last executing test programs: 9.197132948s ago: executing program 0 (id=8921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40810840}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x100, 0x9, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_COOKIE={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4000005) r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0x5, 0x121003) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x140e, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008086) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x7f}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}, @NL80211_ATTR_HE_OBSS_PD={0x40, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "3f505d75b7f19644"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xec}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x9}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "85f15c38eecfbe00"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "75bd87dd78204c6c"}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x1) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x80, 0x80, 0x48, 0xd8d6, {{0x2f, 0x4, 0x1, 0x24, 0xbc, 0x66, 0x0, 0x5, 0x29, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x1c, 0xaf, 0x1, 0x3, [{@private=0xa010102, 0x9}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0xa8}]}, @ssrr={0x89, 0x23, 0x90, [@empty, @broadcast, @broadcast, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @ssrr={0x89, 0x7, 0xd5, [@loopback]}, @timestamp_addr={0x44, 0xc, 0xaf, 0x1, 0x1, [{@empty, 0x3}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x2e, 0x1, [{0x1, 0x9, "dab3008b78d360"}, {0x6, 0x3, 'C'}, {0x7, 0xc, "c5874081c4c3af0c78ee"}, {0x0, 0xb, "37b1bf4fad27d62071"}, {0x0, 0x5, "7ff6e5"}]}, @timestamp={0x44, 0x20, 0x1e, 0x0, 0x3, [0x77d, 0xffffffff, 0x7fff, 0xffff, 0x3, 0xa, 0xfffffff8]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x8, 0x700, 0xff, 0x7fff, {{0x6, 0x4, 0x0, 0x36, 0x18, 0x65, 0x0, 0x2, 0x2f, 0x0, @local, @multicast2, {[@end]}}}}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000006c0)={0x0, @broadcast, @private}, &(0x7f0000000700)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xdc, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xdc}}, 0x4000000) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000980)={0x2f0, r12, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x19c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x528}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x41}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa8c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xda0b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000d00)={0x0, 0x2, 0x2, 0x0, 0x9}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000d40)={0x0, @in6={{0xa, 0x4e22, 0x3b89, @mcast1, 0x3}}, 0x6, 0x7, 0xfffff001, 0xc1d9, 0x0, 0xff, 0x6}, 0x9c) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r13, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x40, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd77929ab, 0xe}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1000, '\x00', r11, r2, 0x2, 0x3, 0x2}, 0x50) getsockopt$sock_int(r13, 0x1, 0x2b, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24000851) r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r14, 0x80111500, &(0x7f0000001140)) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000001180)={0x0, 0xfffffff8}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000011c0)={@loopback, @mcast1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x3, 0x3, 0x0, 0x100, 0x0, 0x2000000, r8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001240)={0x10001, 0x38b4f38413f57ca, 0x1, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 9.176777511s ago: executing program 0 (id=8922): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x224}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 9.051342488s ago: executing program 0 (id=8923): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r4, &(0x7f0000003100)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1913, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) 8.381187754s ago: executing program 3 (id=8924): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xe}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0xa1b80e0ec192df95) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4db75f67208c7ddc, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x102, 0x0) r2 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000c, 0x4000013, r2, 0xac693000) r3 = socket$inet(0x2, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40e02, 0x0) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r7, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 7.847443254s ago: executing program 4 (id=8925): r0 = syz_open_dev$vbi(&(0x7f00000003c0), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x6, 0x1, 0x0, 0x2}) 7.756961387s ago: executing program 4 (id=8926): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8004, 0x0, 0x9, 0xda, 0x2, 0xfa11, 0x7}, 0x0) r2 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x40) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000d12000/0x10000)=nil, 0x10000}, 0x7}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030323030303205003030303030303034303030302c750100725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) 7.562778421s ago: executing program 3 (id=8927): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600609040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000680)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 5.801090151s ago: executing program 1 (id=8936): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="149ad84c6d3bd31eae000000000000000500000a44000000090a010400000000000900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x34}}, 0x8000) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r4 = syz_io_uring_setup(0x19d1, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000040)=0xb) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="03c65211a4c513d0b59bc9c0475e9fb7", 0x10) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000100)={0x4208d745b47bf611, 0x0, {0x4, 0xbb, 0x84, 0x6}}) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) restart_syscall() syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r8) sendto$packet(r8, &(0x7f0000000000)="05000806", 0x4, 0x0, &(0x7f0000000080)={0x11, 0xf8, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x64) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000000)={r12, 0x8001}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000440)={r12, @in6={{0xa, 0x4e22, 0x7fff, @remote, 0x7fff}}, 0x5, 0xb0, 0xfffffff7, 0x7, 0x9}, &(0x7f0000000180)=0x98) 5.661879049s ago: executing program 4 (id=8937): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xe}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0xa1b80e0ec192df95) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4db75f67208c7ddc, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x102, 0x0) r2 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000c, 0x4000013, r2, 0xac693000) r3 = socket$inet(0x2, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f36006e090890e0878f0e1ac6e7049b3341959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07480936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x326, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40e02, 0x0) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r7, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 5.545084365s ago: executing program 4 (id=8939): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000240)=""/124, 0x7c}], 0x2, 0xe9b4, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4c001}, 0xc000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)='`M', 0x2}], 0x1) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x93b, @local, 0x6}, r7}}, 0x30) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 5.133452555s ago: executing program 3 (id=8940): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r4, &(0x7f0000003100)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, 0x0, 0x1913, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) 4.691977689s ago: executing program 1 (id=8943): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x30, 0x1, @in={0x2, 0x4e23, @loopback}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0xf000000, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 4.690332392s ago: executing program 0 (id=8944): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x189500) r2 = fcntl$dupfd(r0, 0x0, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(r2, 0x0, 0x0, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r4, &(0x7f00000007c0)={@void, @void, @eth={@broadcast, @random="3423e57f6541", @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3d, 0x24, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @multicast2}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x34, r8, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x4000) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x2d, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x30, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x2, 0x0, @broadcast, {0x5, 0x4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @empty}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="cff80291"]}]}, 0x1c}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000180001002cbd7000000000000a401400fe04ff06"], 0x1c}}, 0x0) 3.993358848s ago: executing program 2 (id=8946): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4b000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) sendto$inet(r1, &(0x7f0000000400)="8ce2ad4d4f95e08741d66d1f81", 0xfdef, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) (fail_nth: 5) 3.992697135s ago: executing program 0 (id=8947): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8004, 0x0, 0x9, 0xda, 0x2, 0xfa11, 0x7}, 0x0) r2 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x40) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000d12000/0x10000)=nil, 0x10000}, 0x7}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030323030303205003030303030303034303030302c750100725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) 3.855206988s ago: executing program 4 (id=8948): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a0104000000a11380bcc6c4524904090001003a5d1466750965c2c7e0020873797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000408000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x8, 0xa5, {0xa5, 0x9, "0f230ba1ac276adf10a8948f7ffeb4715df47d04b5bca964005a3156842ec89aee9b2b72646835d95e3061f42fa6e7627dcab2e66577b8854596e11a0442933510348a4a42eab45672c37fb4dc6c8dccfe5d5f3bc459e3e9bb8d7847b1c1be96d3acb6dabcd45eeed99d27f9e9f7143a8e1509dfe753ad4f04a67bd9b176701a3041a035c9bfabfad961840e3cc55ed78de9a215dd3e116313f52fa4f60423891dfde0"}}, &(0x7f0000000180)={0x0, 0x3, 0xba, @string={0xba, 0x3, "64e292555aa34d3fa285dd10e7cbf3933b934143b316ffd94a15d381e5ff3073435c4b641c16e3e70d1a9176c2ea68c6533a2286b991c43fce2ad8e6558284fa3ca20c52bb8386057e1466ba18257620666a27996f9b7ccc7b6c913312abfcc2bbfb95e6eaf72c7a050952273d6f9224c07c908d5c71c5fa11e2f0382532e253723c85301890b90b2ed00d2cd0ec3c52edfdceebffa4b043cb82bf3e997610c605a222d886eac9b09b71e069214269a60b40f389bd254293"}}}, &(0x7f0000000380)={0x34, &(0x7f0000000100)={0x0, 0x31, 0x31, "08ba9031d46dc3a02dd7769d3880a4c254c0d61773e918a80525c342194270fbfaedac1840bb8141da727587f7777c2857"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8f}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "1bbb83c3cc3380e65c80e25c24909e7f75156f37c21287de3397ea050326e7739a233e2905a7339c3a228d4731c846"}}) 3.770857779s ago: executing program 1 (id=8949): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xe}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0xa1b80e0ec192df95) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4db75f67208c7ddc, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x102, 0x0) r2 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000c, 0x4000013, r2, 0xac693000) r3 = socket$inet(0x2, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x326, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40e02, 0x0) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r7, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3.77066402s ago: executing program 2 (id=8950): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0), 0x2) syz_usb_connect$cdc_ecm(0x5, 0x99, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x1, 0x1, 0x3, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0xc, 0x3, 0x2, 0x6, 0x0, 0x87, {{0x7, 0x24, 0x6, 0x0, 0x0, '\r2'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x6aa, 0x6, 0x1}, [@obex={0x5, 0x24, 0x15, 0x4}, @mbim={0xc, 0x24, 0x1b, 0xfff8, 0x55f, 0x9, 0x5, 0x3, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x9c}, @mdlm={0x15, 0x24, 0x12, 0x8}, @ncm={0x6, 0x24, 0x1a, 0xfffd}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x86, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x7, 0x5}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0x81, 0x9, 0x10, 0x9}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x4, [{0x8f, &(0x7f0000000200)=@string={0x8f, 0x3, "62ab04be91d3672a9e37edc2b3afd2bfe7b95755cfd468113fbbbebfa884b32c72f3d94ed742f3a4244d5fe789b9d0108cda5d05af92bf0925e7783761467556d2c445ab8a16338fd0bae2d207116d278dd7be517524b5e96f6082727e38734a9d06608716656a41177e6080e1c8f3ae70fb4340a94198e0589f325bbdd3873b80b263ba92ca46a206c24e8884"}}, {0xdc, &(0x7f00000003c0)=@string={0xdc, 0x3, "d5da169cd2500f2fea88ca9b75b7241f1bae7f1ae100c7bea7d1a779226867fd6bb88cac859d7c5d8867480f9a0a2b3b726550455d89a2f454d98930c8eddd86e6567f8c3017e93ffd8c251cfc198bf58fd64b484b9ea3d9b28280ef9e750724254c5cf4c205b36b191994c272682f3347f60c86aa92d5f6335f55283f36113b079b306b29d2ae043be3b3ce89860681ca1ee8291a7167623f95f82cac0ad1f540a93b6e0521e288581760c87a7056b547250913ed09116eebd8c189bdbcd7a02ee86d714409289e298ea88f4a5f9249b7f06e7ec9efa67463f4"}}, {0xfa, &(0x7f00000005c0)=@string={0xfa, 0x3, "28b1f287dc263eda97fadd5848bf6772b8f5bd80f6957576c88744943d47a5f49bd7b5b5db1b6c2b79414a209112a43674b01a518185c13abb8ef850c89ee273d4293e55afe29bee63580afe0e7ecb88807ba7e533bf0c9a3e7588dc98254ec60a3b49fafb8420782ace8f0a9240b6139133044513e7e4c4cb03f96643edbe55a90ca64da0ae01011b21d0222e7aeabc3fca194c8759feaa6aad92311e172be319171429eee38aefcfff50bc14ba95bfcf868c640663cdeba09f594c0bb13d234bfb8f54085ed70004bd4ba90f01e146ad342b74de34b9cf0dcfecff8e399736d0d0e07ddc3deea3c4e25cff2b512068db5ec0bcd59be240"}}, {0x91, &(0x7f00000004c0)=@string={0x91, 0x3, "4e3118ea9e87c5d79008aa64340b782bf6980e6d7789357b814b8c397f839729584c42d0bea44f4000ba5cee00e98a0a941a69394762cce96aeb270e4c495b8eb99f7cf4c6263e066af421bc2e0c30c4133be9d45c3fa4bff0f91a4ee43ad2f2bceec6cbc025e97d1318abcd99335c63d4a5002ac5ce13409e8ae2c7b3536f0ec0c0d2e96c49a11764f614af54cd94"}}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 3.635762498s ago: executing program 1 (id=8951): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="202406fbffffffffffffff53"], &(0x7f0000000040)={0x0, 0x3, 0x35, @string={0x35, 0x3, "8dd2bbbb94dd46b0bca16aa115eab684142d6e737a3cfeeaa11f062cd68daa0749e3be2058f6ef23a274016197bebc534d6779"}}, &(0x7f00000006c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0xf4, 0x8, "0925dc04", "eddcb442"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x35, 0x40, 0xb8, 0x9, 0xff81}}}, &(0x7f0000000600)={0x84, &(0x7f00000001c0)={0x40, 0x12, 0x5c, "a56aa79c440f5d6a10fc4c6ee93ef9a058243d5561806fd05476237ae9dc7beff5dd852fd8aec313b45bb95f78c8c4081de987e97e8d2a3f82281562676f94a3ae651be85f51feefb5b7d427c32db1397d53cdfcfca956fba7f5faac"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x2e}, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000340)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000380)={0x40, 0x9, 0x1, 0xfd}, &(0x7f00000003c0)={0x40, 0xb, 0x2, "abe6"}, &(0x7f0000000100)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000440)={0x40, 0x13, 0x6}, &(0x7f0000000480)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000004c0)={0x40, 0x19, 0x2, "5c03"}, &(0x7f0000000500)={0x40, 0x1a, 0x2, 0x4931}, &(0x7f0000000540)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000580)={0x40, 0x1e, 0x1, 0xbb}, &(0x7f00000005c0)={0x40, 0x21, 0x1}}) 3.007805284s ago: executing program 1 (id=8952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x50, 0xfffe, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @rumble={0x7, 0x8}}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc0082, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r8, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "05ba045975f29637", "432b48f6d112d033f7a7e018aa47b96c31a881b4804e2fc9c009ffb81fc86342", "bcd27fb3", "c5d009209dcaea05"}, 0x38) ioctl$KVM_CREATE_VM(r7, 0xae03, 0x32) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000000e00)={{r5}, r9, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid=r10}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000100)={r10, 0xfff, 0x9}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 2.933726437s ago: executing program 0 (id=8953): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000004c0)={0x40, 0x8, 0x6, "a61623bea283"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) 1.987404698s ago: executing program 2 (id=8954): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f"], 0x188}}], 0x1, 0x810) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c", 0x1c}, {&(0x7f0000001400)}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d83000744d63c000100000008"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x6f4}}, 0x0) 1.793079866s ago: executing program 2 (id=8955): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000280)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockname$unix(r0, &(0x7f0000000500), 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000740)="2c385a7ae3beafe23e9dfb07d464351bb898f37f464feb12a5c0d65815b5399ff2f6b87138e58adf9089835447346b2840fffdd24ea102c212abd3b18af5080882f7e95a5b52e658b296d1d3773520ccd08fa958cfb21b043603e59a812c854f5789db7e893a633d0626b4e02f6a4a6b34069f62aca68d5357b1649f71798fafa8d20f0ceb41d8aacc5014eaf862dabb069009c3af52abbe1bd2354826d81ac2723396d904fa5922bb44cd6d49a66008c2eab9f2d6b8119e19097cadd667580edea6dffbad025e112ce4bdf530768046685f4163e8339f687efd05397e51afee718b70766730c685cf0bf5d7bb2e", 0xee) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000100520001000000000000000000020000000c0005000100003e75e20b687fc477080b"], 0x20}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x2fe, 0x4f424752, 0x3, 0x0, [{0xc3, 0x3}, {0x3, 0x7fffffff}, {0x6, 0x8}, {0x5, 0x2000008}, {0x802}, {0x5, 0x3}, {0x6, 0x40b}, {0x10001, 0x800004}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad1040066eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000680)}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendto$packet(r0, &(0x7f0000000880)="66bcc3b99e72e7a0f9b785c48fb6f87f0468a79324c0e11e96c108129d9f86e829e91ed035b994962bd34665b8fa83c1edf2e9d3234d08f558973b0bd0bc7618bbe281dc74b2f903bb6e06d10224b4a456f6a7ec4c099a713ba74c8a382ce0f5b493ca0348767f40d8f010d930a4a579f6dbb5debac25a56f037d9ef22e91b1ed20b0f7bc0c5eee96d587308d2aa6fbff0035f1f5b8e59ede3ada72b7b5da26afc9fa5d3fcb8279036ec2f1c1cd4070748fa2bb429d760eb4eb730d2ded107a5cfd6cb0afed26a66f2048a920de6dd17c9bb1b122f8c47d579641d2c38335d21b02663a555674f8b", 0xe8, 0x20048004, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @remote}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000580)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x715800, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2cf, 0x191, 0x1, 0x1, 0xdd9f87, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x722, 0x20000002, 0x17, 0x4, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.61757881s ago: executing program 3 (id=8956): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0xff8d}], 0x600, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x7ffffffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x6) fchdir(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) preadv(r10, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0xa9) socket(0xa, 0x3, 0x3a) 1.582251573s ago: executing program 2 (id=8957): pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$netlink(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$tipc(0x1e, 0x2, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x9, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d53049e8) write$binfmt_script(r4, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r4, 0x0, 0x28) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf250600200008"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setns(r1, 0x8020000) syz_clone3(&(0x7f0000000580)={0x114000400, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x800, 0x0) 1.173066109s ago: executing program 1 (id=8958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000240)={0x9, 0x0, [{0x0, 0x4, 0x7, 0x8, 0x80000000, 0xfffffff8, 0x8001}, {0xa, 0x1, 0x1, 0x8248, 0x841a, 0x82fd, 0x7ff}, {0x10, 0x6ec55992, 0x0, 0x4, 0x8, 0xff, 0x719f7853}, {0xd, 0x0, 0x6, 0x9, 0xf, 0x2, 0xe0}, {0x40000001, 0x1b, 0x1, 0x1000, 0x3ff, 0x4, 0xfffffffe}, {0x9, 0x8, 0x4, 0x8, 0x74f, 0x4, 0xff}, {0xc0000000, 0x6, 0x6, 0xa, 0x1, 0xffff, 0xfffffffc}, {0x7, 0xc, 0x1, 0xfff, 0x80000001, 0x2, 0x1ff}, {0xd, 0x8, 0x3, 0x5, 0x7, 0x3, 0x7}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a40000c}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x74, 0xae, 0xc4, 0x40, 0x4cb, 0x10b, 0x4f5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x42, 0x10, 0x95, "", [{{0x9, 0x4, 0x6c, 0x0, 0x0, 0x41, 0xc, 0x18, 0xa}}]}}]}}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) 772.498374ms ago: executing program 4 (id=8959): syz_usb_connect(0x5, 0x34, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000892e79106d042107259c010203010902220001000000000904"], 0x0) 222.247225ms ago: executing program 3 (id=8960): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x3c, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd8a) sched_setattr(r5, &(0x7f0000000000)={0x38, 0x6, 0x10000046, 0x51bb, 0x1c, 0x10, 0x9, 0x101, 0x2, 0x3}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x34, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x4004890) 141.277212ms ago: executing program 2 (id=8961): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xe}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0xa1b80e0ec192df95) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4db75f67208c7ddc, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x102, 0x0) r2 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000c, 0x4000013, r2, 0xac693000) r3 = socket$inet(0x2, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x326, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffffeebf103b61aa86dd6000000002f03a00fe8000000000000000000000000000bb000000000000000000000000000000005e000000000000003b0a04050320ecbeff010000000000000000000000000001fe80000000000000000000000000001a00000000000000000000ffffffffffffff020000000000000000000000000001fc0200000000000000000000000000008706017f00000000fc00000000000000000000000000000000000000000000000000ffff00000000fe88000000000000000000000000000187000638660000001d0a000000000000071000000001020306003c000000000000000438ed802b033ffdd61a18fb89e5e99ea65fdb469becb8ae47d065a72a90dfeb38d4953fc5efa4c348d0c3d9c8f2413d5bd4fa051a797a7861dcc20400000005000000000000020090780000000166c1665dfffb3a0100000000000000000000000000000001ff0200000000000000000000000000013308004600000000fe80000000000000000000000000001000000000000000000000ffff00000000fe8000000000000000000000000000aa000000000000000000000000000000001d2d0000000000000730000000020a0a0000f9ffffffffffffff010000000000000073eb0000000000000800000000000000050000000000000005020002c204000000040740000000030e027f0002000000000000000600000000000000a4000000000000000008000000000000ff0000000000000007000000000000008ef0ffffffffffff0730000000030aff0002000001000000000004000000000000000100000000000000ffff00000000000002000000000000000550da7f8344607c5dfc733456fb7d764c4cab08cb95fde5f4f410a053eeabc093c29190d75295f84b6157930d65c99236c334be0a37cd0637a128bd886854d10b421361e0c7ee7838f6ec08a2b68efaef58b565a6e15e9f9e36e0a5eb1761dbff990ed8ef3b5048177f31d0f43eca73bbd5c553d90456e6c4b69de7dd9b51288c5225fcf1715a4db0a4d28dc35efccf0853e5912f971e67c13343a6680dec9a38233d028054feede272acca0cbd91904665e494b680d04da400000000000000"], 0x0) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40e02, 0x0) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r7, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=8962): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x300) kernel console output (not intermixed with test programs): bulk endpoint 0x5 has invalid maxpacket 0 [ 1830.705885][T12030] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1830.716603][T23738] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1830.729272][T23738] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1830.756865][T12030] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1830.769981][T23738] usb 3-1: Product: syz [ 1830.774183][T23738] usb 3-1: Manufacturer: syz [ 1830.780147][T23738] usb 3-1: SerialNumber: syz [ 1830.785085][T12030] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1830.797674][T23738] usb 3-1: config 0 descriptor?? [ 1830.809677][T12030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.818849][T31136] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1831.032963][T31150] netlink: 'syz.3.8625': attribute type 10 has an invalid length. [ 1831.054529][T31150] macvlan0: entered promiscuous mode [ 1831.066323][T31150] macvlan0: entered allmulticast mode [ 1831.079415][T12030] usb 1-1: GET_CAPABILITIES returned 0 [ 1831.089385][T31150] veth1_vlan: entered allmulticast mode [ 1831.098972][T12030] usbtmc 1-1:16.0: can't read capabilities [ 1831.112404][T23738] usb 3-1: USB disconnect, device number 48 [ 1831.150977][T31150] team0: Port device macvlan0 added [ 1831.248765][T31150] xt_hashlimit: size too large, truncated to 1048576 [ 1831.295463][T12030] usb 1-1: USB disconnect, device number 3 [ 1831.841853][T31158] netlink: 'syz.4.8627': attribute type 13 has an invalid length. [ 1831.904533][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1831.936566][T31160] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 1832.337067][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1832.364850][T31178] syzkaller0: entered promiscuous mode [ 1832.384767][T31178] syzkaller0: entered allmulticast mode [ 1832.400221][T31174] syzkaller0: entered promiscuous mode [ 1832.405842][T31174] syzkaller0: entered allmulticast mode [ 1832.472397][T31181] FAULT_INJECTION: forcing a failure. [ 1832.472397][T31181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1832.487401][T31181] CPU: 1 UID: 0 PID: 31181 Comm: syz.2.8632 Tainted: G L syzkaller #0 PREEMPT(full) [ 1832.487436][T31181] Tainted: [L]=SOFTLOCKUP [ 1832.487445][T31181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1832.487458][T31181] Call Trace: [ 1832.487467][T31181] [ 1832.487477][T31181] dump_stack_lvl+0xe8/0x150 [ 1832.487513][T31181] should_fail_ex+0x412/0x560 [ 1832.487549][T31181] _copy_from_iter+0x1d3/0x1670 [ 1832.487586][T31181] ? rcu_is_watching+0x15/0xb0 [ 1832.487622][T31181] ? __pfx__copy_from_iter+0x10/0x10 [ 1832.487664][T31181] ? netlink_sendmsg+0x650/0xb40 [ 1832.487695][T31181] ? skb_put+0x11b/0x210 [ 1832.487721][T31181] netlink_sendmsg+0x6c0/0xb40 [ 1832.487762][T31181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1832.487799][T31181] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1832.487832][T31181] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1832.487860][T31181] ____sys_sendmsg+0x972/0x9f0 [ 1832.487892][T31181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1832.487926][T31181] ? import_iovec+0x73/0xa0 [ 1832.487951][T31181] ___sys_sendmsg+0x2a5/0x360 [ 1832.487981][T31181] ? __pfx____sys_sendmsg+0x10/0x10 [ 1832.488038][T31181] ? __fget_files+0x2a/0x420 [ 1832.488070][T31181] ? __fget_files+0x3a0/0x420 [ 1832.488110][T31181] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1832.488137][T31181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1832.488171][T31181] ? __pfx_ksys_write+0x10/0x10 [ 1832.488204][T31181] do_syscall_64+0x14d/0xf80 [ 1832.488229][T31181] ? trace_irq_disable+0x3b/0x150 [ 1832.488259][T31181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.488279][T31181] ? clear_bhb_loop+0x40/0x90 [ 1832.488309][T31181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.488327][T31181] RIP: 0033:0x7fd9fd99c799 [ 1832.488345][T31181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1832.488361][T31181] RSP: 002b:00007fd9fbbd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1832.488381][T31181] RAX: ffffffffffffffda RBX: 00007fd9fdc16090 RCX: 00007fd9fd99c799 [ 1832.488394][T31181] RDX: 0000000000004880 RSI: 00002000000003c0 RDI: 0000000000000008 [ 1832.488406][T31181] RBP: 00007fd9fbbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1832.488417][T31181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1832.488428][T31181] R13: 00007fd9fdc16128 R14: 00007fd9fdc16090 R15: 00007fd9fdd3fa48 [ 1832.488458][T31181] [ 1833.068776][T31188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8635'. [ 1833.123699][T31190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8635'. [ 1833.246972][T24627] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1833.416884][T24627] usb 5-1: Using ep0 maxpacket: 16 [ 1833.424676][T24627] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.446586][T24627] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1833.453757][T24627] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1833.496763][T24627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.531825][T24627] usb 5-1: config 0 descriptor?? [ 1833.981615][T24627] nzxt-smart2 0003:1E71:2009.0053: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1834.455180][T12030] usb 5-1: USB disconnect, device number 99 [ 1836.147886][T12032] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1836.211912][T31204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8640'. [ 1836.326720][T12032] usb 5-1: Using ep0 maxpacket: 8 [ 1836.345483][T12032] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1836.356990][T12032] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1836.368182][T12032] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1836.380234][T12032] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1836.407186][T12032] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1836.407430][T12032] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1836.407459][T12032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.437356][T31215] FAULT_INJECTION: forcing a failure. [ 1836.437356][T31215] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.437399][T31215] CPU: 0 UID: 0 PID: 31215 Comm: syz.2.8644 Tainted: G L syzkaller #0 PREEMPT(full) [ 1836.437429][T31215] Tainted: [L]=SOFTLOCKUP [ 1836.437438][T31215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1836.437451][T31215] Call Trace: [ 1836.437461][T31215] [ 1836.437471][T31215] dump_stack_lvl+0xe8/0x150 [ 1836.437508][T31215] should_fail_ex+0x412/0x560 [ 1836.437547][T31215] should_failslab+0xa8/0x100 [ 1836.437575][T31215] ? skb_clone+0x212/0x3a0 [ 1836.437601][T31215] kmem_cache_alloc_noprof+0x87/0x650 [ 1836.437624][T31215] ? __netlink_lookup+0xc6/0x8b0 [ 1836.437662][T31215] skb_clone+0x212/0x3a0 [ 1836.437693][T31215] __netlink_deliver_tap+0x404/0x850 [ 1836.437737][T31215] ? netlink_deliver_tap+0x2e/0x1b0 [ 1836.437771][T31215] netlink_deliver_tap+0x19c/0x1b0 [ 1836.437804][T31215] netlink_unicast+0x7e3/0x9b0 [ 1836.437843][T31215] ? __pfx_netlink_unicast+0x10/0x10 [ 1836.437874][T31215] ? netlink_sendmsg+0x650/0xb40 [ 1836.437905][T31215] ? skb_put+0x11b/0x210 [ 1836.437930][T31215] netlink_sendmsg+0x813/0xb40 [ 1836.437973][T31215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1836.438010][T31215] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1836.438044][T31215] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1836.438072][T31215] ____sys_sendmsg+0x972/0x9f0 [ 1836.438106][T31215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1836.438140][T31215] ? import_iovec+0x73/0xa0 [ 1836.438167][T31215] ___sys_sendmsg+0x2a5/0x360 [ 1836.438198][T31215] ? __pfx____sys_sendmsg+0x10/0x10 [ 1836.438259][T31215] ? __fget_files+0x2a/0x420 [ 1836.438291][T31215] ? __fget_files+0x3a0/0x420 [ 1836.438332][T31215] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1836.438361][T31215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1836.438397][T31215] ? __pfx_ksys_write+0x10/0x10 [ 1836.438434][T31215] do_syscall_64+0x14d/0xf80 [ 1836.438458][T31215] ? trace_irq_disable+0x3b/0x150 [ 1836.438488][T31215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.438512][T31215] ? clear_bhb_loop+0x40/0x90 [ 1836.438541][T31215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.438562][T31215] RIP: 0033:0x7fd9fd99c799 [ 1836.438588][T31215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1836.438608][T31215] RSP: 002b:00007fd9fbbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1836.438633][T31215] RAX: ffffffffffffffda RBX: 00007fd9fdc15fa0 RCX: 00007fd9fd99c799 [ 1836.438649][T31215] RDX: 00000000000000c0 RSI: 0000200000000600 RDI: 0000000000000003 [ 1836.438673][T31215] RBP: 00007fd9fbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1836.438687][T31215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1836.438700][T31215] R13: 00007fd9fdc16038 R14: 00007fd9fdc15fa0 R15: 00007fd9fdd3fa48 [ 1836.438734][T31215] [ 1836.438844][T31215] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8644'. [ 1836.754315][T12032] usb 5-1: GET_CAPABILITIES returned 0 [ 1836.754352][T12032] usbtmc 5-1:16.0: can't read capabilities [ 1836.824300][T31218] pimreg3: entered allmulticast mode [ 1837.296813][T26426] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1837.458115][T26426] usb 4-1: Using ep0 maxpacket: 16 [ 1837.469936][T26426] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.483542][T26426] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1837.497964][T26426] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1837.520739][T26426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.553911][T26426] usb 4-1: config 0 descriptor?? [ 1838.020590][T26426] nzxt-smart2 0003:1E71:2009.0054: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1838.082090][T27461] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1838.246837][T27461] usb 1-1: Using ep0 maxpacket: 16 [ 1838.258700][T27461] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1838.281004][T27461] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1838.288373][T27461] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1838.300404][T27461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.316782][T27461] usb 1-1: config 0 descriptor?? [ 1838.395908][T31225] binder: BINDER_SET_CONTEXT_MGR already set [ 1838.402143][T31225] binder: 31224:31225 ioctl 4018620d 200000004a80 returned -16 [ 1838.469394][T12032] usb 4-1: USB disconnect, device number 74 [ 1838.546812][T26426] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1838.737581][T26426] usb 3-1: Using ep0 maxpacket: 32 [ 1838.771926][T27461] nzxt-smart2 0003:1E71:2009.0055: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1838.787370][T26426] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 1838.806177][T26426] usb 3-1: config 0 has no interface number 0 [ 1838.815042][T26426] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1838.839986][T26426] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 1838.853937][T12032] usb 5-1: USB disconnect, device number 100 [ 1838.862105][T26426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.894930][T26426] usb 3-1: Product: syz [ 1838.910729][T26426] usb 3-1: Manufacturer: syz [ 1838.926215][T26426] usb 3-1: SerialNumber: syz [ 1838.962379][T26426] usb 3-1: config 0 descriptor?? [ 1838.986827][T24627] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1839.167846][T24627] usb 2-1: Using ep0 maxpacket: 32 [ 1839.201451][T24627] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1839.210523][T31235] netlink: 'syz.2.8649': attribute type 10 has an invalid length. [ 1839.242958][T24627] usb 2-1: config 0 has no interface number 0 [ 1839.249533][T31232] binder: BINDER_SET_CONTEXT_MGR already set [ 1839.253916][T12030] usb 3-1: USB disconnect, device number 49 [ 1839.255683][T31232] binder: 31231:31232 ioctl 4018620d 200000004a80 returned -16 [ 1839.277103][T24627] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1839.327889][T24627] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1839.349073][T24627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.369559][T26426] usb 1-1: USB disconnect, device number 4 [ 1839.396941][T24627] usb 2-1: Product: syz [ 1839.412939][T24627] usb 2-1: Manufacturer: syz [ 1839.448853][T24627] usb 2-1: SerialNumber: syz [ 1839.475461][T24627] usb 2-1: config 0 descriptor?? [ 1839.920843][T31259] FAULT_INJECTION: forcing a failure. [ 1839.920843][T31259] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.966810][T31259] CPU: 0 UID: 0 PID: 31259 Comm: syz.2.8655 Tainted: G L syzkaller #0 PREEMPT(full) [ 1839.966846][T31259] Tainted: [L]=SOFTLOCKUP [ 1839.966855][T31259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1839.966868][T31259] Call Trace: [ 1839.966877][T31259] [ 1839.966887][T31259] dump_stack_lvl+0xe8/0x150 [ 1839.966924][T31259] should_fail_ex+0x412/0x560 [ 1839.966961][T31259] should_failslab+0xa8/0x100 [ 1839.966990][T31259] ? skb_clone+0x212/0x3a0 [ 1839.967016][T31259] kmem_cache_alloc_noprof+0x87/0x650 [ 1839.967038][T31259] ? __netlink_lookup+0xc6/0x8b0 [ 1839.967068][T31259] skb_clone+0x212/0x3a0 [ 1839.967097][T31259] __netlink_deliver_tap+0x404/0x850 [ 1839.967143][T31259] ? netlink_deliver_tap+0x2e/0x1b0 [ 1839.967177][T31259] netlink_deliver_tap+0x19c/0x1b0 [ 1839.967212][T31259] netlink_unicast+0x7e3/0x9b0 [ 1839.967259][T31259] ? __pfx_netlink_unicast+0x10/0x10 [ 1839.967291][T31259] ? netlink_sendmsg+0x650/0xb40 [ 1839.967322][T31259] ? skb_put+0x11b/0x210 [ 1839.967348][T31259] netlink_sendmsg+0x813/0xb40 [ 1839.967390][T31259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1839.967428][T31259] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1839.967462][T31259] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1839.967490][T31259] ____sys_sendmsg+0x972/0x9f0 [ 1839.967525][T31259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1839.967560][T31259] ? import_iovec+0x73/0xa0 [ 1839.967587][T31259] ___sys_sendmsg+0x2a5/0x360 [ 1839.967623][T31259] ? __pfx____sys_sendmsg+0x10/0x10 [ 1839.967683][T31259] ? __fget_files+0x2a/0x420 [ 1839.967715][T31259] ? __fget_files+0x3a0/0x420 [ 1839.967757][T31259] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1839.967786][T31259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1839.967819][T31259] ? __pfx_ksys_write+0x10/0x10 [ 1839.967856][T31259] do_syscall_64+0x14d/0xf80 [ 1839.967879][T31259] ? trace_irq_disable+0x3b/0x150 [ 1839.967909][T31259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.967930][T31259] ? clear_bhb_loop+0x40/0x90 [ 1839.967955][T31259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.967977][T31259] RIP: 0033:0x7fd9fd99c799 [ 1839.967997][T31259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1839.968016][T31259] RSP: 002b:00007fd9fbbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1839.968039][T31259] RAX: ffffffffffffffda RBX: 00007fd9fdc15fa0 RCX: 00007fd9fd99c799 [ 1839.968054][T31259] RDX: 0000000004000050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1839.968069][T31259] RBP: 00007fd9fbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.968083][T31259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1839.968095][T31259] R13: 00007fd9fdc16038 R14: 00007fd9fdc15fa0 R15: 00007fd9fdd3fa48 [ 1839.968127][T31259] [ 1839.968343][T31259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8655'. [ 1840.067062][T12030] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1840.473056][ T30] audit: type=1326 audit(1773367424.194:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31261 comm="syz.0.8656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c6f9c799 code=0x7ffc0000 [ 1840.525644][ T30] audit: type=1326 audit(1773367424.194:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31261 comm="syz.0.8656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c6f9c799 code=0x7ffc0000 [ 1840.549389][ T30] audit: type=1326 audit(1773367424.234:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31261 comm="syz.0.8656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f18c6f9c799 code=0x7ffc0000 [ 1840.573958][ T30] audit: type=1326 audit(1773367424.234:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31261 comm="syz.0.8656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c6f9c799 code=0x7ffc0000 [ 1840.597673][ T30] audit: type=1326 audit(1773367424.234:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31261 comm="syz.0.8656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c6f9c799 code=0x7ffc0000 [ 1840.648806][T12030] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1840.658944][T12030] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1840.668818][T12030] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1840.678639][T12030] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1840.692638][ T30] audit: type=1326 audit(1773367424.234:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31261 comm="syz.0.8656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f18c6f9c799 code=0x7ffc0000 [ 1840.704005][T12030] usb 4-1: Product: syz [ 1840.718488][T24627] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1840.721975][T12030] usb 4-1: Manufacturer: syz [ 1840.738533][T12030] usb 4-1: SerialNumber: syz [ 1840.773526][T12030] usb 4-1: config 0 descriptor?? [ 1840.784081][T31257] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1840.796543][ T30] audit: type=1326 audit(1773367424.234:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31261 comm="syz.0.8656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c6f9c799 code=0x7ffc0000 [ 1840.810522][T12030] usb 4-1: selecting invalid altsetting 0 [ 1840.856817][ T30] audit: type=1326 audit(1773367424.234:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31261 comm="syz.0.8656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c6f9c799 code=0x7ffc0000 [ 1840.906862][ T30] audit: type=1326 audit(1773367424.234:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31261 comm="syz.0.8656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18c6f9c799 code=0x7ffc0000 [ 1840.956736][ T30] audit: type=1326 audit(1773367424.234:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31261 comm="syz.0.8656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c6f9c799 code=0x7ffc0000 [ 1841.053323][T12030] usb 4-1: USB disconnect, device number 75 [ 1841.099369][T31270] tipc: Started in network mode [ 1841.104495][T31270] tipc: Node identity 520029847bca, cluster identity 4711 [ 1841.130044][T31270] tipc: Enabled bearer , priority 0 [ 1841.139971][T31270] syzkaller0: entered promiscuous mode [ 1841.145723][T31238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8650'. [ 1841.171617][T31270] syzkaller0: entered allmulticast mode [ 1841.197090][T24627] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1841.212645][T24627] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1841.229596][T24627] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1841.241740][T24627] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1841.254965][T24627] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1841.312960][T31278] tipc: Resetting bearer [ 1841.329285][T24627] usb 2-1: USB disconnect, device number 48 [ 1841.349310][T31270] tipc: Resetting bearer [ 1841.399250][T31275] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.8659'. [ 1841.450022][T31270] tipc: Disabling bearer [ 1841.923745][T31286] FAULT_INJECTION: forcing a failure. [ 1841.923745][T31286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1841.937805][T31286] CPU: 1 UID: 0 PID: 31286 Comm: syz.0.8664 Tainted: G L syzkaller #0 PREEMPT(full) [ 1841.937831][T31286] Tainted: [L]=SOFTLOCKUP [ 1841.937837][T31286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1841.937847][T31286] Call Trace: [ 1841.937854][T31286] [ 1841.937860][T31286] dump_stack_lvl+0xe8/0x150 [ 1841.937887][T31286] should_fail_ex+0x412/0x560 [ 1841.937914][T31286] _copy_from_iter+0x1d3/0x1670 [ 1841.937940][T31286] ? rcu_is_watching+0x15/0xb0 [ 1841.937967][T31286] ? __pfx__copy_from_iter+0x10/0x10 [ 1841.937996][T31286] ? netlink_sendmsg+0x650/0xb40 [ 1841.938020][T31286] ? skb_put+0x11b/0x210 [ 1841.938038][T31286] netlink_sendmsg+0x6c0/0xb40 [ 1841.938067][T31286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1841.938094][T31286] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1841.938118][T31286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1841.938138][T31286] ____sys_sendmsg+0x972/0x9f0 [ 1841.938162][T31286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1841.938186][T31286] ? import_iovec+0x73/0xa0 [ 1841.938205][T31286] ___sys_sendmsg+0x2a5/0x360 [ 1841.938226][T31286] ? __pfx____sys_sendmsg+0x10/0x10 [ 1841.938268][T31286] ? __fget_files+0x2a/0x420 [ 1841.938291][T31286] ? __fget_files+0x3a0/0x420 [ 1841.938321][T31286] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1841.938341][T31286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1841.938365][T31286] ? __pfx_ksys_write+0x10/0x10 [ 1841.938390][T31286] do_syscall_64+0x14d/0xf80 [ 1841.938408][T31286] ? trace_irq_disable+0x3b/0x150 [ 1841.938431][T31286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.938447][T31286] ? clear_bhb_loop+0x40/0x90 [ 1841.938465][T31286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.938481][T31286] RIP: 0033:0x7f18c6f9c799 [ 1841.938496][T31286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.938510][T31286] RSP: 002b:00007f18c7e8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1841.938528][T31286] RAX: ffffffffffffffda RBX: 00007f18c7215fa0 RCX: 00007f18c6f9c799 [ 1841.938540][T31286] RDX: 0000000020004000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 1841.938551][T31286] RBP: 00007f18c7e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1841.938561][T31286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1841.938571][T31286] R13: 00007f18c7216038 R14: 00007f18c7215fa0 R15: 00007f18c733fa48 [ 1841.938594][T31286] [ 1842.179887][T12030] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1842.187922][T23738] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1842.246791][T27461] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1842.272868][T31290] FAULT_INJECTION: forcing a failure. [ 1842.272868][T31290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1842.286157][T31290] CPU: 0 UID: 0 PID: 31290 Comm: syz.0.8666 Tainted: G L syzkaller #0 PREEMPT(full) [ 1842.286190][T31290] Tainted: [L]=SOFTLOCKUP [ 1842.286198][T31290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1842.286213][T31290] Call Trace: [ 1842.286222][T31290] [ 1842.286237][T31290] dump_stack_lvl+0xe8/0x150 [ 1842.286265][T31290] should_fail_ex+0x412/0x560 [ 1842.286291][T31290] _copy_from_iter+0x1d3/0x1670 [ 1842.286319][T31290] ? rcu_is_watching+0x15/0xb0 [ 1842.286346][T31290] ? __pfx__copy_from_iter+0x10/0x10 [ 1842.286376][T31290] ? netlink_sendmsg+0x650/0xb40 [ 1842.286400][T31290] ? skb_put+0x11b/0x210 [ 1842.286418][T31290] netlink_sendmsg+0x6c0/0xb40 [ 1842.286448][T31290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1842.286474][T31290] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1842.286499][T31290] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1842.286519][T31290] ____sys_sendmsg+0x972/0x9f0 [ 1842.286543][T31290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1842.286567][T31290] ? import_iovec+0x73/0xa0 [ 1842.286587][T31290] ___sys_sendmsg+0x2a5/0x360 [ 1842.286608][T31290] ? __pfx____sys_sendmsg+0x10/0x10 [ 1842.286684][T31290] ? __fget_files+0x2a/0x420 [ 1842.286716][T31290] ? __fget_files+0x3a0/0x420 [ 1842.286758][T31290] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1842.286785][T31290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1842.286819][T31290] ? __pfx_ksys_write+0x10/0x10 [ 1842.286853][T31290] do_syscall_64+0x14d/0xf80 [ 1842.286876][T31290] ? trace_irq_disable+0x3b/0x150 [ 1842.286906][T31290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.286929][T31290] ? clear_bhb_loop+0x40/0x90 [ 1842.286954][T31290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.286976][T31290] RIP: 0033:0x7f18c6f9c799 [ 1842.286997][T31290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1842.287016][T31290] RSP: 002b:00007f18c7e8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1842.287041][T31290] RAX: ffffffffffffffda RBX: 00007f18c7215fa0 RCX: 00007f18c6f9c799 [ 1842.287057][T31290] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 1842.287072][T31290] RBP: 00007f18c7e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1842.287086][T31290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1842.287099][T31290] R13: 00007f18c7216038 R14: 00007f18c7215fa0 R15: 00007f18c733fa48 [ 1842.287140][T31290] [ 1842.337133][T23738] usb 5-1: Using ep0 maxpacket: 16 [ 1842.437216][T27461] usb 3-1: Using ep0 maxpacket: 32 [ 1842.441936][T12030] usb 4-1: Using ep0 maxpacket: 16 [ 1842.544276][T27461] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1842.554466][T27461] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2031, setting to 1024 [ 1842.578465][T27461] usb 3-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 1842.590378][T23738] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1842.590421][T27461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.609581][T27461] usb 3-1: Product: syz [ 1842.613795][T27461] usb 3-1: Manufacturer: syz [ 1842.619647][T23738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1842.621367][T27461] usb 3-1: SerialNumber: syz [ 1842.666721][T23738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1842.678863][T12030] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.700046][T12030] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1842.706891][T23738] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1842.724324][T12030] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1842.735367][T23738] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1842.753142][T12030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.773911][T23738] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1842.786904][T12030] usb 4-1: config 0 descriptor?? [ 1842.793778][T23738] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1842.807361][T23738] usb 5-1: Manufacturer: syz [ 1842.821128][T23738] usb 5-1: config 0 descriptor?? [ 1842.898176][T27461] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1842.976848][T24627] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1843.041799][T27461] usb 3-1: USB disconnect, device number 50 [ 1843.185293][T24627] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1843.209031][T24627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.235612][T24627] usb 1-1: Product: syz [ 1843.261018][T24627] usb 1-1: Manufacturer: syz [ 1843.265808][T12030] nzxt-smart2 0003:1E71:2009.0056: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1843.287257][T23738] rc_core: IR keymap rc-hauppauge not found [ 1843.288525][T24627] usb 1-1: SerialNumber: syz [ 1843.293230][T23738] Registered IR keymap rc-empty [ 1843.327181][T23738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1843.355734][T24627] usb 1-1: config 0 descriptor?? [ 1843.388927][T23738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1843.431085][T23738] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1843.464331][T23738] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input92 [ 1843.511817][T23738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1843.548065][T23738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1843.605018][T24627] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1843.616023][T23738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1843.654483][T31282] binder: BINDER_SET_CONTEXT_MGR already set [ 1843.660912][T23738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1843.675549][T31282] binder: 31280:31282 ioctl 4018620d 200000004a80 returned -16 [ 1843.698260][T23738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1843.716890][T23738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1843.737847][T23738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1843.765872][T23738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1843.808021][T23738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1843.826925][T12031] usb 4-1: USB disconnect, device number 76 [ 1843.836905][T23738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1843.865020][T23738] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1843.893587][T23738] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1843.947531][T23738] usb 5-1: USB disconnect, device number 101 [ 1844.833775][T31295] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8667'. [ 1844.987765][T31324] FAULT_INJECTION: forcing a failure. [ 1844.987765][T31324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1845.020880][T31324] CPU: 1 UID: 0 PID: 31324 Comm: syz.1.8674 Tainted: G L syzkaller #0 PREEMPT(full) [ 1845.020916][T31324] Tainted: [L]=SOFTLOCKUP [ 1845.020924][T31324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1845.020937][T31324] Call Trace: [ 1845.020947][T31324] [ 1845.020957][T31324] dump_stack_lvl+0xe8/0x150 [ 1845.020994][T31324] should_fail_ex+0x412/0x560 [ 1845.021031][T31324] _copy_from_iter+0x1d3/0x1670 [ 1845.021070][T31324] ? rcu_is_watching+0x15/0xb0 [ 1845.021107][T31324] ? __pfx__copy_from_iter+0x10/0x10 [ 1845.021149][T31324] ? netlink_sendmsg+0x650/0xb40 [ 1845.021182][T31324] ? skb_put+0x11b/0x210 [ 1845.021209][T31324] netlink_sendmsg+0x6c0/0xb40 [ 1845.021255][T31324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1845.021291][T31324] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1845.021327][T31324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1845.021356][T31324] ____sys_sendmsg+0x972/0x9f0 [ 1845.021391][T31324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1845.021425][T31324] ? import_iovec+0x73/0xa0 [ 1845.021452][T31324] ___sys_sendmsg+0x2a5/0x360 [ 1845.021483][T31324] ? __pfx____sys_sendmsg+0x10/0x10 [ 1845.021544][T31324] ? __fget_files+0x2a/0x420 [ 1845.021576][T31324] ? __fget_files+0x3a0/0x420 [ 1845.021619][T31324] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1845.021648][T31324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1845.021690][T31324] ? __pfx_ksys_write+0x10/0x10 [ 1845.021726][T31324] do_syscall_64+0x14d/0xf80 [ 1845.021752][T31324] ? trace_irq_disable+0x3b/0x150 [ 1845.021783][T31324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.021806][T31324] ? clear_bhb_loop+0x40/0x90 [ 1845.021833][T31324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.021856][T31324] RIP: 0033:0x7f4e0f59c799 [ 1845.021879][T31324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1845.021898][T31324] RSP: 002b:00007f4e1052a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1845.021922][T31324] RAX: ffffffffffffffda RBX: 00007f4e0f815fa0 RCX: 00007f4e0f59c799 [ 1845.021938][T31324] RDX: 0000000000040000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1845.021953][T31324] RBP: 00007f4e1052a090 R08: 0000000000000000 R09: 0000000000000000 [ 1845.021967][T31324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1845.021981][T31324] R13: 00007f4e0f816038 R14: 00007f4e0f815fa0 R15: 00007f4e0f93fa48 [ 1845.022016][T31324] [ 1845.487827][T24627] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1845.546934][T24627] usb 1-1: USB disconnect, device number 5 [ 1845.765810][T31333] FAULT_INJECTION: forcing a failure. [ 1845.765810][T31333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1845.787229][T31333] CPU: 1 UID: 0 PID: 31333 Comm: syz.1.8677 Tainted: G L syzkaller #0 PREEMPT(full) [ 1845.787265][T31333] Tainted: [L]=SOFTLOCKUP [ 1845.787274][T31333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1845.787287][T31333] Call Trace: [ 1845.787297][T31333] [ 1845.787306][T31333] dump_stack_lvl+0xe8/0x150 [ 1845.787342][T31333] should_fail_ex+0x412/0x560 [ 1845.787377][T31333] _copy_from_iter+0x1d3/0x1670 [ 1845.787416][T31333] ? rcu_is_watching+0x15/0xb0 [ 1845.787452][T31333] ? __pfx__copy_from_iter+0x10/0x10 [ 1845.787479][T31333] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1845.787524][T31333] ? netlink_sendmsg+0x650/0xb40 [ 1845.787556][T31333] ? skb_put+0x11b/0x210 [ 1845.787581][T31333] netlink_sendmsg+0x6c0/0xb40 [ 1845.787623][T31333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1845.787659][T31333] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1845.787693][T31333] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1845.787721][T31333] ____sys_sendmsg+0x972/0x9f0 [ 1845.787754][T31333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1845.787787][T31333] ? import_iovec+0x73/0xa0 [ 1845.787812][T31333] ___sys_sendmsg+0x2a5/0x360 [ 1845.787841][T31333] ? __pfx____sys_sendmsg+0x10/0x10 [ 1845.787901][T31333] ? __fget_files+0x2a/0x420 [ 1845.787932][T31333] ? __fget_files+0x3a0/0x420 [ 1845.787970][T31333] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1845.787991][T31333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1845.788020][T31333] ? __pfx_ksys_write+0x10/0x10 [ 1845.788045][T31333] do_syscall_64+0x14d/0xf80 [ 1845.788063][T31333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.788080][T31333] ? clear_bhb_loop+0x40/0x90 [ 1845.788099][T31333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.788114][T31333] RIP: 0033:0x7f4e0f59c799 [ 1845.788130][T31333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1845.788144][T31333] RSP: 002b:00007f4e104e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1845.788162][T31333] RAX: ffffffffffffffda RBX: 00007f4e0f816180 RCX: 00007f4e0f59c799 [ 1845.788174][T31333] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 1845.788184][T31333] RBP: 00007f4e104e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1845.788194][T31333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1845.788204][T31333] R13: 00007f4e0f816218 R14: 00007f4e0f816180 R15: 00007f4e0f93fa48 [ 1845.788227][T31333] [ 1846.098087][T12031] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1846.249345][T31336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8678'. [ 1846.268798][T12031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1846.279775][T12031] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1846.289099][T12031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.303279][T31338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8678'. [ 1846.331444][T12031] usb 4-1: config 0 descriptor?? [ 1846.364690][T31336] tipc: Started in network mode [ 1846.387383][T31336] tipc: Node identity b6576ee0b27a, cluster identity 4711 [ 1846.433753][T31336] tipc: Enabled bearer , priority 0 [ 1846.459661][T31338] syzkaller0: entered promiscuous mode [ 1846.502513][T31338] syzkaller0: entered allmulticast mode [ 1846.530696][T31336] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1846.578115][T12031] usbhid 4-1:0.0: can't add hid device: -71 [ 1846.597100][T12031] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1846.616493][T12031] usb 4-1: USB disconnect, device number 77 [ 1846.623658][T31336] tipc: Resetting bearer [ 1846.660076][T31335] tipc: Resetting bearer [ 1846.725933][T31335] tipc: Disabling bearer [ 1847.096865][T12031] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1847.294869][T12031] usb 4-1: Using ep0 maxpacket: 32 [ 1847.329866][T12031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.382742][T12031] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1847.444477][T12031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.509613][T12031] usb 4-1: config 0 descriptor?? [ 1847.675142][T31349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8680'. [ 1847.686366][T12031] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1847.776951][T12031] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1847.999870][T12031] usb 4-1: USB disconnect, device number 78 [ 1848.010013][T12031] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1848.156730][T24627] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1848.328049][T24627] usb 5-1: Using ep0 maxpacket: 16 [ 1848.339428][T24627] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1848.350653][T24627] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1848.357443][T24627] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1848.367712][T24627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.378181][T27461] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1848.398953][T24627] usb 5-1: config 0 descriptor?? [ 1848.569242][T27461] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1848.619962][T27461] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1848.688704][T27461] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1848.736926][T27461] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1848.772686][T27461] usb 2-1: Product: syz [ 1848.785444][T31388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8689'. [ 1848.800499][T27461] usb 2-1: Manufacturer: syz [ 1848.805355][T31388] openvswitch: netlink: Flow key attr not present in new flow. [ 1848.821449][T27461] usb 2-1: SerialNumber: syz [ 1848.861568][T27461] usb 2-1: config 0 descriptor?? [ 1848.870252][T24627] nzxt-smart2 0003:1E71:2009.0057: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1848.907438][T27461] usb 2-1: selecting invalid altsetting 0 [ 1849.171845][T31392] geneve3: entered promiscuous mode [ 1849.189285][T31392] geneve3: entered allmulticast mode [ 1849.276818][T27461] usb 2-1: USB disconnect, device number 49 [ 1849.366888][T31364] binder: BINDER_SET_CONTEXT_MGR already set [ 1849.463951][T31364] binder: 31363:31364 ioctl 4018620d 200000004a80 returned -16 [ 1849.517795][T12031] usb 5-1: USB disconnect, device number 102 [ 1849.691939][T31399] netlink: 'syz.0.8692': attribute type 13 has an invalid length. [ 1849.705580][T31390] fido_id[31390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1849.774415][T31400] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 1850.204127][T31407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8694'. [ 1850.280886][T31407] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1850.476980][T27461] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1850.677184][T27461] usb 5-1: Using ep0 maxpacket: 8 [ 1850.706089][T27461] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.737924][T27461] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1850.759677][T27461] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1850.789493][T27461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.830443][T27461] usb 5-1: config 0 descriptor?? [ 1851.023143][T31422] syzkaller0: entered promiscuous mode [ 1851.028897][T31422] syzkaller0: entered allmulticast mode [ 1851.089401][T23738] usb 5-1: USB disconnect, device number 103 [ 1851.286767][T12031] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1851.381176][T31432] netlink: 'syz.1.8703': attribute type 3 has an invalid length. [ 1851.446753][T12031] usb 1-1: Using ep0 maxpacket: 32 [ 1851.454141][T12031] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1851.480262][T12031] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1851.491190][T12031] usb 1-1: config 0 has no interface number 0 [ 1851.502027][T12031] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1851.526420][T12031] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1851.549950][T12031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.563062][T12031] usb 1-1: Product: syz [ 1851.569333][T12031] usb 1-1: Manufacturer: syz [ 1851.577314][T12031] usb 1-1: SerialNumber: syz [ 1851.613473][T12031] usb 1-1: config 0 descriptor?? [ 1851.642582][T12031] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1851.667833][T12031] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 1851.830761][T12031] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1851.876848][T12030] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1851.948007][T23738] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1852.047201][T31424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.057933][T12030] usb 2-1: Using ep0 maxpacket: 32 [ 1852.078809][T12030] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 1852.089802][T31424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1852.099765][T12030] usb 2-1: config 0 has no interface number 0 [ 1852.106282][T12030] usb 2-1: config 0 interface 10 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1852.116524][T23738] usb 5-1: Using ep0 maxpacket: 16 [ 1852.137488][T12031] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 1852.153744][T23738] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1852.170148][T12031] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 1852.180438][T23738] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1852.189681][T12030] usb 2-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 1852.201889][T12031] usb 1-1: USB disconnect, device number 6 [ 1852.208870][T23738] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1852.219340][T12030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.229270][T23738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.237815][T12031] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 1852.245417][T12030] usb 2-1: Product: syz [ 1852.254603][T12030] usb 2-1: Manufacturer: syz [ 1852.310571][T12030] usb 2-1: SerialNumber: syz [ 1852.320801][T23738] usb 5-1: config 0 descriptor?? [ 1852.356496][T12030] usb 2-1: config 0 descriptor?? [ 1852.384994][T31448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8709'. [ 1852.576689][T31435] netlink: 'syz.1.8704': attribute type 10 has an invalid length. [ 1852.720824][T12031] usb 2-1: USB disconnect, device number 50 [ 1852.764109][T23738] nzxt-smart2 0003:1E71:2009.0058: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1853.165481][T31459] fuse: Bad value for 'fd' [ 1853.192984][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.199489][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.272892][T27461] usb 5-1: USB disconnect, device number 104 [ 1853.310266][T31463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8714'. [ 1853.476745][T26426] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1853.646734][T26426] usb 4-1: Using ep0 maxpacket: 32 [ 1853.654251][T26426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.691865][T26426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1853.715675][T26426] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1853.730094][T26426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.750658][T26426] usb 4-1: config 0 descriptor?? [ 1853.765627][T26426] hub 4-1:0.0: USB hub found [ 1853.889898][T31473] netlink: 'syz.1.8719': attribute type 13 has an invalid length. [ 1853.937250][T31475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8720'. [ 1853.967324][T31476] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 1853.987504][T26426] hub 4-1:0.0: 1 port detected [ 1854.160940][T31473] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1854.198270][T31477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.235242][T31477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.313230][T27461] usb 4-1: USB disconnect, device number 79 [ 1854.409921][T24627] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1854.624820][T24627] usb 5-1: config 0 has no interfaces? [ 1854.663102][T24627] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1854.696679][T24627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.736694][T24627] usb 5-1: Product: syz [ 1854.740947][T24627] usb 5-1: Manufacturer: syz [ 1854.745591][T24627] usb 5-1: SerialNumber: syz [ 1854.826314][T24627] usb 5-1: config 0 descriptor?? [ 1854.919610][T27461] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1855.085678][T31483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8722'. [ 1855.106976][T27461] usb 3-1: Using ep0 maxpacket: 32 [ 1855.115089][T27461] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 1855.123442][T31483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8722'. [ 1855.132662][T27461] usb 3-1: config 0 has no interface number 0 [ 1855.144806][T27461] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1855.163309][T12031] usb 5-1: USB disconnect, device number 105 [ 1855.171467][T27461] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 1855.203805][T27461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.231625][T27461] usb 3-1: Product: syz [ 1855.241758][T31499] netlink: 'syz.1.8728': attribute type 12 has an invalid length. [ 1855.250930][T27461] usb 3-1: Manufacturer: syz [ 1855.259982][T27461] usb 3-1: SerialNumber: syz [ 1855.264684][T31499] netlink: 'syz.1.8728': attribute type 29 has an invalid length. [ 1855.276796][T31499] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8728'. [ 1855.291151][T27461] usb 3-1: config 0 descriptor?? [ 1855.503124][T31491] netlink: 'syz.2.8725': attribute type 10 has an invalid length. [ 1855.660031][T12031] usb 3-1: USB disconnect, device number 51 [ 1855.709411][T27461] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1855.728552][T31505] atomic_op ffff888029c40998 conn xmit_atomic 0000000000000000 [ 1855.839889][T31512] syzkaller0: entered promiscuous mode [ 1855.845587][T31512] syzkaller0: entered allmulticast mode [ 1855.906873][T27461] usb 4-1: Using ep0 maxpacket: 16 [ 1855.914964][T27461] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.927068][T27461] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1855.933847][T27461] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1855.943356][T27461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.957612][T27461] usb 4-1: config 0 descriptor?? [ 1856.392515][T27461] nzxt-smart2 0003:1E71:2009.0059: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1856.561295][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1856.575665][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1856.585844][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1856.594538][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1856.602881][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1856.645082][T22458] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1856.660109][T22458] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1856.673713][T22458] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1856.689915][T22458] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1856.705992][T22458] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1856.928340][T12030] usb 4-1: USB disconnect, device number 80 [ 1857.317419][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.406795][T12030] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1857.576858][T12030] usb 5-1: Using ep0 maxpacket: 8 [ 1857.595746][T12030] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1857.628264][T12030] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1857.671855][T12030] usb 5-1: Product: syz [ 1857.683199][T12030] usb 5-1: Manufacturer: syz [ 1857.692526][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.703302][T12030] usb 5-1: SerialNumber: syz [ 1857.721778][T12030] usb 5-1: config 0 descriptor?? [ 1857.754694][T12030] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1858.054577][T12030] gspca_zc3xx: reg_w_i err -71 [ 1858.079804][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.088062][T12030] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1858.155321][T12030] usb 5-1: USB disconnect, device number 106 [ 1858.161788][T23738] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1858.292896][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.311530][T11901] kworker/0:12 (11901) used greatest stack depth: 15200 bytes left [ 1858.336779][T23738] usb 4-1: Using ep0 maxpacket: 16 [ 1858.344313][T23738] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1858.357743][T23738] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1858.374218][T23738] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1858.389207][T23738] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1858.422877][T23738] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1858.438013][T23738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.470774][T23738] usb 4-1: Product: syz [ 1858.482227][T23738] usb 4-1: Manufacturer: syz [ 1858.492960][T23738] usb 4-1: SerialNumber: syz [ 1858.533487][T31522] chnl_net:caif_netlink_parms(): no params data found [ 1858.777993][T22458] Bluetooth: hci0: command tx timeout [ 1858.976860][T12030] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1859.166722][T12030] usb 5-1: device descriptor read/64, error -71 [ 1859.419029][T12030] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1859.435936][T31522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1859.459516][T31522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1859.491414][T31522] bridge_slave_0: entered allmulticast mode [ 1859.517009][T31522] bridge_slave_0: entered promiscuous mode [ 1859.596858][T12030] usb 5-1: device descriptor read/64, error -71 [ 1859.621822][T31522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1859.646900][T31522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.674847][T31522] bridge_slave_1: entered allmulticast mode [ 1859.707305][T31522] bridge_slave_1: entered promiscuous mode [ 1859.737316][T12030] usb usb5-port1: attempt power cycle [ 1859.885750][ T61] bridge_slave_1: left allmulticast mode [ 1859.893111][ T61] bridge_slave_1: left promiscuous mode [ 1859.899654][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.919240][ T61] bridge_slave_0: left allmulticast mode [ 1859.930950][ T61] bridge_slave_0: left promiscuous mode [ 1859.944385][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.116799][T12030] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1860.167795][T12030] usb 5-1: device descriptor read/8, error -71 [ 1860.436917][T12030] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1860.474738][ T61] bond2 (unregistering): (slave erspan1): Releasing backup interface [ 1860.485033][T12030] usb 5-1: device descriptor read/8, error -71 [ 1860.516284][ T61] erspan1 (unregistering): left promiscuous mode [ 1860.585581][ T61] dvmrp12 (unregistering): left allmulticast mode [ 1860.610708][T12030] usb usb5-port1: unable to enumerate USB device [ 1860.850439][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1860.868013][T22458] Bluetooth: hci0: command tx timeout [ 1860.924169][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1860.964495][ T61] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1860.985128][ T61] bond0 (unregistering): Released all slaves [ 1861.032277][ T61] bond1 (unregistering): Released all slaves [ 1861.095158][ T61] bond2 (unregistering): Released all slaves [ 1861.176540][ T61] bond3 (unregistering): Released all slaves [ 1861.319941][T31522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1861.380092][T31522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1861.640264][ T61] tipc: Left network mode [ 1861.693520][T31522] team0: Port device team_slave_0 added [ 1861.728166][T31522] team0: Port device team_slave_1 added [ 1861.923871][ T61] IPVS: stopping master sync thread 25377 ... [ 1862.003897][T23738] usb 4-1: invalid UAC_HEADER (v1) [ 1862.252986][T31522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1862.275357][T31522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.306767][T12030] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1862.372572][T31522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1862.427123][T12032] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1862.463978][T31522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1862.541066][T31522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.567050][T12030] usb 1-1: Using ep0 maxpacket: 32 [ 1862.575351][T12030] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1862.607745][T12030] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1862.633058][T23738] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1862.675506][T12030] usb 1-1: config 0 has no interface number 0 [ 1862.695691][T31522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1862.711395][T12032] usb 5-1: Using ep0 maxpacket: 16 [ 1862.733541][T12030] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1862.757145][T12032] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1862.796676][T12032] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1862.803385][T12032] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1862.830074][T12030] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1862.857018][T23738] usb 4-1: USB disconnect, device number 81 [ 1862.863665][T12030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.890718][T12032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.936824][T12030] usb 1-1: Product: syz [ 1862.941088][T12030] usb 1-1: Manufacturer: syz [ 1862.945725][T12030] usb 1-1: SerialNumber: syz [ 1862.947368][T22458] Bluetooth: hci0: command tx timeout [ 1862.996589][T26257] udevd[26257]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1863.027713][T12032] usb 5-1: config 0 descriptor?? [ 1863.045195][T12030] usb 1-1: config 0 descriptor?? [ 1863.086498][T12030] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1863.141379][T12030] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 1863.273526][T12030] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1863.366973][T31522] hsr_slave_0: entered promiscuous mode [ 1863.374236][T31522] hsr_slave_1: entered promiscuous mode [ 1863.422157][T31522] debugfs: 'hsr0' already exists in 'hsr' [ 1863.441370][T31522] Cannot create hsr debugfs directory [ 1863.491871][T31578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1863.525923][T12032] nzxt-smart2 0003:1E71:2009.005A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1863.573173][T31578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1863.625092][T12030] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 1863.701474][T12030] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 1863.809008][T12030] usb 1-1: USB disconnect, device number 7 [ 1863.837871][T12030] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 1864.175359][T26426] usb 5-1: USB disconnect, device number 111 [ 1864.309164][ T61] hsr_slave_0: left promiscuous mode [ 1864.370504][ T61] hsr_slave_1: left promiscuous mode [ 1864.410655][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1864.440011][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1864.482986][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1864.524364][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1864.622332][ T61] veth1_macvtap: left promiscuous mode [ 1864.637266][ T61] veth0_macvtap: left promiscuous mode [ 1864.665100][ T61] veth1_vlan: left promiscuous mode [ 1864.691703][ T61] ÿÿÿÿÿÿ: left promiscuous mode [ 1864.706790][T12030] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1864.887678][T12030] usb 1-1: Using ep0 maxpacket: 16 [ 1864.944480][T12030] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.978186][T12030] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1865.012837][T12030] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1865.029452][T22458] Bluetooth: hci0: command tx timeout [ 1865.064887][T12030] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1865.110128][ T61] pimreg3 (unregistering): left allmulticast mode [ 1865.120646][T31621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8756'. [ 1865.138301][T12030] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1865.215743][T12030] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1865.235854][T12030] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1865.259435][T12030] usb 1-1: Manufacturer: syz [ 1865.288764][T12030] usb 1-1: config 0 descriptor?? [ 1865.598545][T12030] rc_core: IR keymap rc-hauppauge not found [ 1865.614494][T12030] Registered IR keymap rc-empty [ 1865.634091][T12030] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1865.676271][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1865.702211][T12030] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1865.714060][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1865.739185][T12030] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1865.773221][T12030] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input93 [ 1865.822830][T12030] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1865.859737][T12030] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1865.919392][T12030] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1865.956934][T12030] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1866.008470][T12030] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1866.106926][T12030] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1866.161039][T12030] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1866.198325][T12030] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1866.237167][T12030] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1866.316021][T12030] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1866.382168][T12030] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1866.431853][T12030] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1866.478179][T12030] usb 1-1: USB disconnect, device number 8 [ 1866.648385][T27461] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1866.681760][ T61] IPVS: stop unused estimator thread 0... [ 1866.797227][T27461] usb 4-1: device descriptor read/64, error -71 [ 1866.886496][T31634] netlink: 'syz.0.8759': attribute type 13 has an invalid length. [ 1866.968481][T31633] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 1867.058404][T27461] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1867.257516][T27461] usb 4-1: device descriptor read/64, error -71 [ 1867.409467][T27461] usb usb4-port1: attempt power cycle [ 1867.747817][T31647] netlink: 'syz.4.8761': attribute type 13 has an invalid length. [ 1867.787883][T27461] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1867.807456][T31653] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 1867.841932][T27461] usb 4-1: device descriptor read/8, error -71 [ 1867.923383][T31653] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1868.088102][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1868.115368][T27461] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1868.172374][T27461] usb 4-1: device descriptor read/8, error -71 [ 1868.297464][T27461] usb usb4-port1: unable to enumerate USB device [ 1868.431919][T31522] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1868.459785][T31522] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1868.470003][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1868.511303][T31522] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1868.536271][T31522] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1868.567120][T27461] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1868.737337][T12032] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1868.764499][T27461] usb 1-1: Using ep0 maxpacket: 32 [ 1868.775873][T27461] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 1868.790276][T27461] usb 1-1: config 0 has no interface number 0 [ 1868.796464][T27461] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1868.818539][T27461] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 1868.846777][T27461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.865265][T27461] usb 1-1: Product: syz [ 1868.885736][T27461] usb 1-1: Manufacturer: syz [ 1868.902789][T27461] usb 1-1: SerialNumber: syz [ 1868.916931][T12032] usb 2-1: Using ep0 maxpacket: 16 [ 1868.924313][T12032] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1868.950063][T27461] usb 1-1: config 0 descriptor?? [ 1868.990476][T12032] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1869.022918][T12032] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1869.057261][T12032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.094958][T31680] netlink: 760 bytes leftover after parsing attributes in process `syz.4.8767'. [ 1869.114738][T12032] usb 2-1: config 0 descriptor?? [ 1869.159172][T31522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1869.227733][T31522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1869.256917][T30409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.264214][T30409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1869.272333][T31662] netlink: 'syz.0.8764': attribute type 10 has an invalid length. [ 1869.305183][T25291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.312403][T25291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1869.466745][T27461] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1869.601829][T12032] nzxt-smart2 0003:1E71:2009.005B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1869.662647][T12031] usb 1-1: USB disconnect, device number 9 [ 1869.664074][T31522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1869.680311][T27461] usb 5-1: Using ep0 maxpacket: 16 [ 1869.707088][T27461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1869.758252][T27461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1869.807052][T27461] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1869.845209][T27461] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1869.886820][T27461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.888425][T31522] veth0_vlan: entered promiscuous mode [ 1869.919277][T27461] usb 5-1: config 0 descriptor?? [ 1869.927965][T24138] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1869.943695][T31522] veth1_vlan: entered promiscuous mode [ 1870.012061][T31522] veth0_macvtap: entered promiscuous mode [ 1870.034042][T31522] veth1_macvtap: entered promiscuous mode [ 1870.063250][ T5886] usb 2-1: USB disconnect, device number 51 [ 1870.074522][T31522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1870.110571][T31522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1870.118259][T24138] usb 4-1: Using ep0 maxpacket: 16 [ 1870.139855][T24138] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.158434][T25287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.180724][T24138] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1870.194686][T25287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.204398][T25287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.224206][T24138] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1870.241566][T25287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.252899][T24138] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1870.276906][T24138] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1870.326537][T24138] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1870.360288][T24138] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1870.377339][T24138] usb 4-1: Manufacturer: syz [ 1870.399730][T24138] usb 4-1: config 0 descriptor?? [ 1870.466514][T27461] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.005C/input/input94 [ 1870.511455][T25287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1870.530473][T27461] microsoft 0003:045E:07DA.005C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1870.555484][T25287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1870.639480][T27461] usb 5-1: USB disconnect, device number 112 [ 1870.767747][T24138] rc_core: IR keymap rc-hauppauge not found [ 1870.773745][T24138] Registered IR keymap rc-empty [ 1870.784201][T25287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1870.807969][T25287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1870.815513][T24138] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1870.824549][T31700] fido_id[31700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1870.854297][T24138] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1870.926253][T24138] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1870.971846][T24138] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input95 [ 1871.038647][T24138] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1871.058322][T24138] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1871.077001][T24138] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1871.129472][T24138] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1871.161189][T31722] fuse: Bad value for 'fd' [ 1871.177285][T24138] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1871.218203][T24138] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1871.248125][T24138] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1871.291326][T24138] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1871.341085][T24138] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1871.386843][T24138] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1871.440381][T24138] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1871.482759][T24138] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1871.536260][T24138] usb 4-1: USB disconnect, device number 86 [ 1871.581622][T31730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8776'. [ 1871.765504][T23738] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1871.916738][T23738] usb 5-1: device descriptor read/64, error -71 [ 1871.948621][T24138] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1872.055397][T31749] FAULT_INJECTION: forcing a failure. [ 1872.055397][T31749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1872.089275][T31749] CPU: 0 UID: 0 PID: 31749 Comm: syz.1.8782 Tainted: G L syzkaller #0 PREEMPT(full) [ 1872.089311][T31749] Tainted: [L]=SOFTLOCKUP [ 1872.089319][T31749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1872.089333][T31749] Call Trace: [ 1872.089342][T31749] [ 1872.089352][T31749] dump_stack_lvl+0xe8/0x150 [ 1872.089390][T31749] should_fail_ex+0x412/0x560 [ 1872.089427][T31749] _copy_from_user+0x2d/0xb0 [ 1872.089452][T31749] ___sys_sendmsg+0x1c6/0x360 [ 1872.089483][T31749] ? __pfx____sys_sendmsg+0x10/0x10 [ 1872.089543][T31749] ? __fget_files+0x2a/0x420 [ 1872.089575][T31749] ? __fget_files+0x3a0/0x420 [ 1872.089617][T31749] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1872.089644][T31749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1872.089679][T31749] ? __pfx_ksys_write+0x10/0x10 [ 1872.089715][T31749] do_syscall_64+0x14d/0xf80 [ 1872.089738][T31749] ? trace_irq_disable+0x3b/0x150 [ 1872.089769][T31749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.089791][T31749] ? clear_bhb_loop+0x40/0x90 [ 1872.089818][T31749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.089839][T31749] RIP: 0033:0x7f4e0f59c799 [ 1872.089860][T31749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1872.089878][T31749] RSP: 002b:00007f4e1052a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1872.089910][T31749] RAX: ffffffffffffffda RBX: 00007f4e0f815fa0 RCX: 00007f4e0f59c799 [ 1872.089927][T31749] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1872.089941][T31749] RBP: 00007f4e1052a090 R08: 0000000000000000 R09: 0000000000000000 [ 1872.089954][T31749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1872.089967][T31749] R13: 00007f4e0f816038 R14: 00007f4e0f815fa0 R15: 00007f4e0f93fa48 [ 1872.089999][T31749] [ 1872.118126][T24138] usb 4-1: Using ep0 maxpacket: 32 [ 1872.296734][T23738] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1872.398385][T24138] usb 4-1: config 0 has an invalid interface number: 10 but max is 0 [ 1872.416816][T24138] usb 4-1: config 0 has no interface number 0 [ 1872.423004][T24138] usb 4-1: config 0 interface 10 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1872.450783][T24138] usb 4-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 1872.471462][T24138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.496989][T24138] usb 4-1: Product: syz [ 1872.501259][T24138] usb 4-1: Manufacturer: syz [ 1872.505882][T24138] usb 4-1: SerialNumber: syz [ 1872.510795][T23738] usb 5-1: device descriptor read/64, error -71 [ 1872.541592][T24138] usb 4-1: config 0 descriptor?? [ 1872.627822][T23738] usb usb5-port1: attempt power cycle [ 1872.754518][T31771] FAULT_INJECTION: forcing a failure. [ 1872.754518][T31771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1872.767965][T24138] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1872.775909][T31771] CPU: 1 UID: 0 PID: 31771 Comm: syz.2.8787 Tainted: G L syzkaller #0 PREEMPT(full) [ 1872.775946][T31771] Tainted: [L]=SOFTLOCKUP [ 1872.775954][T31771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1872.775967][T31771] Call Trace: [ 1872.775976][T31771] [ 1872.775985][T31771] dump_stack_lvl+0xe8/0x150 [ 1872.776022][T31771] should_fail_ex+0x412/0x560 [ 1872.776060][T31771] _copy_from_user+0x2d/0xb0 [ 1872.776084][T31771] ___sys_recvmsg+0x175/0x590 [ 1872.776109][T31771] ? __lock_acquire+0x6b5/0x2cf0 [ 1872.776142][T31771] ? __pfx____sys_recvmsg+0x10/0x10 [ 1872.776205][T31771] do_recvmmsg+0x334/0x800 [ 1872.776240][T31771] ? __pfx_do_recvmmsg+0x10/0x10 [ 1872.776277][T31771] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1872.776329][T31771] __x64_sys_recvmmsg+0x198/0x250 [ 1872.776359][T31771] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1872.776398][T31771] do_syscall_64+0x14d/0xf80 [ 1872.776421][T31771] ? trace_irq_disable+0x3b/0x150 [ 1872.776453][T31771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.776476][T31771] ? clear_bhb_loop+0x40/0x90 [ 1872.776503][T31771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.776525][T31771] RIP: 0033:0x7f3113b9c799 [ 1872.776546][T31771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1872.776566][T31771] RSP: 002b:00007f31149a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1872.776590][T31771] RAX: ffffffffffffffda RBX: 00007f3113e16090 RCX: 00007f3113b9c799 [ 1872.776606][T31771] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1872.776620][T31771] RBP: 00007f31149a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1872.776634][T31771] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1872.776647][T31771] R13: 00007f3113e16128 R14: 00007f3113e16090 R15: 00007f3113f3fa48 [ 1872.776678][T31771] [ 1872.815356][T31735] netlink: 'syz.3.8778': attribute type 10 has an invalid length. [ 1872.967597][T23738] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1872.996240][T24138] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1873.006323][T24138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.020477][T23738] usb 5-1: device descriptor read/8, error -71 [ 1873.027507][T24138] usb 1-1: Product: syz [ 1873.031732][T24138] usb 1-1: Manufacturer: syz [ 1873.036367][T24138] usb 1-1: SerialNumber: syz [ 1873.046718][T27976] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1873.056037][T31737] usb 4-1: USB disconnect, device number 87 [ 1873.209890][T27976] usb 2-1: Using ep0 maxpacket: 16 [ 1873.217490][T27976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1873.227891][T27976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1873.239078][T27976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1873.249764][T27976] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1873.259744][T27976] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1873.272866][T23738] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1873.282680][T27976] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1873.291925][T27976] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1873.300322][T27976] usb 2-1: Manufacturer: syz [ 1873.306397][T23738] usb 5-1: device descriptor read/8, error -71 [ 1873.317063][T27976] usb 2-1: config 0 descriptor?? [ 1873.417263][T23738] usb usb5-port1: unable to enumerate USB device [ 1873.634437][T27976] rc_core: IR keymap rc-hauppauge not found [ 1873.649255][T27976] Registered IR keymap rc-empty [ 1873.655812][T27976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1873.687327][T27976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1873.718958][T27976] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1873.743456][T24138] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1873.764398][T27976] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input96 [ 1873.786234][T24138] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1873.799321][T24138] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1873.811254][T27976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1873.825823][T24138] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1873.848683][T31783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8791'. [ 1873.858327][T27976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1873.877829][T24138] usb 1-1: USB disconnect, device number 10 [ 1873.900048][T27976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1873.935454][T27976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1873.956286][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1873.956308][ T30] audit: type=1804 audit(1773367457.674:3751): pid=31785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.8792" name="/newroot/3/file1" dev="fuse" ino=1 res=1 errno=0 [ 1873.986444][T27976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1874.006803][T27976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1874.027072][T27976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1874.046782][T27976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1874.077389][T27976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1874.108212][T27976] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1874.139460][T27976] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1874.165339][T27976] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1874.191018][T27976] usb 2-1: USB disconnect, device number 52 [ 1874.691907][T31816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8803'. [ 1874.726735][T27976] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1874.784222][T31816] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1728497071 (13827976568 ns) > initial count (5811828296 ns). Using initial count to start timer. [ 1874.893882][T27976] usb 2-1: config 7 descriptor has 1 excess byte, ignoring [ 1874.906081][T27976] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1874.921629][T27976] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1874.931224][T27976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.947248][T27976] usb 2-1: Product: syz [ 1874.956195][T27976] usb 2-1: Manufacturer: syz [ 1874.966762][T27976] usb 2-1: SerialNumber: syz [ 1874.998933][T27976] rndis_host 2-1:7.0: skipping garbage [ 1875.023857][T27976] usb 2-1: bad CDC descriptors [ 1875.041257][T27976] option 2-1:7.0: GSM modem (1-port) converter detected [ 1875.166218][T31818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1875.568375][T27976] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1875.727090][T27976] usb 3-1: Using ep0 maxpacket: 32 [ 1875.749660][T27976] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 1875.769591][T27976] usb 3-1: config 0 has no interface number 0 [ 1875.787917][T27976] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1875.811407][T27976] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 1875.828644][T27976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.846809][T27976] usb 3-1: Product: syz [ 1875.855732][T27976] usb 3-1: Manufacturer: syz [ 1875.866480][T27976] usb 3-1: SerialNumber: syz [ 1875.890523][T27976] usb 3-1: config 0 descriptor?? [ 1876.147731][T31828] netlink: 'syz.2.8808': attribute type 10 has an invalid length. [ 1876.183445][T31828] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1876.347237][T27976] usb 3-1: USB disconnect, device number 52 [ 1876.994263][T31857] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8814'. [ 1877.376707][T27461] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1877.454677][T26426] usb 2-1: USB disconnect, device number 53 [ 1877.478531][T26426] option 2-1:7.0: device disconnected [ 1877.549471][T27461] usb 4-1: Using ep0 maxpacket: 32 [ 1877.562543][T27461] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1877.580960][T27461] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2031, setting to 1024 [ 1877.604537][T27461] usb 4-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 1877.620755][T27461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.650080][T27461] usb 4-1: Product: syz [ 1877.655272][T27461] usb 4-1: Manufacturer: syz [ 1877.662501][T27461] usb 4-1: SerialNumber: syz [ 1877.900440][T26426] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1877.933220][T27461] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1877.989173][ T30] audit: type=1804 audit(1773367461.704:3752): pid=31878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.8820" name="bus" dev="ramfs" ino=161668 res=1 errno=0 [ 1878.097325][T26426] usb 1-1: Using ep0 maxpacket: 16 [ 1878.119750][T26426] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1878.157147][T27461] usb 4-1: USB disconnect, device number 88 [ 1878.181445][T26426] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1878.223210][T25972] udevd[25972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1878.277582][T26426] usb 1-1: config 1 has no interface number 1 [ 1878.316686][T26426] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1878.374044][T26426] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1878.433179][T26426] usb 1-1: config 1 interface 2 has no altsetting 0 [ 1878.459989][T31889] CUSE: info not properly terminated [ 1878.481182][T26426] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1878.523210][T26426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.544516][T31889] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8824'. [ 1878.576505][T26426] usb 1-1: Product: syz [ 1878.595214][T26426] usb 1-1: Manufacturer: syz [ 1878.632105][T26426] usb 1-1: SerialNumber: syz [ 1878.918431][T27461] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1878.999223][T31868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1879.072958][T31868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1879.106923][T27461] usb 2-1: device descriptor read/64, error -71 [ 1879.158511][T31896] netlink: 484 bytes leftover after parsing attributes in process `syz.3.8827'. [ 1879.417747][T27461] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1879.616810][T27461] usb 2-1: device descriptor read/64, error -71 [ 1879.696380][T26426] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1879.714772][T26426] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1879.746136][T26426] usb 1-1: selecting invalid altsetting 0 [ 1879.771546][T27461] usb usb2-port1: attempt power cycle [ 1879.799591][T26426] usb 1-1: selecting invalid altsetting 0 [ 1880.019581][T26426] usb 1-1: USB disconnect, device number 11 [ 1880.088005][T25953] udevd[25953]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1880.179168][T27461] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1880.267569][T27461] usb 2-1: device descriptor read/8, error -71 [ 1880.275025][T31907] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8828'. [ 1880.456782][T27976] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1880.526728][T27461] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1880.597634][T27461] usb 2-1: device descriptor read/8, error -71 [ 1880.628618][T27976] usb 4-1: Using ep0 maxpacket: 32 [ 1880.649415][T27976] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1880.673718][T31907] fuse: Bad value for 'rootmode' [ 1880.680498][T27976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1880.708954][T27461] usb usb2-port1: unable to enumerate USB device [ 1880.715438][T27976] usb 4-1: config 0 has no interface number 0 [ 1880.746088][T27976] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1880.790998][T27976] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1880.821103][T27976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.843787][T27976] usb 4-1: Product: syz [ 1880.856494][T27976] usb 4-1: Manufacturer: syz [ 1880.882529][T27976] usb 4-1: SerialNumber: syz [ 1880.917245][T27976] usb 4-1: config 0 descriptor?? [ 1880.945622][T27976] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 1880.958177][T31737] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1880.987539][T27976] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 1881.136798][T24138] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1881.145938][T27976] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1881.156908][T31737] usb 5-1: Using ep0 maxpacket: 8 [ 1881.168077][T31737] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1881.189767][T31737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1881.207214][T31737] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1881.236876][T31737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1881.257351][T31737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1881.288428][T31737] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1881.306924][T24138] usb 3-1: Using ep0 maxpacket: 32 [ 1881.313153][T31737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1881.336458][T24138] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 1881.348269][T24138] usb 3-1: config 0 has no interface number 0 [ 1881.354548][T31737] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1881.367430][T24138] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1881.375150][T31903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.382840][T31737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1881.407975][T31903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.427031][T31737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1881.440610][T24138] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 1881.450754][T27976] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 1881.460880][T31737] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1881.468577][T24138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.479165][T31737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1881.492993][T27976] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 1881.509202][T24138] usb 3-1: Product: syz [ 1881.529189][T24138] usb 3-1: Manufacturer: syz [ 1881.537950][T27976] usb 4-1: USB disconnect, device number 89 [ 1881.545532][T31737] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1881.560626][T24138] usb 3-1: SerialNumber: syz [ 1881.566235][T27976] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 1881.578220][T31737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1881.592157][T24138] usb 3-1: config 0 descriptor?? [ 1881.601905][T31737] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1881.667017][T31737] usb 5-1: string descriptor 0 read error: -22 [ 1881.685394][T31737] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1881.728423][T31737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.779659][T31737] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1881.845227][T31919] netlink: 'syz.2.8833': attribute type 10 has an invalid length. [ 1882.043328][T31912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8831'. [ 1882.066893][T31912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8831'. [ 1882.088672][T31932] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1882.137639][ T5886] usb 3-1: USB disconnect, device number 54 [ 1882.398708][T31947] netlink: 'syz.0.8840': attribute type 4 has an invalid length. [ 1882.786760][T31737] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1882.963936][T31737] usb 4-1: Using ep0 maxpacket: 32 [ 1882.991227][T31737] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 1883.022666][T31957] netlink: 592 bytes leftover after parsing attributes in process `syz.1.8845'. [ 1883.023862][T31737] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 1883.098751][T31737] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 1883.112258][T31737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.141125][T31737] usb 4-1: Product: syz [ 1883.145525][T31737] usb 4-1: Manufacturer: syz [ 1883.155780][T31737] usb 4-1: SerialNumber: syz [ 1883.953175][T31737] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1883.960551][T31737] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1883.971645][T31737] usb 4-1: unit 130 not found! [ 1884.042593][T31737] usb 4-1: USB disconnect, device number 90 [ 1884.098318][T26257] udevd[26257]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1884.227029][T27976] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1884.380516][T31737] usb 5-1: USB disconnect, device number 117 [ 1884.396835][T27976] usb 2-1: Using ep0 maxpacket: 32 [ 1884.415239][T27976] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1884.433129][T27976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.454979][T27976] usb 2-1: config 0 has no interface number 0 [ 1884.461798][T27976] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1884.486588][T27976] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1884.501430][T27976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.511358][T12031] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1884.519859][T27976] usb 2-1: Product: syz [ 1884.525893][T27976] usb 2-1: Manufacturer: syz [ 1884.531588][T27976] usb 2-1: SerialNumber: syz [ 1884.542308][T27976] usb 2-1: config 0 descriptor?? [ 1884.562806][T27976] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 1884.571374][T27976] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 1884.667207][T12031] usb 4-1: Using ep0 maxpacket: 8 [ 1884.674964][T12031] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 1884.683612][T12031] usb 4-1: config 2 has no interface number 0 [ 1884.691097][T12031] usb 4-1: config 2 interface 31 has no altsetting 0 [ 1884.703762][T12031] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1884.713446][T12031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.721587][T12031] usb 4-1: Product: syz [ 1884.725852][T12031] usb 4-1: Manufacturer: syz [ 1884.731337][T12031] usb 4-1: SerialNumber: syz [ 1884.757642][T27976] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1884.856848][T31737] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1884.962657][T31969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1884.973107][T31969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1884.987975][T27976] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 1885.000982][T27976] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 1885.009061][T31737] usb 5-1: Using ep0 maxpacket: 32 [ 1885.020992][T31737] usb 5-1: config 0 has an invalid interface number: 10 but max is 0 [ 1885.030589][T27976] usb 2-1: USB disconnect, device number 58 [ 1885.037726][T27976] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 1885.044990][T31737] usb 5-1: config 0 has no interface number 0 [ 1885.051385][T31737] usb 5-1: config 0 interface 10 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1885.076297][T31737] usb 5-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 1885.086172][T31737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.095070][T31737] usb 5-1: Product: syz [ 1885.104779][T31737] usb 5-1: Manufacturer: syz [ 1885.112442][T31737] usb 5-1: SerialNumber: syz [ 1885.130831][T31737] usb 5-1: config 0 descriptor?? [ 1885.344222][T31977] netlink: 'syz.4.8853': attribute type 10 has an invalid length. [ 1885.361838][T12031] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 1885.377118][T12031] usb 4-1: USB disconnect, device number 91 [ 1885.499369][T26426] usb 5-1: USB disconnect, device number 118 [ 1885.746752][T22458] Bluetooth: hci0: command 0x0c1a tx timeout [ 1885.753025][T31966] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1885.759442][T31966] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1885.949547][T31984] cifs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿfd' [ 1886.043812][T31986] netlink: 592 bytes leftover after parsing attributes in process `syz.3.8856'. [ 1886.736439][T32015] netlink: 592 bytes leftover after parsing attributes in process `syz.1.8868'. [ 1886.886902][T26426] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1886.939350][T32018] cifs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿfd' [ 1886.986957][T31737] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1887.049196][T26426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1887.095073][T26426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1887.136058][T26426] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1887.147240][T31737] usb 1-1: Using ep0 maxpacket: 32 [ 1887.181769][T31737] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 1887.200206][T31737] usb 1-1: config 0 has no interface number 0 [ 1887.215354][T31737] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1887.245552][T31737] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 1887.264935][T31737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.277399][T31737] usb 1-1: Product: syz [ 1887.282973][T31737] usb 1-1: Manufacturer: syz [ 1887.298081][T31737] usb 1-1: SerialNumber: syz [ 1887.305596][T26426] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1887.347418][T31737] usb 1-1: config 0 descriptor?? [ 1887.388969][T26426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.527254][T26426] usb 3-1: config 0 descriptor?? [ 1887.673320][T32016] netlink: 'syz.0.8867': attribute type 10 has an invalid length. [ 1887.866868][T27461] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1887.992663][T26426] plantronics 0003:047F:FFFF.005D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1888.067417][T27461] usb 5-1: Using ep0 maxpacket: 16 [ 1888.129179][ T796] usb 1-1: USB disconnect, device number 12 [ 1888.150773][T27461] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1888.212645][T27461] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1888.236931][T27461] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1888.271946][T27461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.324768][T27461] usb 5-1: config 0 descriptor?? [ 1888.797244][T27461] nzxt-smart2 0003:1E71:2009.005E: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1889.081714][T32045] netlink: 'syz.0.8874': attribute type 2 has an invalid length. [ 1889.128220][T31737] usb 5-1: USB disconnect, device number 119 [ 1889.157008][T32045] netlink: 'syz.0.8874': attribute type 2 has an invalid length. [ 1889.164995][T32045] !: left promiscuous mode [ 1889.738560][T32050] bond_slave_1: Caught tx_queue_len zero misconfig [ 1889.976948][ T796] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1890.136924][ T796] usb 5-1: device descriptor read/64, error -71 [ 1890.316748][T27976] usb 3-1: reset high-speed USB device number 55 using dummy_hcd [ 1890.366343][T27976] usb 3-1: device reset changed ep0 maxpacket size! [ 1890.407212][ T796] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1890.424433][T27461] usb 3-1: USB disconnect, device number 55 [ 1890.567150][ T796] usb 5-1: device descriptor read/64, error -71 [ 1890.599891][T27461] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1890.687520][ T796] usb usb5-port1: attempt power cycle [ 1890.797022][T27461] usb 3-1: Using ep0 maxpacket: 16 [ 1890.807031][T27461] usb 3-1: no configurations [ 1890.811758][T27461] usb 3-1: can't read configurations, error -22 [ 1890.954902][T27461] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1891.047367][ T796] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1891.089229][ T796] usb 5-1: device descriptor read/8, error -71 [ 1891.127046][T27461] usb 3-1: Using ep0 maxpacket: 16 [ 1891.142265][T27461] usb 3-1: no configurations [ 1891.180242][T27461] usb 3-1: can't read configurations, error -22 [ 1891.197428][T27461] usb usb3-port1: attempt power cycle [ 1891.366752][ T796] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1891.413628][ T796] usb 5-1: device descriptor read/8, error -71 [ 1891.518067][T12031] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1891.527632][ T796] usb usb5-port1: unable to enumerate USB device [ 1891.536730][T27461] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1891.558482][T32079] cifs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿfd' [ 1891.597370][T27461] usb 3-1: Using ep0 maxpacket: 16 [ 1891.603472][T27461] usb 3-1: no configurations [ 1891.620710][T27461] usb 3-1: can't read configurations, error -22 [ 1891.722305][T12031] usb 2-1: Using ep0 maxpacket: 32 [ 1891.743693][T12031] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 1891.755784][T12031] usb 2-1: config 0 has no interface number 0 [ 1891.776571][T12031] usb 2-1: config 0 interface 10 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1891.811886][T12031] usb 2-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 1891.832845][T27461] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1891.849447][T12031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.867675][T27461] usb 3-1: Using ep0 maxpacket: 16 [ 1891.875162][T27461] usb 3-1: no configurations [ 1891.883129][T12031] usb 2-1: Product: syz [ 1891.883690][T27461] usb 3-1: can't read configurations, error -22 [ 1891.904154][T12031] usb 2-1: Manufacturer: syz [ 1891.919241][T12031] usb 2-1: SerialNumber: syz [ 1891.939655][T27461] usb usb3-port1: unable to enumerate USB device [ 1891.957982][T12031] usb 2-1: config 0 descriptor?? [ 1892.176204][T32077] netlink: 'syz.1.8884': attribute type 10 has an invalid length. [ 1892.384024][T27461] usb 2-1: USB disconnect, device number 59 [ 1892.893595][T32086] xfrm0: entered promiscuous mode [ 1892.899055][T32086] xfrm0: entered allmulticast mode [ 1893.571748][T32102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8892'. [ 1894.486749][T27461] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1894.577077][T12031] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1894.647011][T27461] usb 2-1: Using ep0 maxpacket: 16 [ 1894.658798][T27461] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1894.686511][T27461] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1894.711364][T27461] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1894.723664][T27461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.733899][T12031] usb 4-1: Using ep0 maxpacket: 16 [ 1894.743457][T27461] usb 2-1: Product: syz [ 1894.749197][T27461] usb 2-1: Manufacturer: syz [ 1894.751142][T12031] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1894.767268][T27461] usb 2-1: SerialNumber: syz [ 1894.787475][T12031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1894.816000][T27461] usb 2-1: config 0 descriptor?? [ 1894.823145][T12031] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1894.849661][T12031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.871354][T12031] usb 4-1: Product: syz [ 1894.881213][T12031] usb 4-1: Manufacturer: syz [ 1894.913514][T12031] usb 4-1: SerialNumber: syz [ 1894.952468][T12031] usb 4-1: config 0 descriptor?? [ 1894.971163][T12031] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1894.987144][T12031] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1895.001019][T32137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1895.048531][T31737] usb 2-1: USB disconnect, device number 60 [ 1895.227138][T12031] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1895.263788][T12031] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1895.284297][T12031] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1895.306732][T12031] em28xx 4-1:0.0: No AC97 audio processor [ 1895.322424][T12031] usb 4-1: USB disconnect, device number 92 [ 1895.345590][T12031] em28xx 4-1:0.0: Disconnecting em28xx [ 1895.359717][T12031] em28xx 4-1:0.0: Freeing device [ 1895.406346][T32143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8904'. [ 1895.722009][T32149] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 1895.732651][T32149] syzkaller0: entered promiscuous mode [ 1895.739050][T32149] syzkaller0: entered allmulticast mode [ 1895.777164][T32154] FAULT_INJECTION: forcing a failure. [ 1895.777164][T32154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1895.834750][T32154] CPU: 1 UID: 0 PID: 32154 Comm: syz.1.8908 Tainted: G L syzkaller #0 PREEMPT(full) [ 1895.834777][T32154] Tainted: [L]=SOFTLOCKUP [ 1895.834783][T32154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1895.834793][T32154] Call Trace: [ 1895.834800][T32154] [ 1895.834807][T32154] dump_stack_lvl+0xe8/0x150 [ 1895.834834][T32154] should_fail_ex+0x412/0x560 [ 1895.834861][T32154] _copy_to_user+0x31/0xb0 [ 1895.834880][T32154] simple_read_from_buffer+0xe1/0x170 [ 1895.834907][T32154] proc_fail_nth_read+0x1bb/0x230 [ 1895.834932][T32154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1895.834957][T32154] ? rw_verify_area+0x2a6/0x4d0 [ 1895.834973][T32154] ? irqentry_exit+0x59e/0x620 [ 1895.834990][T32154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1895.835014][T32154] vfs_read+0x20c/0xa70 [ 1895.835029][T32154] ? fdget_pos+0x246/0x320 [ 1895.835056][T32154] ? __pfx___mutex_lock+0x10/0x10 [ 1895.835074][T32154] ? __pfx_vfs_read+0x10/0x10 [ 1895.835092][T32154] ? __fget_files+0x2a/0x420 [ 1895.835120][T32154] ? __fget_files+0x3a0/0x420 [ 1895.835143][T32154] ? __fget_files+0x2a/0x420 [ 1895.835172][T32154] ksys_read+0x150/0x270 [ 1895.835191][T32154] ? __pfx_ksys_read+0x10/0x10 [ 1895.835207][T32154] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 1895.835435][T32154] do_syscall_64+0x14d/0xf80 [ 1895.835458][T32154] ? trace_irq_disable+0x3b/0x150 [ 1895.835490][T32154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1895.835517][T32154] ? clear_bhb_loop+0x40/0x90 [ 1895.835537][T32154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1895.835552][T32154] RIP: 0033:0x7f4e0f55cfce [ 1895.835568][T32154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1895.835581][T32154] RSP: 002b:00007f4e10508fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1895.835598][T32154] RAX: ffffffffffffffda RBX: 00007f4e105096c0 RCX: 00007f4e0f55cfce [ 1895.835617][T32154] RDX: 000000000000000f RSI: 00007f4e105090a0 RDI: 0000000000000006 [ 1895.835627][T32154] RBP: 00007f4e10509090 R08: 0000000000000000 R09: 0000000000000000 [ 1895.835636][T32154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1895.835646][T32154] R13: 00007f4e0f816128 R14: 00007f4e0f816090 R15: 00007f4e0f93fa48 [ 1895.835670][T32154] [ 1896.136757][T12031] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1896.291051][T12031] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1896.301724][T12031] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1896.313850][T12031] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1896.324748][T12031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.340342][T12031] usb 5-1: Product: syz [ 1896.344778][T12031] usb 5-1: Manufacturer: syz [ 1896.349894][T12031] usb 5-1: SerialNumber: syz [ 1896.523810][T32166] cifs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿfd' [ 1896.587933][T12031] usb 5-1: 0:2 : does not exist [ 1896.606051][T12031] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1896.618457][ T796] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1896.733990][T12031] usb 5-1: USB disconnect, device number 124 [ 1896.786834][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 1896.798758][ T796] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1896.822587][T26257] udevd[26257]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1896.855420][ T796] usb 2-1: config 9 has an invalid interface number: 27 but max is 0 [ 1896.879029][ T796] usb 2-1: config 9 has 2 interfaces, different from the descriptor's value: 1 [ 1896.909758][ T796] usb 2-1: config 9 has no interface number 1 [ 1896.928778][ T796] usb 2-1: config 9 interface 27 altsetting 9 endpoint 0xF has an invalid bInterval 66, changing to 10 [ 1896.964012][ T796] usb 2-1: config 9 interface 27 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1897.029174][ T796] usb 2-1: config 9 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1897.072052][ T796] usb 2-1: config 9 interface 27 has no altsetting 0 [ 1897.100018][ T796] usb 2-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=f3.b6 [ 1897.124644][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.132900][T26426] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1897.184200][ T796] usb 2-1: Product: syz [ 1897.194498][ T796] usb 2-1: Manufacturer: syz [ 1897.278321][ T796] usb 2-1: SerialNumber: syz [ 1897.316752][T26426] usb 4-1: Using ep0 maxpacket: 32 [ 1897.326980][T26426] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1897.370830][T26426] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1897.394576][ T796] sierra 2-1:9.27: Sierra USB modem converter detected [ 1897.407185][T26426] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1897.445276][T26426] usb 4-1: Product: syz [ 1897.470074][T26426] usb 4-1: Manufacturer: syz [ 1897.497640][T26426] usb 4-1: SerialNumber: syz [ 1897.530494][T26426] usb 4-1: config 0 descriptor?? [ 1897.571010][T32170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1897.674887][T32159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.724485][T32181] netlink: 136 bytes leftover after parsing attributes in process `syz.4.8915'. [ 1897.755114][T32159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.811066][T32170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.861505][T32170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.907230][ T796] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1897.973453][ T796] sierra 2-1:9.0: Sierra USB modem converter detected [ 1898.049348][ T796] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 1898.097325][ T796] usb 2-1: USB disconnect, device number 61 [ 1898.139805][ T796] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1898.205842][ T796] sierra 2-1:9.27: device disconnected [ 1898.265663][ T796] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1898.370758][ T796] sierra 2-1:9.0: device disconnected [ 1898.712053][T32189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8917'. [ 1899.046841][T31737] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1899.056803][T32195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8919'. [ 1899.242052][T31737] usb 2-1: Using ep0 maxpacket: 16 [ 1899.294796][T32195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8919'. [ 1899.347198][T31737] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.420225][T31737] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1899.627555][T31737] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1899.699656][T31737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.900434][T27461] usb 4-1: USB disconnect, device number 93 [ 1899.961312][T31737] usb 2-1: Product: syz [ 1899.981563][T31737] usb 2-1: Manufacturer: syz [ 1900.065101][T31737] usb 2-1: SerialNumber: syz [ 1900.156802][T31737] usb 2-1: config 0 descriptor?? [ 1900.441600][ T796] usb 2-1: USB disconnect, device number 62 [ 1901.119877][T32220] cifs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿfd' [ 1901.232605][T31737] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1901.411444][T31737] usb 4-1: Using ep0 maxpacket: 32 [ 1901.454240][T31737] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1901.482083][T31737] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1901.529801][T31737] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1901.569247][T31737] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1901.613459][T31737] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1901.645625][T31737] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1901.677887][T31737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.719872][T31737] usb 4-1: config 0 descriptor?? [ 1902.161459][T31737] hid_parser_main: 170 callbacks suppressed [ 1902.161483][T31737] hid-thrustmaster 0003:044F:B65D.005F: unknown main item tag 0x0 [ 1902.177722][T31737] hid-thrustmaster 0003:044F:B65D.005F: unknown main item tag 0x0 [ 1902.185669][T31737] hid-thrustmaster 0003:044F:B65D.005F: unknown main item tag 0x0 [ 1902.210858][T31737] hid-thrustmaster 0003:044F:B65D.005F: unknown main item tag 0x0 [ 1902.221768][T31737] hid-thrustmaster 0003:044F:B65D.005F: unknown main item tag 0x0 [ 1902.235111][T32230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8930'. [ 1902.236303][T31737] hid-thrustmaster 0003:044F:B65D.005F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 1902.267004][T31737] hid-thrustmaster 0003:044F:B65D.005F: Wrong number of endpoints? [ 1902.362367][ C1] hid-thrustmaster 0003:044F:B65D.005F: Unknown packet type 0x0, unable to proceed further with wheel init [ 1902.563945][T32223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8927'. [ 1902.615771][T32245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8927'. [ 1902.653647][T32223] team0: Port device veth0_to_bond removed [ 1902.661697][T32223] bridge1: port 1(veth0_to_bond) entered blocking state [ 1902.669460][T32223] bridge1: port 1(veth0_to_bond) entered disabled state [ 1902.678187][T32223] veth0_to_bond: entered allmulticast mode [ 1902.688510][T32223] veth0_to_bond: entered promiscuous mode [ 1902.694618][T32245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8927'. [ 1902.714812][T27461] usb 4-1: USB disconnect, device number 94 [ 1903.184466][T32259] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1903.193388][T32259] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1903.202688][T32259] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1903.483683][T32265] team0: entered allmulticast mode [ 1903.489109][T32265] team_slave_0: entered allmulticast mode [ 1903.497698][T32265] team_slave_1: entered allmulticast mode [ 1903.509317][T32265] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1904.271600][T32281] raw_sendmsg: syz.2.8945 forgot to set AF_INET. Fix it! [ 1904.926739][ T796] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1904.976799][T12031] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1905.092486][ T796] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1905.114946][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.128663][T12031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1905.141579][T12031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1905.152101][ T796] usb 5-1: Product: syz [ 1905.158975][T12031] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1905.166864][ T796] usb 5-1: Manufacturer: syz [ 1905.169242][T12031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.189767][ T796] usb 5-1: SerialNumber: syz [ 1905.199670][T12031] usb 3-1: config 0 descriptor?? [ 1905.205404][ T796] usb 5-1: config 0 descriptor?? [ 1905.432005][ T796] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1905.665791][T12031] keytouch 0003:0926:3333.0060: fixing up Keytouch IEC report descriptor [ 1905.685222][T12031] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0060/input/input97 [ 1905.766821][T27461] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1905.802635][T12031] keytouch 0003:0926:3333.0060: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1905.856853][T24627] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1905.874762][T32292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1905.885671][T32292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1905.896113][T12031] usb 3-1: USB disconnect, device number 60 [ 1905.947533][T27461] usb 2-1: Using ep0 maxpacket: 8 [ 1905.953555][T32301] fido_id[32301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1905.972273][T27461] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1905.981062][T27461] usb 2-1: config 179 has no interface number 0 [ 1905.991323][T27461] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1906.011124][T27461] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1906.026075][T27461] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1906.039113][T24627] usb 1-1: Using ep0 maxpacket: 8 [ 1906.046199][T27461] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1906.066577][T27461] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1906.083649][T24627] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1906.098742][T27461] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1906.108351][T24627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.116450][T24627] usb 1-1: Product: syz [ 1906.120833][T27461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.130248][T24627] usb 1-1: Manufacturer: syz [ 1906.135819][T24627] usb 1-1: SerialNumber: syz [ 1906.145590][T32298] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1906.172543][T24627] usb 1-1: config 0 descriptor?? [ 1906.381362][T27461] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input98 [ 1906.410706][T24627] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1906.574706][T12031] usb 2-1: USB disconnect, device number 63 [ 1906.574743][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1906.589922][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1906.660715][T32289] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8948'. [ 1907.119063][ T796] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1907.144014][ T796] usb 5-1: USB disconnect, device number 125 [ 1907.627583][T27461] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1907.806891][T27461] usb 2-1: Using ep0 maxpacket: 16 [ 1907.833740][T27461] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1907.856704][T27461] usb 2-1: config 0 has no interface number 0 [ 1907.873079][T27461] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1907.900106][T27461] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1907.924959][T27461] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1907.945312][T27461] usb 2-1: Product: syz [ 1907.955492][T27461] usb 2-1: SerialNumber: syz [ 1907.981132][T27461] usb 2-1: config 0 descriptor?? [ 1907.998283][T27461] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 1908.033698][T27461] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input99 [ 1908.044240][ T796] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1908.256752][T24627] usb write operation failed. (-71) [ 1908.262697][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 1908.287788][T24627] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1908.311359][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1908.325348][T24627] dvbdev: DVB: registering new adapter (Terratec H7) [ 1908.335903][T24627] usb 1-1: media controller created [ 1908.344997][ T796] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1908.355661][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.365484][T24627] usb read operation failed. (-71) [ 1908.371304][ T796] usb 5-1: Product: syz [ 1908.376358][T24627] usb write operation failed. (-71) [ 1908.384604][ T796] usb 5-1: Manufacturer: syz [ 1908.395234][T24627] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1908.405966][ T796] usb 5-1: SerialNumber: syz [ 1908.422299][ T796] usb 5-1: config 0 descriptor?? [ 1908.443836][T24627] usb 1-1: USB disconnect, device number 13 [ 1908.483949][T32315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.506292][T32315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.517401][T31737] usb 2-1: USB disconnect, device number 64 [ 1908.517788][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1908.517855][ C0] ------------[ cut here ]------------ [ 1908.517940][ C0] URB ffff88802afa1800 submitted while active [ 1908.517963][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#0: syz.2.8961/32324 [ 1908.518177][ C0] Modules linked in: [ 1908.518252][ C0] CPU: 0 UID: 0 PID: 32324 Comm: syz.2.8961 Tainted: G L syzkaller #0 PREEMPT(full) [ 1908.518289][ C0] Tainted: [L]=SOFTLOCKUP [ 1908.518301][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1908.518319][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 1908.518363][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 57 0a f9 fa 49 83 3e 00 74 40 e8 8c cf 8e fa 48 8d 3d 85 01 e8 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 71 cf 8e fa eb 05 e8 6a cf [ 1908.518388][ C0] RSP: 0018:ffffc90000007960 EFLAGS: 00010083 [ 1908.518413][ C0] RAX: ffffffff8736cef4 RBX: ffff88802afa1800 RCX: 0000000000040000 [ 1908.518434][ C0] RDX: ffffc900021b1000 RSI: ffff88802afa1800 RDI: ffffffff901ed080 [ 1908.518455][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 1908.518472][ C0] R10: dffffc0000000000 R11: fffff52000000f2c R12: 0000000000000820 [ 1908.518493][ C0] R13: ffff8880779dd030 R14: ffff88802afa1808 R15: dffffc0000000000 [ 1908.518514][ C0] FS: 00007f31149c16c0(0000) GS:ffff888125460000(0000) knlGS:0000000000000000 [ 1908.518539][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1908.518559][ C0] CR2: 00007fc4121e9e80 CR3: 0000000066968000 CR4: 00000000003526f0 [ 1908.518583][ C0] Call Trace: [ 1908.518594][ C0] [ 1908.518615][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1908.518662][ C0] ? ___ratelimit+0x58c/0x8d0 [ 1908.518694][ C0] cm109_urb_irq_callback+0x6e2/0xcb0 [ 1908.518804][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 1908.518845][ C0] dummy_timer+0xbbd/0x45d0 [ 1908.518933][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1908.518963][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1908.518994][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1908.519030][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1908.519059][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1908.519089][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1908.519124][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1908.519151][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1908.519177][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 1908.519221][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1908.519249][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1908.519281][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 1908.519318][ C0] handle_softirqs+0x22a/0x870 [ 1908.519349][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1908.519384][ C0] __irq_exit_rcu+0x5f/0x150 [ 1908.519411][ C0] irq_exit_rcu+0x9/0x30 [ 1908.519436][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1908.519457][ C0] [ 1908.519465][ C0] [ 1908.519474][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1908.519498][ C0] RIP: 0010:preempt_schedule_irq+0x48/0xa0 [ 1908.519519][ C0] Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 63 85 e4 f5 e8 ee 20 1e f6 fb bf 01 00 00 00 c3 a6 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 c4 22 1e f6 bf 01 [ 1908.519536][ C0] RSP: 0018:ffffc90003c1f360 EFLAGS: 00000206 [ 1908.519555][ C0] RAX: 0000000000001205 RBX: 0000000000000000 RCX: 0000000000000001 [ 1908.519569][ C0] RDX: 0000000000000006 RSI: ffffffff8def61cd RDI: 0000000000000001 [ 1908.519583][ C0] RBP: 0000000000000000 R08: ffffffff901196b7 R09: 1ffffffff20232d6 [ 1908.519597][ C0] R10: dffffc0000000000 R11: fffffbfff20232d7 R12: 0000000000000000 [ 1908.519621][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1908.519650][ C0] irqentry_exit+0x599/0x620 [ 1908.519673][ C0] ? rcu_is_watching+0x15/0xb0 [ 1908.519709][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1908.519731][ C0] RIP: 0010:console_flush_all+0x801/0xb20 [ 1908.519756][ C0] Code: ff ff e8 12 f0 20 00 90 0f 0b 90 e9 85 fc ff ff e8 04 f0 20 00 e8 0f 84 09 0a 48 85 db 74 c0 e8 f5 ef 20 00 fb 48 8b 5c 24 08 <48> 8b 44 24 20 42 80 3c 20 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 96 [ 1908.519775][ C0] RSP: 0018:ffffc90003c1f480 EFLAGS: 00000283 [ 1908.519796][ C0] RAX: ffffffff81a4ae8b RBX: ffffc90003c1f5e0 RCX: 0000000000080000 [ 1908.519814][ C0] RDX: ffffc90017f81000 RSI: 0000000000037189 RDI: 000000000003718a [ 1908.519830][ C0] RBP: ffffc90003c1f590 R08: ffffffff901196b7 R09: 1ffffffff20232d6 [ 1908.519849][ C0] R10: dffffc0000000000 R11: fffffbfff20232d7 R12: dffffc0000000000 [ 1908.519869][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f00a8a0 [ 1908.519891][ C0] ? console_flush_all+0x7fb/0xb20 [ 1908.519924][ C0] ? console_flush_all+0x123/0xb20 [ 1908.519951][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1908.519978][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1908.520006][ C0] console_unlock+0xd1/0x1c0 [ 1908.520040][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1908.520071][ C0] ? notifier_chain_unregister+0x2d0/0x2d0 [ 1908.520110][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 1908.520150][ C0] do_con_write+0x520f/0x5300 [ 1908.520219][ C0] ? __pfx_do_con_write+0x10/0x10 [ 1908.520241][ C0] ? __mutex_lock+0x319/0x1300 [ 1908.520274][ C0] ? n_tty_write+0xe8c/0x12a0 [ 1908.520305][ C0] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1908.520334][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1908.520359][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1908.520391][ C0] ? fbcon_cursor+0x4ce/0x700 [ 1908.520515][ C0] con_write+0x27/0x290 [ 1908.520539][ C0] n_tty_write+0xd84/0x12a0 [ 1908.520587][ C0] ? __pfx_n_tty_write+0x10/0x10 [ 1908.520622][ C0] ? trace_kmalloc+0x2a/0x110 [ 1908.520648][ C0] ? __pfx_woken_wake_function+0x10/0x10 [ 1908.520685][ C0] ? __pfx_n_tty_write+0x10/0x10 [ 1908.520712][ C0] file_tty_write+0x559/0xa20 [ 1908.520795][ C0] vfs_write+0x61d/0xb90 [ 1908.520830][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1908.520863][ C0] ? __fget_files+0x2a/0x420 [ 1908.520903][ C0] ksys_write+0x150/0x270 [ 1908.520929][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1908.520964][ C0] do_syscall_64+0x14d/0xf80 [ 1908.520990][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.521013][ C0] ? clear_bhb_loop+0x40/0x90 [ 1908.521041][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.521065][ C0] RIP: 0033:0x7f3113b9c799 [ 1908.521089][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1908.521111][ C0] RSP: 002b:00007f31149c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1908.521138][ C0] RAX: ffffffffffffffda RBX: 00007f3113e15fa0 RCX: 00007f3113b9c799 [ 1908.521157][ C0] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 000000000000000a [ 1908.521174][ C0] RBP: 00007f3113c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1908.521190][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1908.521206][ C0] R13: 00007f3113e16038 R14: 00007f3113e15fa0 R15: 00007f3113f3fa48 [ 1908.521250][ C0] [ 1908.521271][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1908.521291][ C0] CPU: 0 UID: 0 PID: 32324 Comm: syz.2.8961 Tainted: G L syzkaller #0 PREEMPT(full) [ 1908.521322][ C0] Tainted: [L]=SOFTLOCKUP [ 1908.521333][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1908.521348][ C0] Call Trace: [ 1908.521359][ C0] [ 1908.521370][ C0] vpanic+0x56c/0xa60 [ 1908.521420][ C0] ? __pfx__printk+0x10/0x10 [ 1908.521444][ C0] ? __pfx_vpanic+0x10/0x10 [ 1908.521480][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1908.521502][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1908.521527][ C0] panic+0xc5/0xd0 [ 1908.521551][ C0] ? __pfx_panic+0x10/0x10 [ 1908.521587][ C0] __warn+0x315/0x4f0 [ 1908.521617][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 1908.521646][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 1908.521675][ C0] __report_bug+0x29a/0x540 [ 1908.521734][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1908.521763][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 1908.521791][ C0] ? __pfx___report_bug+0x10/0x10 [ 1908.521814][ C0] ? dev_printk_emit+0xee/0x140 [ 1908.521846][ C0] report_bug_entry+0x19a/0x290 [ 1908.521865][ C0] ? usb_submit_urb+0x7e/0x18b0 [ 1908.521892][ C0] ? usb_submit_urb+0x83/0x18b0 [ 1908.521918][ C0] handle_bug+0xce/0x200 [ 1908.521941][ C0] exc_invalid_op+0x1a/0x50 [ 1908.521964][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1908.521981][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 1908.522009][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 57 0a f9 fa 49 83 3e 00 74 40 e8 8c cf 8e fa 48 8d 3d 85 01 e8 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 71 cf 8e fa eb 05 e8 6a cf [ 1908.522025][ C0] RSP: 0018:ffffc90000007960 EFLAGS: 00010083 [ 1908.522041][ C0] RAX: ffffffff8736cef4 RBX: ffff88802afa1800 RCX: 0000000000040000 [ 1908.522055][ C0] RDX: ffffc900021b1000 RSI: ffff88802afa1800 RDI: ffffffff901ed080 [ 1908.522069][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 1908.522080][ C0] R10: dffffc0000000000 R11: fffff52000000f2c R12: 0000000000000820 [ 1908.522094][ C0] R13: ffff8880779dd030 R14: ffff88802afa1808 R15: dffffc0000000000 [ 1908.522116][ C0] ? usb_submit_urb+0x74/0x18b0 [ 1908.522149][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1908.522179][ C0] ? ___ratelimit+0x58c/0x8d0 [ 1908.522200][ C0] cm109_urb_irq_callback+0x6e2/0xcb0 [ 1908.522233][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 1908.522262][ C0] dummy_timer+0xbbd/0x45d0 [ 1908.522290][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1908.522314][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1908.522344][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1908.522376][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1908.522401][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1908.522428][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1908.522456][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1908.522480][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1908.522504][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 1908.522544][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1908.522568][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 1908.522597][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 1908.522634][ C0] handle_softirqs+0x22a/0x870 [ 1908.522661][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1908.522690][ C0] __irq_exit_rcu+0x5f/0x150 [ 1908.522713][ C0] irq_exit_rcu+0x9/0x30 [ 1908.522735][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1908.522753][ C0] [ 1908.522760][ C0] [ 1908.522768][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1908.522787][ C0] RIP: 0010:preempt_schedule_irq+0x48/0xa0 [ 1908.522806][ C0] Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 63 85 e4 f5 e8 ee 20 1e f6 fb bf 01 00 00 00 c3 a6 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 c4 22 1e f6 bf 01 [ 1908.522821][ C0] RSP: 0018:ffffc90003c1f360 EFLAGS: 00000206 [ 1908.522836][ C0] RAX: 0000000000001205 RBX: 0000000000000000 RCX: 0000000000000001 [ 1908.522847][ C0] RDX: 0000000000000006 RSI: ffffffff8def61cd RDI: 0000000000000001 [ 1908.522859][ C0] RBP: 0000000000000000 R08: ffffffff901196b7 R09: 1ffffffff20232d6 [ 1908.522872][ C0] R10: dffffc0000000000 R11: fffffbfff20232d7 R12: 0000000000000000 [ 1908.522885][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1908.522910][ C0] irqentry_exit+0x599/0x620 [ 1908.522929][ C0] ? rcu_is_watching+0x15/0xb0 [ 1908.522958][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1908.522976][ C0] RIP: 0010:console_flush_all+0x801/0xb20 [ 1908.522995][ C0] Code: ff ff e8 12 f0 20 00 90 0f 0b 90 e9 85 fc ff ff e8 04 f0 20 00 e8 0f 84 09 0a 48 85 db 74 c0 e8 f5 ef 20 00 fb 48 8b 5c 24 08 <48> 8b 44 24 20 42 80 3c 20 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 96 [ 1908.523010][ C0] RSP: 0018:ffffc90003c1f480 EFLAGS: 00000283 [ 1908.523025][ C0] RAX: ffffffff81a4ae8b RBX: ffffc90003c1f5e0 RCX: 0000000000080000 [ 1908.523038][ C0] RDX: ffffc90017f81000 RSI: 0000000000037189 RDI: 000000000003718a [ 1908.523051][ C0] RBP: ffffc90003c1f590 R08: ffffffff901196b7 R09: 1ffffffff20232d6 [ 1908.523065][ C0] R10: dffffc0000000000 R11: fffffbfff20232d7 R12: dffffc0000000000 [ 1908.523079][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f00a8a0 [ 1908.523096][ C0] ? console_flush_all+0x7fb/0xb20 [ 1908.523126][ C0] ? console_flush_all+0x123/0xb20 [ 1908.523188][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1908.523217][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1908.523249][ C0] console_unlock+0xd1/0x1c0 [ 1908.523291][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1908.523329][ C0] ? notifier_chain_unregister+0x2d0/0x2d0 [ 1908.523370][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 1908.523417][ C0] do_con_write+0x520f/0x5300 [ 1908.523471][ C0] ? __pfx_do_con_write+0x10/0x10 [ 1908.523490][ C0] ? __mutex_lock+0x319/0x1300 [ 1908.523515][ C0] ? n_tty_write+0xe8c/0x12a0 [ 1908.523539][ C0] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1908.523562][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1908.523582][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1908.523612][ C0] ? fbcon_cursor+0x4ce/0x700 [ 1908.523634][ C0] con_write+0x27/0x290 [ 1908.523653][ C0] n_tty_write+0xd84/0x12a0 [ 1908.523689][ C0] ? __pfx_n_tty_write+0x10/0x10 [ 1908.523709][ C0] ? trace_kmalloc+0x2a/0x110 [ 1908.523728][ C0] ? __pfx_woken_wake_function+0x10/0x10 [ 1908.523764][ C0] ? __pfx_n_tty_write+0x10/0x10 [ 1908.523787][ C0] file_tty_write+0x559/0xa20 [ 1908.523820][ C0] vfs_write+0x61d/0xb90 [ 1908.523846][ C0] ? __pfx_vfs_write+0x10/0x10 [ 1908.523873][ C0] ? __fget_files+0x2a/0x420 [ 1908.523906][ C0] ksys_write+0x150/0x270 [ 1908.523927][ C0] ? __pfx_ksys_write+0x10/0x10 [ 1908.523954][ C0] do_syscall_64+0x14d/0xf80 [ 1908.523973][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.523992][ C0] ? clear_bhb_loop+0x40/0x90 [ 1908.524013][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.524032][ C0] RIP: 0033:0x7f3113b9c799 [ 1908.524048][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1908.524064][ C0] RSP: 002b:00007f31149c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1908.524082][ C0] RAX: ffffffffffffffda RBX: 00007f3113e15fa0 RCX: 00007f3113b9c799 [ 1908.524096][ C0] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 000000000000000a [ 1908.524110][ C0] RBP: 00007f3113c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1908.524122][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1908.524133][ C0] R13: 00007f3113e16038 R14: 00007f3113e15fa0 R15: 00007f3113f3fa48 [ 1908.524159][ C0] [ 1908.524799][ C0] Kernel Offset: disabled