ? __pfx_usb_probe_interface+0x10/0x10 [ 204.776885][ T1246] really_probe+0x254/0xae0 [ 204.776908][ T1246] __driver_probe_device+0x1e8/0x360 [ 204.776930][ T1246] driver_probe_device+0x4f/0x240 [ 204.776953][ T1246] __device_attach_driver+0x270/0x410 [ 204.776976][ T1246] bus_for_each_drv+0x25b/0x2f0 [ 204.777003][ T1246] ? __pfx___device_attach_driver+0x10/0x10 [ 204.777025][ T1246] ? __pfx_bus_for_each_drv+0x10/0x10 [ 204.777052][ T1246] ? rt_spin_unlock+0x163/0x200 [ 204.777077][ T1246] __device_attach+0x2c7/0x450 [ 204.777096][ T1246] ? rt_spin_unlock+0x157/0x200 [ 204.777119][ T1246] ? __pfx___device_attach+0x10/0x10 [ 204.777143][ T1246] device_initial_probe+0xa1/0xd0 [ 204.777164][ T1246] bus_probe_device+0x12d/0x220 [ 204.777192][ T1246] device_add+0x7d7/0xb80 [ 204.777210][ T1246] usb_set_configuration+0x1ad8/0x2180 [ 204.777243][ T1246] usb_generic_driver_probe+0x8d/0x150 [ 204.777272][ T1246] usb_probe_device+0x1c3/0x3b0 [ 204.777297][ T1246] ? __pfx_usb_probe_device+0x10/0x10 [ 204.777319][ T1246] really_probe+0x254/0xae0 [ 204.777342][ T1246] __driver_probe_device+0x1e8/0x360 [ 204.777365][ T1246] driver_probe_device+0x4f/0x240 [ 204.777389][ T1246] __device_attach_driver+0x270/0x410 [ 204.777412][ T1246] bus_for_each_drv+0x25b/0x2f0 [ 204.777440][ T1246] ? __pfx___device_attach_driver+0x10/0x10 [ 204.777462][ T1246] ? __pfx_bus_for_each_drv+0x10/0x10 [ 204.777488][ T1246] ? rt_spin_unlock+0x163/0x200 [ 204.777513][ T1246] __device_attach+0x2c7/0x450 [ 204.777534][ T1246] ? __pfx___device_attach+0x10/0x10 [ 204.777559][ T1246] device_initial_probe+0xa1/0xd0 [ 204.777580][ T1246] bus_probe_device+0x12d/0x220 [ 204.777607][ T1246] device_add+0x7d7/0xb80 [ 204.777625][ T1246] usb_new_device+0x98d/0x1610 [ 204.777641][ T1246] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 204.777660][ T1246] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 204.777683][ T1246] ? __pfx_usb_new_device+0x10/0x10 [ 204.777703][ T1246] hub_event+0x28cf/0x4cf0 [ 204.777723][ T1246] ? __kasan_slab_free+0x5c/0x80 [ 204.777748][ T1246] ? kfree+0x1c5/0x6c0 [ 204.777790][ T1246] ? __pfx_hub_event+0x10/0x10 [ 204.777814][ T1246] ? rcu_is_watching+0x15/0xb0 [ 204.777834][ T1246] ? process_one_work+0x7fd/0x1480 [ 204.777851][ T1246] process_one_work+0xaaf/0x1480 [ 204.777876][ T1246] ? __pfx_process_one_work+0x10/0x10 [ 204.777892][ T1246] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.777918][ T1246] ? assign_work+0x3cf/0x5d0 [ 204.777936][ T1246] worker_thread+0xb05/0x10d0 [ 204.777963][ T1246] kthread+0x388/0x470 [ 204.777985][ T1246] ? __pfx_worker_thread+0x10/0x10 [ 204.778002][ T1246] ? __pfx_kthread+0x10/0x10 [ 204.778026][ T1246] ret_from_fork+0x514/0xb70 [ 204.778051][ T1246] ? __pfx_ret_from_fork+0x10/0x10 [ 204.778074][ T1246] ? __switch_to+0xc89/0x1420 [ 204.778094][ T1246] ? __pfx_kthread+0x10/0x10 [ 204.778117][ T1246] ret_from_fork_asm+0x1a/0x30 [ 204.778149][ T1246] [ 204.778154][ T1246] Modules linked in: [ 204.778167][ T9] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#4] SMP KASAN PTI [ 204.778187][ T1246] ---[ end trace 0000000000000000 ]--- [ 204.778188][ T9] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 204.778209][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G D syzkaller #0 PREEMPT_{RT,(full)} [ 204.778238][ T9] Tainted: [D]=DIE [ 204.778246][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 204.778259][ T9] Workqueue: usb_hub_wq hub_event [ 204.778286][ T9] RIP: 0010:emi26_probe+0x283/0x1690 [ 204.778306][ T9] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 204.778323][ T9] RSP: 0018:ffffc900000e6d20 EFLAGS: 00010247 [ 204.778341][ T9] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 204.778356][ T9] RDX: ffffc9001b42b000 RSI: 000000000000ec1b RDI: 0000000000000004 [ 204.778371][ T9] RBP: ffffc900000e6e50 R08: 0000000000000000 R09: 0000000000000000 [ 204.778387][ T9] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 204.778403][ T9] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 204.778419][ T9] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 204.778438][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.778453][ T9] CR2: 000000110c3103e0 CR3: 0000000022b38000 CR4: 00000000003526f0 [ 204.778472][ T9] Call Trace: [ 204.778479][ T9] [ 204.778494][ T9] ? __pfx_emi26_probe+0x10/0x10 [ 204.778515][ T9] ? __pm_runtime_set_status+0x977/0xc40 [ 204.778544][ T9] usb_probe_interface+0x788/0xe50 [ 204.778579][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 204.778612][ T9] ? sysfs_do_create_link_sd+0xe0/0x110 [ 204.778634][ T9] ? driver_sysfs_add+0x1fe/0x210 [ 204.778660][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 204.778690][ T9] really_probe+0x254/0xae0 [ 204.778717][ T9] __driver_probe_device+0x1e8/0x360 [ 204.778743][ T9] driver_probe_device+0x4f/0x240 [ 204.778778][ T9] __device_attach_driver+0x270/0x410 [ 204.778808][ T9] bus_for_each_drv+0x25b/0x2f0 [ 204.778840][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 204.778866][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 204.778899][ T9] ? rt_spin_unlock+0x163/0x200 [ 204.778930][ T9] __device_attach+0x2c7/0x450 [ 204.778953][ T9] ? rt_spin_unlock+0x157/0x200 [ 204.778982][ T9] ? __pfx___device_attach+0x10/0x10 [ 204.779012][ T9] device_initial_probe+0xa1/0xd0 [ 204.779038][ T9] bus_probe_device+0x12d/0x220 [ 204.779070][ T5753] usb 4-1: emi26_load_firmware - request_firmware() failed [ 204.779071][ T9] device_add+0x7d7/0xb80 [ 204.779089][ T5753] usb 4-1: emi26_load_firmware - error loading firmware: error = -12 [ 204.779094][ T9] usb_set_configuration+0x1ad8/0x2180 [ 204.779132][ T5753] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 204.779134][ T9] usb_generic_driver_probe+0x8d/0x150 [ 204.779163][ T9] usb_probe_device+0x1c3/0x3b0 [ 204.779193][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 204.779220][ T9] really_probe+0x254/0xae0 [ 204.779248][ T9] __driver_probe_device+0x1e8/0x360 [ 204.779274][ T9] driver_probe_device+0x4f/0x240 [ 204.779302][ T9] __device_attach_driver+0x270/0x410 [ 204.779330][ T9] bus_for_each_drv+0x25b/0x2f0 [ 204.779363][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 204.779391][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 204.779424][ T9] ? rt_spin_unlock+0x163/0x200 [ 204.779456][ T9] __device_attach+0x2c7/0x450 [ 204.779482][ T9] ? __pfx___device_attach+0x10/0x10 [ 204.779512][ T9] device_initial_probe+0xa1/0xd0 [ 204.779537][ T9] bus_probe_device+0x12d/0x220 [ 204.779572][ T9] device_add+0x7d7/0xb80 [ 204.779594][ T9] usb_new_device+0x98d/0x1610 [ 204.779614][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 204.779637][ T9] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 204.779666][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 204.779667][ T5696] RIP: 0010:emi26_probe+0x283/0x1690 [ 204.779692][ T5696] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 204.779692][ T9] hub_event+0x28cf/0x4cf0 [ 204.779712][ T5696] RSP: 0018:ffffc900058fed20 EFLAGS: 00010247 [ 204.779732][ T5696] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 204.779748][ T5696] RDX: ffffc9001a429000 RSI: 000000000000e7cb RDI: 0000000000000004 [ 204.779743][ T9] ? __pfx_hub_event+0x10/0x10 [ 204.779763][ T5696] RBP: ffffc900058fee50 R08: 0000000000000000 R09: 0000000000000000 [ 204.779779][ T5696] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 204.779783][ T9] ? rcu_is_watching+0x15/0xb0 [ 204.779795][ T5696] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 204.779809][ T9] ? process_one_work+0x7fd/0x1480 [ 204.779811][ T5696] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 204.779831][ T5696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.779831][ T9] process_one_work+0xaaf/0x1480 [ 204.779846][ T5696] CR2: 000000110c47ae87 CR3: 0000000022b38000 CR4: 00000000003526f0 [ 204.779867][ T5696] Kernel panic - not syncing: Fatal exception [ 204.779864][ T9] ? __pfx_process_one_work+0x10/0x10 [ 204.780504][ T5696] Kernel Offset: disabled