last executing test programs: 15.362173547s ago: executing program 0 (id=300): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x40000, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) 15.291727578s ago: executing program 0 (id=301): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 15.099766514s ago: executing program 0 (id=302): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000500)='\x00\x00\x00', 0x3) read(r2, &(0x7f0000000310), 0x6) sendto$inet(r0, &(0x7f0000000300), 0x22, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 14.120534045s ago: executing program 0 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000000)=""/8, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc/fs/nfsd\x00', 0x20800, 0x13) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 13.930118717s ago: executing program 0 (id=306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%+C\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x9fs\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x2400c004) 13.0576079s ago: executing program 2 (id=310): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 12.776676312s ago: executing program 2 (id=311): syz_usb_connect$uac1(0x2, 0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000020f80600b040000102030109026c0003010040800904000000010100000a24010e001600240206040404060400"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000480)=0x207, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x894f, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = gettid() tkill(r4, 0x7) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)={0x12a0, 0x1d, 0x335324baae5da683, 0x1000000, 0x0, {0x7}, [@nested={0x1289, 0xf6, 0x0, 0x1, [@typed={0x8, 0x12e, 0x0, 0x0, @ipv4=@local}, @generic="805011aa1d02fe9484840247c6a268763f93146a6924efd0d80968369b839b15515090b6b875e2d6a5af63376225db2f993b5605943c0342532a683a7e34b078271053c8bc8248bcdc", @nested={0x10, 0x145, 0x0, 0x1, [@typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xc8}]}, @generic="e70bdf88fdf23cea6793a6fe04adc939a5c93d10172556b7499f39c7eac5378903999d479b49d5f074c6972797580a3048071892735b6290f2a8664fa9f05a4d3092a22e5e4fcbfacf260859446d2cc60084ca07bd609c8ef030e0510222521efdb36f57fb95a44a6daf857ab532b8154285b6c5cb2a01f402255389951321d23a9d7c63aec9b7a681b2cfcfe4c407a6586f8ae525c1179ab5fd36d67cfff74f991d5f1c64afb50a372379a70eb26ea3bcfca9d17817187bd85f334218c7571dbcb7c434e07b7a7df5304f55cab857de2209cb6657c263954f4c621e93a1ea7bdd9f70f05cea66e203cbeb3b56d56ca94694f544a0bae5239c60103498302a6d4afbdfac5558c8d835fd4cce6883c017a637ba15ac636486459bf206696422ac5eeeb161ee80fd9f8eeea18c427660f0365aca4ce6a4b74b7af1850cb66efa07856d95b2a0b186364ee2f429338433141cce55d86cf5d6808fd643d2a73e5452f9ee27cdfb3362261d9dffb894e276b6a0f7cacd14899228a552365cbde8202f19fcb6d5e195b49fd73be4caae8c470a3fc4f8d97735fa22bbc554647b7f7328da86b29eeb4c0aa719fc2e0b41c30918f491c2f670da44cb0125b174352c141f61b598c7e77e6be84731f166f5386ab4678e3b6f1d393476b2666f46fe2bf7fdfda36d60ef4eb4674316784a6713f1fb25faa16e85e06f682aca6e54b196698014afb9e51478c34e5937e3ab4aea80ba230270c182fb072b10982327fe01be171d3a73be57008dcdc0c3d0a37e907576741b70f91dcaaaf40ddfd3cba99cdbcdf930d7857478aa48ff26ea9d0347442db2665b4f7771424a2dacfe82fb38c51a20fb5653caa8df3e1436d4477f7177f91c37fe3ff251ebacc65765e97ecc6c7a4f3e3e6616e97906ef3c7acdb4c8196836318f29314325a6473d8a8dbb09da779ce1f25628422fca48c31f98d2a74674ada48d70fe87dbfbd7f94d312e94e107cc63e9be8c1425b27b86a066a6ee4157a5187b64f1e9726d0e9abb867a170ba452e3f1ea38d4e0b6298236540a05d14f6c8889922207e86a6479ecf5495f638a188517061d3aeba68ca3717c062039257dbd8031fc2cf39cae8d7afb73a1073c72e836503cfd79fd5c5fedeee056dfe121e9a0ca81bb95dc1a22e16344690c5215e50ccde383adadbff91b2aa015452161ef74773f5a9b46a80f5a83cd2db48e289112b1a740497748797a6605bb4f6b51da1003b62f2f25da063d3daca21dd6e8cd98edc0eff1799a67e4a760dfbca3d41a8a250ace34f3f87549303bafd09fd5cce330dab77974883c67be12ee1df646f2ba5e4bffc3bfa08c96c6d727fa3f62d47188a461aef999d7b2e214a54a82fe9731fd471f3dcb04b1e35d4ec71d5b535bed5cf9a68849a8f2656912c1214a684abc681f33f69c7b7de7b1d37e2eabd51f2774df2dae026693852eb95378571cdb7c87e16206edcc3d17a7a81b3f9bdb158468b067153bce9ff47034dd566ecbad57548a71742c64cba6ec19d753dd848e4a90193522d9f2926d49773665324db75491ad52ecd7772d4dcdc00a9659d11ad488f003a8f57e8bbaa56d4ee8d891995395adaf6c590f6ba17868c4d36da5c599680343fdefe8aaa9bbce211992f159c6b5b86ae3fe586e328d433bacb6d3ac9fff9db416331ae2134c7880dc8205311c5ba11d02a72087bf62f6d7093df29d4585072b3dd7f575d315374e201677611364da8f0d7450fec131ae801f9ac03dfd48e6c1252d077e7f9726682f548de3851ea01f4dd08733802172ec39be2c5ba1e5ab4efd3f609b16b95819f2db50639026fbba2985fcb4c4b3c29a5a44bb059a099c071481746ca3be95ea72e5b3577a765222d523d589256e873f82a952bd988f286b289eae9a1fb1f2ea27c0650d206c9702a08753df88b6a9dbc07eb764be72cc98f9787ae9aa53edfa2f1317524bd0b5e4a05783f9872e46748b5ac0c8ea909326adc8b9fd5981cf47a5f457468f1a2399201712ca0eee25da742e77fe26aa396518a3f77398d3a3895d0da54824df5939fbbf427566e17a2d0f051418e3c49bea954b219beec51e46425b1803a0fcb4365018de32b380b8552509e30f4ed454cb08a8dc34a521106a23f4b54b6207161ab41da351afbb46f6070521711360d61a93d60deef2920f90e37fb0e6b9ede56f0d9eccf661ede0535954b0c2eb3487aab4c25cae96d8580d1d59dcec03e228d9d2193357c9f285b346c640a1b4731dda6c7e163bf2382fa98aeaf40f26b7c21f07a41b954cf32f2096fddf8d8200994504071ad90d41092133dd5a34eca0d4d286c5b69290536e2d950b299cbbfc38ca1f6ef67769bc0b9de35608181c7502085211935fea725822242a82a1d6a950467212a97f1486248b0cc2e6cb90d4fc263c90d0444159dd39e22e277ad014e3022f7a4bfd1ad32f6305a09e67ad90730744a5b6c2145689f1b3e820b16ca340b12639c288ee81a1d1e71763aac5063e37ca61170fc2e85cbc21f6a0544b00bc2d4ecf00b69e273b23790d363dccb47dd9c2b45dcc51e86a19cdd61cf66cc119234703139f0c993c0169d0b5c426c6c4941e04c01ddf445878a7de96d934e9a34d07da98b3eff05bb508d3a9c6c054936aabf3b2965c65256867b74595f4d206c05f683f324ea50d22fce6606fb37dbbc3cb00bbde8cd0dc6466eee3f43e88a7e954fa325a51263de1124962a3130d1e0dedf4f71be5f1fb8d463514a0a845e12aa601abb310dc5d80e28a38a30d6eabf0cdc6f13236bd61e509c426a53d5c6df69eb7797a982e530d4cfa81734b85f8835ab273d32b6148bbbec66989f840b620d0fda31043e39e2fe50b2fb0cc8f3d60c93903d176145c16005e158a54fe6c56dbc2d4afe26571b9c9c73ec434a53ab8ec9044669718554a288d251901689f1224e34f4c916f2ead74e6d9bdf220f8693b2636c61fc4ee610a4de004987a92cc3dfb39653ff0af7b6c5c2af9e14b04586baa2b486e36e762ba2944bd26976f2640b8e2a4296cf508e8189eff83d941145e2b5ea0202ff86676aca94ca43a286f8528af52b7e5ddf9bd42dbe6d666627a038851fb4dd7d983a753eb161730e88a8c032fea53159b86783b453a586a65e9cec196f7a740fdf37dc117baa3a7b4b0f7e89fff7340de95c263f91345122ef3bc554a0ace075ce91976963c6f835017f1502adc8f37ff2b12c6df86fefa480931645d8d839c05c25a68ac05591cd6b07372b917579a9f69d8e72aa55e5125a9e7ab071508c09e54e8f1410fd817a86a32388e5f39c77c5bebc7f5d2aa7570e3b7dba564a31b61e2959597456032d21fa2feae2448c196d5796ef7a50bd6b25c2d540afc4e9bacd1720db175fa9d7852276b61c970aa59606ff1671171a37031db9e84338c9385c3df050e0ac19cfc891771cb6a3a5c3061372c70d01368cf477445468f960f5d85d7541b0fd079b469549b3b41eca88ce1575119ac6baa9b937e3e9a8c4f787d033dbed0390c5e2bc5510ef4e59cb462f9dade31ca385f6a7fb0b3c72cd050a54583a658379bedfc83edeeaf9c310be86f327b19a9498e913d0ce96c0fce8ac54661266787ccdf25ee0add176e6ae11ce74d920cba74050ca37665a5efd4b97fa82dff8c6801cb48c36161269f445cceeb4e6a648d95d19b021da50bbac081823a215450ed13619640e15aebe947414a47edc54664d59e939b58a6cf2439a4d797348ef84ca4772d8e1e0204ed61c0557598b1d1e61a345665e36cd2f9e2c5f582ed940b687911b695142beb16a3bb40faa9b8c2002ab90637af4d38eb2f29be3baf1730094ba5350c42aeab857f468bcae2014efd5bd4d21f1480e3aa77d30a470b9b0e3f43dbd1db4c60e2c3f84581661bdbbe54134e7289f1afaf1414951bd9a6842ad60560cef0a760057e11ae4963875f8c2e9efe67ff0c3feafc730a8f8fc21e9230d931181d413cd3c02469113e81a661c0f132c8f4b0a1d5bfae67d59aa9644caf6128b5048c15641830b34e420c2712d17b30bf0418ac6bf4a6a145e761e5a6d410e5e88d5247829af1c0ad940100db4fe85c6ac8a43ee86f864c04a5af9acba080ac4e060e11bd27bfd80db07e5e34569dc921143a26180dae00153e66dac1aafdc39e889d71cb0cc05e20e149e367b5dee9f46e70ba8f8e31059ed69041fe2333fdd8a9355e7280adc6fe37a9a6bc3be0fe0263614caafa212c17fed79477489bd327f98b75495355d0337a3872ad7fe3b40cac7ad1946f577e08606b29e57ff010d88afbbd1ae97145f6520517543d3fd4a74335eef09b8d6f3421b7a36f5ca85267bc9b4780d6a400ece7e0dccafedb74c5975cdcc82339a26c4efc52e06e1e1df71a02a58772731061af78db2f840fcca866b753423468d5f8d2e8645eadbe77b4adf3c8489c008f1078637b8ef062a223f476be565025b7060fbb6888a72e0d4b75a6bcac5250a2345137bb543fa58d4fc46bb30192e03e803baf0ac73622e58d837660c55d697cec64a8cb67577b99c5bb2ea82b8c8d4398423699d17a16752ad6c95ca4d7d07c4c8c9bd6a5d4c1c699314f0583ab25855d33c6a1f261b30d8c216665390cba77a1b0b0a97a927cf1380a655e6e2c194b52210f43db27919a4921d865e7372b9878b1192d2a1039f74788d733a94a123080a66a36209fe374e1e9f2e1736fe2193a162305a0ca317a727b3c7ff2f7aaaf48f783ef1b0ed9ac5012f73ea0c069ba088729bba6f3bd91a6e9c9b1b99c078eea0734a2b234e5debc50c7bcd154e2b23880317492fdac2677c0ecddc4bca7901fd397f6ac68227bbf64304a7e7bba36f587b51c287ad9f701fc177b7b5bb9253cdeb6846bb6675b91dbdacfcc32462e818d62c1dc4267e2eaa52fe1556cfeaf644e494f9f783c64261803b0421d4c3bd89a4311e8b9d7813ecf15b1cb2a24d421fc26667725800fcca7430d2c42833235db92fbf8902ad522c6477f73e80cd0b5088a715378551b79d57c316a2e8a392c9c0476f9b9118608badc67f4183cca6e09f218505d0e12a07de64ab4561011682a4c2772009de5d842369cdb949cfa1811ab9b4e3c9d5874fef185d248c8de298069306fffc2e658cae38baef73e711b73b10f3a9703951ba2a6e49a2be1fee1ef1f88e0f1098c21f23eb7585fc316d4f024a0d13b4f13e212086db468bd937700af61f487dce7121c41f96eb71e2784f2d9968a4797d11104a19eedef6c1bd5b4bae6097b8210c1492e1c0435073f0069f1c16f9ab91b8fdd6e777e56fb0f27c8c9d73f011a60599cd75a0167d4534a9303cbb917c723f7e48bc1031ccd582658b87ba51cb2d0d3375b44a00c81046ee4e659311b75b75898270ddcdc65f8345ed4f1c8cf111ad7a77ea7bef872237b6236d5f10f2f3b5cd116803ec49489560ae097ed1123a743f08369f6d9db6e442ecc3f88250e29073ea870a8960b3eaac8ba252dca2dd663da5c5fb1eb931bff38c4445700990c083030cac3da8fb72335a1db20748e4b1df3d64f2ead5b62a44c263f28c466ea7613d4b1273b78fe2df8f6c56b03b5c28f1e91fb645e18058afaefcb6fcd332df9095ae1b9d77226afaead808948d83dbadbb55b3bf47e56230a576c1aee593f6088050070e7e840c032de84be1bc130dc7bba323426e71be3bebe763f617cdac48ae656d5bc9ecada00b02b45920fc91f0e5f071dbd420937dddd23310d7844acad072876e73b0291d1a6c29b98fd5f5d877a7d79db8cca477dad73", @generic="3733da58c0c50b334abdbe741e8fc8916d0a7183e2ab6299b6857d7157bd6e20ef4f86feafab7a0c1149d729c5cfb3fa31f04ebd", @nested={0x1a7, 0x7a, 0x0, 0x1, [@generic="e6a7abdf0bc78e3c25bfb704afbdfe6886a2c6e49824e3ffa4fec1164ef2392e862fc9043d8aa63fbec38cf073983fc5a93e2dacb0af45c335900fd8934401085b29c181a464432d3c4186f42b5eca32b48cf8dd9509d8f8498e9a60bee8178dddf4e061bf4f861cf25f464292385d247b7b329e405e5f34febc31e4d3b0bf0e2fa3", @generic="6f9bf1b95f1b9220b3fd1c498ef60683550df3e323bcb4963a73dc6421cdc0ad4df689d918bef1c3e69eb41d3a8ddbca0c5d7e263c6c8393155d55b48d3dcbfff9d475ebb3921155ed7584658dd40a3459289a5e7dddc08a2d3657eb8851963387fe78bbbf0f3df81774703ef427abcb9ebb2d7e7bf630305be0446a52c9175b9af8bdae9b201a2603deaf9dbd4f2987cabf0060a122edd9a0cd2ea4e374dc65d7e97889fb09a1ae3b035cd5ca1f4c6d346482ad03f2592ffcbd4eefb17dd61d59465101df59cafec00f2edfbe031ee05650d6483c7a4a39825e643ebcbd28a758e368b06dc33b3cde", @nested={0x4, 0x28}, @typed={0x4, 0x65}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x47, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x46}, @nested={0x4, 0x21}, @typed={0xc, 0x43, 0x0, 0x0, @u64=0x5}]}, @typed={0x14, 0x130, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @typed={0x8, 0xdd, 0x0, 0x0, @pid=r4}, @nested={0x2a, 0xbb, 0x0, 0x1, [@generic="be6f3186f8eac242216ae68a6ed4a8151e25aab8cda4", @nested={0x4, 0xd8}, @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0xc3}]}]}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x800}, 0x0) setns(0xc9, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x10f) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000100), 0x12) listen(r7, 0x1) write$tun(r5, &(0x7f0000000200)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, '\v\x00\x00'}}, 0xa) r8 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r8, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000600)="9745010000004000012c8cc5ffff", 0x5aa}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x0) write(r9, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000540)=0x18dc, 0x4) recvmmsg(r11, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000060900020073797a300000000005000400240000000500010007000000050005000100000011000300686173683a69702c706f727400000000cfd843e0546382f9165ebc8dfc845ae586d74233ed7704b9301e1bc9899de339be7724f734e86d8a5a5d1386316b1443a194ab9aae20332d42130527488f7f4631d56a460a20a4f8a59753769516f7ed8dfa8d1d62b0bef99c1d160554d0cb59"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 12.642092855s ago: executing program 0 (id=312): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="40000f000000012721dcfe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 12.286820958s ago: executing program 32 (id=312): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="40000f000000012721dcfe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 8.661450424s ago: executing program 3 (id=316): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x114, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x1, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x20}, [@mixer_unit={0xb, 0x24, 0x4, 0x2, 0x6, "2974f2ee440a"}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x1, 0x2, [0x1, 0x9], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xd8, 0x1, 0x9, 0x2, 'y`4'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0xd, 0xcb, "dc"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x7, 0x50, "", "260467"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6, 0x7, {0x7, 0x25, 0x1, 0x4, 0xf7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x77, {0x7, 0x25, 0x1, 0xc, 0x8, 0x8}}}}}}}}]}}, 0x0) syz_usb_connect$uac2(0x4, 0xae, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x1, 0x80, 0x9, {0x8, 0xb, 0x1, 0x0, 0x1, 0x2, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x1, 0x18, 0x40}, [@sample_rate={0xf, 0x24, 0xd, 0x5, 0x1, 0x6, [0x0, 0x1, 0x3, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x9f, 0x7, "de", "8e6483"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x10, 0x1, 0xfa, 0x81, "f802f2"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x2, 0xe6, 0x2, "5cc5", '}\f,'}]}, {{0x9, 0x5, 0x1, 0x9, 0x79f, 0x6, 0x21, 0x6, {0x8, 0x25, 0x1, 0x2, 0xf, 0x7, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0x6, 0x0, {0x8, 0x25, 0x1, 0x1, 0xc, 0xda, 0x5}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x0, 0x8, 0x39, 0x40, 0x2}, 0x60, &(0x7f00000001c0)={0x5, 0xf, 0x60, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0xd8, 0xf00f, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "8a615ebdeb8bf838d499f0059ccdc5b0"}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x9, 0xf00, 0x80, [0xff0f, 0x3f, 0xc000, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x2, 0x4, 0xf2, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "a543b40268e2262ed3a0c2c5dc828470"}]}, 0x7, [{0xd2, &(0x7f0000000240)=@string={0xd2, 0x3, "b824c7d0d9943eafc546a284702954c1fac9ee39dd0fe139b5afdf939107cfe0b7667111d233b08ab129d364645784d529ab155ec74a2c7a5c6b07a7dc60ed54afabd9dae90b80c2ebe0289ed36ebf1e2cd46b0e7f5c5e8530adb4159025777be537ab0298868930cf344877ecbcb33acb72a63e4ee7d5be25b6e1ac146d47aa1045b231dab842d27ef91602ee410462af2a10c775cbde0e267f6ba721cab57f9e052c9c6ab02aa37a2732711b536b9cc0c724386b3ec26ecfd116ad64d189a194edc88b9b5c5185b5a2128905c75c92"}}, {0x22, &(0x7f0000000340)=@string={0x22, 0x3, "cdd50cf76de98fdc031b1f677face6003b63758d185dbf9ba0b06825001af4de"}}, {0xad, &(0x7f0000000380)=@string={0xad, 0x3, "4bc12847e9404bdc3941009026b75ebded493ee673ee640344fcce09703d31ac390584e4f7008eca7578ae3958edb09ecd29225a53a37bb77c7f0929943360a5068118dbf9c8fd19b47d3dc7796b64c11d241bafff61aaea12a5849e4db811bd36e74864321e3a0da75ceebb3ba08fdebee776672cd055060d6121925ddb6f634bbb9d698c06df98ffb8c6b16c6feb4c289a5be4005b657e468b5a17e522e41fa4a700852a0bd6a510748f"}}, {0x1f, &(0x7f0000000440)=@string={0x1f, 0x3, "c0ad3ad7a7f67205d0f8ad1d0a9773069fc55d717caeab8d560b808b73"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2838}}, {0x93, &(0x7f00000004c0)=@string={0x93, 0x3, "47f99e3e9e70ad5a9a8f4a4eea8ef0666eeedb84ded6f7a92ba54ca7f79f7c2a1defb61ac88765e8aece886338ac0386d1371dbb3205a3db3b55acadcf3f45bc63be9d56b9e190d1b86644a296f8a4995c4b0bbaae06f94bfc1f1114f435a9406469962b8a9fad5806e8bb8381bd20f7d0b976431a4afedc1edd0cd34dcfb88671bbeb3ac24d13feb441a7119d262de829"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0) ioctl(r2, 0x3, &(0x7f0000000700)="ef2934133d4a7e8520d4125fb0f2d5ae9d8b48233a356fcb172e5e6a5ee0dd4b2a40604613743e36d10ed230a6a4ece2272012e819ab4c5b4ba8c520950aa9a1b011f7e7456c48f712fd1ae50f1e37df146d58b1e359c529fd4a8a72de4d267114fb172184eb9cd3fcb828ed5fa3ab06eda56ff1e32fcdc77a434559efad87b061201a2a28126bb22c134ac93e828caf0299cfa38c13aabd00d7751e8709b14f11c65d178baefdd6080dd7c3c25a046e") 8.55509635s ago: executing program 2 (id=317): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x40, 0x16, 0x3, "ddaad1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) 5.347616227s ago: executing program 2 (id=323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) socket$rxrpc(0x21, 0x2, 0xa) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) socket$igmp(0x2, 0x3, 0x2) fcntl$dupfd(r1, 0x0, r1) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000000040), 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000002000010025bd700100000000020000002000098008001300090000000800ea00", @ANYRES32=r2, @ANYBLOB='\f\x00', @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x4) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r3, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, &(0x7f0000000080)=[{0xffffffffffffdff6, 0x20006, 0xfffffffffffffffc}], 0x1, 0x2, 0x0, 0x2, 0x7, 0x18}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$vga_arbiter(r7, &(0x7f0000000180)=@other={'decodes', ' ', 'mem'}, 0xc) write(r3, &(0x7f00000000c0)='\x00', 0x1) 4.845910234s ago: executing program 3 (id=326): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000140)=ANY=[], 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0x40010003, 0x0) (fail_nth: 6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 3.865696699s ago: executing program 3 (id=328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%+C\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x9fs\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x2400c004) 3.713288349s ago: executing program 1 (id=329): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) memfd_secret(0x80000) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x942, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf8, 0x7d, 0xbb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = epoll_create(0x4) ioctl$OCFS2_IOC_UNRESVSP64(r2, 0x4030582b, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x3, 0x28, {0x28, 0x8, "83efb930f01842562348d180df827ff0478fa22a61a54607b71ea9e43d359c479c37f525cde3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, &(0x7f00000000c0)={0x40, 0x5, 0x2, {0x2, 0x3}}, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x10, "0b80a71fb109a45d63a2b73623b159a4"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x3}}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_disconnect(r3) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x40, 0xc, 0x90, {0x90, 0x23, "af99b5f1ea7e0bdfb43c0f7e9645f15d10649208acbe021ee6af8c126b71f6df047a54d325783a63beb1c5c79367788f4f799c380d50a79336d691ce16258afe068cf3e981d2700cae56680906f454c60c92a10ad1b476d0a3ec3724d14958e30fc71c7dc8e491971cf333e52d4b1bb6002bde8b77d1488d8e4d1f0670728d755817b1f6030ba6f3a03c7f2a38ff"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x44, &(0x7f0000000300)={0x40, 0x11, 0x6d, "cc0506e8c3068b0edb638d2a5b727ef8d766ae7075dd876033db794fd853855d401e8394e6ff72a42b836554468976f5d7971877a58ccc1850264fa96452e04b705605b5443a2a3bad806823d8f8d613478bd21e218c141de7ac941d2aabb2b006c049ab16bb6c02a6faf71647"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0xc, 0xc, 0xdd, 0x24, 0xb2fd, 0x2, 0xfffc, 0x3, 0x5, 0x2, 0x101, 0x5}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x8000}, &(0x7f0000000580)={0x20, 0x83, 0x2}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000600)={0x20, 0x89, 0x2}}) 3.650395325s ago: executing program 2 (id=330): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x40, 0x16, 0x3, "ddaad1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) 3.58868137s ago: executing program 3 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) 1.874286013s ago: executing program 3 (id=332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x561, 0x0, 0x4}]}) 1.824754523s ago: executing program 1 (id=333): r0 = socket(0x11, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="659900c3f7c8e544e1abc41796cae4c9908368acb3abdb908ada84b1c98b91c34352f80ed64e4606a25bcbab94869ac816a7fb9c29a8c768fbffb21ad7f6013ff676da589c2e0865cfd321543070c3dd36bf94deb1d137c220d9c559dd61fb2c8732b6ce023b635b5901ebe508133aeadc8f8f93a2198784aab8ae715ee249968c0429cc80bc8c85c985f4f5f04e3acb0ef2a012f59c82dca7d69dcecf011b0a44b1889cfdfa123ccc8c0cb6469c806560c7681f0c3cae69aeabd2fc80d666e8dd7962495507461967b881a6a840a22962f95d55a722cb40221b16e6a6482bab54591aec3770e27a80974d3e41795c35f7300c2ba523e8486dbf6d7988e56396d13f0c079d856946c3ef2a3aaa0dd0bce7389bfd2c112bed2c5e1ae45ae2be5624016a96be54a1e876acd47e6f3ea1e11f919a12c0db1885930d03ce0d622b1e8ed1bbef406bab5f09a6066b2c1fbc9ba713bf76930cf84520fbd9e3f550b8ea4473b30de57de284951111b723ec7c55d5b9b57022411357766680c60cb193ab17c680e44ebc39a149aba5d5c5d26b021e8275523e832018584a067c1a49a3ea9937d90ce4f04bdcacbe1e3c2dbed7aeed1d85714c7d29c7cbe8fccc9cc9d3bfa4dc80954c69ec3e5abc686ce1735726ef792fe7ffe003fedd7b9a478162e5a33a40014f2dd3a97231df13aa79463896dc0754336e79bd98afad2a36e6efbb4803d543d347cd5b80e4c0fd5333724465f6eddbddb6a176c522347195d64238aa7c6b373d172161f97d267f90fab6a941ddc7670061da257fd46a29919668c492f991e1a16be25638e41c7453d1a40b92a75b07f330a6e07b4b0850989f343998022c5cdb7d7473de1f67ce2ec2ddf0ff6e945dab94bed1abdb959995098a4ad8ca467208febec562fe7c06a8cec88cbe6847b6b24212144da679aa521263aa8c152535a0fbc67dccc7116278f8da118147e9efeb799f37ecde26d9aa2e158bde1bb36bb67218fc9d29eb5ee1a4eb87adb0d9a2c8b6cd04e0d6b3b04f347022afd3ee96f6092dc74e2a09e42a1846afa48c65cd83d2718b95bb2df495da53f6ecafaf5149cfade2ac94517c4765a4522e81b58924bc6471d266541b0f6cf44f0ff636092cb6bd7d2a995b21df583630e4fdbbde7da4da19d6786b9ba3d9c1df5fe2618414940d25d82561fd9bf7b39f704355a51621a86b0bf39dbcc305bd87c4542ac3f852962fc5dee1da8fa4a6d1bf0149f04c06b81f81aedb4f07c9bf0a022a5cc0bcc57819b46931b99b00a0489e79b2bc1edc7d2d0404e09c9742e08867d7eedbc3b511207678c5087c0e01a41538742fdca667f39d8962b876386f6d1d798d09eac55c9587a4c86b4d5e3cfb08c0a0487cc7293ce91a7ec11896140ec8c0074f09497dd9b67382ca77d019bedfe97437429bdff299ba2d27669f6a8533c4a4be188a4e8cd439a6c72b6fe737e7388c5b10680bdba183433e99ccd6f0cf584980712088013aa625f9f78f0141b9fc3491c594229ef182c04a9b0e403511e8fb985918eb5c7bbc1ca5dca429efb209559363283f866c10bb3e05ef2a21182edc045341578e5ac63ba19206d804541fd40e84f5a6c9a20a44d8c76a815c7336c66c24bd9c8e61b95857ba3f06d72b6324d9e63c5672cf5dab0e8002000123c3f98626486e1396c897d92e79e34c6abd10d3f86a968c6b7ec95da7b04799a6419550ad511a45120457907a54296edbb1d7389da99608701c3e5e74d7a814c54e33a8473a8c8c3a6520268fe022d2771076ba921b5dca80301ed5ddda7aa5d3051e15330819abb9ab1da62041b1ebcd1cb38f37b7c13b6afa1351f541fac5539aa442ce2864a9048ce224e2855483a1a8fa12373f2568d7ee56752e67b2b115a7922a9af25c71c9fb67ea62e2bde4c176b57f6bcaa38117a9b0b2802f9b169e615a9e62100aeb1bbd8d03a3a94258a3ceb800c0b7b22af4afe24b0d8656e8fb8b2800c54173d063fd2c2330fe9b66592e144410ffd77207cd55fc317c1e66b98de7396ef3622f98305a460533a17145786910a7cfb3790734855adfeb01a8a0948108258e9a5b6a4d5958024d82079bf032e15666709cf4ed535f5a3a5f2b99377294fe16c24a72a1d6d95e151f478e770b5284c46890901b02b8696f688aa965ec3a70a33bd44346389ae3de7e8fdd4834fabc9afbb6341c6493de8faecf655a259e55944c48e0336660af313d0286f3e221092c0e4dc3834efabbf6931c44a8f8045bb418dbdc5ab9cd454726919a8aded5c679e5f62cf622ce8acd67f0a86634ce09b95677babe70dc216767824e2bbd6b066eebab6e5efc26d07a9a11b0ec4f2a2049b8edd01aa9dada0fc70fe52f1cee95e8df64532348c7317033ac4f54c76e5dfc5b532e237231a15b6bd0700f214a61ad7ace3f546e5f363055ba9f217cbc51ff5d0e4042d51761b8f055c775a305fdcb583c66ae2520c384aaf63d625c569ef2f4d2554d440e9e61118b8fbe1159d0558992a71db056dc5f16430b87fd329af2d7fe5928f430324dbbd247b938e4a4062fa7530da3e04a2b7824d17298e24bd7df0eba8caddfe808fe8a813c93c348eb9cbd651e92da3757450251ba9b2a5c96839fb3e3aadddbddc90a2dbb638b1fb87f990cfa2f96a8bfedf997b89f12dddf259fa1499c430f3cb8340c5cf66c85caf5c172cd0f651d1c2dba1cf26d8b936b17f0385183dfab24fd3bbaabfe866946b290dc278fd8418dc0ddb7785ab7e0f259a85fba0eabaaee55f52305d33339007e73fcded5f2613c710a32caad845b6c99958ccd5712097889f98858223d74042952bd238ee39eb7a1ebe0f0766946709cbb3a92d1551e5feb042452a76c557665fc9fab49768abcc7cb1977f7804d328421c30264b68a7ed05cbb7497a5014e6cdf32df82d41b33f55c67c9c15e723f629af4ac66a62ecc3214140354ef48bc73d3fb0eeb0719473498c2f3d192da0b360e5f3bf8f1ef579ed37a5d0c20eec42714bab59c134d4468736f19f5d32f5b8dc3df45941275264fca42ccb35cacd9965abb06dd7bd3bd0b1d8f32fb4b00d213d5f5d82ebf975b1fb4aeff137783f8b8da73864c3ed63f4142e4b3af5a3b82228eeb95f5d51f671f5b67964d2131c5e8869f8289997811dffe5b58d3dded907839316dbbf75ac8bebf35f036b4f2471808f389f3288ca48a3ae5d78343872df2fa6c67fd69f366c7861bfdde0b5126d5efdf825a03c6520b3a59ecc00469b0c9941f12ddead1f58d37da3ac1582ec701c47532629ae7e038707e3831e9a45f5cad2108f6e48c0c89bdd10bcebf29cb7cc84819cc292ad9c26f767159f2e13d8fc920401c8a682ad3c356d44ca1e7639ddd2c0f92d450069aaa5b778fa713c6c3813cafe6cf610916b02da8fd9ada5e02e0d08326df3dee4b203ddaaeff338be751e769e5c583d1488c5a22f644369d9079f387b36516dd5d706e4a29700d07986cbe1d64271ca0496ffd483fcf12ba1c2e891a2c9d940c61b61406a82a0157648acf3bc598d53046ec5a51c459a8e251ea0641d3d9148883dbb2a27cca1f0937505977689f4c89e045e6e45eec8939bece21fc3f3ff6b3437efe76b4bffdabcf34aaee2d04f21b482e3f2d20f904e723c572f5053e2642ffbf0287be1dc5c75c8e91cd446b1370d9c1c8a076a5eeceb11ad0b0ec959c2df769ae47751530c587b65b1a6feb8915dde7c11ddeaf6947392f746ab6a74630f5ec3a4d5499d46b8561e091c61c522063561ef31d91f680a5f660bf84020257657e79ef0670d93cf9f78c362954ac6f02602492c9f6bca75fe35fd371fe0db76a0a802bb5d04f6cacefb4ec79a3bdb5b0d7ce7b6b1734351b52225a31b16b8414b988f31c6e2aa07efc741e2ca1c3e4d7a382c863540497b12090acb69956e14ed51e569dc52bbbb747c335006a34333c32dac619ffc2d7e3abd7a5b53fde8eccc4f8963e996fabc8a96416d15fa7150faa154b97e685e6316fb73387a616d11aa486120a0d897c2055332eed5f07e50234b0383cb164ddd0501785f5d0109dabbf994be4fdd3e0c81e82cd19dffb63b312678d53c63c05b46739b61e363d944f36d48222476032db59415254879cd368d027fca68361d630fa93422badfc8b91e18e4fdcc2f0532dc7ff57a4100e8b15368a47af303c550542105860542d6fdf78d17e85ab334b7080237c5dd928e07ac0dfcdcd9c34ed4ad8ff47c0c9aa585f0c4f5d227eddf8b65802082a93bb82344162868df6cd2d804e7f9afd6a900f04157e30c796e0ece9998975723a6a9e6ea9f8159ad362bc35abcf779a174791a4aa7c043627075a44a1c93ccdd1df28fdc90d376551548bda51c390b4666c08cc23b1bd76993de97001aa7ccb5dd75dbd74f64b6bb2efdb672797060701e78bc1b5d72c025bba9c2d29c78024425af0e291a3f7386d3791aee91bc20d0f933ee2b2881c4c51720b3a5f5567ba105286c38f64f47b262f83f84e4f46907bca9c936b57e5196b4bbd64c1c8d7ae3e1ed64c598204f5cb90a26efd77ebec403e06f5c37eff5ddff5c30c615d8044e96a0b57a196af2deef36d7be5eada24a40a1eccb50e3466a208b94e2b69c66413ea0dae7eff6cef18fe83ee1717860b2cea2001ad3168f76733c6240c84a9eea9da926f29a74827843d40cf486dfb737ff1d4a9eed5ade6ea400eabea97481a58cdf8697225e71c6b5d22ad66fcfbee3955f3e186bc29a690f1d2874e70f032774a43ac4eec14117a31ef0a00ad6115223e2532dcca9310976ea7222a5c97703b3424bd9c7cf12bc5339d4705cf7dbf03d126b4da27e291a719ff3b1300ed21b425a2e8f7fd2002d137a47af192dd0dd1e26c2a49a16e0204a34fd92b7c3ca69861cdd143a494977e481b0e7c46bea8bedbc995e5a56702c9ab59c0f0cb90cae7a4f2185d50d1c699e4aa2a45177bb6827eb9422b23b8f78d20cec6bc373f62c07872eef3b1b4b7c77838b4e26e9573609f7bef3dcedc2fdf6c2c4aee6ebb9719b8ff578cf5e09933bc39083565e4fe1c18b90b40a72cf45bcfaec0f2c5cad49c606c9588bba24a1ad78be7ab315811c4b02c04b8d04866fa64147bb06f268ea9bc8a35440c4a1f73bd712107e86d5ac2864f592b7fb3aef2661a889475209c80c1adcf2bf165667253a452f1a2f7afb8cdd9ce3aa0b2193220773f11429d4e9f2bcef0c2128d34e632f351fea3b4538dbdf1c699b573b93fbba7a5256e5e3ae42e9fe120940d21f1e00b777031833e8d232283a86fa7ef511a7645d6fc6b0102aebe5b39ddddd4395a5a43dcb2d8a05d2587a4a1799d2239a51e097fadd28b09084148a6209edf2611181c1503c8bb2c5d0bde46d9cb200285ddfa7cb91cd49237ebd57241c3a7bf81da2ac1d95bfcd61faec3d58b52c08ef6c99a65b5a9ce6827705ba1f0d51ae7c84b93abcce96fdfbb2d21a3bc224552d326b65171956cfbd25faa0425bf61647d522b93367a5379c9bd3766ac03b15339e17ea5b0d7173455f6780073a637e8323563f58fe99f8d556a9ba4d8d84fa781ff8eea39bc4f7cb1364bf422bc1e7755cedd3c0c30d6a4930d54adebb81d26b9ba41c1eed62c9ed16a3fb2adc7eeeb2ec6a753878480790a617cacb3a5a590990236d308a2be73b1e1beff9a9b6c22ef627c1453bc6fd2296399821c6f85ed38966d43c9d48dc5000e7fa2c27b6e59dd20109c5cbba36d7532", 0xfdd}], 0x2}}], 0x1, 0x24044015) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x0, 0x4f, 0x8, 0x3, 0x74c, 0x3}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ext2\x00', 0x200011, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[], 0x108}}], 0x2, 0xc040) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(0x3) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0) getgroups(0x400003be, &(0x7f0000000000)=[0xee00, 0x0, 0xffffffffffffffff, 0xee00]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r6 = syz_open_pts(r5, 0xa0200) r7 = dup3(r6, r5, 0x0) read$FUSE(r7, 0x0, 0x0) setregid(0xffffffffffffffff, r4) 1.499090614s ago: executing program 1 (id=334): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x9, 0x8, {{0x19, 0x4, 0x0, 0x8, 0x64, 0x64, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x23}, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0x10, 0xa8, 0x0, 0x8, [0x3, 0x5b7, 0xc06]}, @generic={0x7, 0x12, "eabdfdbd8da649ff67bcd311cba9d15b"}, @lsrr={0x83, 0x7, 0x91, [@broadcast]}, @ssrr={0x89, 0x1b, 0x3f, [@rand_addr=0x64010102, @private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x12, 0x200, 0x70bd29, 0x25dfdbfe, {0x9, 0x87, 0x3, 0x6, {0x4e20, 0x4e22, [0x5, 0x7, 0x7, 0x1], [0x400, 0x3, 0x7fffffff], r2, [0x1]}, 0x572, 0x8}}, 0x4c}, 0x1, 0x0, 0x0, 0x890}, 0x820) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x10, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x2c, 0xaf, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x7ff}, {@empty}, {@private=0xa010101, 0x3}, {@private=0xa010102, 0x5}]}]}}}}}, 0xfdef) r5 = shmget$private(0x0, 0x4000, 0x2, &(0x7f00008ec000/0x4000)=nil) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000800)={0x9, 0x8, 0xfffff684}, 0xc) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000080)=""/194) 1.433825489s ago: executing program 3 (id=335): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r1, &(0x7f0000000040)='./cgroup/file0\x00', r1, 0x0, 0x2) read$proc_mixer(r1, &(0x7f0000000080)=""/4096, 0x1000) syz_open_dev$tty1(0xc, 0x4, 0x3) statx(r1, &(0x7f0000001140)='./cgroup/file0\x00', 0x6000, 0x200, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000001080), &(0x7f00000010c0)='./cgroup/file0/file0\x00', &(0x7f0000001100), 0x20, &(0x7f0000001280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0xcb}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0x500}}, {@allow_other}], [{@fowner_gt={'fowner>', 0xee00}}, {@smackfsdef}, {@subj_role}, {@permit_directio}, {@audit}]}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xc) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001800)={0x0, &(0x7f0000001400)=[@nested_amd_invlpga={0x17d, 0x20, {0xe000, 0xd4a}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x33, 0x2, 0x4}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x20, 0x4, 0x8001, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xfff, 0x8}}, @wr_crn={0x67, 0x20, {0x0, 0x6}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee8000, 0x4da8}}, @cpuid={0x64, 0x18, {0x8, 0x71c}}, @set_irq_handler={0xc8, 0x20, {0xb2, 0x2}}, @in_dx={0x69, 0x20, {0x770a, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x50000, 0x7494}}, @set_irq_handler={0xc8, 0x20, {0x17, 0x1}}, @nested_create_vm={0x12d, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0x5, 0xfff, 0x100}}, @nested_load_syzos={0x136, 0xf9, {0x3, 0x80, [@set_irq_handler={0xc8, 0x20, {0x60, 0x1}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0xbe}, @nested_amd_clgi={0x17f, 0x10}, @code={0xa, 0x49, {"0f01cf640f01ca263e26430f783fc40283f6964cc20000c42141dbe8460f01c3c4c2f98e68863ef33edf65056666440ff5ddc4c2212e4f03"}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8e, 0x6, 0x1}}]}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest64=0x280d, 0x2, 0x6, 0x8000000000000}}, @nested_load_code={0x12e, 0x7c, {0x0, "b9f00900000f3248b804000000000000000f23c00f21f835030007000f23f8440f20822e6740c0630c6fc4e39978ea3536460f005677b9040100c0b802000000ba000000000f3066ba4000edc4a2d9b9e2c744240063000000c744240200800000ff1c24"}}, @in_dx={0x69, 0x20, {0x853, 0x4}}], 0x3dd}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000320003c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000002b06000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000006000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0d, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000001840)) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TCFLSH(r0, 0x400455c8, 0x100010000000000) 523.413242ms ago: executing program 1 (id=336): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 369.283427ms ago: executing program 2 (id=337): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x4], [0xa772, 0x6, 0x5, 0x2, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x2, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1fd, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x0, 0xfff, 0x7ff, 0x800, 0x4, 0x9f5, 0x0, 0xa6c, 0x6, 0x4, 0xb4, 0x2, 0x7fffffffffffffff, 0x800100000000, 0xc, 0x4], 0x25000, 0x10282}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0xbb15, 0x5, 0x3, 0x7, 0x5, 0x1, 0x6, 0x8, 0x7f, 0xfff, 0x4, 0x7, 0x8, 0x40, 0x6, 0xfffffffffffffff8], 0xc000, 0x88004}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 177.971987ms ago: executing program 1 (id=338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%+C\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x9fs\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x2400c004) 0s ago: executing program 1 (id=339): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts. syzkaller login: [ 91.898573][ T10] cfg80211: failed to load regulatory.db [ 91.933362][ T5584] cgroup: Unknown subsys name 'net' [ 92.175384][ T5584] cgroup: Unknown subsys name 'cpuset' [ 92.230030][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.370579][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.977811][ T4913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.013318][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.014280][ T4913] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.016017][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.017020][ T4913] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.049934][ T4913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.055637][ T4913] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.057477][ T4913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.058239][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.096260][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.303482][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.307677][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.343512][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.345935][ T4913] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.373112][ T4913] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.374339][ T4913] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.375598][ T4913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.377697][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.408736][ T4913] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.408884][ T4913] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.250811][ T60] Bluetooth: hci1: command tx timeout [ 99.251356][ T60] Bluetooth: hci0: command tx timeout [ 99.389188][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.389865][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.390129][ T5601] bridge_slave_0: entered allmulticast mode [ 99.400687][ T5601] bridge_slave_0: entered promiscuous mode [ 99.471038][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.471358][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.471584][ T5601] bridge_slave_1: entered allmulticast mode [ 99.474132][ T5601] bridge_slave_1: entered promiscuous mode [ 99.476407][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.476658][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.476856][ T5604] bridge_slave_0: entered allmulticast mode [ 99.479396][ T5604] bridge_slave_0: entered promiscuous mode [ 99.490397][ T5603] Bluetooth: hci3: command tx timeout [ 99.496690][ T5603] Bluetooth: hci2: command tx timeout [ 99.598781][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.599059][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.599260][ T5604] bridge_slave_1: entered allmulticast mode [ 99.613634][ T5604] bridge_slave_1: entered promiscuous mode [ 99.697936][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.745617][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.752279][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.824137][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.989557][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.989971][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.990180][ T5610] bridge_slave_0: entered allmulticast mode [ 99.992827][ T5610] bridge_slave_0: entered promiscuous mode [ 99.996610][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.997145][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.997373][ T5611] bridge_slave_0: entered allmulticast mode [ 100.004764][ T5611] bridge_slave_0: entered promiscuous mode [ 100.057991][ T5601] team0: Port device team_slave_0 added [ 100.084231][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.084609][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.085059][ T5610] bridge_slave_1: entered allmulticast mode [ 100.087612][ T5610] bridge_slave_1: entered promiscuous mode [ 100.088861][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.089110][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.099314][ T5611] bridge_slave_1: entered allmulticast mode [ 100.114364][ T5611] bridge_slave_1: entered promiscuous mode [ 100.134788][ T5601] team0: Port device team_slave_1 added [ 100.147990][ T5604] team0: Port device team_slave_0 added [ 100.214374][ T5604] team0: Port device team_slave_1 added [ 100.305126][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.317514][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.331919][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.331936][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.331961][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.390264][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.394977][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.396993][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.397004][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.397024][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.399334][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.399345][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.399365][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.538051][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.538063][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.538083][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.633019][ T5610] team0: Port device team_slave_0 added [ 100.637362][ T5611] team0: Port device team_slave_0 added [ 100.657086][ T5610] team0: Port device team_slave_1 added [ 100.666358][ T5611] team0: Port device team_slave_1 added [ 100.804890][ T5601] hsr_slave_0: entered promiscuous mode [ 100.806780][ T5601] hsr_slave_1: entered promiscuous mode [ 100.837136][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.837149][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.837168][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.842355][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.842397][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.842465][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.931093][ T5604] hsr_slave_0: entered promiscuous mode [ 100.932869][ T5604] hsr_slave_1: entered promiscuous mode [ 100.934349][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 100.934437][ T5604] Cannot create hsr debugfs directory [ 100.936446][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.936456][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.936475][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.938671][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.938681][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.938700][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.339779][ T5603] Bluetooth: hci0: command tx timeout [ 101.339814][ T5603] Bluetooth: hci1: command tx timeout [ 101.512198][ T5610] hsr_slave_0: entered promiscuous mode [ 101.513889][ T5610] hsr_slave_1: entered promiscuous mode [ 101.515311][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 101.515335][ T5610] Cannot create hsr debugfs directory [ 101.543619][ T5611] hsr_slave_0: entered promiscuous mode [ 101.545943][ T5611] hsr_slave_1: entered promiscuous mode [ 101.548601][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 101.548625][ T5611] Cannot create hsr debugfs directory [ 101.573822][ T5603] Bluetooth: hci3: command tx timeout [ 101.573915][ T60] Bluetooth: hci2: command tx timeout [ 102.349162][ T5601] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.434859][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.443017][ T5601] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.511541][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.516623][ T5601] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.547868][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.573236][ T5601] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.594484][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.746852][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.786388][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.800618][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.825591][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.842861][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.875726][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.906516][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.935995][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.068889][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.105940][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.126874][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.164225][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.172289][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.207696][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.243755][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.285036][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.409959][ T5603] Bluetooth: hci0: command tx timeout [ 103.410050][ T60] Bluetooth: hci1: command tx timeout [ 103.447106][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.474400][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.493393][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.535669][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.547895][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.584229][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.606623][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.635137][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.659877][ T60] Bluetooth: hci2: command tx timeout [ 103.659908][ T60] Bluetooth: hci3: command tx timeout [ 103.712788][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.836288][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.911252][ T3383] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.911484][ T3383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.967518][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.997529][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.997677][ T3383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.140927][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.192050][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.209950][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.210195][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.266056][ T2274] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.266187][ T2274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.359079][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.445069][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.448010][ T3383] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.448274][ T3383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.567056][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.567183][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.720664][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.786849][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.787019][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.922327][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.922538][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.489658][ T5603] Bluetooth: hci1: command tx timeout [ 105.489692][ T5603] Bluetooth: hci0: command tx timeout [ 105.546543][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.731233][ T60] Bluetooth: hci3: command tx timeout [ 105.731267][ T60] Bluetooth: hci2: command tx timeout [ 105.904930][ T5601] veth0_vlan: entered promiscuous mode [ 105.977357][ T5601] veth1_vlan: entered promiscuous mode [ 106.064429][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.276978][ T5601] veth0_macvtap: entered promiscuous mode [ 106.349363][ T5601] veth1_macvtap: entered promiscuous mode [ 106.476516][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.509263][ T5611] veth0_vlan: entered promiscuous mode [ 106.546306][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.577078][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.592722][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.611997][ T5611] veth1_vlan: entered promiscuous mode [ 106.673115][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.695660][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.711212][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.735944][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.098365][ T5610] veth0_vlan: entered promiscuous mode [ 107.211796][ T5611] veth0_macvtap: entered promiscuous mode [ 107.261777][ T5611] veth1_macvtap: entered promiscuous mode [ 107.281774][ T5610] veth1_vlan: entered promiscuous mode [ 107.305643][ T5604] veth0_vlan: entered promiscuous mode [ 107.388695][ T3383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.388718][ T3383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.406861][ T5604] veth1_vlan: entered promiscuous mode [ 107.463137][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.521048][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.576618][ T3383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.576639][ T3383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.640880][ T3390] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.644114][ T3390] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.644765][ T3390] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.683301][ T5610] veth0_macvtap: entered promiscuous mode [ 107.704954][ T3390] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.748227][ T5610] veth1_macvtap: entered promiscuous mode [ 107.987187][ T5604] veth0_macvtap: entered promiscuous mode [ 108.291380][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.317545][ T5604] veth1_macvtap: entered promiscuous mode [ 108.391339][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.547951][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.561776][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.569845][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.569897][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.594791][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.598512][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.676635][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.793475][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.843139][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.843161][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.946532][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.965535][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.981013][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.052942][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.553258][ T5748] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.775469][ T3335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.775490][ T3335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.470757][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.470777][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.691855][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.691894][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.018849][ T5770] process 'syz.3.11' launched '/dev/fd/4' with NULL argv: empty string added [ 111.129020][ T2274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.129041][ T2274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.454387][ T5580] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.709529][ T5580] usb 3-1: Using ep0 maxpacket: 8 [ 111.788147][ T5580] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 111.788207][ T5580] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.788229][ T5580] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.788252][ T5580] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 111.788271][ T5580] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 111.788292][ T5580] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.788330][ T5580] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.788351][ T5580] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.933035][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 112.212090][ T5580] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 112.521424][ T5603] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 114.233996][ T5706] usb 3-1: USB disconnect, device number 2 [ 114.601609][ T5775] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.601788][ T5775] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.850568][ T5603] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.052656][ T5775] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.167833][ T5775] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.167967][ T5775] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.247492][ T5775] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.403675][ T5775] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.403850][ T5775] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.548101][ T5775] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.625243][ T5775] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.625335][ T5775] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.713784][ T5775] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.212024][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.222924][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 116.223026][ T10] usb 4-1: can't read configurations, error -71 [ 116.883241][ T5706] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.941391][ T5603] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.039803][ T5706] usb 1-1: Using ep0 maxpacket: 8 [ 117.042099][ T5706] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 117.042174][ T5706] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.042191][ T5706] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.042209][ T5706] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.042226][ T5706] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.042256][ T5706] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.042272][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.090094][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.183726][ T5603] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.331000][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 117.337337][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.365151][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 117.365183][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.365205][ T10] usb 4-1: Product: syz [ 117.365220][ T10] usb 4-1: Manufacturer: syz [ 117.365235][ T10] usb 4-1: SerialNumber: syz [ 117.426658][ T5603] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.445047][ T10] usb 4-1: config 0 descriptor?? [ 117.470658][ T5706] usb 1-1: usb_control_msg returned -32 [ 117.470708][ T5706] usbtmc 1-1:16.0: can't read capabilities [ 117.649508][ T5603] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.971474][ T5580] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 118.225066][ T5603] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 119.251655][ T5603] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.492920][ T5603] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.637199][ T5706] usb 1-1: USB disconnect, device number 2 [ 119.730666][ T5603] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.854300][ T823] usb 4-1: USB disconnect, device number 3 [ 120.290240][ T5603] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.290362][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 120.702621][ T5831] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.703506][ T5831] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.706019][ T5831] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.819577][ T5580] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.822533][ T5580] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 120.822569][ T5580] usb 3-1: can't read configurations, error -71 [ 121.059643][ T823] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.192577][ T823] usb 2-1: device descriptor read/64, error -71 [ 121.489792][ T823] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.599602][ T37] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.619695][ T823] usb 2-1: device descriptor read/64, error -71 [ 121.736140][ T823] usb usb2-port1: attempt power cycle [ 121.770858][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 121.775114][ T37] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 121.775179][ T37] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.775196][ T37] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.775214][ T37] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.775231][ T37] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.775261][ T37] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.775277][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.909586][ T5580] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.079562][ T5580] usb 3-1: Using ep0 maxpacket: 16 [ 122.085664][ T5580] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.109304][ T5580] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 122.109334][ T5580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.109355][ T5580] usb 3-1: Product: syz [ 122.109371][ T5580] usb 3-1: Manufacturer: syz [ 122.109386][ T5580] usb 3-1: SerialNumber: syz [ 122.159026][ T5580] usb 3-1: config 0 descriptor?? [ 122.169125][ T37] usb 1-1: usb_control_msg returned -32 [ 122.169170][ T37] usbtmc 1-1:16.0: can't read capabilities [ 122.319281][ T823] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 122.379535][ T5603] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.462776][ T823] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 122.518153][ T5603] Bluetooth: hci1: unknown advertising packet type: 0x09 [ 122.555631][ T823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.564110][ T823] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 122.564190][ T823] usb 2-1: can't read configurations, error -71 [ 122.564834][ T823] usb usb2-port1: unable to enumerate USB device [ 122.729693][ T5901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.52'. [ 122.770722][ T5603] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.771332][ T5603] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.599586][ T5580] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.729641][ T5580] usb 4-1: device descriptor read/64, error -71 [ 123.854917][ T5926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.61'. [ 123.969631][ T5580] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 124.099874][ T5580] usb 4-1: device descriptor read/64, error -71 [ 124.212541][ T5580] usb usb4-port1: attempt power cycle [ 124.390429][ T9] usb 1-1: USB disconnect, device number 3 [ 124.532455][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 124.590916][ T5580] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.614803][ T5580] usb 4-1: device descriptor read/8, error -71 [ 124.707615][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.726497][ T5603] Bluetooth: hci1: unknown advertising packet type: 0x09 [ 124.733724][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 124.733764][ T10] usb 2-1: can't read configurations, error -71 [ 124.811500][ T5793] usb 3-1: USB disconnect, device number 4 [ 124.859690][ T5580] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.883250][ T5580] usb 4-1: device descriptor read/8, error -71 [ 125.002807][ T5580] usb usb4-port1: unable to enumerate USB device [ 125.025286][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.70'. [ 125.146531][ T5954] overlayfs: missing 'lowerdir' [ 125.610678][ T823] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.781527][ T823] usb 1-1: Using ep0 maxpacket: 8 [ 125.784010][ T823] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 125.784068][ T823] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.784092][ T823] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.784118][ T823] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.784143][ T823] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.784186][ T823] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.784210][ T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.999611][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 126.116578][ T823] usb 1-1: usb_control_msg returned -32 [ 126.117930][ T823] usbtmc 1-1:16.0: can't read capabilities [ 126.153219][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 126.156194][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 126.159883][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 126.159960][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.160022][ T10] usb 2-1: Product: syz [ 126.160064][ T10] usb 2-1: Manufacturer: syz [ 126.160107][ T10] usb 2-1: SerialNumber: syz [ 126.231729][ T10] usb 2-1: config 0 descriptor?? [ 126.406780][ T5981] overlayfs: missing 'lowerdir' [ 126.549644][ T823] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 126.724471][ T823] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.727140][ T823] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 126.727264][ T823] usb 3-1: can't read configurations, error -71 [ 127.220603][ T5996] netlink: 76 bytes leftover after parsing attributes in process `syz.3.86'. [ 127.583069][ T6005] overlayfs: missing 'lowerdir' [ 127.799563][ T823] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.939572][ T823] usb 3-1: device descriptor read/64, error -71 [ 128.052187][ T823] usb usb3-port1: attempt power cycle [ 128.149594][ T37] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.299549][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 128.304074][ T37] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 128.304102][ T37] usb 4-1: config 0 has no interface number 0 [ 128.304142][ T37] usb 4-1: config 0 interface 184 has no altsetting 0 [ 128.306534][ T37] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 128.306562][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.306576][ T37] usb 4-1: Product: syz [ 128.306586][ T37] usb 4-1: Manufacturer: syz [ 128.306597][ T37] usb 4-1: SerialNumber: syz [ 128.335827][ T37] usb 4-1: config 0 descriptor?? [ 128.420886][ T823] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.441599][ T823] usb 3-1: device descriptor read/8, error -71 [ 128.457226][ T5694] usb 1-1: USB disconnect, device number 4 [ 128.684514][ T823] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 128.700136][ T823] usb 3-1: device descriptor read/8, error -71 [ 128.819143][ T823] usb usb3-port1: unable to enumerate USB device [ 128.843960][ T823] usb 2-1: USB disconnect, device number 8 [ 129.131059][ T5694] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 129.222083][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 129.222107][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 129.300555][ T5694] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.311845][ T823] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 129.312050][ T5694] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 129.313163][ T5694] usb 1-1: can't read configurations, error -71 [ 129.512843][ T823] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 129.512864][ T823] usb 2-1: config 0 has no interface number 0 [ 129.512896][ T823] usb 2-1: config 0 interface 51 altsetting 72 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 129.512960][ T823] usb 2-1: config 0 interface 51 has no altsetting 0 [ 129.512984][ T823] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 129.513001][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.568420][ T823] usb 2-1: config 0 descriptor?? [ 129.989725][ T823] usb 2-1: language id specifier not provided by device, defaulting to English [ 130.159044][ T6029] overlay: Unknown parameter '/' [ 130.247667][ T823] hub 2-1:0.51: bad descriptor, ignoring hub [ 130.247709][ T823] hub 2-1:0.51: probe with driver hub failed with error -5 [ 130.269255][ T823] usb 2-1: Cannot read MAC address [ 130.277642][ T823] MOSCHIP usb-ethernet driver 2-1:0.51: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 130.447651][ T823] usb 2-1: USB disconnect, device number 9 [ 130.879576][ T5793] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.891578][ T6040] netlink: 444 bytes leftover after parsing attributes in process `syz.1.103'. [ 131.038059][ T5793] usb 1-1: Using ep0 maxpacket: 8 [ 131.047419][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 131.047444][ T5793] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 131.047449][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 131.047470][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 131.047488][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 131.047499][ T5793] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.047523][ T5793] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.047560][ T5793] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.047583][ T5793] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.047623][ T5793] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.047646][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.047799][ T37] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 131.194807][ T37] usb 4-1: USB disconnect, device number 8 [ 131.271150][ T5580] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.359591][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 131.423191][ T5580] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.423249][ T5580] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 131.423310][ T5580] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.450881][ T5580] usb 3-1: config 0 descriptor?? [ 131.472997][ T5793] usb 1-1: usb_control_msg returned -32 [ 131.473031][ T5793] usbtmc 1-1:16.0: can't read capabilities [ 131.497977][ T5580] pwc: Askey VC010 type 2 USB webcam detected. [ 131.569387][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.576686][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 131.576725][ T10] usb 2-1: can't read configurations, error -71 [ 131.681057][ T5580] pwc: recv_control_msg error -32 req 02 val 2b00 [ 131.712241][ T5580] pwc: recv_control_msg error -32 req 02 val 2700 [ 131.811705][ T5580] pwc: recv_control_msg error -71 req 02 val 2c00 [ 131.812390][ T5580] pwc: recv_control_msg error -71 req 04 val 1000 [ 131.817343][ T5580] pwc: recv_control_msg error -71 req 04 val 1300 [ 131.819846][ T5580] pwc: recv_control_msg error -71 req 04 val 1400 [ 131.825029][ T5580] pwc: recv_control_msg error -71 req 02 val 2000 [ 131.826092][ T5580] pwc: recv_control_msg error -71 req 02 val 2100 [ 131.832054][ T5580] pwc: recv_control_msg error -71 req 04 val 1500 [ 131.874662][ T5580] pwc: recv_control_msg error -71 req 02 val 2500 [ 131.876456][ T5580] pwc: recv_control_msg error -71 req 02 val 2400 [ 131.877687][ T5580] pwc: recv_control_msg error -71 req 02 val 2600 [ 131.878200][ T5580] pwc: recv_control_msg error -71 req 02 val 2900 [ 131.878685][ T5580] pwc: recv_control_msg error -71 req 02 val 2800 [ 131.879373][ T5580] pwc: recv_control_msg error -71 req 04 val 1100 [ 131.882790][ T5580] pwc: recv_control_msg error -71 req 04 val 1200 [ 131.977175][ T5580] pwc: Registered as video103. [ 132.042099][ T6056] overlay: Unknown parameter '/' [ 132.077213][ T5580] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 132.079529][ T37] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.239859][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 132.256190][ T37] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 132.256224][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 132.269814][ T37] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.269844][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.269865][ T37] usb 4-1: Product: syz [ 132.269880][ T37] usb 4-1: Manufacturer: syz [ 132.269896][ T37] usb 4-1: SerialNumber: syz [ 132.342767][ T37] usb 4-1: config 0 descriptor?? [ 132.370220][ T5580] usb 3-1: USB disconnect, device number 9 [ 132.390060][ T37] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 132.449290][ T6060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.110'. [ 132.649659][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 132.782086][ T6068] netlink: 444 bytes leftover after parsing attributes in process `syz.2.113'. [ 132.794027][ T10] usb 2-1: device descriptor read/64, error -71 [ 132.878565][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.878803][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.901645][ T10] usb usb2-port1: attempt power cycle [ 133.197613][ T6078] netlink: 88 bytes leftover after parsing attributes in process `syz.2.116'. [ 133.259880][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 133.280573][ T10] usb 2-1: device descriptor read/8, error -71 [ 133.519692][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 133.540138][ T10] usb 2-1: device descriptor read/8, error -71 [ 133.639963][ T5580] usb 1-1: USB disconnect, device number 7 [ 133.653450][ T10] usb usb2-port1: unable to enumerate USB device [ 133.908447][ T6088] overlay: Unknown parameter '/' [ 134.039841][ T5580] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 134.078999][ T6091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.119'. [ 134.198823][ T5580] usb 1-1: unable to get BOS descriptor or descriptor too short [ 134.208793][ T5580] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 134.208929][ T5580] usb 1-1: can't read configurations, error -71 [ 134.304525][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.121'. [ 134.382160][ T6100] netlink: 444 bytes leftover after parsing attributes in process `syz.2.122'. [ 134.867445][ T10] usb 4-1: USB disconnect, device number 9 [ 134.963374][ T6112] FAULT_INJECTION: forcing a failure. [ 134.963374][ T6112] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 134.963430][ T6112] CPU: 1 UID: 0 PID: 6112 Comm: syz.0.126 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.963454][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 134.963474][ T6112] Call Trace: [ 134.963482][ T6112] [ 134.963491][ T6112] dump_stack_lvl+0xe8/0x150 [ 134.963521][ T6112] should_fail_ex+0x467/0x600 [ 134.963584][ T6112] _copy_from_user+0x2d/0xb0 [ 134.963605][ T6112] ___sys_recvmsg+0x173/0x5a0 [ 134.963637][ T6112] ? lock_acquire+0x115/0x350 [ 134.963673][ T6112] ? __pfx____sys_recvmsg+0x10/0x10 [ 134.963711][ T6112] ? ktime_get_ts64+0xa9/0x410 [ 134.963776][ T6112] do_recvmmsg+0x320/0x7f0 [ 134.963826][ T6112] ? __pfx_do_recvmmsg+0x10/0x10 [ 134.963872][ T6112] ? get_timespec64+0x119/0x1b0 [ 134.963895][ T6112] ? __pfx_get_timespec64+0x10/0x10 [ 134.963929][ T6112] __x64_sys_recvmmsg+0x1b7/0x250 [ 134.963967][ T6112] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 134.964012][ T6112] do_syscall_64+0x17b/0x530 [ 134.964034][ T6112] ? irqentry_exit+0x10f/0x8f0 [ 134.964055][ T6112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.964077][ T6112] ? clear_bhb_loop+0x40/0x90 [ 134.964105][ T6112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.964126][ T6112] RIP: 0033:0x7f9deb2ade99 [ 134.964151][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.964168][ T6112] RSP: 002b:00007f9de9506028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 134.964194][ T6112] RAX: ffffffffffffffda RBX: 00007f9deb535fa0 RCX: 00007f9deb2ade99 [ 134.964210][ T6112] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 134.964224][ T6112] RBP: 00007f9de9506090 R08: 0000200000003700 R09: 0000000000000000 [ 134.964238][ T6112] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 134.964250][ T6112] R13: 00007f9deb536038 R14: 00007f9deb535fa0 R15: 00007ffc815ae7e8 [ 134.964284][ T6112] [ 135.263477][ T6114] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.127'. [ 135.309617][ T5694] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 135.318258][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'. [ 135.465765][ T6120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.130'. [ 135.479599][ T5694] usb 3-1: Using ep0 maxpacket: 8 [ 135.482772][ T5694] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 135.482824][ T5694] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.482845][ T5694] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.482869][ T5694] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.482891][ T5694] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.482929][ T5694] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.482950][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.642531][ T6117] syz.3.127 uses obsolete (PF_INET,SOCK_PACKET) [ 135.830162][ T5694] usb 3-1: usb_control_msg returned -32 [ 135.830207][ T5694] usbtmc 3-1:16.0: can't read capabilities [ 135.938036][ T6117] dvmrp8: entered allmulticast mode [ 136.208452][ T6136] block2mtd: too many arguments [ 136.229588][ T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 136.387348][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 136.389378][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 136.406248][ T10] usb 2-1: can't read configurations, error -71 [ 136.849913][ T5694] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 136.999536][ T5694] usb 1-1: Using ep0 maxpacket: 16 [ 137.002518][ T5694] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 137.002552][ T5694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 137.005555][ T5694] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 137.005584][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.005605][ T5694] usb 1-1: Product: syz [ 137.005620][ T5694] usb 1-1: Manufacturer: syz [ 137.005635][ T5694] usb 1-1: SerialNumber: syz [ 137.056058][ T5580] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 137.071927][ T6150] __nla_validate_parse: 1 callbacks suppressed [ 137.071954][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.139'. [ 137.120604][ T5694] usb 1-1: config 0 descriptor?? [ 137.142848][ T5694] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 137.221475][ T5580] usb 4-1: device descriptor read/64, error -71 [ 137.469553][ T5580] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 137.599566][ T5580] usb 4-1: device descriptor read/64, error -71 [ 137.709889][ T5580] usb usb4-port1: attempt power cycle [ 137.885933][ T10] usb 3-1: USB disconnect, device number 10 [ 137.982775][ T6156] netlink: 444 bytes leftover after parsing attributes in process `syz.2.141'. [ 138.050299][ T5580] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 138.079880][ T5580] usb 4-1: device descriptor read/8, error -71 [ 138.320359][ T5580] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 138.340147][ T5580] usb 4-1: device descriptor read/8, error -71 [ 138.449690][ T5793] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 138.461081][ T5580] usb usb4-port1: unable to enumerate USB device [ 138.612188][ T5793] usb 2-1: Using ep0 maxpacket: 16 [ 138.614629][ T5793] usb 2-1: config 1 has an invalid interface number: 116 but max is 0 [ 138.614655][ T5793] usb 2-1: config 1 has no interface number 0 [ 138.614694][ T5793] usb 2-1: config 1 interface 116 has no altsetting 0 [ 138.617216][ T5793] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=2d.22 [ 138.617248][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.617262][ T5793] usb 2-1: Product: syz [ 138.617272][ T5793] usb 2-1: Manufacturer: syz [ 138.617283][ T5793] usb 2-1: SerialNumber: syz [ 138.939062][ T5793] ttusb_dec_send_command: command bulk message failed: error -22 [ 138.981860][ T5793] ttusb-dec 2-1:1.116: probe with driver ttusb-dec failed with error -22 [ 139.001312][ T5793] usb 2-1: USB disconnect, device number 16 [ 139.419566][ T5694] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 139.595439][ T5694] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.603940][ T5694] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 139.604068][ T5694] usb 3-1: can't read configurations, error -71 [ 139.692386][ T5793] usb 1-1: USB disconnect, device number 10 [ 139.761837][ T6176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'. [ 139.995041][ T6180] netlink: 444 bytes leftover after parsing attributes in process `syz.1.150'. [ 140.149624][ T5793] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 140.264252][ T6189] FAULT_INJECTION: forcing a failure. [ 140.264252][ T6189] name failslab, interval 1, probability 0, space 0, times 1 [ 140.264278][ T6189] CPU: 1 UID: 0 PID: 6189 Comm: syz.1.153 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 140.264296][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 140.264306][ T6189] Call Trace: [ 140.264312][ T6189] [ 140.264318][ T6189] dump_stack_lvl+0xe8/0x150 [ 140.264344][ T6189] should_fail_ex+0x467/0x600 [ 140.264368][ T6189] should_failslab+0xa8/0x100 [ 140.264385][ T6189] __kmalloc_noprof+0xfb/0x790 [ 140.264408][ T6189] ? tomoyo_realpath_from_path+0xef/0x640 [ 140.264433][ T6189] ? tomoyo_realpath_from_path+0xef/0x640 [ 140.264468][ T6189] tomoyo_realpath_from_path+0xef/0x640 [ 140.264500][ T6189] ? tomoyo_path_number_perm+0x219/0x5f0 [ 140.264520][ T6189] tomoyo_path_number_perm+0x246/0x5f0 [ 140.264542][ T6189] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.264563][ T6189] ? do_raw_spin_lock+0x12b/0x2f0 [ 140.264645][ T6189] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 140.264669][ T6189] ? lockdep_hardirqs_on+0x7a/0x110 [ 140.264713][ T6189] ? __fget_files+0x2a/0x420 [ 140.264733][ T6189] ? __fget_files+0x3a8/0x420 [ 140.264748][ T6189] ? __fget_files+0x2a/0x420 [ 140.264767][ T6189] security_file_ioctl+0xb9/0x260 [ 140.264787][ T6189] __se_sys_ioctl+0x47/0x170 [ 140.264810][ T6189] do_syscall_64+0x17b/0x530 [ 140.264826][ T6189] ? irqentry_exit+0x10f/0x8f0 [ 140.264841][ T6189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.264857][ T6189] ? clear_bhb_loop+0x40/0x90 [ 140.264876][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.264892][ T6189] RIP: 0033:0x7f6c0478de99 [ 140.264906][ T6189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.264919][ T6189] RSP: 002b:00007f6c029e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.264935][ T6189] RAX: ffffffffffffffda RBX: 00007f6c04a15fa0 RCX: 00007f6c0478de99 [ 140.264947][ T6189] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 140.264956][ T6189] RBP: 00007f6c029e6090 R08: 0000000000000000 R09: 0000000000000000 [ 140.264970][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.264980][ T6189] R13: 00007f6c04a16038 R14: 00007f6c04a15fa0 R15: 00007fff05154158 [ 140.265003][ T6189] [ 140.265019][ T6189] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.299706][ T5793] usb 1-1: Using ep0 maxpacket: 8 [ 140.336335][ T5793] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 140.336382][ T5793] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.336398][ T5793] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.336416][ T5793] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.336433][ T5793] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.336470][ T5793] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.336487][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.460961][ T5694] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 140.672052][ T5694] usb 3-1: config 9 interface 0 has no altsetting 0 [ 140.675338][ T5694] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 140.675366][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.675387][ T5694] usb 3-1: Product: syz [ 140.675402][ T5694] usb 3-1: Manufacturer: syz [ 140.675417][ T5694] usb 3-1: SerialNumber: syz [ 140.831006][ T5793] usb 1-1: usb_control_msg returned -32 [ 140.831058][ T5793] usbtmc 1-1:16.0: can't read capabilities [ 141.324767][ T5694] snd-usb-caiaq 3-1:9.0: invalid EPs [ 141.324799][ T5694] usb 3-1: unable to init card! (ret=-22) [ 141.350949][ T5694] snd-usb-caiaq 3-1:9.0: probe with driver snd-usb-caiaq failed with error -22 [ 141.399855][ T5793] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 141.401529][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.158'. [ 141.549544][ T5793] usb 4-1: Using ep0 maxpacket: 16 [ 141.551886][ T5793] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 141.551908][ T5793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 141.554368][ T5793] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.554388][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.554402][ T5793] usb 4-1: Product: syz [ 141.554413][ T5793] usb 4-1: Manufacturer: syz [ 141.554424][ T5793] usb 4-1: SerialNumber: syz [ 141.593057][ T37] usb 3-1: USB disconnect, device number 12 [ 141.627981][ T5793] usb 4-1: config 0 descriptor?? [ 141.662406][ T5793] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 141.769622][ T5580] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 141.932943][ T5580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 4 [ 141.935516][ T5580] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.935550][ T5580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.935565][ T5580] usb 2-1: Product: syz [ 141.935575][ T5580] usb 2-1: Manufacturer: syz [ 141.935586][ T5580] usb 2-1: SerialNumber: syz [ 141.983216][ T5580] usb 2-1: config 0 descriptor?? [ 142.218861][ T5580] usb 2-1: USB disconnect, device number 17 [ 142.549562][ T37] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 142.681440][ T37] usb 3-1: device descriptor read/64, error -71 [ 142.836990][ T5694] usb 1-1: USB disconnect, device number 11 [ 142.919866][ T37] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 143.079636][ T37] usb 3-1: device descriptor read/64, error -71 [ 143.131626][ T5706] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 143.198336][ T37] usb usb3-port1: attempt power cycle [ 143.286979][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.294459][ T5706] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 143.294561][ T5706] usb 2-1: can't read configurations, error -71 [ 143.539545][ T37] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 143.560462][ T37] usb 3-1: device descriptor read/8, error -71 [ 143.799580][ T37] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 143.820449][ T37] usb 3-1: device descriptor read/8, error -71 [ 143.930002][ T37] usb usb3-port1: unable to enumerate USB device [ 144.065268][ T6227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.167'. [ 144.187282][ T5793] usb 4-1: USB disconnect, device number 14 [ 144.709801][ T5706] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 144.789585][ T37] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 144.859626][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 144.868530][ T5706] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 144.868687][ T5706] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.868711][ T5706] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.868740][ T5706] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.868757][ T5706] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.868786][ T5706] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.868802][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.970583][ T37] usb 4-1: unable to get BOS descriptor or descriptor too short [ 144.999091][ T37] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 144.999120][ T37] usb 4-1: can't read configurations, error -71 [ 145.148927][ T5706] usb 2-1: GET_CAPABILITIES returned 0 [ 145.148962][ T5706] usbtmc 2-1:16.0: can't read capabilities [ 145.634004][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 145.939635][ T5793] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 146.089536][ T5793] usb 3-1: Using ep0 maxpacket: 16 [ 146.089687][ T5687] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 146.093171][ T5793] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 146.093201][ T5793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.096174][ T5793] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 146.096204][ T5793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.096226][ T5793] usb 3-1: Product: syz [ 146.096241][ T5793] usb 3-1: Manufacturer: syz [ 146.096255][ T5793] usb 3-1: SerialNumber: syz [ 146.171370][ T5793] usb 3-1: config 0 descriptor?? [ 146.195491][ T5793] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 146.195540][ T5793] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 146.261909][ T5687] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 146.261989][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.322117][ T5687] usb 1-1: config 0 descriptor?? [ 146.348213][ T5687] cp210x 1-1:0.0: cp210x converter detected [ 146.727985][ T5687] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 146.805054][ T5793] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 146.816748][ T5793] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 146.830727][ T5793] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 146.830812][ T5793] em28xx 3-1:0.0: No AC97 audio processor [ 147.331210][ T5687] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 147.331241][ T5687] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 147.384838][ T5687] usb 1-1: cp210x converter now attached to ttyUSB0 [ 147.412263][ T5687] usb 1-1: USB disconnect, device number 12 [ 147.453370][ T5793] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 147.531554][ T5580] usb 2-1: USB disconnect, device number 20 [ 147.602084][ T5793] usb 4-1: no configurations [ 147.602105][ T5793] usb 4-1: can't read configurations, error -22 [ 147.656259][ T5687] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 147.657158][ T5687] cp210x 1-1:0.0: device disconnected [ 147.729640][ T5793] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 147.880432][ T5793] usb 4-1: no configurations [ 147.880447][ T5793] usb 4-1: can't read configurations, error -22 [ 147.880806][ T5793] usb usb4-port1: attempt power cycle [ 148.222423][ T5793] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 148.252162][ T5793] usb 4-1: no configurations [ 148.252182][ T5793] usb 4-1: can't read configurations, error -22 [ 148.299564][ T37] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 148.379536][ T5793] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 148.403521][ T5793] usb 4-1: no configurations [ 148.403535][ T5793] usb 4-1: can't read configurations, error -22 [ 148.403877][ T5793] usb usb4-port1: unable to enumerate USB device [ 148.479163][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.495010][ T37] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 148.495050][ T37] usb 1-1: can't read configurations, error -71 [ 148.728319][ T5793] usb 3-1: USB disconnect, device number 17 [ 148.734036][ T5793] em28xx 3-1:0.0: Disconnecting em28xx [ 148.793798][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 148.840298][ T5687] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 148.883405][ T5793] em28xx: Freeing device [ 148.908808][ T6289] mmap: syz.2.189 (6289) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 148.990170][ T5687] usb 2-1: Using ep0 maxpacket: 16 [ 148.998320][ T5687] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 148.998350][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.998370][ T5687] usb 2-1: Product: syz [ 148.998384][ T5687] usb 2-1: Manufacturer: syz [ 148.998399][ T5687] usb 2-1: SerialNumber: syz [ 149.057293][ T5687] usb 2-1: config 0 descriptor?? [ 149.092265][ T5687] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 149.269832][ T5687] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 149.270009][ T5687] visor 2-1:0.0: probe with driver visor failed with error -71 [ 149.309178][ T5687] usb 2-1: USB disconnect, device number 21 [ 149.479685][ T6020] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 149.629558][ T6020] usb 3-1: Using ep0 maxpacket: 8 [ 149.631936][ T6020] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 149.631994][ T6020] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.632019][ T6020] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.632044][ T6020] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.632069][ T6020] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.632112][ T6020] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.632137][ T6020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.779655][ T37] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 149.855478][ T6020] usb 3-1: GET_CAPABILITIES returned 0 [ 149.855530][ T6020] usbtmc 3-1:16.0: can't read capabilities [ 149.909599][ T37] usb 1-1: device descriptor read/64, error -71 [ 150.149617][ T37] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 150.280100][ T37] usb 1-1: device descriptor read/64, error -71 [ 150.389856][ T37] usb usb1-port1: attempt power cycle [ 150.599610][ T5706] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 150.729812][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 150.749660][ T37] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 150.771327][ T5706] usb 4-1: Using ep0 maxpacket: 16 [ 150.778148][ T37] usb 1-1: device descriptor read/8, error -71 [ 150.790297][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 150.790332][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.824354][ T5706] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.824385][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.824406][ T5706] usb 4-1: Product: syz [ 150.824420][ T5706] usb 4-1: Manufacturer: syz [ 150.824435][ T5706] usb 4-1: SerialNumber: syz [ 150.899046][ T5706] usb 4-1: config 0 descriptor?? [ 150.922637][ T5706] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 150.922662][ T5706] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 151.019608][ T37] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 151.066342][ T37] usb 1-1: device descriptor read/8, error -71 [ 151.181712][ T37] usb usb1-port1: unable to enumerate USB device [ 151.309550][ T6020] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 151.477795][ T6020] usb 2-1: unable to get BOS descriptor or descriptor too short [ 151.521567][ T6020] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 151.521596][ T6020] usb 2-1: can't read configurations, error -71 [ 151.526278][ T5706] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 151.530096][ T5706] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 151.534828][ T5706] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 151.534886][ T5706] em28xx 4-1:0.0: No AC97 audio processor [ 152.261427][ T5687] usb 3-1: USB disconnect, device number 18 [ 152.316024][ T6321] netlink: 96 bytes leftover after parsing attributes in process `syz.1.203'. [ 152.333971][ T6321] ======================================================= [ 152.333971][ T6321] WARNING: The mand mount option has been deprecated and [ 152.333971][ T6321] and is ignored by this kernel. Remove the mand [ 152.333971][ T6321] option from the mount to silence this warning. [ 152.333971][ T6321] ======================================================= [ 152.749592][ T5687] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 152.819609][ T6020] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 152.910324][ T5687] usb 3-1: no configurations [ 152.910338][ T5687] usb 3-1: can't read configurations, error -22 [ 152.969484][ T6020] usb 2-1: Using ep0 maxpacket: 8 [ 152.971628][ T6020] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 152.971655][ T6020] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.971674][ T6020] usb 2-1: config 0 has no interface number 0 [ 152.974321][ T6020] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 152.974346][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.974370][ T6020] usb 2-1: Product: syz [ 152.974381][ T6020] usb 2-1: Manufacturer: syz [ 152.974391][ T6020] usb 2-1: SerialNumber: syz [ 152.978920][ T6020] usb 2-1: config 0 descriptor?? [ 153.079568][ T5687] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 153.216545][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 153.217945][ T6020] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 153.217972][ T6020] uvcvideo 2-1:0.31: No valid video chain found. [ 153.238198][ T5687] usb 3-1: no configurations [ 153.238244][ T5687] usb 3-1: can't read configurations, error -22 [ 153.241219][ T5687] usb usb3-port1: attempt power cycle [ 153.273671][ T6020] usb 2-1: USB disconnect, device number 24 [ 153.319146][ T5793] usb 4-1: USB disconnect, device number 21 [ 153.327609][ T5793] em28xx 4-1:0.0: Disconnecting em28xx [ 153.368145][ T5793] em28xx: Freeing device [ 153.589669][ T5687] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 153.611602][ T5687] usb 3-1: no configurations [ 153.611619][ T5687] usb 3-1: can't read configurations, error -22 [ 153.699755][ T823] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 153.739771][ T5687] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 153.760878][ T5687] usb 3-1: no configurations [ 153.760892][ T5687] usb 3-1: can't read configurations, error -22 [ 153.762631][ T5687] usb usb3-port1: unable to enumerate USB device [ 153.859564][ T823] usb 1-1: Using ep0 maxpacket: 32 [ 153.880062][ T823] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 153.880091][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.880117][ T823] usb 1-1: Product: syz [ 153.880128][ T823] usb 1-1: Manufacturer: syz [ 153.880138][ T823] usb 1-1: SerialNumber: syz [ 153.885266][ T823] usb 1-1: config 0 descriptor?? [ 153.897608][ T823] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 153.935753][ T5793] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 154.109508][ T5793] usb 4-1: unable to get BOS descriptor or descriptor too short [ 154.114340][ T5793] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 154.114378][ T5793] usb 4-1: can't read configurations, error -71 [ 154.791262][ T5687] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 154.939577][ T5687] usb 2-1: Using ep0 maxpacket: 8 [ 154.943396][ T5687] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 154.943452][ T5687] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.943478][ T5687] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.943505][ T5687] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.943530][ T5687] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.943572][ T5687] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.943595][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.169584][ T5687] usb 2-1: GET_CAPABILITIES returned 0 [ 155.169635][ T5687] usbtmc 2-1:16.0: can't read capabilities [ 155.179617][ T5793] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 155.349512][ T5793] usb 4-1: Using ep0 maxpacket: 16 [ 155.352169][ T5793] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 155.352194][ T5793] usb 4-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 155.352215][ T5793] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.352238][ T5793] usb 4-1: config 1 has no interface number 1 [ 155.352284][ T5793] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 155.352329][ T5793] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x69, changing to 0x9 [ 155.352358][ T5793] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x9 has invalid maxpacket 11837, setting to 1024 [ 155.352397][ T5793] usb 4-1: config 1 interface 2 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024 [ 155.358855][ T5793] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.358933][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.358963][ T5793] usb 4-1: Product: syz [ 155.358978][ T5793] usb 4-1: Manufacturer: syz [ 155.358994][ T5793] usb 4-1: SerialNumber: syz [ 155.815459][ T5793] usb 4-1: USB disconnect, device number 23 [ 155.913213][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.969636][ T5706] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 156.029446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.049445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.059447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.069440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.079442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.089435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.099447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.109439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.119438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.129440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.265071][ T823] gspca_ov534_9: reg_r err -71 [ 156.309666][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 156.316381][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 156.316404][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 156.321891][ T5706] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.321918][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.321944][ T5706] usb 3-1: Product: syz [ 156.321955][ T5706] usb 3-1: Manufacturer: syz [ 156.321965][ T5706] usb 3-1: SerialNumber: syz [ 156.383176][ T5706] usb 3-1: config 0 descriptor?? [ 156.395596][ T5706] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 156.395632][ T5706] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 156.569600][ T823] gspca_ov534_9: Unknown sensor 0000 [ 156.569752][ T823] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 156.595481][ T823] usb 1-1: USB disconnect, device number 19 [ 157.068519][ T5706] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 157.070359][ T5706] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 157.071381][ T5706] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 157.071399][ T5706] em28xx 3-1:0.0: No AC97 audio processor [ 157.627780][ T5687] usb 2-1: USB disconnect, device number 25 [ 157.733563][ T6373] syz.1.223(6373): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 157.889767][ T5706] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 157.919517][ T5793] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 158.070894][ T5793] usb 1-1: no configurations [ 158.070915][ T5793] usb 1-1: can't read configurations, error -22 [ 158.093147][ T5706] usb 4-1: unable to get BOS descriptor or descriptor too short [ 158.109606][ T5706] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 158.109643][ T5706] usb 4-1: can't read configurations, error -71 [ 158.199556][ T5793] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 158.360327][ T5793] usb 1-1: no configurations [ 158.360341][ T5793] usb 1-1: can't read configurations, error -22 [ 158.361459][ T5793] usb usb1-port1: attempt power cycle [ 158.700305][ T5793] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 158.722628][ T5793] usb 1-1: no configurations [ 158.722649][ T5793] usb 1-1: can't read configurations, error -22 [ 158.723692][ T823] usb 3-1: USB disconnect, device number 23 [ 158.726568][ T823] em28xx 3-1:0.0: Disconnecting em28xx [ 158.770732][ T823] em28xx: Freeing device [ 158.849678][ T5793] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 158.872512][ T5793] usb 1-1: no configurations [ 158.872526][ T5793] usb 1-1: can't read configurations, error -22 [ 158.872891][ T5793] usb usb1-port1: unable to enumerate USB device [ 159.290105][ T5687] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 159.439704][ T5687] usb 3-1: Using ep0 maxpacket: 8 [ 159.441506][ T5687] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 159.441565][ T5687] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.441582][ T5687] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.441599][ T5687] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.441616][ T5687] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.441651][ T5687] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.441668][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.738145][ T5687] usb 3-1: GET_CAPABILITIES returned 0 [ 159.738180][ T5687] usbtmc 3-1:16.0: can't read capabilities [ 159.889627][ T5706] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 159.959557][ T823] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 160.044244][ T5603] Bluetooth: hci1: Malformed LE Event: 0x0b [ 160.046540][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.048654][ T5706] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 160.048690][ T5706] usb 2-1: can't read configurations, error -71 [ 160.109640][ T823] usb 4-1: Using ep0 maxpacket: 16 [ 160.111762][ T823] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 160.111793][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 160.116505][ T823] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 160.116533][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.116552][ T823] usb 4-1: Product: syz [ 160.116566][ T823] usb 4-1: Manufacturer: syz [ 160.116585][ T823] usb 4-1: SerialNumber: syz [ 160.126784][ T823] usb 4-1: config 0 descriptor?? [ 160.197274][ T823] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 160.197300][ T823] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 160.780126][ T823] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 160.781776][ T823] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 160.786119][ T823] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 160.786138][ T823] em28xx 4-1:0.0: No AC97 audio processor [ 161.159613][ T5687] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 161.313203][ T5687] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.313273][ T5687] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 161.313298][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.319335][ T5687] usb 1-1: config 0 descriptor?? [ 161.827292][ T5687] ath6kl: Failed to read usb control message: -32 [ 161.827347][ T5687] ath6kl: Unable to read the bmi data from the device: -32 [ 161.827364][ T5687] ath6kl: Unable to recv target info: -32 [ 161.833847][ T5687] ath6kl: Failed to init ath6kl core: -32 [ 161.892529][ T5687] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 162.067963][ T5580] usb 3-1: USB disconnect, device number 24 [ 162.269555][ T5687] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 162.419510][ T5687] usb 2-1: Using ep0 maxpacket: 32 [ 162.421603][ T5687] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 162.421631][ T5687] usb 2-1: config 0 has no interface number 0 [ 162.421678][ T5687] usb 2-1: config 0 interface 184 has no altsetting 0 [ 162.424153][ T5687] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 162.424182][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.424196][ T5687] usb 2-1: Product: syz [ 162.424207][ T5687] usb 2-1: Manufacturer: syz [ 162.424217][ T5687] usb 2-1: SerialNumber: syz [ 162.429198][ T5687] usb 2-1: config 0 descriptor?? [ 162.504705][ T5580] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 162.679694][ T5580] usb 3-1: Using ep0 maxpacket: 32 [ 162.684467][ T5580] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 162.684497][ T5580] usb 3-1: config 0 has no interface number 0 [ 162.687127][ T5580] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 162.687153][ T5580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.687216][ T5580] usb 3-1: Product: syz [ 162.687227][ T5580] usb 3-1: Manufacturer: syz [ 162.687237][ T5580] usb 3-1: SerialNumber: syz [ 162.756938][ T5580] usb 3-1: config 0 descriptor?? [ 162.826572][ T5793] usb 4-1: USB disconnect, device number 26 [ 162.855227][ T5793] em28xx 4-1:0.0: Disconnecting em28xx [ 162.973687][ T5687] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 162.973782][ T5687] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 162.973804][ T5687] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 162.974282][ T5687] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 163.127359][ T5793] em28xx: Freeing device [ 163.179590][ T5580] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 163.179623][ T5580] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 163.460119][ T5580] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 163.460359][ T5580] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 163.572458][ T5793] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 163.625787][ T5687] usb 3-1: USB disconnect, device number 25 [ 163.765929][ T5603] Bluetooth: hci0: Malformed LE Event: 0x0b [ 163.782801][ T5793] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.785261][ T5793] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 163.785287][ T5793] usb 4-1: can't read configurations, error -71 [ 163.951094][ T9] usb 1-1: USB disconnect, device number 24 [ 164.001538][ T5687] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 164.151619][ T5687] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.151640][ T5687] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 164.151666][ T5687] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 164.151683][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.157155][ T5687] usb 3-1: config 0 descriptor?? [ 164.391331][ T5687] usb 3-1: USB disconnect, device number 26 [ 164.900271][ T823] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 165.048209][ T5706] usb 2-1: USB disconnect, device number 28 [ 165.082286][ T823] usb 1-1: Using ep0 maxpacket: 8 [ 165.093616][ T823] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 165.093773][ T823] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.093837][ T823] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.093910][ T823] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.093967][ T823] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.094078][ T823] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.094147][ T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.289576][ T5793] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 165.353945][ T823] usb 1-1: GET_CAPABILITIES returned 0 [ 165.353994][ T823] usbtmc 1-1:16.0: can't read capabilities [ 165.451077][ T5793] usb 3-1: Using ep0 maxpacket: 16 [ 165.457719][ T5793] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 165.457769][ T5793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.492088][ T5793] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 165.492118][ T5793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.492138][ T5793] usb 3-1: Product: syz [ 165.492152][ T5793] usb 3-1: Manufacturer: syz [ 165.492167][ T5793] usb 3-1: SerialNumber: syz [ 165.553732][ T5793] usb 3-1: config 0 descriptor?? [ 165.571874][ T5793] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 165.571900][ T5793] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 166.015323][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.016307][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.022515][ T5580] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 166.176213][ T5793] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 166.177004][ T5793] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 166.177560][ T5793] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 166.177572][ T5793] em28xx 3-1:0.0: No AC97 audio processor [ 166.238791][ T5603] Bluetooth: hci1: Malformed LE Event: 0x0b [ 166.256269][ T5580] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.265148][ T5580] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 166.265247][ T5580] usb 2-1: can't read configurations, error -71 [ 166.283591][ T5706] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 166.431753][ T5706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.431782][ T5706] usb 4-1: config 0 has no interfaces? [ 166.431812][ T5706] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 166.431837][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.473985][ T5706] usb 4-1: config 0 descriptor?? [ 166.695061][ T5793] usb 4-1: USB disconnect, device number 29 [ 166.835517][ T6480] FAULT_INJECTION: forcing a failure. [ 166.835517][ T6480] name failslab, interval 1, probability 0, space 0, times 0 [ 166.835545][ T6480] CPU: 0 UID: 0 PID: 6480 Comm: syz.1.260 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 166.835563][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 166.835572][ T6480] Call Trace: [ 166.835578][ T6480] [ 166.835584][ T6480] dump_stack_lvl+0xe8/0x150 [ 166.835609][ T6480] should_fail_ex+0x467/0x600 [ 166.835633][ T6480] should_failslab+0xa8/0x100 [ 166.835650][ T6480] __kmalloc_noprof+0xfb/0x790 [ 166.835672][ T6480] ? vb2_core_reqbufs+0x9a3/0x1470 [ 166.835693][ T6480] ? vb2_core_reqbufs+0x9a3/0x1470 [ 166.835720][ T6480] vb2_core_reqbufs+0x9a3/0x1470 [ 166.835753][ T6480] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 166.835779][ T6480] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 166.835802][ T6480] ? __vb2_init_fileio+0x1e2/0x1040 [ 166.835831][ T6480] __vb2_init_fileio+0x310/0x1040 [ 166.835866][ T6480] vb2_core_poll+0x44b/0x7b0 [ 166.835889][ T6480] ? vb2_fop_poll+0xce/0x310 [ 166.835915][ T6480] vb2_fop_poll+0x19c/0x310 [ 166.835941][ T6480] ? __pfx_vb2_fop_poll+0x10/0x10 [ 166.835965][ T6480] v4l2_poll+0x14a/0x2c0 [ 166.835993][ T6480] ? __pfx_v4l2_poll+0x10/0x10 [ 166.836017][ T6480] do_sys_poll+0x92e/0xf50 [ 166.836030][ T6480] ? lock_acquire+0x115/0x350 [ 166.836064][ T6480] ? do_sys_poll+0x3c1/0xf50 [ 166.836082][ T6480] ? __pfx_do_sys_poll+0x10/0x10 [ 166.836097][ T6480] ? is_bpf_text_address+0x26/0x2b0 [ 166.836118][ T6480] ? kernel_text_address+0xa5/0xe0 [ 166.836147][ T6480] ? __pfx_pollwake+0x10/0x10 [ 166.836174][ T6480] ? __pfx_pollwake+0x10/0x10 [ 166.836201][ T6480] ? __pfx_pollwake+0x10/0x10 [ 166.836228][ T6480] ? __pfx_pollwake+0x10/0x10 [ 166.836255][ T6480] ? __pfx_pollwake+0x10/0x10 [ 166.836281][ T6480] ? __pfx_pollwake+0x10/0x10 [ 166.836308][ T6480] ? __pfx_pollwake+0x10/0x10 [ 166.836335][ T6480] ? __pfx_pollwake+0x10/0x10 [ 166.836362][ T6480] ? __pfx_pollwake+0x10/0x10 [ 166.836414][ T6480] ? set_user_sigmask+0xcd/0x1c0 [ 166.836432][ T6480] ? __pfx_set_user_sigmask+0x10/0x10 [ 166.836449][ T6480] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 166.836500][ T6480] __se_sys_ppoll+0x209/0x2b0 [ 166.836535][ T6480] ? fput+0xa0/0xd0 [ 166.836572][ T6480] ? __pfx___se_sys_ppoll+0x10/0x10 [ 166.836611][ T6480] ? __pfx_ksys_write+0x10/0x10 [ 166.836634][ T6480] ? __x64_sys_ppoll+0x20/0xc0 [ 166.836660][ T6480] do_syscall_64+0x17b/0x530 [ 166.836675][ T6480] ? irqentry_exit+0x10f/0x8f0 [ 166.836690][ T6480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.836707][ T6480] ? clear_bhb_loop+0x40/0x90 [ 166.836726][ T6480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.836742][ T6480] RIP: 0033:0x7f6c0478de99 [ 166.836756][ T6480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.836769][ T6480] RSP: 002b:00007f6c029e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 166.836797][ T6480] RAX: ffffffffffffffda RBX: 00007f6c04a15fa0 RCX: 00007f6c0478de99 [ 166.836808][ T6480] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 166.836818][ T6480] RBP: 00007f6c029e6090 R08: 0000000000000000 R09: 0000000000000000 [ 166.836828][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.836836][ T6480] R13: 00007f6c04a16038 R14: 00007f6c04a15fa0 R15: 00007fff05154158 [ 166.836859][ T6480] [ 167.674257][ T823] usb 1-1: USB disconnect, device number 25 [ 167.810254][ T5706] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 167.981828][ T5706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.981858][ T5706] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 167.981898][ T5706] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 167.981915][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.033282][ T5706] usb 2-1: config 0 descriptor?? [ 168.063812][ T5706] usb 3-1: USB disconnect, device number 27 [ 168.087029][ T5706] em28xx 3-1:0.0: Disconnecting em28xx [ 168.113770][ T5706] em28xx: Freeing device [ 168.241985][ T6493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.264'. [ 168.259951][ T5580] usb 2-1: USB disconnect, device number 31 [ 168.578942][ T6504] binder: BINDER_SET_CONTEXT_MGR already set [ 168.578959][ T6504] binder: 6503:6504 ioctl 40046207 0 returned -16 [ 168.591904][ T6504] netlink: 'syz.2.269': attribute type 1 has an invalid length. [ 169.079978][ T5580] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 169.231513][ T5580] usb 4-1: Using ep0 maxpacket: 8 [ 169.243809][ T5580] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 169.243870][ T5580] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.243895][ T5580] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.243922][ T5580] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.243948][ T5580] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.243993][ T5580] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.244017][ T5580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.371713][ T5706] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 169.524358][ T5706] usb 1-1: Using ep0 maxpacket: 16 [ 169.548329][ T5706] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 169.548366][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 169.588374][ T5706] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 169.588406][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.588428][ T5706] usb 1-1: Product: syz [ 169.588442][ T5706] usb 1-1: Manufacturer: syz [ 169.588457][ T5706] usb 1-1: SerialNumber: syz [ 169.622559][ T6531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.274'. [ 169.663267][ T5706] usb 1-1: config 0 descriptor?? [ 169.697419][ T5706] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 169.697452][ T5706] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 169.734524][ T5580] usb 4-1: GET_CAPABILITIES returned 0 [ 169.734567][ T5580] usbtmc 4-1:16.0: can't read capabilities [ 170.303088][ T5706] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 170.303811][ T5706] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 170.306875][ T5706] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 170.306894][ T5706] em28xx 1-1:0.0: No AC97 audio processor [ 170.689639][ T823] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 170.855478][ T823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.855506][ T823] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.855543][ T823] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 170.855566][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.898328][ T823] usb 2-1: config 0 descriptor?? [ 171.028682][ T6564] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 171.043428][ T6564] VFS: Can't find a romfs filesystem on dev nullb0. [ 171.043428][ T6564] [ 171.087525][ T6564] tipc: Can't bind to reserved service type 2 [ 171.117874][ T200] usb 2-1: USB disconnect, device number 32 [ 171.770710][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.283'. [ 171.892559][ T200] usb 4-1: USB disconnect, device number 30 [ 172.010471][ T6588] FAULT_INJECTION: forcing a failure. [ 172.010471][ T6588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.010507][ T6588] CPU: 1 UID: 0 PID: 6588 Comm: syz.2.284 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.010531][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 172.010544][ T6588] Call Trace: [ 172.010552][ T6588] [ 172.010561][ T6588] dump_stack_lvl+0xe8/0x150 [ 172.010604][ T6588] should_fail_ex+0x467/0x600 [ 172.010639][ T6588] _copy_to_user+0x31/0xb0 [ 172.010663][ T6588] simple_read_from_buffer+0xe1/0x170 [ 172.010693][ T6588] proc_fail_nth_read+0x1be/0x230 [ 172.010720][ T6588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.010748][ T6588] ? rw_verify_area+0x250/0x4d0 [ 172.010776][ T6588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.010800][ T6588] vfs_read+0x219/0xa90 [ 172.010834][ T6588] ? __pfx_vfs_read+0x10/0x10 [ 172.010867][ T6588] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 172.010891][ T6588] ? lockdep_hardirqs_on+0x7a/0x110 [ 172.010913][ T6588] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 172.010935][ T6588] ? mutex_lock_nested+0x152/0x1d0 [ 172.010963][ T6588] ? fdget_pos+0x252/0x320 [ 172.010995][ T6588] ksys_read+0x156/0x270 [ 172.011020][ T6588] ? __pfx_ksys_read+0x10/0x10 [ 172.011047][ T6588] do_syscall_64+0x17b/0x530 [ 172.011065][ T6588] ? irqentry_exit+0x10f/0x8f0 [ 172.011082][ T6588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.011101][ T6588] ? clear_bhb_loop+0x40/0x90 [ 172.011124][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.011143][ T6588] RIP: 0033:0x7fb96130e6ce [ 172.011161][ T6588] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 172.011177][ T6588] RSP: 002b:00007fb95f584fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.011198][ T6588] RAX: ffffffffffffffda RBX: 00007fb95f5856c0 RCX: 00007fb96130e6ce [ 172.011212][ T6588] RDX: 000000000000000f RSI: 00007fb95f5850a0 RDI: 0000000000000006 [ 172.011223][ T6588] RBP: 00007fb95f585090 R08: 0000000000000000 R09: 0000000000000000 [ 172.011234][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.011244][ T6588] R13: 00007fb9615d6128 R14: 00007fb9615d6090 R15: 00007ffe9db7b348 [ 172.011274][ T6588] [ 172.342951][ T200] usb 1-1: USB disconnect, device number 26 [ 172.345425][ T200] em28xx 1-1:0.0: Disconnecting em28xx [ 172.369798][ T200] em28xx: Freeing device [ 173.040726][ T37] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 173.205006][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.205040][ T37] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 173.205084][ T37] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 173.205124][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.212877][ T5580] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 173.359527][ T5580] usb 4-1: Using ep0 maxpacket: 8 [ 173.361808][ T5580] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 173.361878][ T5580] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.361895][ T5580] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.361913][ T5580] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.361949][ T5580] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.361993][ T5580] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.362018][ T5580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.484029][ T37] usb 2-1: USB disconnect, device number 33 [ 173.890270][ T5706] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 173.966351][ T38] audit: type=1326 audit(1785314092.143:2): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6612 comm="syz.0.295" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9deb2ade99 code=0x0 [ 174.049715][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 174.059172][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 174.059218][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 174.075514][ T5706] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 174.075548][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.075569][ T5706] usb 3-1: Product: syz [ 174.075583][ T5706] usb 3-1: Manufacturer: syz [ 174.075598][ T5706] usb 3-1: SerialNumber: syz [ 174.132397][ T5706] usb 3-1: config 0 descriptor?? [ 174.152772][ T5706] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 174.152809][ T5706] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 174.232448][ T5603] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 174.744787][ T5706] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 174.745696][ T5706] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 174.829620][ T823] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 174.885211][ T6626] mmap: syz.0.300 (6626): VmData 37597184 exceed data ulimit 262144. Update limits or use boot option ignore_rlimit_data. [ 174.947089][ T5706] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 174.947112][ T5706] em28xx 3-1:0.0: No AC97 audio processor [ 174.991543][ T823] usb 2-1: Using ep0 maxpacket: 16 [ 174.996219][ T823] usb 2-1: config 206 has an invalid interface number: 66 but max is 0 [ 174.996246][ T823] usb 2-1: config 206 has no interface number 0 [ 174.996292][ T823] usb 2-1: config 206 interface 66 has no altsetting 0 [ 175.012000][ T823] usb 2-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=d7.81 [ 175.012029][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.012058][ T823] usb 2-1: Product: syz [ 175.012074][ T823] usb 2-1: Manufacturer: syz [ 175.012088][ T823] usb 2-1: SerialNumber: syz [ 175.296784][ T823] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 175.296842][ T823] dw2102: su3000_power_ctrl: 1, initialized 0 [ 175.299100][ T823] dvb-usb: bulk message failed: -22 (2/0) [ 175.336028][ T823] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.337129][ T823] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 175.337207][ T823] usb 2-1: media controller created [ 175.337656][ T823] dvb-usb: bulk message failed: -22 (6/0) [ 175.337669][ T823] dw2102: i2c transfer failed. [ 175.337682][ T823] dvb-usb: bulk message failed: -22 (6/0) [ 175.337691][ T823] dw2102: i2c transfer failed. [ 175.337702][ T823] dvb-usb: bulk message failed: -22 (6/0) [ 175.337712][ T823] dw2102: i2c transfer failed. [ 175.337723][ T823] dvb-usb: bulk message failed: -22 (6/0) [ 175.337732][ T823] dw2102: i2c transfer failed. [ 175.337743][ T823] dvb-usb: bulk message failed: -22 (6/0) [ 175.337752][ T823] dw2102: i2c transfer failed. [ 175.337763][ T823] dvb-usb: bulk message failed: -22 (6/0) [ 175.337772][ T823] dw2102: i2c transfer failed. [ 175.337779][ T823] dvb-usb: MAC address: 02:02:02:02:02:02 [ 175.460975][ T823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.501766][ T823] dvb-usb: bulk message failed: -22 (1/0) [ 175.501783][ T823] dw2102: command 0x51 transfer failed. [ 175.546628][ T823] DVB: Unable to find symbol m88rs2000_attach() [ 175.546640][ T823] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 175.629584][ T823] rc_core: IR keymap rc-su3000 not found [ 175.629606][ T823] Registered IR keymap rc-empty [ 175.632698][ T823] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 175.635588][ T823] input: TeVii S632 USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input6 [ 175.689628][ T823] dvb-usb: schedule remote query interval to 150 msecs. [ 175.689645][ T823] dw2102: su3000_power_ctrl: 0, initialized 1 [ 175.689655][ T823] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 175.721434][ T823] usb 2-1: USB disconnect, device number 34 [ 176.006045][ T823] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 176.029957][ T5687] usb 4-1: USB disconnect, device number 31 [ 176.258172][ T5610] do_umount: task=syz-executor[5610] propagate_mount_busy()!=0 [ 176.258493][ T5610] do_umount: task=syz-executor[5610] propagate_mount_busy()!=0 [ 176.537463][ T5687] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 176.685474][ T6020] usb 3-1: USB disconnect, device number 28 [ 176.687578][ T6020] em28xx 3-1:0.0: Disconnecting em28xx [ 176.698986][ T6020] em28xx: Freeing device [ 176.713058][ T823] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 176.724672][ T5687] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.724700][ T5687] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 176.724743][ T5687] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 176.724766][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.863275][ T6648] FAULT_INJECTION: forcing a failure. [ 176.863275][ T6648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.863321][ T6648] CPU: 0 UID: 0 PID: 6648 Comm: syz.2.309 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.863345][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 176.863362][ T6648] Call Trace: [ 176.863370][ T6648] [ 176.863380][ T6648] dump_stack_lvl+0xe8/0x150 [ 176.863412][ T6648] should_fail_ex+0x467/0x600 [ 176.863446][ T6648] _copy_from_user+0x2d/0xb0 [ 176.863468][ T6648] hci_get_conn_info+0xb3/0x2f0 [ 176.863499][ T6648] ? __pfx_hci_get_conn_info+0x10/0x10 [ 176.863549][ T6648] hci_sock_ioctl+0x892/0x940 [ 176.863583][ T6648] sock_do_ioctl+0x101/0x320 [ 176.863611][ T6648] ? __pfx_sock_do_ioctl+0x10/0x10 [ 176.863638][ T6648] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.863673][ T6648] sock_ioctl+0x57d/0x7f0 [ 176.863699][ T6648] ? __pfx_sock_ioctl+0x10/0x10 [ 176.863727][ T6648] ? __fget_files+0x3a8/0x420 [ 176.863754][ T6648] ? __fget_files+0x2a/0x420 [ 176.863784][ T6648] ? bpf_lsm_file_ioctl+0x9/0x20 [ 176.863817][ T6648] ? __pfx_sock_ioctl+0x10/0x10 [ 176.863838][ T6648] __se_sys_ioctl+0xff/0x170 [ 176.863870][ T6648] do_syscall_64+0x17b/0x530 [ 176.863891][ T6648] ? irqentry_exit+0x10f/0x8f0 [ 176.863912][ T6648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.863934][ T6648] ? clear_bhb_loop+0x40/0x90 [ 176.863961][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.863983][ T6648] RIP: 0033:0x7fb96134de99 [ 176.864002][ T6648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.864020][ T6648] RSP: 002b:00007fb95f5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.864043][ T6648] RAX: ffffffffffffffda RBX: 00007fb9615d5fa0 RCX: 00007fb96134de99 [ 176.864059][ T6648] RDX: 00002000000000c0 RSI: 00000000800448d5 RDI: 0000000000000004 [ 176.864073][ T6648] RBP: 00007fb95f5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.864086][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.864098][ T6648] R13: 00007fb9615d6038 R14: 00007fb9615d5fa0 R15: 00007ffe9db7b348 [ 176.864129][ T6648] [ 176.880078][ T823] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.880113][ T823] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.880137][ T823] usb 2-1: config 0 interface 0 has no altsetting 0 [ 176.880171][ T823] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 176.880195][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.905862][ T823] usb 2-1: config 0 descriptor?? [ 177.302621][ T5694] usb 4-1: USB disconnect, device number 32 [ 177.809634][ T5580] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 177.972620][ T5580] usb 3-1: config 1 has an invalid interface descriptor of length 4, skipping [ 177.972649][ T5580] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.972677][ T5580] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.975624][ T5580] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 177.975661][ T5580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.975683][ T5580] usb 3-1: Product: syz [ 177.975699][ T5580] usb 3-1: Manufacturer: syz [ 177.975715][ T5580] usb 3-1: SerialNumber: syz [ 178.095029][ T5580] usb 3-1: invalid UAC_HEADER (v1) [ 178.242324][ T5580] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 178.313646][ T5673] udevd[5673]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.329508][ T5687] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 178.482398][ T5687] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 178.482428][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.529091][ T5687] usb 4-1: USB2VGA dongle found at address 33 [ 178.561090][ T5687] usb 4-1: Allocated 8 output buffers [ 178.758488][ T2274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.195636][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.285212][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.296800][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.370161][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.371815][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.089102][ T6652] netlink: 4740 bytes leftover after parsing attributes in process `syz.2.311'. [ 180.093865][ T823] usbhid 2-1:0.0: can't add hid device: -71 [ 180.094055][ T823] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 180.135393][ T823] usb 2-1: USB disconnect, device number 35 [ 180.875064][ T823] usb 3-1: USB disconnect, device number 29 [ 180.877651][ T5687] usb 4-1: Failed to early initialize device [ 180.966144][ T5687] usb 4-1: USB disconnect, device number 33 [ 181.041359][ T2274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.459518][ T2274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.889870][ T5603] Bluetooth: hci3: command tx timeout [ 182.052810][ T37] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 182.053003][ T823] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 182.089931][ T2274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.199604][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 182.206042][ T37] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 182.206075][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.240047][ T37] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 182.240079][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.240102][ T37] usb 3-1: Product: syz [ 182.240117][ T37] usb 3-1: Manufacturer: syz [ 182.240133][ T37] usb 3-1: SerialNumber: syz [ 182.292953][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.293002][ T823] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 182.293026][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.339786][ T37] usb 3-1: config 0 descriptor?? [ 182.374628][ T823] usb 4-1: config 0 descriptor?? [ 182.388258][ T37] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 182.388294][ T37] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 182.604165][ T823] usbhid 4-1:0.0: can't add hid device: -71 [ 182.604606][ T823] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 182.656632][ T823] usb 4-1: USB disconnect, device number 34 [ 182.967807][ T37] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 182.968575][ T37] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 183.068869][ T6717] netlink: 'syz.1.321': attribute type 10 has an invalid length. [ 183.172632][ T37] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 183.172653][ T37] em28xx 3-1:0.0: No AC97 audio processor [ 183.230112][ T823] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 183.373067][ T6717] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 183.406914][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.406963][ T823] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 183.406986][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.454911][ T823] usb 4-1: config 0 descriptor?? [ 183.969659][ T5603] Bluetooth: hci3: command tx timeout [ 184.030623][ T2274] bridge_slave_1: left allmulticast mode [ 184.030751][ T2274] bridge_slave_1: left promiscuous mode [ 184.039275][ T2274] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.089635][ T5706] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 184.235749][ T2274] bridge_slave_0: left allmulticast mode [ 184.235776][ T2274] bridge_slave_0: left promiscuous mode [ 184.236021][ T2274] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.265717][ T5706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.265744][ T5706] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 184.265783][ T5706] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 184.265806][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.310687][ T823] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 184.318445][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.319073][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.349702][ T823] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 184.582959][ T5687] usb 2-1: USB disconnect, device number 36 [ 184.764692][ T823] usb 4-1: USB disconnect, device number 35 [ 184.764773][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 184.844867][ T37] usb 3-1: USB disconnect, device number 30 [ 184.859406][ T37] em28xx 3-1:0.0: Disconnecting em28xx [ 184.886778][ T37] em28xx: Freeing device [ 185.046644][ T6736] netlink: 'syz.2.323': attribute type 16 has an invalid length. [ 185.117740][ T6737] netlink: 'syz.2.323': attribute type 21 has an invalid length. [ 185.177649][ T6738] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 186.049631][ T5603] Bluetooth: hci3: command tx timeout [ 186.213241][ T2274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.290354][ T2274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.342920][ T2274] bond0 (unregistering): Released all slaves [ 186.453941][ T6737] netlink: 'syz.2.323': attribute type 6 has an invalid length. [ 186.453965][ T6737] netlink: 132 bytes leftover after parsing attributes in process `syz.2.323'. [ 187.071970][ T5687] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 187.090100][ T5706] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 187.090295][ T823] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 187.133588][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.134054][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.134346][ T6660] bridge_slave_0: entered allmulticast mode [ 187.138294][ T6660] bridge_slave_0: entered promiscuous mode [ 187.219555][ T5687] usb 2-1: Using ep0 maxpacket: 16 [ 187.222037][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 187.222086][ T5687] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 187.222112][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.264426][ T5687] usb 2-1: config 0 descriptor?? [ 187.269495][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 187.284271][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 187.284305][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 187.316350][ T823] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 187.316620][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.319115][ T5706] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 187.319144][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.319166][ T5706] usb 3-1: Product: syz [ 187.319181][ T5706] usb 3-1: Manufacturer: syz [ 187.319196][ T5706] usb 3-1: SerialNumber: syz [ 187.401256][ T5706] usb 3-1: config 0 descriptor?? [ 187.456128][ T823] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 187.514311][ T5706] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 187.514348][ T5706] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 187.668824][ T823] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 187.668912][ T823] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 187.788988][ T5687] playstation 0003:054C:0BA0.0001: unknown main item tag 0x4 [ 187.789157][ T5687] playstation 0003:054C:0BA0.0001: reserved main item tag 0xd [ 187.965946][ T5687] playstation 0003:054C:0BA0.0001: hidraw0: USB HID v9.42 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 188.064323][ T5706] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 188.066146][ T5706] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 188.131149][ T5603] Bluetooth: hci3: command tx timeout [ 188.196840][ T5687] playstation 0003:054C:0BA0.0001: Invalid reportID received, expected 18 got 11 [ 188.196943][ T5687] playstation 0003:054C:0BA0.0001: Failed to retrieve DualShock4 pairing info: -22 [ 188.197000][ T5687] playstation 0003:054C:0BA0.0001: Failed to get MAC address from DualShock4 [ 188.197017][ T5687] playstation 0003:054C:0BA0.0001: Failed to create dualshock4. [ 188.286062][ T5706] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 188.286084][ T5706] em28xx 3-1:0.0: No AC97 audio processor [ 188.522843][ T5687] playstation 0003:054C:0BA0.0001: probe with driver playstation failed with error -22 [ 188.561904][ T6782] capability: warning: `syz.1.333' uses 32-bit capabilities (legacy support in use) [ 188.590330][ T5687] usb 2-1: USB disconnect, device number 37 [ 188.632782][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.633225][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.633539][ T6660] bridge_slave_1: entered allmulticast mode [ 188.674496][ T6660] bridge_slave_1: entered promiscuous mode [ 188.711244][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 189.265245][ T6790] syzkaller1: entered promiscuous mode [ 189.265271][ T6790] syzkaller1: entered allmulticast mode [ 189.334465][ T6660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.367241][ T6660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.808997][ T5706] usb 3-1: USB disconnect, device number 31 [ 189.819191][ T5706] em28xx 3-1:0.0: Disconnecting em28xx [ 189.860495][ T5706] em28xx: Freeing device [ 190.030984][ T6660] team0: Port device team_slave_0 added [ 190.193016][ T6660] team0: Port device team_slave_1 added [ 190.392885][ T6660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.392899][ T6660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.392918][ T6660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.396898][ T6660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.396909][ T6660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.396929][ T6660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.549607][ T5580] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 190.689685][ T2274] hsr_slave_0: left promiscuous mode [ 190.708873][ T5580] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 190.708906][ T5580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.729522][ T2274] hsr_slave_1: left promiscuous mode [ 190.764730][ T2274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.764840][ T2274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.768323][ T5580] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 190.820118][ T2274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.820141][ T2274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.968410][ T5580] Oops: genera[ 190.968410][ T5580] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 190.968437][ T5580] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 190.968462][ T5580] CPU: 0 UID: 0 PID: 5580 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 190.968488][ T5580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 190.968502][ T5580] Workqueue: usb_hub_wq hub_event [ 190.968536][ T5580] RIP: 0010:emi26_probe+0x283/0x1690 [ 190.968561][ T5580] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 190.968581][ T5580] RSP: 0018:ffffc90004c5ed20 EFLAGS: 00010247 [ 190.968600][ T5580] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 190.968616][ T5580] RDX: ffffc9001a81d000 RSI: 000000000000e12b RDI: 0000000000000004 [ 190.968631][ T5580] RBP: ffffc90004c5ee50 R08: 0000000000000000 R09: 0000000000000000 [ 190.968646][ T5580] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 190.968663][ T5580] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 190.968679][ T5580] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 190.968697][ T5580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.968713][ T5580] CR2: 000000110c42ae87 CR3: 000000003af9e000 CR4: 00000000003526f0 [ 190.968732][ T5580] Call Trace: [ 190.968741][ T5580] [ 190.968755][ T5580] ? __pfx_emi26_probe+0x10/0x10 [ 190.968779][ T5580] ? __pm_runtime_set_status+0x977/0xc40 [ 190.968811][ T5580] usb_probe_interface+0x788/0xe50 [ 190.968848][ T5580] ? __pfx_usb_probe_interface+0x10/0x10 [ 190.968880][ T5580] ? sysfs_do_create_link_sd+0xe0/0x110 [ 190.968903][ T5580] ? driver_sysfs_add+0x1fe/0x210 [ 190.968934][ T5580] ? __pfx_usb_probe_interface+0x10/0x10 [ 190.968963][ T5580] really_probe+0x254/0xae0 [ 190.968992][ T5580] __driver_probe_device+0x1e8/0x360 [ 190.969019][ T5580] driver_probe_device+0x4f/0x240 [ 190.969048][ T5580] __device_attach_driver+0x270/0x410 [ 190.969078][ T5580] bus_for_each_drv+0x25b/0x2f0 [ 190.969111][ T5580] ? __pfx___device_attach_driver+0x10/0x10 [ 190.969137][ T5580] ? __pfx_bus_for_each_drv+0x10/0x10 [ 190.969169][ T5580] ? rt_spin_unlock+0x163/0x200 [ 190.969200][ T5580] __device_attach+0x2c7/0x450 [ 190.969224][ T5580] ? rt_spin_unlock+0x157/0x200 [ 190.969262][ T5580] ? __pfx___device_attach+0x10/0x10 [ 190.969292][ T5580] device_initial_probe+0xa1/0xd0 [ 190.969318][ T5580] bus_probe_device+0x12d/0x220 [ 190.969353][ T5580] device_add+0x7d7/0xb80 [ 190.969376][ T5580] usb_set_configuration+0x1ad8/0x2180 [ 190.969416][ T5580] usb_generic_driver_probe+0x8d/0x150 [ 190.969446][ T5580] usb_probe_device+0x1c3/0x3b0 [ 190.969477][ T5580] ? __pfx_usb_probe_device+0x10/0x10 [ 190.969505][ T5580] really_probe+0x254/0xae0 [ 190.969534][ T5580] __driver_probe_device+0x1e8/0x360 [ 190.969559][ T5580] driver_probe_device+0x4f/0x240 [ 190.969588][ T5580] __device_attach_driver+0x270/0x410 [ 190.969617][ T5580] bus_for_each_drv+0x25b/0x2f0 [ 190.969649][ T5580] ? __pfx___device_attach_driver+0x10/0x10 [ 190.969682][ T5580] ? __pfx_bus_for_each_drv+0x10/0x10 [ 190.969717][ T5580] ? rt_spin_unlock+0x163/0x200 [ 190.969749][ T5580] __device_attach+0x2c7/0x450 [ 190.969776][ T5580] ? __pfx___device_attach+0x10/0x10 [ 190.969806][ T5580] device_initial_probe+0xa1/0xd0 [ 190.969833][ T5580] bus_probe_device+0x12d/0x220 [ 190.969868][ T5580] device_add+0x7d7/0xb80 [ 190.969891][ T5580] usb_new_device+0x98d/0x1610 [ 190.969912][ T5580] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 190.969936][ T5580] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 190.969965][ T5580] ? __pfx_usb_new_device+0x10/0x10 [ 190.969992][ T5580] hub_event+0x28cf/0x4cf0 [ 190.970042][ T5580] ? __pfx_hub_event+0x10/0x10 [ 190.970071][ T5580] ? rcu_is_watching+0x15/0xb0 [ 190.970096][ T5580] ? process_one_work+0x7fd/0x1480 [ 190.970118][ T5580] process_one_work+0xaaf/0x1480 [ 190.970150][ T5580] ? __pfx_process_one_work+0x10/0x10 [ 190.970170][ T5580] ? do_raw_spin_lock+0x12b/0x2f0 [ 190.970203][ T5580] ? assign_work+0x3cf/0x5d0 [ 190.970226][ T5580] worker_thread+0xb05/0x10d0 [ 190.970263][ T5580] ? __kthread_parkme+0x71/0x1f0 [ 190.970294][ T5580] kthread+0x388/0x470 [ 190.970324][ T5580] ? __pfx_worker_thread+0x10/0x10 [ 190.970346][ T5580] ? __pfx_kthread+0x10/0x10 [ 190.970375][ T5580] ret_from_fork+0x514/0xb70 [ 190.970407][ T5580] ? __pfx_ret_from_fork+0x10/0x10 [ 190.970436][ T5580] ? __switch_to+0xc89/0x1420 [ 190.970462][ T5580] ? __pfx_kthread+0x10/0x10 [ 190.970491][ T5580] ret_from_fork_asm+0x1a/0x30 [ 190.970529][ T5580] [ 190.970537][ T5580] Modules linked in: [ 190.970629][ T5580] ---[ end trace 0000000000000000 ]--- [ 190.973717][ T5580] RIP: 0010:emi26_probe+0x283/0x1690 [ 190.973746][ T5580] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 190.973766][ T5580] RSP: 0018:ffffc90004c5ed20 EFLAGS: 00010247 [ 190.973786][ T5580] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 190.973801][ T5580] RDX: ffffc9001a81d000 RSI: 000000000000e12b RDI: 0000000000000004 [ 190.973815][ T5580] RBP: ffffc90004c5ee50 R08: 0000000000000000 R09: 0000000000000000 [ 190.973830][ T5580] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 190.973846][ T5580] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 190.973862][ T5580] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 190.973881][ T5580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.973886][ T2274] veth1_macvtap: left promiscuous mode [ 190.973897][ T5580] CR2: 000000110c42ae87 CR3: 000000003af9e000 CR4: 00000000003526f0 [ 190.973918][ T5580] Kernel panic - not syncing: Fatal exception [ 190.974507][ T5580] Kernel Offset: disabled