last executing test programs: 6.939712703s ago: executing program 3 (id=201): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x51, 0x1, 0x2, "08000000ff0b57e386b7080000000d0000004d00", 0x31364d4e}) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000)=0x20800000, 0x4) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000200)={0x0, 0x7, 0x1}) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000002c0)={0x4, @pix={0x7287, 0x2, 0x43564548, 0x0, 0x0, 0x4, 0xa, 0x80000001, 0x1, 0x6, 0x0, 0x1}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r6, r8, r9) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r10, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000010000500000000002000000000000000"], 0x24, 0x1) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6c, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 6.658170723s ago: executing program 3 (id=205): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000c80)={0x2c, &(0x7f0000001340)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2, 0x244c, 0x7, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000000)={{@host}, 0x200006000000, 0x0, 0x0, 0xfffffffc}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x1}}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) 5.736005348s ago: executing program 2 (id=210): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="60343800000038046d6c6f7c5bfbd0567a20a619e420f83235273de9f69a1f619fa183282f1903616d05c5b20651e15c2106663cb3828c87fe215186c6c36f859b57d7ec25a021bcb3f9960a5c9d3627ea21603e3d59a31a81820fab9a6a1321ead476f24f575c9e82ec058657b2f41ca5589ec6b4acba9a65cffe3ad047ad5a06956aa303f923aee9df7b792c762cad7b2de590"], &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=ANY=[@ANYBLOB="00221000000092b0c27bc8df08838cae0d2cee320352"], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x440}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00306a000000fd76ddd8d87997ad66e113f752a0a7e4cea5871bae18472099d57282543469dc45a2235ef8334b975cd998658e2ceb9ee7e09a6ecb45f4db75083a6ac63f0cacdf84f755e6f2dd8174a5def2d39adc6362b905c58125d42dafb2e8bf382785ba9674e2f3bd963200"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x4}}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001440)={&(0x7f00000014c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf2509000000500001801400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="0800030011000000081803000500000008000100", @ANYRES32=0x0, @ANYBLOB="080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000020000180080003000100000014000200766c616e3000000000000000000000006400018008000300020000001400020069703665727370616e300000000000001400020067656e6576653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001f000100ea1517c3bfeb1fbb3993e510b9c6d3706e68397f3ed24e7ad905d287da047409cd3ead0f3cf15e2b4403e9635d3fe4b9aefd9e4d1b24686ba141540c796342ab4c5426f6ff810a614dbdb7ae9a1f301d30008c3cb8042ef61d014e259c87da466d0526efdc6c22fee504d950a2a33f02a7405ecee0a17886e30b9a00e7babdce21906e72068240a552a4de8a20ca80b2d32253127aee28bd4b51fca1680708810fa63c519e9a3c0776861dd070baf802492547769491ffdf1cf6c18fdf68d46aadcdf248d1c3cebed3ca836ff8", @ANYRES32=0x0, @ANYBLOB="080003000100000008000300010000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300040000000800030004000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020063616966300000000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="48000180140002006c6f000000000000000000000000000008000100", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000000800030002000000140002006261746164765f736c6176655f300000140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000180080003000300000008000300020000004c0001800800030001000000140002006c6f000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006e72300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c0001800800030002000000"], 0x270}, 0x1, 0x0, 0x0, 0x20024840}, 0x20000081) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@any, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x3, 0x8, 0x0, 0x4}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES32], 0x48}}, 0x0) 5.032089115s ago: executing program 2 (id=219): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x40002002, 0x0) sendmmsg$unix(r0, &(0x7f000000c400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x1, 0x40950) 4.131608712s ago: executing program 3 (id=229): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x2, 0x1, 0xf, 0x9, r1}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 3.952592244s ago: executing program 3 (id=230): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_getoverrun(r0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000140)={0x9, 0x1, &(0x7f0000000040)=[0x9], &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000280)}) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x0, 0xa}}) r3 = semget$private(0x0, 0x4000000009, 0x208) semop(r3, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semop(r3, &(0x7f0000000000)=[{0x1, 0xfffb}, {0x0, 0x4, 0x1000}, {0x4, 0x1ff}, {0x1, 0x7, 0x3800}, {0x7, 0x3, 0x1000}, {0x1, 0xb, 0x1000}, {0x0, 0x86, 0x3800}], 0x1f) r4 = semget(0x0, 0x2, 0x39c) semop(r4, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r4, &(0x7f0000000100)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) semop(r4, &(0x7f0000000340)=[{0x2, 0x3503}, {0x4, 0x6, 0x1800}, {0x3, 0x40}, {0x1, 0x89d, 0x800}, {0x0, 0x2}], 0x5) semctl$IPC_RMID(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x5, &(0x7f0000000240)={0x0, 0x24, 0x0, @thr={&(0x7f0000000100)="c0b75a641b61e054f12bc9dde9a71a5fd5e66a75fbd1455fc77bc792cc58d80b2acb1cec259aba884ef7867d158ab55359564307eefc82c472cb3273ef303a9dd5cc85fe9045e0a72ffc9fbf48f84f7a47754aeac3a9ee0ebdf4f46eb2083f7bcb59177d81c66a145b4d669cbe0cd82ddf8e1287650db75e24c507751d5f0b240f597b4c2c8e380a7fb4515e51041e74907af65944d4e648d81dcf21e189217eb5ed23a519b8a7eb595865912b271d4d15b7b7c0280fc17134690beec7a60ab1aaa6bca02d358465d477c2dfd02adb4e5d94d39f943c1884fece2f792481122392f06fdeda", &(0x7f0000000200)="0bb32b8d25acd46712e97af47a320ec902924d90b9605b4260df29c4b9d10cc250638701581987ee5c618f81c1fd202b3e89b898776be72723ff25"}}, &(0x7f0000000280)=0x0) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) syz_usb_connect(0x686d5b2fb09a157c, 0x73, &(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES8=r3, @ANYBLOB="93ccf07c85fb2913c72a6594020ae8ca6cb4e91312b2d6f7f43d2d1d2619d3"], 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x3) 3.877668573s ago: executing program 1 (id=232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x8}, @mss={0x2, 0x6}], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x3, 0xffffffffffffff62) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000025000/0x2000)=nil, 0x2000, 0x11) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000780)={0x1, 0x0, 0xb, 0x19, 0xb8, &(0x7f0000000380)}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000040)='tls') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/70, 0x0, 0xeeef0000}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0/file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setresuid(0x0, r5, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f00000002c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000004940)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000800)={0x0, 0x1, 0x0, &(0x7f00000008c0)=""/182, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000007c0)={@local}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0xd8e9e704c214a93b, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000240)=0x1) 3.728776657s ago: executing program 1 (id=233): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0xc03, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000200)={0x0, 0x34325258}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x141) setuid(0xee01) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) 3.592105921s ago: executing program 1 (id=234): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d486100009058acf"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000240)={0x0}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) close(r3) syz_open_procfs(r1, &(0x7f0000000100)='loginuid\x00') sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000080)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES16=r0, @ANYRESDEC=r0], 0x95}, 0x200040c4) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) 3.440356997s ago: executing program 1 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040c0}, 0x40004) 3.440184312s ago: executing program 0 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x14) 3.434186962s ago: executing program 2 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x69, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x204e7d968a913700, 0x10, r3, 0x43d69000) 3.425413233s ago: executing program 1 (id=238): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000100)=""/131) syz_usb_connect$uac3(0x3, 0x118, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x2b73, 0x17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x106, 0x3, 0x1, 0x0, 0x60, 0xab, {0x8, 0xb, 0x1, 0x0, 0x1, 0x20, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x2f, 0x94}, [@feature_unit={0xd, 0x24, 0x7, 0x2, 0x5, [0x9, 0x6]}, @extension_unit={0x9, 0x24, 0xa, 0x2, 0x6, [0x3]}, @cluster_info_segment={0x6, 0x20, 0x6, 0xa7, 0xa}, @processing_unit={0x9, 0x24, 0x9, 0x2, 0x2, [0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x8c, 0xfc, 0xf0, 0x10, "b49c73ce025e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3f, 0x2, 0xaa, 0xff, "bee70c4b273046d644"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x565a, 0x8beb, 0x81, "7e35f5df"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x24, 0x4, 0x81, "7dd5"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7f, 0x0, 0xfe, 0x15, 0x7}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x6, 0x3, "cc58e449c34bd2c4e3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xff, 0x0, 0x7, {0xa, 0x25, 0x25, 0x8, 0x3, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xf, 0x4, 0x6, 0x1002, 0x7, 0x3, 0x7fff, 0x6}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3ff, 0xff6e, 0xfa, "ee"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x0, 0x8, {0xa, 0x25, 0x25, 0x2, 0x8, 0x5f76}}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x6b0, 0x31, 0x2, 0x8, 0x8, 0x1}, 0x49, &(0x7f0000000300)={0x5, 0xf, 0x49, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xf9, 0x6, 0xac85, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x7, 0x4, 0x7, 0xe8}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "20ba87349c327fd7731dd5281902d58d"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "a0cea6b1a67f8a7b536c2f17b8a4b6a8"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0xa, [{0xa8, &(0x7f0000000380)=ANY=[@ANYBLOB="a8032427fa32b1e272e65af813dc4d20c24782ef66df76be7b6ef43b5c73189f315f35c5892684b252a88cb872cf1e24d2876d323f2f276591a40b348374a8447e717a22af4d60a930f5e1e5539105d3c00db70ebff2f107974f546fe1a92e7b64ad778635ad9bb907fcf76a9dfb3bea4823b31d2d70da21f6fcf3863cb4621e3bac32248af303280d72fb90356e47c6ad9125d069a42f7735b5b1956745a9e8b21728b1a32e12d7"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x68941f9aaa771938}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x401}}, {0xf7, &(0x7f00000004c0)=@string={0xf7, 0x3, "8cd3da174149c9ef6a920f141c773eaf6cc9b4d0fc4812ef99393700ee5eb8c62f858361e4b51932b3140753b2e9c184324f4144a6ef9a4ae480dbe2b210609f560ce47a197c33792be6688d6b7b10b7bdfba1ebc22d6081064adf7f21b4fbf818fcc483c56cd196da0e1a47d3c87ba196554242db410f9d8fae3b08b320dffde9aef5fa56d23dd43264df63f506f046bb5d31d88b0928b701b711d7d2332b62b37b96bf9d995d711ffc558ed6c8d3ea14916f282c59a473258dcf22e1e4c1d37b62c85d8fb5e3a6d43e5f01c58f0bdb10b639232032b971eb938d274014dfb81b421a45baa8b2cb483124260ea44301c958dd613a"}}, {0x44, &(0x7f00000005c0)=@string={0x44, 0x3, "4a6f9ce1021671c027d1f60beb0dd9dbe7c32c07685c6415c4993bb3bf3f892be3a985044113514861af49c197a3dd874bf66b961b2fce75b73fd8e8d9fa0bafd0e7"}}, {0xdc, &(0x7f0000000640)=@string={0xdc, 0x3, "ea51f0dc01d72b8f0f9fea50e706dd7f34f1785c42531bba7c1a692e390ec812b0a673a68b1b0c2cb2ba084208236c4f15fee96ad377f1516142b77952a0eebf6c7d5c45b0cf4d4dda6a6059887921d6897c9babfd51c75085d10f7badaba7eed136464f46a788e526de0b0a84159d480d74a9abeab020b9a2ebbb6d4d864e5809cccb9c44f8d5d35b5259496697137b081b3b2caddab52e42709f31ecf59c801ceabd97c97637e366b63d75a1be0faefd286dd6c07b73d8ff40e31800acda501dc8bf0a699f3d6703637f1c379a0913682ac5cc31f533308df8"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xaf, &(0x7f0000000780)=@string={0xaf, 0x3, "d2fbecbc506d9c892d4e854dd9971e908845340358b49a9a0d51e57f0a1f8482d18b12336173161fcb27b0a285102a031aa6c82063ee3f956092b0594c33c12532beaec99137e16ce87b92c681a3bcb97ab54563b3a967facf52f2d277e29e84052b0659b4f4a13bd6d33e01b0234be0fbb3cd28bd1c71ba28d02dba049618df777dadb8133d8a8b6468a290bcf973b0c7aed3c4a500c0057c2e9a0d9139167c808a2ed4eabe84e8ef1da39b4b"}}, {0x38, &(0x7f0000000840)=@string={0x38, 0x3, "840e640679286380c27102720d69820d1a0ea666a52233b0fab1f475c6bf8078eef43e8870a103718b44bcc50634319b6f2e8d17abeb"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x827}}]}) r1 = timerfd_create(0x8, 0x80000) timerfd_settime(r1, 0x3, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e0101"], 0x0) migrate_pages(0x0, 0x80, &(0x7f0000000140)=0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8949, &(0x7f00000001c0)={'vlan1\x00', @ifru_ivalue=0x5}) syz_usb_ep_write(r0, 0x81, 0x39, &(0x7f0000000100)="40a647de28493c0198023ee398c6bf7c5db29c43f28ed678c09b1abcd144201ba4a7ee7c2ede1147cc538fcdb3fdfc1d57c1f138a0164f2f41") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (async) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000100)=""/131) (async) syz_usb_connect$uac3(0x3, 0x118, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x2b73, 0x17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x106, 0x3, 0x1, 0x0, 0x60, 0xab, {0x8, 0xb, 0x1, 0x0, 0x1, 0x20, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x2f, 0x94}, [@feature_unit={0xd, 0x24, 0x7, 0x2, 0x5, [0x9, 0x6]}, @extension_unit={0x9, 0x24, 0xa, 0x2, 0x6, [0x3]}, @cluster_info_segment={0x6, 0x20, 0x6, 0xa7, 0xa}, @processing_unit={0x9, 0x24, 0x9, 0x2, 0x2, [0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x8c, 0xfc, 0xf0, 0x10, "b49c73ce025e"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3f, 0x2, 0xaa, 0xff, "bee70c4b273046d644"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x565a, 0x8beb, 0x81, "7e35f5df"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x24, 0x4, 0x81, "7dd5"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7f, 0x0, 0xfe, 0x15, 0x7}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x6, 0x3, "cc58e449c34bd2c4e3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xff, 0x0, 0x7, {0xa, 0x25, 0x25, 0x8, 0x3, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xf, 0x4, 0x6, 0x1002, 0x7, 0x3, 0x7fff, 0x6}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3ff, 0xff6e, 0xfa, "ee"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x0, 0x8, {0xa, 0x25, 0x25, 0x2, 0x8, 0x5f76}}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x6b0, 0x31, 0x2, 0x8, 0x8, 0x1}, 0x49, &(0x7f0000000300)={0x5, 0xf, 0x49, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0xf9, 0x6, 0xac85, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x7, 0x4, 0x7, 0xe8}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "20ba87349c327fd7731dd5281902d58d"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "a0cea6b1a67f8a7b536c2f17b8a4b6a8"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0xa, [{0xa8, &(0x7f0000000380)=ANY=[@ANYBLOB="a8032427fa32b1e272e65af813dc4d20c24782ef66df76be7b6ef43b5c73189f315f35c5892684b252a88cb872cf1e24d2876d323f2f276591a40b348374a8447e717a22af4d60a930f5e1e5539105d3c00db70ebff2f107974f546fe1a92e7b64ad778635ad9bb907fcf76a9dfb3bea4823b31d2d70da21f6fcf3863cb4621e3bac32248af303280d72fb90356e47c6ad9125d069a42f7735b5b1956745a9e8b21728b1a32e12d7"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x68941f9aaa771938}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x401}}, {0xf7, &(0x7f00000004c0)=@string={0xf7, 0x3, "8cd3da174149c9ef6a920f141c773eaf6cc9b4d0fc4812ef99393700ee5eb8c62f858361e4b51932b3140753b2e9c184324f4144a6ef9a4ae480dbe2b210609f560ce47a197c33792be6688d6b7b10b7bdfba1ebc22d6081064adf7f21b4fbf818fcc483c56cd196da0e1a47d3c87ba196554242db410f9d8fae3b08b320dffde9aef5fa56d23dd43264df63f506f046bb5d31d88b0928b701b711d7d2332b62b37b96bf9d995d711ffc558ed6c8d3ea14916f282c59a473258dcf22e1e4c1d37b62c85d8fb5e3a6d43e5f01c58f0bdb10b639232032b971eb938d274014dfb81b421a45baa8b2cb483124260ea44301c958dd613a"}}, {0x44, &(0x7f00000005c0)=@string={0x44, 0x3, "4a6f9ce1021671c027d1f60beb0dd9dbe7c32c07685c6415c4993bb3bf3f892be3a985044113514861af49c197a3dd874bf66b961b2fce75b73fd8e8d9fa0bafd0e7"}}, {0xdc, &(0x7f0000000640)=@string={0xdc, 0x3, "ea51f0dc01d72b8f0f9fea50e706dd7f34f1785c42531bba7c1a692e390ec812b0a673a68b1b0c2cb2ba084208236c4f15fee96ad377f1516142b77952a0eebf6c7d5c45b0cf4d4dda6a6059887921d6897c9babfd51c75085d10f7badaba7eed136464f46a788e526de0b0a84159d480d74a9abeab020b9a2ebbb6d4d864e5809cccb9c44f8d5d35b5259496697137b081b3b2caddab52e42709f31ecf59c801ceabd97c97637e366b63d75a1be0faefd286dd6c07b73d8ff40e31800acda501dc8bf0a699f3d6703637f1c379a0913682ac5cc31f533308df8"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xaf, &(0x7f0000000780)=@string={0xaf, 0x3, "d2fbecbc506d9c892d4e854dd9971e908845340358b49a9a0d51e57f0a1f8482d18b12336173161fcb27b0a285102a031aa6c82063ee3f956092b0594c33c12532beaec99137e16ce87b92c681a3bcb97ab54563b3a967facf52f2d277e29e84052b0659b4f4a13bd6d33e01b0234be0fbb3cd28bd1c71ba28d02dba049618df777dadb8133d8a8b6468a290bcf973b0c7aed3c4a500c0057c2e9a0d9139167c808a2ed4eabe84e8ef1da39b4b"}}, {0x38, &(0x7f0000000840)=@string={0x38, 0x3, "840e640679286380c27102720d69820d1a0ea666a52233b0fab1f475c6bf8078eef43e8870a103718b44bcc50634319b6f2e8d17abeb"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x827}}]}) (async) timerfd_create(0x8, 0x80000) (async) timerfd_settime(r1, 0x3, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) (async) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e0101"], 0x0) (async) migrate_pages(0x0, 0x80, &(0x7f0000000140)=0x4, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_ifreq(r2, 0x8949, &(0x7f00000001c0)={'vlan1\x00', @ifru_ivalue=0x5}) (async) syz_usb_ep_write(r0, 0x81, 0x39, &(0x7f0000000100)="40a647de28493c0198023ee398c6bf7c5db29c43f28ed678c09b1abcd144201ba4a7ee7c2ede1147cc538fcdb3fdfc1d57c1f138a0164f2f41") (async) 3.340641298s ago: executing program 0 (id=239): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) 3.243962511s ago: executing program 2 (id=240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x88e5}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x12000000, {0x6, 0x6, "3be0e6", 0xd, 0x3a, 0x0, @mcast1, @mcast2, [], "55d525215833bd91"}}}}}}}}, 0x72) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r5 = fanotify_init(0x20, 0x40000) readv(r5, &(0x7f0000001580)=[{&(0x7f0000000300)=""/125, 0x7d}], 0x1) fanotify_mark(r5, 0x105, 0x800101b, r4, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_control_io$hid(r3, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x58, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x800) syz_usb_control_io$uac2(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="001306"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.207165666s ago: executing program 0 (id=241): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904", @ANYRESHEX=r0, @ANYRESOCT=r0], 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001fc0)={0x10, 0x140d, 0xfa0420e19802e74b, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000002e00)={0x0, 0x5, 0x0, 0x1}) r3 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000080)=0x1) 3.205107481s ago: executing program 3 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0xffdd) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588", @ANYRES32], 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file1\x00', 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) renameat2(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) r3 = syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfa86, 0xe2182) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f00000002c0)={0x0, 0x0, {0x7fff, 0x5, 0x3004, 0x5, 0x5, 0x2, 0x7, 0x2}}) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1000}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)={0x28, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1400}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000380)={0x7, 0x7b, 0x1}, 0x7) mount$tmpfs(0x0, &(0x7f000000b8c0)='./file3\x00', &(0x7f000000b900), 0x8001, &(0x7f0000000400)=ANY=[@ANYBLOB='grpquota_block_hardlimit=1387e2']) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x5, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={r9, 0x7fff}) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000280)) syz_usb_control_io$uac1(r3, 0x0, 0x0) 1.536131383s ago: executing program 0 (id=243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, 0x0) 1.30588938s ago: executing program 3 (id=244): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d486100009058acf"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000240)={0x0}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) close(r3) syz_open_procfs(r1, &(0x7f0000000100)='loginuid\x00') sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000080)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES16=r0, @ANYRESDEC=r0], 0x95}, 0x200040c4) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) 1.201727308s ago: executing program 0 (id=245): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="60343800000038046d6c6f7c5bfbd0567a20a619e420f83235273de9f69a1f619fa183282f1903616d05c5b20651e15c2106663cb3828c87fe215186c6c36f859b57d7ec25a021bcb3f9960a5c9d3627ea21603e3d59a31a81820fab9a6a1321ead476f24f575c9e82ec058657b2f41ca5589ec6b4acba9a65cffe3ad047ad5a06956aa303f923aee9df7b792c762cad7b2de590"], &(0x7f0000000a40)=ANY=[@ANYBLOB="00034300000043035b5c27087aca5c43d5556379a5e7b28e816728e8a3d74303b921afb3463bc36ea1a068b26c96221391b482b146a7221ec72151efbba4333d1f2186e24cdab28f33310bd56ea12642fc219261ddeca857bd87fd348c17b64a25c4372b93f2d4780dded9223e72298442e915d7ce88b8bc5fb255993b578864a8ffd530175a53ad03efebe27ca53111cc5b8da889b47d2fe5d2bea9e04b0c8b9755da1358878455089824ecccc35aa3e3c6edc3c8e0fe07654cd86facc7ddb8617303ce72c3cdcb19bab2fc85fa83add588b2c1bdfd19aca2b258a215d887a2e281d65ed87e11ce16226057d69551d1cc8ae012d1c651edebd69a3ad8c8a448cdd38c7dd168a0b5ed10acd1"], &(0x7f00000000c0)=ANY=[@ANYBLOB="00221000000092b0c27bc8df08838cae0d2cee320352"], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x440}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00306a000000fd76ddd8d87997ad66e113f752a0a7e4cea5871bae18472099d57282543469dc45a2235ef8334b975cd998658e2ceb9ee7e09a6ecb45f4db75083a6ac63f0cacdf84f755e6f2dd8174a5def2d39adc6362b905c58125d42dafb2e8bf382785ba9674e2f3bd963200"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x4}}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001440)={&(0x7f00000014c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf2509000000500001801400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="0800030011000000081803000500000008000100", @ANYRES32=0x0, @ANYBLOB="080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000020000180080003000100000014000200766c616e3000000000000000000000006400018008000300020000001400020069703665727370616e300000000000001400020067656e6576653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001f000100ea1517c3bfeb1fbb3993e510b9c6d3706e68397f3ed24e7ad905d287da047409cd3ead0f3cf15e2b4403e9635d3fe4b9aefd9e4d1b24686ba141540c796342ab4c5426f6ff810a614dbdb7ae9a1f301d30008c3cb8042ef61d014e259c87da466d0526efdc6c22fee504d950a2a33f02a7405ecee0a17886e30b9a00e7babdce21906e72068240a552a4de8a20ca80b2d32253127aee28bd4b51fca1680708810fa63c519e9a3c0776861dd070baf802492547769491ffdf1cf6c18fdf68d46aadcdf248d1c3cebed3ca836ff8", @ANYRES32=0x0, @ANYBLOB="080003000100000008000300010000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300040000000800030004000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020063616966300000000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="48000180140002006c6f000000000000000000000000000008000100", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000000800030002000000140002006261746164765f736c6176655f300000140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000180080003000300000008000300020000004c0001800800030001000000140002006c6f000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006e72300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c0001800800030002000000"], 0x270}, 0x1, 0x0, 0x0, 0x20024840}, 0x20000081) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@any, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x3, 0x8, 0x0, 0x4}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x48}}, 0x0) 820.247108ms ago: executing program 2 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040c0}, 0x40004) 779.881688ms ago: executing program 2 (id=247): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000080900010073797a300000000048000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000008000b40000000000900030073797a320000000008000540"], 0x164}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902600042010000000904"], 0x0) r3 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) fsopen(&(0x7f0000000080)='nfs\x00', 0x1) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc0884123, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000300)=0x3) keyctl$revoke(0x3, r3) syz_usb_connect$cdc_ecm(0x5, 0x15b, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0x6, 0x83, 0xb, 0x0, 0x6}, 0xad, &(0x7f0000000640)=ANY=[@ANYBLOB="050fad00030710020031010003100b9e1002eb82ba05d6cd4d053bdc09678a4d86ce72c5bca66fb06328757c4ce92aef37919c08e84fcdde2f1babf7d29f9967b1088f9125131f70c097f19e93286e504f0ff7b7104a3d54a5212587fdd36765915c5428526b4d5a80a1ab0362618c43e7b29bdccb6990d860c2fbbcd3a585fc9173e7c238ac96e98597282b35b1fb3cedb0bae690b0d06a40d4a045e861eb44c84a5fb1c77d1a23e573c86111"], 0xa, [{0xcc, &(0x7f0000001080)=ANY=[@ANYBLOB="cc03fede27f76ac468d7634c11c829f9b83b7f88070d151127a5d2f344a1f67f9dfcc5f73441518a8189600a0e1b1361fb81d03d896d69b71a9abf3c0f0cd28b5f0d0591abf0ce22547a20b20c317cbd0e9c97f47fff7642ed4e34133c580ef9653ee29d3d7c238f0bb3bf138c8152f9200c44f7e49f4058498eb88d2e2527d71bf16f0707400dc54ad6e9198e78080aa393e20e5e8cf8dc12f92c17609af2eac349963262413e6653e81c6724e60a93841ab6978bf190f5d7c0d83bf505d0d923857efd54646c5442254b807fc45ff7313fc3b42cb49307ef76f3c27f87f76d01dd376394110c02684763286b7204a7d646279758e0e2117c0a6608134a4df3def4284c4a083e11c191e3c418476e9212e8b97e717742b3e5fd6cf2ccdd5a629e2b4184b30df424a067e31f1694be316977deff4eec36abc8f89fffa7db8e4befe8f42207792d89d2005f5091f450c75d49ca02802664f0115d3362217bb49cca6b3bea53f6bbc71d479c0228dfad7951dde695612d52066ace4235ef0760e96702a13fe9"]}, {0x2b, &(0x7f0000000440)=ANY=[@ANYBLOB="2b03d49a1b29d93df857dfbaed1b0fc9b144ec16310000050bd9e0e5d408455ab96c5a6064490000000000"]}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1c01}}, {0xa3, &(0x7f0000000940)=@string={0xa3, 0x3, "dde537b59a702bc1f5bb8c64ac7a457860761057e8ee2cd10ee079aaab306688b097457a4e9fd12944a87994493c508da0fed26f31ef0dfb08d2fee5ee0d7aa2aa803d813657fef4e0aff1292ff17cdf6bd7b4c4fd33a78171720280d638bcd4c177d5c48a6ef5fa139a680be31e954fea60db95a85bffb5612bc4125e559b512b086e9cb609293b24aace1596096b894bea4e4b19db4287fbd320551872c30398"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x306b}}, {0xd7, &(0x7f0000000180)=@string={0xd7, 0x3, "072e6e309b78e1881b061400ea6b2e2a6617a4351ee8b4010e2ff9e4157cb979759a23aa11e93d3222ec730048f4fb11822624be489a7f560382a71e49efca2bfd657a84f147c7aedeffff36d740634c989608a99b718e03cda6e362b6982c2b44b5a166ac9ecce7c43e40a522a7cb46d4dfb4448e3f2f0aaf8f95c3e1891437faf678ef6bb8c4a600e98d45c7d629cb900ff809d3a7878adaf076259594375889cbb47f1bcc8a0de8824244213c2dd37f998f1b373100722898a199b74b3118df25f2053de17b8c8323f62ab637c72be58c5db828"}}, {0xd4, &(0x7f0000000b80)=ANY=[@ANYBLOB="d40393d6c25576a6736f141039e3b1a2f23cb263ac1fdb795741e6acdff548d868fe4c1c80f5742a3fb0ca0d8c2e753fa0285dea44b65b0738c0b6941e7f975d5e33840f95e6f6fd42dafb41b7d2758bfeecca3afffa9382eb5f160ee7da47a94810cb9d5a7b390bff54abbf1ec967b9048eae2dcb53476ec7757e6d218ffff7b8d5cc6cb1827f4cf90562d515e8788bfb356f595be3472271ad6ed77c05c77f8382a00d8cfb62af5946ac3171b47e902353b719bff75ef42be1a6e166790af46838ef46af42d8b1f481f98a835a25489a94fb7a"]}, {0x47, &(0x7f0000000c80)=ANY=[@ANYRES32=r0]}, {0xc6, &(0x7f0000000e00)=@string={0xc6, 0x3, "e4c03adc734cc1e7a313b1a0d7bff8230d97728d3540ae0379ba9f2f606627f11c310228e1c1300aabb67f6d0e4c7f17ef76ab794de73326e1f2476f12e2c15d720ef037f096f1bba04ba9d4b1bb7697fd0cf54bd3d194b57f82608fb5a92aedcbf94d4515067e40e0099f1f2c6931d7ad15a30ca5a63fef58ad5b4f61f0a591d5a50d4c99b65e66340885563b2732d6a562aab2f6a2768df83dca36a81ea171ae4dcf8b6dd0708bbe1369f3b1fc8d3d366dec787c2c3678feab07e777269ffe084c8c3b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x801}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) fcntl$lock(r6, 0x7, &(0x7f0000000540)={0x0, 0x0, 0xe5, 0x74}) fcntl$lock(r6, 0x7, &(0x7f00000002c0)={0x1, 0x4, 0x2, 0x5}) fcntl$lock(r6, 0x5, &(0x7f0000000280)={0x0, 0x1, 0x101, 0x80000001}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', &(0x7f0000000580)={0x802, 0x0, 0x5}, 0x18) pselect6(0x40, &(0x7f0000000340)={0x3, 0x0, 0x200100000000, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x1000001006, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x3, 0x5, 0x3, 0x0, 0xb, 0x11d, 0xfffffffffffffffe}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 450.561896ms ago: executing program 0 (id=248): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902600042010000000904"], 0x0) r1 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600), 0x80) keyctl$revoke(0x3, r1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000340)={0x3, 0x0, 0x200100000000, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x1000001006, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x3, 0xfffffffffffffffb, 0x3, 0x0, 0xb, 0x80000006, 0xfffffffffffffffe}, 0x0, 0x0) (fail_nth: 3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=249): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r1, r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. [ 84.070164][ T5600] cgroup: Unknown subsys name 'net' [ 84.311294][ T5600] cgroup: Unknown subsys name 'cpuset' [ 84.366106][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.373867][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.175308][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.195315][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.232373][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.243476][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.243660][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.258545][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.259823][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.265066][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.279217][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.318493][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.321608][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.336006][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.336037][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.336891][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.338925][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.340268][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.379628][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.381626][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.396062][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.402659][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.576738][ T5616] Bluetooth: hci2: command tx timeout [ 91.577258][ T5624] Bluetooth: hci1: command tx timeout [ 91.577270][ T5616] Bluetooth: hci0: command tx timeout [ 91.579326][ T5617] Bluetooth: hci3: command tx timeout [ 91.769343][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.770666][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.771595][ T5615] bridge_slave_0: entered allmulticast mode [ 91.774414][ T5615] bridge_slave_0: entered promiscuous mode [ 91.822983][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.823248][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.823453][ T5614] bridge_slave_0: entered allmulticast mode [ 91.831622][ T5614] bridge_slave_0: entered promiscuous mode [ 91.842289][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.845013][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.856166][ T5612] bridge_slave_0: entered allmulticast mode [ 91.866953][ T5612] bridge_slave_0: entered promiscuous mode [ 91.889665][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.889920][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.890145][ T5615] bridge_slave_1: entered allmulticast mode [ 91.892757][ T5615] bridge_slave_1: entered promiscuous mode [ 91.931529][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.931812][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.932081][ T5614] bridge_slave_1: entered allmulticast mode [ 91.934608][ T5614] bridge_slave_1: entered promiscuous mode [ 91.944330][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.946047][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.946976][ T5612] bridge_slave_1: entered allmulticast mode [ 91.958455][ T5612] bridge_slave_1: entered promiscuous mode [ 92.000824][ T822] cfg80211: failed to load regulatory.db [ 92.159831][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.190746][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.205135][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.217656][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.249847][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.254532][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.286293][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.286568][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.288162][ T5621] bridge_slave_0: entered allmulticast mode [ 92.290779][ T5621] bridge_slave_0: entered promiscuous mode [ 92.369526][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.369987][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.371382][ T5621] bridge_slave_1: entered allmulticast mode [ 92.373951][ T5621] bridge_slave_1: entered promiscuous mode [ 92.438428][ T5615] team0: Port device team_slave_0 added [ 92.465306][ T5614] team0: Port device team_slave_0 added [ 92.474524][ T5612] team0: Port device team_slave_0 added [ 92.483285][ T5615] team0: Port device team_slave_1 added [ 92.511086][ T5614] team0: Port device team_slave_1 added [ 92.514993][ T5612] team0: Port device team_slave_1 added [ 92.557197][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.632422][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.677098][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.677111][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.677131][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.736136][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.736154][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.736184][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.742780][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.742797][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.742824][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.759606][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.759650][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.759740][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.855562][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.855578][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.855607][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.875950][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.875966][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.875995][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.972863][ T5621] team0: Port device team_slave_0 added [ 93.014454][ T5621] team0: Port device team_slave_1 added [ 93.141545][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.141559][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.141580][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.220467][ T5615] hsr_slave_0: entered promiscuous mode [ 93.222342][ T5615] hsr_slave_1: entered promiscuous mode [ 93.229995][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.230042][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.230124][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.594819][ T5614] hsr_slave_0: entered promiscuous mode [ 93.599511][ T5614] hsr_slave_1: entered promiscuous mode [ 93.607951][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 93.608080][ T5614] Cannot create hsr debugfs directory [ 93.626855][ T5612] hsr_slave_0: entered promiscuous mode [ 93.632898][ T5612] hsr_slave_1: entered promiscuous mode [ 93.638856][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 93.638886][ T5612] Cannot create hsr debugfs directory [ 93.655572][ T5624] Bluetooth: hci0: command tx timeout [ 93.655600][ T5624] Bluetooth: hci2: command tx timeout [ 93.655619][ T5624] Bluetooth: hci1: command tx timeout [ 93.656704][ T5617] Bluetooth: hci3: command tx timeout [ 93.911334][ T5621] hsr_slave_0: entered promiscuous mode [ 93.913091][ T5621] hsr_slave_1: entered promiscuous mode [ 93.914988][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 93.915019][ T5621] Cannot create hsr debugfs directory [ 94.658477][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.713614][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.731776][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.762316][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.774913][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.830573][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.871482][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.891672][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.036581][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.081491][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.109595][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.148414][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.151451][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.173746][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.202608][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.231610][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.407838][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.453175][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.471116][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.505321][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.514374][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.541959][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.588639][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.631860][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.736116][ T5617] Bluetooth: hci3: command tx timeout [ 95.736149][ T5618] Bluetooth: hci1: command tx timeout [ 95.736160][ T5617] Bluetooth: hci2: command tx timeout [ 95.736175][ T5618] Bluetooth: hci0: command tx timeout [ 95.827054][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.861416][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.876444][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.909913][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.929858][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.960062][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.978434][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.023788][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.148510][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.271046][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.317387][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.342061][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.342324][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.442204][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.442405][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.538286][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.563918][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.592458][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.593228][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.655012][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.655156][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.734931][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.793457][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.793627][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.817920][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.889597][ T1511] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.890049][ T1511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.051031][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.130910][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.132023][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.222841][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.223033][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.815666][ T5624] Bluetooth: hci2: command tx timeout [ 97.815697][ T5624] Bluetooth: hci3: command tx timeout [ 97.816335][ T5624] Bluetooth: hci0: command tx timeout [ 97.816364][ T5624] Bluetooth: hci1: command tx timeout [ 98.144690][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.530961][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.692701][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.740235][ T5615] veth0_vlan: entered promiscuous mode [ 98.847088][ T5615] veth1_vlan: entered promiscuous mode [ 98.895287][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.989569][ T5612] veth0_vlan: entered promiscuous mode [ 99.054553][ T5614] veth0_vlan: entered promiscuous mode [ 99.064943][ T5612] veth1_vlan: entered promiscuous mode [ 99.099773][ T5615] veth0_macvtap: entered promiscuous mode [ 99.142865][ T5614] veth1_vlan: entered promiscuous mode [ 99.159731][ T5615] veth1_macvtap: entered promiscuous mode [ 99.250407][ T5621] veth0_vlan: entered promiscuous mode [ 99.284059][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.324186][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.336310][ T5612] veth0_macvtap: entered promiscuous mode [ 99.340553][ T5621] veth1_vlan: entered promiscuous mode [ 99.394737][ T5612] veth1_macvtap: entered promiscuous mode [ 99.412927][ T1001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.433672][ T1001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.435147][ T5614] veth0_macvtap: entered promiscuous mode [ 99.463676][ T1001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.479990][ T1001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.502680][ T5614] veth1_macvtap: entered promiscuous mode [ 99.637775][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.806952][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.906590][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.944389][ T5621] veth0_macvtap: entered promiscuous mode [ 99.956447][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.964988][ T39] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.992035][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.998822][ T39] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.050875][ T5621] veth1_macvtap: entered promiscuous mode [ 100.069975][ T39] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.121235][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.121262][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.174995][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.202463][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.223540][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.249779][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.560731][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.662429][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.662446][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.813555][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.017103][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.037328][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.045100][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.045121][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.109993][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.160899][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.226820][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.226840][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.421329][ T1511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.421349][ T1511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.972315][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.972339][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.257002][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.257024][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.587686][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.587703][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.270900][ T5774] random: crng reseeded on system resumption [ 103.779718][ T5779] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 103.796911][ T5779] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2'. [ 103.947185][ T822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.993164][ T5784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 104.234730][ T822] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 104.234764][ T822] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 104.234786][ T822] usb 4-1: Product: syz [ 104.234801][ T822] usb 4-1: SerialNumber: syz [ 104.343701][ T822] usb 4-1: config 0 descriptor?? [ 104.578134][ T5772] fuse: Unknown parameter 'rootmodeN»sr5ó¡jÎ8«' [ 105.506247][ T822] usb 4-1: USB disconnect, device number 2 [ 106.855411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.875416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.885419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.895423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.905426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.915418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.925409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.935416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.945406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.955465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.727688][ T5805] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 108.223411][ T5816] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.789456][ T5723] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.947417][ T5723] usb 2-1: Using ep0 maxpacket: 16 [ 108.962363][ T5723] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.976074][ T5723] usb 2-1: config 21 has an invalid descriptor of length 27, skipping remainder of the config [ 108.976104][ T5723] usb 2-1: config 21 has 0 interfaces, different from the descriptor's value: 1 [ 108.988507][ T5723] usb 2-1: New USB device found, idVendor=e7fc, idProduct=fe0a, bcdDevice=19.f2 [ 108.988540][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.988562][ T5723] usb 2-1: Product: syz [ 108.988578][ T5723] usb 2-1: Manufacturer: syz [ 108.988594][ T5723] usb 2-1: SerialNumber: syz [ 109.683292][ T5821] comedi comedi4: bad chanlist[0]=0x000000d1 chan=209 range length=2 [ 110.298264][ T5723] usb 2-1: USB disconnect, device number 2 [ 111.072280][ T5833] syz.0.17 uses obsolete (PF_INET,SOCK_PACKET) [ 111.727457][ T5842] netlink: 'syz.2.20': attribute type 2 has an invalid length. [ 111.727480][ T5842] netlink: 228 bytes leftover after parsing attributes in process `syz.2.20'. [ 112.148599][ T5346] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.197587][ T5850] FAULT_INJECTION: forcing a failure. [ 112.197587][ T5850] name failslab, interval 1, probability 0, space 0, times 1 [ 112.197634][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz.0.23 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.197659][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.197682][ T5850] Call Trace: [ 112.197695][ T5850] [ 112.197704][ T5850] dump_stack_lvl+0xe8/0x150 [ 112.197737][ T5850] should_fail_ex+0x46b/0x600 [ 112.197777][ T5850] should_failslab+0xa8/0x100 [ 112.197809][ T5850] kmem_cache_alloc_noprof+0x87/0x680 [ 112.197836][ T5850] ? alloc_empty_file+0x5b/0x1d0 [ 112.197867][ T5850] alloc_empty_file+0x5b/0x1d0 [ 112.197893][ T5850] path_openat+0x11b/0x3960 [ 112.197935][ T5850] ? try_to_take_rt_mutex+0x840/0xb00 [ 112.197964][ T5850] ? arch_stack_walk+0xfb/0x150 [ 112.198007][ T5850] ? __lock_acquire+0x6b5/0x2d10 [ 112.198041][ T5850] ? __pfx_path_openat+0x10/0x10 [ 112.198077][ T5850] ? kasan_save_track+0x4f/0x80 [ 112.198101][ T5850] ? kasan_save_track+0x3e/0x80 [ 112.198123][ T5850] ? __kasan_slab_alloc+0x6c/0x80 [ 112.198159][ T5850] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.198191][ T5850] do_file_open+0x23e/0x4a0 [ 112.198221][ T5850] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.198267][ T5850] ? __pfx_do_file_open+0x10/0x10 [ 112.198297][ T5850] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 112.198346][ T5850] ? alloc_fd+0x679/0x6f0 [ 112.198383][ T5850] do_sys_openat2+0x115/0x200 [ 112.198412][ T5850] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.198439][ T5850] ? ksys_write+0x248/0x270 [ 112.198473][ T5850] ? __pfx_ksys_write+0x10/0x10 [ 112.198513][ T5850] __x64_sys_openat+0x138/0x170 [ 112.198542][ T5850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.198566][ T5850] do_syscall_64+0x174/0x580 [ 112.198600][ T5850] ? trace_irq_disable+0x3b/0x140 [ 112.198625][ T5850] ? clear_bhb_loop+0x40/0x90 [ 112.198653][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.198677][ T5850] RIP: 0033:0x7f0ba4e8ce59 [ 112.198703][ T5850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.198722][ T5850] RSP: 002b:00007f0ba30de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.198750][ T5850] RAX: ffffffffffffffda RBX: 00007f0ba5105fa0 RCX: 00007f0ba4e8ce59 [ 112.198767][ T5850] RDX: 0000000000105c43 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 112.198783][ T5850] RBP: 00007f0ba30de090 R08: 0000000000000000 R09: 0000000000000000 [ 112.198797][ T5850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.198810][ T5850] R13: 00007f0ba5106038 R14: 00007f0ba5105fa0 R15: 00007fffbfa701d8 [ 112.198845][ T5850] [ 112.392404][ T5346] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 112.392435][ T5346] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 112.392456][ T5346] usb 2-1: Product: syz [ 112.392471][ T5346] usb 2-1: SerialNumber: syz [ 112.576268][ T5346] usb 2-1: config 0 descriptor?? [ 112.802519][ T5845] fuse: Unknown parameter 'rootmodeN»sr5ó¡jÎ8«' [ 112.916790][ T5346] usb 2-1: USB disconnect, device number 3 [ 113.708712][ T5875] random: crng reseeded on system resumption [ 113.939368][ T5880] FAULT_INJECTION: forcing a failure. [ 113.939368][ T5880] name failslab, interval 1, probability 0, space 0, times 0 [ 113.939406][ T5880] CPU: 1 UID: 0 PID: 5880 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.939431][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.939445][ T5880] Call Trace: [ 113.939453][ T5880] [ 113.939462][ T5880] dump_stack_lvl+0xe8/0x150 [ 113.939494][ T5880] should_fail_ex+0x46b/0x600 [ 113.939532][ T5880] should_failslab+0xa8/0x100 [ 113.939572][ T5880] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 113.939601][ T5880] ? __alloc_skb+0x1d0/0x7d0 [ 113.939629][ T5880] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 113.939669][ T5880] __alloc_skb+0x1d0/0x7d0 [ 113.939705][ T5880] ? __might_fault+0xaf/0x130 [ 113.939734][ T5880] alloc_skb_with_frags+0xc8/0x760 [ 113.939776][ T5880] sock_alloc_send_pskb+0x884/0x9a0 [ 113.939817][ T5880] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 113.939850][ T5880] ? iov_iter_advance+0x8b/0x1c0 [ 113.939874][ T5880] tun_get_user+0x5df/0x4450 [ 113.939925][ T5880] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 113.939949][ T5880] ? reacquire_held_locks+0x80/0x190 [ 113.939976][ T5880] ? rt_spin_lock+0x1e0/0x400 [ 113.940003][ T5880] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 113.940029][ T5880] ? __pfx_tun_get_user+0x10/0x10 [ 113.940057][ T5880] ? rt_spin_unlock+0x14f/0x200 [ 113.940085][ T5880] ? rt_spin_unlock+0x160/0x200 [ 113.940111][ T5880] ? save_netdev_trace_buffer+0x4ba/0x5f0 [ 113.940149][ T5880] ? ref_tracker_alloc+0x332/0x4a0 [ 113.940178][ T5880] ? tun_get+0x157/0x2f0 [ 113.940206][ T5880] ? vfs_write+0x629/0xba0 [ 113.940234][ T5880] ? ksys_write+0x156/0x270 [ 113.940263][ T5880] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 113.940304][ T5880] ? tun_get+0x1c/0x2f0 [ 113.940344][ T5880] ? tun_get+0x1c/0x2f0 [ 113.940377][ T5880] ? tun_get+0x1c/0x2f0 [ 113.940415][ T5880] tun_chr_write_iter+0x119/0x210 [ 113.940452][ T5880] vfs_write+0x629/0xba0 [ 113.940492][ T5880] ? __pfx_vfs_write+0x10/0x10 [ 113.940534][ T5880] ? __fget_files+0x2a/0x420 [ 113.940570][ T5880] ksys_write+0x156/0x270 [ 113.940604][ T5880] ? __pfx_ksys_write+0x10/0x10 [ 113.940644][ T5880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.940670][ T5880] do_syscall_64+0x174/0x580 [ 113.940701][ T5880] ? trace_irq_disable+0x3b/0x140 [ 113.940722][ T5880] ? clear_bhb_loop+0x40/0x90 [ 113.940746][ T5880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.940765][ T5880] RIP: 0033:0x7f0ba4e8ce59 [ 113.940783][ T5880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.940800][ T5880] RSP: 002b:00007f0ba30de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.940821][ T5880] RAX: ffffffffffffffda RBX: 00007f0ba5105fa0 RCX: 00007f0ba4e8ce59 [ 113.940835][ T5880] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 113.940847][ T5880] RBP: 00007f0ba30de090 R08: 0000000000000000 R09: 0000000000000000 [ 113.940859][ T5880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.940870][ T5880] R13: 00007f0ba5106038 R14: 00007f0ba5105fa0 R15: 00007fffbfa701d8 [ 113.940900][ T5880] [ 114.645846][ T5346] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.768955][ T5895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.37'. [ 114.792145][ T5346] usb 3-1: device descriptor read/64, error -71 [ 115.045533][ T5346] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.198980][ T5346] usb 3-1: device descriptor read/64, error -71 [ 115.225475][ T5723] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 115.309992][ T5346] usb usb3-port1: attempt power cycle [ 115.372920][ T5910] syzkaller1: entered promiscuous mode [ 115.372939][ T5910] syzkaller1: entered allmulticast mode [ 115.413390][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.413426][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.413479][ T5723] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 115.413497][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.464299][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 115.533307][ T5723] usb 2-1: config 0 descriptor?? [ 115.805716][ T5346] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.839883][ T5346] usb 3-1: device descriptor read/8, error -71 [ 116.084314][ T5723] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 116.084355][ T5723] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 116.084385][ T5723] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 116.084413][ T5723] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 116.084441][ T5723] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 116.084469][ T5723] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 116.084497][ T5723] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 116.084526][ T5723] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 116.084554][ T5723] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 116.084582][ T5723] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 116.120964][ T5346] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.186474][ T5346] usb 3-1: device descriptor read/8, error -71 [ 116.307803][ T5346] usb usb3-port1: unable to enumerate USB device [ 116.448512][ T5723] petalynx 0003:18B1:0037.0001: hidraw0: USB HID v7f.fd Device [HID 18b1:0037] on usb-dummy_hcd.1-1/input0 [ 116.594877][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.627658][ T822] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 116.660501][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.834070][ T822] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 116.834104][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.835228][ T822] usb 1-1: Product: syz [ 116.835249][ T822] usb 1-1: Manufacturer: syz [ 116.835265][ T822] usb 1-1: SerialNumber: syz [ 116.894020][ T822] usb 1-1: config 0 descriptor?? [ 117.108711][ T822] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 118.248599][ T822] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 118.331414][ T822] usb 1-1: USB disconnect, device number 2 [ 118.346601][ T5723] usb 2-1: USB disconnect, device number 4 [ 119.226436][ T5968] FAULT_INJECTION: forcing a failure. [ 119.226436][ T5968] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.226473][ T5968] CPU: 0 UID: 0 PID: 5968 Comm: syz.1.64 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.226498][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.226517][ T5968] Call Trace: [ 119.226536][ T5968] [ 119.226546][ T5968] dump_stack_lvl+0xe8/0x150 [ 119.226579][ T5968] should_fail_ex+0x46b/0x600 [ 119.226618][ T5968] _copy_from_user+0x2d/0xb0 [ 119.226652][ T5968] __ia32_sys_rt_sigreturn+0x379/0x8e0 [ 119.226701][ T5968] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 119.226780][ T5968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.226821][ T5968] do_syscall_64+0x174/0x580 [ 119.226858][ T5968] ? clear_bhb_loop+0x40/0x90 [ 119.226907][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.226931][ T5968] RIP: 0033:0x7fe3895ae1d9 [ 119.226957][ T5968] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 119.226999][ T5968] RSP: 002b:00007fe387865a80 EFLAGS: 00000212 ORIG_RAX: 000000000000000f [ 119.227037][ T5968] RAX: ffffffffffffffda RBX: 00007fe389885fa0 RCX: 00007fe3895ae1d9 [ 119.227096][ T5968] RDX: 00007fe387865a80 RSI: 00007fe387865bb0 RDI: 0000000000000011 [ 119.227117][ T5968] RBP: 00007fe387866090 R08: 0000000000000000 R09: 0000000000000000 [ 119.227170][ T5968] R10: 0000200000400000 R11: 0000000000000212 R12: 0000000000000001 [ 119.227185][ T5968] R13: 00007fe389886038 R14: 00007fe389885fa0 R15: 00007ffe23f53828 [ 119.227220][ T5968] [ 119.546947][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 119.575199][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 119.701026][ T9] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 119.701057][ T9] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 119.701078][ T9] usb 1-1: config 0 has no interface number 0 [ 119.701124][ T9] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 64 [ 119.701155][ T9] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.701184][ T9] usb 1-1: config 0 interface 52 has no altsetting 0 [ 119.726551][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 119.726584][ T9] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 119.726606][ T9] usb 1-1: Manufacturer: syz [ 119.811301][ T9] usb 1-1: config 0 descriptor?? [ 119.858413][ T822] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 119.888821][ T9] hub 1-1:0.52: bad descriptor, ignoring hub [ 119.888856][ T9] hub 1-1:0.52: probe with driver hub failed with error -5 [ 120.032537][ T5982] FAULT_INJECTION: forcing a failure. [ 120.032537][ T5982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.032569][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: syz.2.69 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.032589][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.032599][ T5982] Call Trace: [ 120.032606][ T5982] [ 120.032614][ T5982] dump_stack_lvl+0xe8/0x150 [ 120.032642][ T5982] should_fail_ex+0x46b/0x600 [ 120.032684][ T5982] _copy_to_user+0x31/0xb0 [ 120.032709][ T5982] simple_read_from_buffer+0xe1/0x170 [ 120.032735][ T5982] proc_fail_nth_read+0x1be/0x230 [ 120.032758][ T5982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.032782][ T5982] ? rw_verify_area+0x2ac/0x4e0 [ 120.032810][ T5982] ? preempt_schedule_common+0x82/0xd0 [ 120.032838][ T5982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.032861][ T5982] vfs_read+0x212/0xa80 [ 120.032895][ T5982] ? __pfx_vfs_read+0x10/0x10 [ 120.032923][ T5982] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.032954][ T5982] ? lockdep_hardirqs_on+0x7a/0x110 [ 120.032983][ T5982] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 120.033013][ T5982] ? mutex_lock_nested+0x152/0x1d0 [ 120.033034][ T5982] ? fdget_pos+0x252/0x320 [ 120.033067][ T5982] ksys_read+0x156/0x270 [ 120.033104][ T5982] ? __pfx_ksys_read+0x10/0x10 [ 120.033143][ T5982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.033169][ T5982] do_syscall_64+0x174/0x580 [ 120.033202][ T5982] ? trace_irq_disable+0x3b/0x140 [ 120.033222][ T5982] ? clear_bhb_loop+0x40/0x90 [ 120.033243][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.033260][ T5982] RIP: 0033:0x7eff0d10d68e [ 120.033277][ T5982] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.033291][ T5982] RSP: 002b:00007eff0b384fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.033309][ T5982] RAX: ffffffffffffffda RBX: 00007eff0b3856c0 RCX: 00007eff0d10d68e [ 120.033322][ T5982] RDX: 000000000000000f RSI: 00007eff0b3850a0 RDI: 0000000000000007 [ 120.033333][ T5982] RBP: 00007eff0b385090 R08: 0000000000000000 R09: 0000000000000000 [ 120.033344][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.033355][ T5982] R13: 00007eff0d3c6128 R14: 00007eff0d3c6090 R15: 00007ffdbc707bd8 [ 120.033383][ T5982] [ 120.201268][ T822] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.249653][ T822] usb 2-1: not running at top speed; connect to a high speed hub [ 120.300975][ T822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.301001][ T822] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.312407][ T822] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 120.312437][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.312457][ T822] usb 2-1: Product: syz [ 120.312472][ T822] usb 2-1: Manufacturer: syz [ 120.312486][ T822] usb 2-1: SerialNumber: syz [ 120.426246][ T9] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input5 [ 120.621943][ T5976] netlink: 132 bytes leftover after parsing attributes in process `syz.1.67'. [ 121.070785][ T822] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 121.127185][ T822] usb 2-1: 3:0: cannot get min/max values for control 4 (id 3) [ 121.129219][ T822] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 121.133103][ T822] usb 2-1: 3:0: cannot get min/max values for control 8 (id 3) [ 121.236397][ T5602] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.385865][ T5602] usb 4-1: Using ep0 maxpacket: 32 [ 121.388268][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 121.388304][ T5602] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 121.447247][ T5602] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 121.447280][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 121.447302][ T5602] usb 4-1: Product: syz [ 121.447317][ T5602] usb 4-1: Manufacturer: syz [ 121.447333][ T5602] usb 4-1: SerialNumber: syz [ 121.497435][ T5723] usb 1-1: USB disconnect, device number 3 [ 121.529848][ T5602] usb 4-1: config 0 descriptor?? [ 121.530650][ T5989] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.856118][ T6002] FAULT_INJECTION: forcing a failure. [ 121.856118][ T6002] name failslab, interval 1, probability 0, space 0, times 0 [ 121.856160][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.1.76 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.856180][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.856191][ T6002] Call Trace: [ 121.856198][ T6002] [ 121.856205][ T6002] dump_stack_lvl+0xe8/0x150 [ 121.856233][ T6002] should_fail_ex+0x46b/0x600 [ 121.856265][ T6002] should_failslab+0xa8/0x100 [ 121.856292][ T6002] __kmalloc_noprof+0xdf/0x7b0 [ 121.856313][ T6002] ? sock_kmalloc+0xd6/0x160 [ 121.856334][ T6002] sock_kmalloc+0xd6/0x160 [ 121.856354][ T6002] ____sys_sendmsg+0x1ca/0x870 [ 121.856387][ T6002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.856426][ T6002] ? import_iovec+0x73/0xa0 [ 121.856453][ T6002] ___sys_sendmsg+0x2a5/0x360 [ 121.856482][ T6002] ? __lock_acquire+0x6b5/0x2d10 [ 121.856509][ T6002] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.856545][ T6002] ? kstrtouint+0x6e/0xe0 [ 121.856596][ T6002] ? __fget_files+0x2a/0x420 [ 121.856618][ T6002] ? __fget_files+0x3a6/0x420 [ 121.856649][ T6002] __sys_sendmmsg+0x282/0x4e0 [ 121.856688][ T6002] ? __pfx___sys_sendmmsg+0x10/0x10 [ 121.856732][ T6002] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 121.856774][ T6002] ? ksys_write+0x248/0x270 [ 121.856801][ T6002] ? __pfx_ksys_write+0x10/0x10 [ 121.856830][ T6002] __x64_sys_sendmmsg+0xa0/0xc0 [ 121.856858][ T6002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.856876][ T6002] do_syscall_64+0x174/0x580 [ 121.856903][ T6002] ? trace_irq_disable+0x3b/0x140 [ 121.856924][ T6002] ? clear_bhb_loop+0x40/0x90 [ 121.856957][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.856976][ T6002] RIP: 0033:0x7fe38960ce59 [ 121.856992][ T6002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.857010][ T6002] RSP: 002b:00007fe387866028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 121.857030][ T6002] RAX: ffffffffffffffda RBX: 00007fe389885fa0 RCX: 00007fe38960ce59 [ 121.857043][ T6002] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 121.857054][ T6002] RBP: 00007fe387866090 R08: 0000000000000000 R09: 0000000000000000 [ 121.857065][ T6002] R10: 0000000000004040 R11: 0000000000000246 R12: 0000000000000001 [ 121.857077][ T6002] R13: 00007fe389886038 R14: 00007fe389885fa0 R15: 00007ffe23f53828 [ 121.857106][ T6002] [ 122.165681][ T5602] usb 4-1: USB disconnect, device number 3 [ 122.298010][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 122.406812][ T5722] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.418155][ T822] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 122.556773][ T5722] usb 3-1: Using ep0 maxpacket: 8 [ 122.572126][ T5722] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.583230][ T5722] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.583288][ T5722] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 30, changing to 8 [ 122.583318][ T5722] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 42732, setting to 1024 [ 122.636036][ T5722] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 122.636066][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.636086][ T5722] usb 3-1: Product: syz [ 122.636100][ T5722] usb 3-1: Manufacturer: syz [ 122.636115][ T5722] usb 3-1: SerialNumber: syz [ 122.714208][ T5986] netlink: 68 bytes leftover after parsing attributes in process `syz.3.70'. [ 122.833587][ T6000] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.845224][ T822] usb 2-1: USB disconnect, device number 5 [ 123.539509][ T5722] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 123.838761][ T5722] usb 3-1: USB disconnect, device number 6 [ 124.467895][ T822] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.590154][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.667951][ T822] usb 2-1: Using ep0 maxpacket: 8 [ 124.687845][ T822] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.690293][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 124.690329][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.690355][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 124.690384][ T822] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 124.690411][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 124.690435][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26668, setting to 1024 [ 124.690463][ T822] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 124.694965][ T822] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 124.694998][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.695014][ T822] usb 2-1: Product: syz [ 124.695053][ T822] usb 2-1: Manufacturer: syz [ 124.695069][ T822] usb 2-1: SerialNumber: syz [ 124.862564][ T822] usb 2-1: config 0 descriptor?? [ 124.864888][ T6031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.865150][ T6031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.886650][ T5722] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 124.916859][ T822] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.037771][ T5722] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 125.037800][ T5722] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 125.037821][ T5722] usb 3-1: config 0 has no interface number 0 [ 125.037867][ T5722] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 64 [ 125.037895][ T5722] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.037924][ T5722] usb 3-1: config 0 interface 52 has no altsetting 0 [ 125.039190][ T5722] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 125.039218][ T5722] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 125.039241][ T5722] usb 3-1: Manufacturer: syz [ 125.126459][ T5722] usb 3-1: config 0 descriptor?? [ 125.133236][ T5722] hub 3-1:0.52: bad descriptor, ignoring hub [ 125.133277][ T5722] hub 3-1:0.52: probe with driver hub failed with error -5 [ 125.196594][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.217571][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.225549][ T5602] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.401324][ T5722] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input6 [ 125.420534][ T5602] usb 4-1: Using ep0 maxpacket: 8 [ 125.442844][ T5346] usb 2-1: USB disconnect, device number 6 [ 125.444693][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 125.444720][ T5602] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 125.504304][ T5602] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 125.504461][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.504485][ T5602] usb 4-1: Product: syz [ 125.504502][ T5602] usb 4-1: Manufacturer: syz [ 125.504517][ T5602] usb 4-1: SerialNumber: syz [ 125.822439][ T5602] usb 4-1: config 0 descriptor?? [ 125.972761][ T5722] usb 3-1: Failed to suspend device, error -71 [ 125.992188][ T5722] usb 3-1: USB disconnect, device number 7 [ 126.334886][ T6066] binder: 6049:6066 ioctl c0306201 200000000080 returned -14 [ 126.528695][ T6050] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 126.528724][ T6050] overlayfs: missing 'lowerdir' [ 126.623923][ T10] usb 4-1: USB disconnect, device number 4 [ 127.635510][ T5602] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 127.736678][ T5723] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.802366][ T5602] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 127.802400][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.802422][ T5602] usb 4-1: Product: syz [ 127.802439][ T5602] usb 4-1: Manufacturer: syz [ 127.802455][ T5602] usb 4-1: SerialNumber: syz [ 127.847277][ T5602] usb 4-1: config 0 descriptor?? [ 127.928996][ T5723] usb 3-1: Using ep0 maxpacket: 32 [ 127.938769][ T5723] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 127.938800][ T5723] usb 3-1: config 0 has no interface number 0 [ 127.938848][ T5723] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.938878][ T5723] usb 3-1: config 0 interface 85 has no altsetting 0 [ 127.943675][ T5723] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 127.943708][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.943730][ T5723] usb 3-1: Product: syz [ 127.943745][ T5723] usb 3-1: Manufacturer: syz [ 127.943760][ T5723] usb 3-1: SerialNumber: syz [ 128.013469][ T5723] usb 3-1: config 0 descriptor?? [ 128.051911][ T5602] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 128.740068][ T5723] appletouch 3-1:0.85: Geyser mode initialized. [ 128.756782][ T5723] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input7 [ 128.963877][ T5723] usb 3-1: USB disconnect, device number 8 [ 128.964008][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 129.031489][ T5602] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 129.117607][ T5602] usb 4-1: USB disconnect, device number 5 [ 129.262239][ T5723] appletouch 3-1:0.85: input: appletouch disconnected [ 129.414135][ T6123] random: crng reseeded on system resumption [ 129.438342][ T6123] Restarting kernel threads ... [ 129.439397][ T6123] Done restarting kernel threads. [ 129.997723][ T6140] random: crng reseeded on system resumption [ 130.366562][ T5723] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.391002][ T6147] sg_write: data in/out 635269/136 bytes for SCSI command 0x0-- guessing data in; [ 130.391002][ T6147] program syz.3.124 not setting count and/or reply_len properly [ 130.506103][ T5723] usb 3-1: device descriptor read/64, error -71 [ 130.536455][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 130.695223][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 130.695253][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.695273][ T10] usb 1-1: Product: syz [ 130.695288][ T10] usb 1-1: Manufacturer: syz [ 130.695303][ T10] usb 1-1: SerialNumber: syz [ 130.730884][ T10] usb 1-1: config 0 descriptor?? [ 130.756238][ T5723] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 130.815487][ T5602] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.895510][ T5723] usb 3-1: device descriptor read/64, error -71 [ 130.938427][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 130.975568][ T5602] usb 4-1: Using ep0 maxpacket: 8 [ 130.977889][ T5602] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.977930][ T5602] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.981823][ T5602] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 130.981854][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.981934][ T5602] usb 4-1: Product: syz [ 130.981951][ T5602] usb 4-1: Manufacturer: syz [ 130.981966][ T5602] usb 4-1: SerialNumber: syz [ 131.043007][ T5723] usb usb3-port1: attempt power cycle [ 131.089903][ T5602] usb 4-1: config 0 descriptor?? [ 131.187922][ T5602] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 131.229746][ T6158] FAULT_INJECTION: forcing a failure. [ 131.229746][ T6158] name failslab, interval 1, probability 0, space 0, times 0 [ 131.229776][ T6158] CPU: 0 UID: 0 PID: 6158 Comm: syz.1.131 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.229797][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.229808][ T6158] Call Trace: [ 131.229815][ T6158] [ 131.229823][ T6158] dump_stack_lvl+0xe8/0x150 [ 131.229850][ T6158] should_fail_ex+0x46b/0x600 [ 131.229884][ T6158] should_failslab+0xa8/0x100 [ 131.229910][ T6158] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 131.229934][ T6158] ? __alloc_skb+0x1d0/0x7d0 [ 131.229960][ T6158] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 131.229993][ T6158] __alloc_skb+0x1d0/0x7d0 [ 131.230019][ T6158] ? __might_fault+0xaf/0x130 [ 131.230044][ T6158] alloc_skb_with_frags+0xc8/0x760 [ 131.230082][ T6158] sock_alloc_send_pskb+0x884/0x9a0 [ 131.230119][ T6158] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 131.230149][ T6158] ? iov_iter_advance+0x8b/0x1c0 [ 131.230176][ T6158] tun_get_user+0x5df/0x4450 [ 131.230226][ T6158] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 131.230247][ T6158] ? reacquire_held_locks+0x80/0x190 [ 131.230271][ T6158] ? rt_spin_lock+0x1e0/0x400 [ 131.230294][ T6158] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 131.230317][ T6158] ? __pfx_tun_get_user+0x10/0x10 [ 131.230343][ T6158] ? rt_spin_unlock+0x14f/0x200 [ 131.230369][ T6158] ? rt_spin_unlock+0x160/0x200 [ 131.230391][ T6158] ? save_netdev_trace_buffer+0x4ba/0x5f0 [ 131.230416][ T6158] ? ref_tracker_alloc+0x332/0x4a0 [ 131.230444][ T6158] ? tun_get+0x157/0x2f0 [ 131.230469][ T6158] ? vfs_write+0x629/0xba0 [ 131.230494][ T6158] ? ksys_write+0x156/0x270 [ 131.230520][ T6158] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 131.230555][ T6158] ? tun_get+0x1c/0x2f0 [ 131.230588][ T6158] ? tun_get+0x1c/0x2f0 [ 131.230618][ T6158] ? tun_get+0x1c/0x2f0 [ 131.230651][ T6158] tun_chr_write_iter+0x119/0x210 [ 131.230684][ T6158] vfs_write+0x629/0xba0 [ 131.230720][ T6158] ? __pfx_vfs_write+0x10/0x10 [ 131.230760][ T6158] ? __fget_files+0x2a/0x420 [ 131.230797][ T6158] ksys_write+0x156/0x270 [ 131.230826][ T6158] ? preempt_schedule_thunk+0x16/0x40 [ 131.230864][ T6158] ? __pfx_ksys_write+0x10/0x10 [ 131.230902][ T6158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.230927][ T6158] do_syscall_64+0x174/0x580 [ 131.230960][ T6158] ? clear_bhb_loop+0x40/0x90 [ 131.230988][ T6158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.231011][ T6158] RIP: 0033:0x7fe38960ce59 [ 131.231032][ T6158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.231050][ T6158] RSP: 002b:00007fe387866028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.231073][ T6158] RAX: ffffffffffffffda RBX: 00007fe389885fa0 RCX: 00007fe38960ce59 [ 131.231090][ T6158] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004 [ 131.231105][ T6158] RBP: 00007fe387866090 R08: 0000000000000000 R09: 0000000000000000 [ 131.231119][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.231132][ T6158] R13: 00007fe389886038 R14: 00007fe389885fa0 R15: 00007ffe23f53828 [ 131.231165][ T6158] [ 131.466562][ T5723] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 131.503803][ T5723] usb 3-1: device descriptor read/8, error -71 [ 131.617763][ T5602] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 131.678877][ T5602] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 131.715688][ T5602] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 131.736347][ T5723] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 131.757097][ T5723] usb 3-1: device descriptor read/8, error -71 [ 131.870684][ T5723] usb usb3-port1: unable to enumerate USB device [ 131.886449][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 131.897000][ T10] usb 1-1: USB disconnect, device number 4 [ 132.521345][ T6170] random: crng reseeded on system resumption [ 132.558265][ T6170] Restarting kernel threads ... [ 132.574696][ T6170] Done restarting kernel threads. [ 132.822330][ T6174] sg_write: data in/out 635269/136 bytes for SCSI command 0x0-- guessing data in; [ 132.822330][ T6174] program syz.0.138 not setting count and/or reply_len properly [ 132.951214][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.966243][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.288701][ T6184] FAULT_INJECTION: forcing a failure. [ 133.288701][ T6184] name failslab, interval 1, probability 0, space 0, times 0 [ 133.288742][ T6184] CPU: 1 UID: 0 PID: 6184 Comm: syz.2.140 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.288769][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 133.288783][ T6184] Call Trace: [ 133.288791][ T6184] [ 133.288800][ T6184] dump_stack_lvl+0xe8/0x150 [ 133.288833][ T6184] should_fail_ex+0x46b/0x600 [ 133.288874][ T6184] should_failslab+0xa8/0x100 [ 133.288906][ T6184] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 133.288934][ T6184] ? __d_alloc+0x37/0x6f0 [ 133.288969][ T6184] __d_alloc+0x37/0x6f0 [ 133.289017][ T6184] d_alloc_parallel+0xe6/0x1610 [ 133.289053][ T6184] ? do_raw_spin_lock+0x12b/0x2f0 [ 133.289085][ T6184] ? __lock_acquire+0x6b5/0x2d10 [ 133.289117][ T6184] ? __pfx_d_alloc_parallel+0x10/0x10 [ 133.289154][ T6184] ? __rt_spin_lock_init+0x3e/0x50 [ 133.289189][ T6184] ? __init_waitqueue_head+0xae/0x160 [ 133.289218][ T6184] __lookup_slow+0x152/0x440 [ 133.289249][ T6184] ? __pfx___lookup_slow+0x10/0x10 [ 133.289290][ T6184] ? down_read+0x156/0x200 [ 133.289310][ T6184] ? __pfx_down_read+0x10/0x10 [ 133.289333][ T6184] ? lookup_fast+0x1a3/0x5b0 [ 133.289366][ T6184] lookup_slow+0x53/0x70 [ 133.289395][ T6184] path_lookupat+0x3f5/0x8c0 [ 133.289438][ T6184] filename_lookup+0x256/0x5d0 [ 133.289471][ T6184] ? __pfx_filename_lookup+0x10/0x10 [ 133.289528][ T6184] ? strncpy_from_user+0x150/0x2b0 [ 133.289572][ T6184] path_listxattrat+0x13b/0x3f0 [ 133.289610][ T6184] ? __pfx_path_listxattrat+0x10/0x10 [ 133.289655][ T6184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.289681][ T6184] do_syscall_64+0x174/0x580 [ 133.289715][ T6184] ? trace_irq_disable+0x3b/0x140 [ 133.289740][ T6184] ? clear_bhb_loop+0x40/0x90 [ 133.289769][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.289792][ T6184] RIP: 0033:0x7eff0d14ce59 [ 133.289812][ T6184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.289846][ T6184] RSP: 002b:00007eff0b385028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 133.289870][ T6184] RAX: ffffffffffffffda RBX: 00007eff0d3c6090 RCX: 00007eff0d14ce59 [ 133.289887][ T6184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 133.289901][ T6184] RBP: 00007eff0b385090 R08: 0000000000000000 R09: 0000000000000000 [ 133.289915][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.289928][ T6184] R13: 00007eff0d3c6128 R14: 00007eff0d3c6090 R15: 00007ffdbc707bd8 [ 133.289964][ T6184] [ 133.640797][ T10] usb 4-1: USB disconnect, device number 6 [ 134.039658][ T6198] random: crng reseeded on system resumption [ 134.081253][ T6198] Restarting kernel threads ... [ 134.082862][ T6198] Done restarting kernel threads. [ 134.399054][ T6213] FAULT_INJECTION: forcing a failure. [ 134.399054][ T6213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.399089][ T6213] CPU: 1 UID: 0 PID: 6213 Comm: syz.3.153 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.399114][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.399126][ T6213] Call Trace: [ 134.399135][ T6213] [ 134.399144][ T6213] dump_stack_lvl+0xe8/0x150 [ 134.399176][ T6213] should_fail_ex+0x46b/0x600 [ 134.399213][ T6213] _copy_from_user+0x2d/0xb0 [ 134.399240][ T6213] ___sys_sendmsg+0x1c6/0x360 [ 134.399275][ T6213] ? __lock_acquire+0x6b5/0x2d10 [ 134.399306][ T6213] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.399375][ T6213] ? __fget_files+0x2a/0x420 [ 134.399401][ T6213] ? __fget_files+0x3a6/0x420 [ 134.399438][ T6213] __x64_sys_sendmsg+0x1c3/0x2a0 [ 134.399477][ T6213] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.399524][ T6213] ? __pfx_ksys_write+0x10/0x10 [ 134.399565][ T6213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.399590][ T6213] do_syscall_64+0x174/0x580 [ 134.399623][ T6213] ? trace_irq_disable+0x3b/0x140 [ 134.399649][ T6213] ? clear_bhb_loop+0x40/0x90 [ 134.399676][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.399703][ T6213] RIP: 0033:0x7f6b316ace59 [ 134.399724][ T6213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.399742][ T6213] RSP: 002b:00007f6b2f906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.399766][ T6213] RAX: ffffffffffffffda RBX: 00007f6b31925fa0 RCX: 00007f6b316ace59 [ 134.399783][ T6213] RDX: 0000000000000850 RSI: 00002000000004c0 RDI: 0000000000000007 [ 134.399797][ T6213] RBP: 00007f6b2f906090 R08: 0000000000000000 R09: 0000000000000000 [ 134.399811][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.399825][ T6213] R13: 00007f6b31926038 R14: 00007f6b31925fa0 R15: 00007fff830425f8 [ 134.399859][ T6213] [ 134.665588][ T5723] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.825564][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 134.828588][ T5723] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 134.828616][ T5723] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 134.828639][ T5723] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 134.828692][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.828716][ T5723] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.828742][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.828765][ T5723] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 134.828791][ T5723] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 134.828835][ T5723] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 134.828860][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.888900][ T5723] usb 2-1: config 0 descriptor?? [ 135.148676][ T5723] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 135.210034][ T6227] random: crng reseeded on system resumption [ 135.247751][ T6227] Restarting kernel threads ... [ 135.250938][ T6227] Done restarting kernel threads. [ 135.395815][ T5723] usb 2-1: USB disconnect, device number 7 [ 135.435037][ T5723] usblp0: removed [ 135.683702][ T6233] netlink: 72 bytes leftover after parsing attributes in process `syz.3.162'. [ 135.969903][ T6254] random: crng reseeded on system resumption [ 135.998198][ T6254] Restarting kernel threads ... [ 135.999351][ T6254] Done restarting kernel threads. [ 136.206723][ T5346] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 136.234564][ T6259] FAULT_INJECTION: forcing a failure. [ 136.234564][ T6259] name failslab, interval 1, probability 0, space 0, times 0 [ 136.234598][ T6259] CPU: 1 UID: 0 PID: 6259 Comm: syz.0.173 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 136.234623][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.234637][ T6259] Call Trace: [ 136.234645][ T6259] [ 136.234654][ T6259] dump_stack_lvl+0xe8/0x150 [ 136.234686][ T6259] should_fail_ex+0x46b/0x600 [ 136.234726][ T6259] should_failslab+0xa8/0x100 [ 136.234759][ T6259] kmem_cache_alloc_noprof+0x87/0x680 [ 136.234786][ T6259] ? alloc_empty_file+0x5b/0x1d0 [ 136.234818][ T6259] alloc_empty_file+0x5b/0x1d0 [ 136.234845][ T6259] path_openat+0x11b/0x3960 [ 136.234885][ T6259] ? try_to_take_rt_mutex+0x840/0xb00 [ 136.234913][ T6259] ? arch_stack_walk+0xfb/0x150 [ 136.234955][ T6259] ? __lock_acquire+0x6b5/0x2d10 [ 136.234988][ T6259] ? __pfx_path_openat+0x10/0x10 [ 136.235028][ T6259] ? kasan_save_track+0x4f/0x80 [ 136.235052][ T6259] ? kasan_save_track+0x3e/0x80 [ 136.235075][ T6259] ? __kasan_slab_alloc+0x6c/0x80 [ 136.235111][ T6259] ? do_raw_spin_lock+0x12b/0x2f0 [ 136.235143][ T6259] do_file_open+0x23e/0x4a0 [ 136.235175][ T6259] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 136.235212][ T6259] ? __pfx_do_file_open+0x10/0x10 [ 136.235242][ T6259] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 136.235291][ T6259] ? alloc_fd+0x679/0x6f0 [ 136.235332][ T6259] do_sys_openat2+0x115/0x200 [ 136.235361][ T6259] ? __pfx_do_sys_openat2+0x10/0x10 [ 136.235386][ T6259] ? ksys_write+0x248/0x270 [ 136.235413][ T6259] ? __pfx_ksys_write+0x10/0x10 [ 136.235441][ T6259] __x64_sys_openat+0x138/0x170 [ 136.235464][ T6259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.235483][ T6259] do_syscall_64+0x174/0x580 [ 136.235511][ T6259] ? trace_irq_disable+0x3b/0x140 [ 136.235535][ T6259] ? clear_bhb_loop+0x40/0x90 [ 136.235557][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.235574][ T6259] RIP: 0033:0x7f0ba4e8ce59 [ 136.235590][ T6259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.235605][ T6259] RSP: 002b:00007f0ba30de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 136.235624][ T6259] RAX: ffffffffffffffda RBX: 00007f0ba5105fa0 RCX: 00007f0ba4e8ce59 [ 136.235638][ T6259] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 136.235650][ T6259] RBP: 00007f0ba30de090 R08: 0000000000000000 R09: 0000000000000000 [ 136.235661][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.235672][ T6259] R13: 00007f0ba5106038 R14: 00007f0ba5105fa0 R15: 00007fffbfa701d8 [ 136.235703][ T6259] [ 136.383343][ T5346] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 136.383373][ T5346] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 136.383393][ T5346] usb 4-1: config 0 has no interface number 0 [ 136.383439][ T5346] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 64 [ 136.383470][ T5346] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.383499][ T5346] usb 4-1: config 0 interface 52 has no altsetting 0 [ 136.391633][ T5346] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 136.391664][ T5346] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 136.391686][ T5346] usb 4-1: Manufacturer: syz [ 136.599866][ T5346] usb 4-1: config 0 descriptor?? [ 136.605101][ T5346] hub 4-1:0.52: bad descriptor, ignoring hub [ 136.605133][ T5346] hub 4-1:0.52: probe with driver hub failed with error -5 [ 136.847693][ T5346] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input8 [ 137.225949][ T5346] usb 4-1: USB disconnect, device number 7 [ 137.829550][ T6294] sg_write: data in/out 635269/136 bytes for SCSI command 0x0-- guessing data in; [ 137.829550][ T6294] program syz.3.187 not setting count and/or reply_len properly [ 138.635572][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 138.797306][ T10] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 138.797339][ T10] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 138.797361][ T10] usb 1-1: config 0 has no interface number 0 [ 138.797409][ T10] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 64 [ 138.797439][ T10] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.797468][ T10] usb 1-1: config 0 interface 52 has no altsetting 0 [ 138.800431][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 138.800461][ T10] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 138.800483][ T10] usb 1-1: Manufacturer: syz [ 138.900255][ T10] usb 1-1: config 0 descriptor?? [ 138.911868][ T10] hub 1-1:0.52: bad descriptor, ignoring hub [ 138.911907][ T10] hub 1-1:0.52: probe with driver hub failed with error -5 [ 139.154293][ T10] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input9 [ 139.245661][ T5722] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 139.411193][ T5722] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.411223][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.411244][ T5722] usb 4-1: Product: syz [ 139.411259][ T5722] usb 4-1: Manufacturer: syz [ 139.411273][ T5722] usb 4-1: SerialNumber: syz [ 139.463907][ T5722] usb 4-1: config 0 descriptor?? [ 139.680103][ T5722] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 139.680334][ T10] usb 1-1: USB disconnect, device number 5 [ 139.743027][ T6333] syz.2.206 (6333) used greatest stack depth: 18808 bytes left [ 140.356016][ T6357] random: crng reseeded on system resumption [ 140.777558][ T5722] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 140.813007][ T6357] Restarting kernel threads ... [ 140.814892][ T5722] usb 4-1: USB disconnect, device number 8 [ 140.857580][ T6357] Done restarting kernel threads. [ 140.885596][ T5818] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 141.038924][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 141.050605][ T5818] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 141.050670][ T5818] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 141.050693][ T5818] usb 3-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 141.050739][ T5818] usb 3-1: config 166 has no interface number 0 [ 141.050806][ T5818] usb 3-1: config 166 has no interface number 1 [ 141.050968][ T5818] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 141.051032][ T5818] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 141.051136][ T5818] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 141.051210][ T5818] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 141.051275][ T5818] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 141.051348][ T5818] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0 [ 141.051413][ T5818] usb 3-1: config 166 interface 177 has no altsetting 0 [ 141.051468][ T5818] usb 3-1: config 166 interface 34 has no altsetting 0 [ 141.188859][ T5818] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 141.188882][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.188898][ T5818] usb 3-1: Product: syz [ 141.188915][ T5818] usb 3-1: Manufacturer: syz [ 141.188926][ T5818] usb 3-1: SerialNumber: syz [ 141.516877][ T5818] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 141.689930][ T5818] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 141.784768][ T5818] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 141.784815][ T5818] uvcvideo 3-1:166.34: No valid video chain found. [ 141.811250][ T5818] usb 3-1: USB disconnect, device number 13 [ 142.416759][ T5818] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 142.578469][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.578506][ T5818] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 142.578524][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.583569][ T5818] usb 2-1: config 0 descriptor?? [ 142.666781][ T5346] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 142.695825][ T5722] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 142.705579][ T5602] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.822682][ T6409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.824783][ T6409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.829334][ T5346] usb 4-1: Using ep0 maxpacket: 32 [ 142.853748][ T5346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 142.853784][ T5346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 142.891510][ T5602] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 142.891540][ T5602] usb 1-1: config 0 has no interface number 0 [ 142.891576][ T5602] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 142.891627][ T5602] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 142.891657][ T5602] usb 1-1: config 0 interface 48 has no altsetting 0 [ 142.944043][ T5722] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 142.944078][ T5722] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 142.973957][ T5722] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 142.973991][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.974014][ T5722] usb 3-1: Product: syz [ 142.974089][ T5722] usb 3-1: Manufacturer: syz [ 142.974106][ T5722] usb 3-1: SerialNumber: syz [ 142.992744][ T5602] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 142.992777][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.992813][ T5602] usb 1-1: Product: syz [ 142.992828][ T5602] usb 1-1: Manufacturer: syz [ 142.992844][ T5602] usb 1-1: SerialNumber: syz [ 143.045714][ T5346] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 143.045736][ T5346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.045751][ T5346] usb 4-1: Product: syz [ 143.045762][ T5346] usb 4-1: Manufacturer: syz [ 143.045772][ T5346] usb 4-1: SerialNumber: syz [ 143.104096][ T5602] usb 1-1: config 0 descriptor?? [ 143.118123][ T5818] usbhid 2-1:0.0: can't add hid device: -71 [ 143.118263][ T5818] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 143.140017][ T5722] usb 3-1: config 0 descriptor?? [ 143.141927][ T6415] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 143.142058][ T6415] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 143.154809][ T5346] usb 4-1: config 0 descriptor?? [ 143.178849][ T6417] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.198633][ T5818] usb 2-1: USB disconnect, device number 8 [ 143.246371][ T5346] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 143.349416][ T6415] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 143.349560][ T6415] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 143.473778][ T6417] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 143.474841][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.242'. [ 143.570936][ T5346] usb 4-1: USB disconnect, device number 9 [ 143.571051][ C1] kbtab 4-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 143.809407][ T5818] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 143.939714][ T5722] Error reading MAC address [ 143.966807][ T5818] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 143.968959][ T5818] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 143.968993][ T5818] usb 2-1: can't read configurations, error -61 [ 144.070667][ T5602] usb 1-1: USB disconnect, device number 6 [ 144.181386][ T5818] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 144.286184][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.48/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.357757][ T5818] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 144.360554][ T5818] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 144.360591][ T5818] usb 2-1: can't read configurations, error -61 [ 144.361007][ T5818] usb usb2-port1: attempt power cycle [ 144.707093][ T37] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 144.755637][ T5818] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 144.778151][ T5818] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 144.781996][ T5818] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 144.782034][ T5818] usb 2-1: can't read configurations, error -61 [ 144.875064][ T37] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 144.875099][ T37] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 144.875124][ T37] usb 4-1: config 0 has no interface number 0 [ 144.875178][ T37] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 64 [ 144.875210][ T37] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.875244][ T37] usb 4-1: config 0 interface 52 has no altsetting 0 [ 144.882098][ T37] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 144.882192][ T37] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 144.882255][ T37] usb 4-1: Manufacturer: syz [ 144.937067][ T5818] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 144.966266][ T5818] usb 2-1: too many configurations: 148, using maximum allowed: 8 [ 144.969820][ T5818] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 144.969848][ T5818] usb 2-1: can't read configurations, error -61 [ 144.970225][ T5818] usb usb2-port1: unable to enumerate USB device [ 144.990321][ T37] usb 4-1: config 0 descriptor?? [ 145.037653][ T37] hub 4-1:0.52: bad descriptor, ignoring hub [ 145.037699][ T37] hub 4-1:0.52: probe with driver hub failed with error -5 [ 145.288143][ T6440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.327957][ T6440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.383680][ T37] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input11 [ 145.406555][ T5602] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.565788][ T5790] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 145.565810][ T5790] #PF: supervisor read access in kernel mode [ 145.565823][ T5790] #PF: error_code(0x0000) - not-present page [ 145.565835][ T5790] PGD 800000002913d067 P4D 800000002913d067 PUD 0 [ 145.565860][ T5790] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 145.565879][ T5790] CPU: 0 UID: 0 PID: 5790 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.565900][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.565914][ T5790] Workqueue: usb_hub_wq hub_event [ 145.565936][ T5790] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 145.565957][ T5790] Code: a1 8d 4c 8b b8 c8 b2 9a 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 e0 8c 22 8e 4d 8b 3f 49 81 ff e0 8c 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 11 f7 fd 02 84 c0 74 0e 49 8b 07 49 [ 145.565972][ T5790] RSP: 0018:ffffc900056a7828 EFLAGS: 00010203 [ 145.565987][ T5790] RAX: 0000000000000000 RBX: ffff88802f8e9f00 RCX: 0000000000000000 [ 145.565999][ T5790] RDX: 0000000071386700 RSI: 0000000000000001 RDI: ffffffff8bac2120 [ 145.566011][ T5790] RBP: 0000000000100000 R08: ffffffff8b3cba20 R09: ffffffff8e1cac60 [ 145.566024][ T5790] R10: dffffc0000000000 R11: fffffbfff1f5d99f R12: 0000000000000002 [ 145.566045][ T5790] R13: 0000000000000001 R14: ffff8880350f8500 R15: 0000000000000000 [ 145.566057][ T5790] FS: 0000000000000000(0000) GS:ffff888125c7e000(0000) knlGS:0000000000000000 [ 145.566072][ T5790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.566084][ T5790] CR2: 0000000000000010 CR3: 000000004074e000 CR4: 00000000003526f0 [ 145.566099][ T5790] Call Trace: [ 145.566105][ T5790] [ 145.566115][ T5790] hub_event+0x150/0x4f60 [ 145.566132][ T5790] ? do_raw_spin_lock+0x12b/0x2f0 [ 145.566152][ T5790] ? __lock_acquire+0x6b5/0x2d10 [ 145.566173][ T5790] ? look_up_lock_class+0x57/0x110 [ 145.566203][ T5790] ? __lock_acquire+0x6b5/0x2d10 [ 145.566231][ T5790] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 145.566249][ T5790] ? __pfx_hub_event+0x10/0x10 [ 145.566266][ T5790] ? process_one_work+0x8be/0x1630 [ 145.566296][ T5790] ? process_one_work+0x8be/0x1630 [ 145.566321][ T5790] process_one_work+0x98b/0x1630 [ 145.566354][ T5790] ? __pfx_process_one_work+0x10/0x10 [ 145.566378][ T5790] ? do_raw_spin_lock+0x12b/0x2f0 [ 145.566400][ T5790] worker_thread+0xb49/0x1140 [ 145.566430][ T5790] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 145.566462][ T5790] kthread+0x388/0x470 [ 145.566481][ T5790] ? __pfx_worker_thread+0x10/0x10 [ 145.566507][ T5790] ? __pfx_kthread+0x10/0x10 [ 145.566526][ T5790] ret_from_fork+0x514/0xb70 [ 145.566550][ T5790] ? __pfx_ret_from_fork+0x10/0x10 [ 145.566570][ T5790] ? __switch_to+0xc79/0x1410 [ 145.566588][ T5790] ? __pfx_kthread+0x10/0x10 [ 145.566607][ T5790] ret_from_fork_asm+0x1a/0x30 [ 145.566636][ T5790] [ 145.566643][ T5790] Modules linked in: [ 145.566653][ T5790] CR2: 0000000000000010 [ 145.566673][ T5790] ---[ end trace 0000000000000000 ]--- [ 145.566688][ T5790] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 145.566707][ T5790] Code: a1 8d 4c 8b b8 c8 b2 9a 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 e0 8c 22 8e 4d 8b 3f 49 81 ff e0 8c 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 11 f7 fd 02 84 c0 74 0e 49 8b 07 49 [ 145.566721][ T5790] RSP: 0018:ffffc900056a7828 EFLAGS: 00010203 [ 145.566736][ T5790] RAX: 0000000000000000 RBX: ffff88802f8e9f00 RCX: 0000000000000000 [ 145.566747][ T5790] RDX: 0000000071386700 RSI: 0000000000000001 RDI: ffffffff8bac2120 [ 145.566759][ T5790] RBP: 0000000000100000 R08: ffffffff8b3cba20 R09: ffffffff8e1cac60 [ 145.566772][ T5790] R10: dffffc0000000000 R11: fffffbfff1f5d99f R12: 0000000000000002 [ 145.566784][ T5790] R13: 0000000000000001 R14: ffff8880350f8500 R15: 0000000000000000 [ 145.566796][ T5790] FS: 0000000000000000(0000) GS:ffff888125c7e000(0000) knlGS:0000000000000000 [ 145.566811][ T5790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.566823][ T5790] CR2: 0000000000000010 CR3: 000000004074e000 CR4: 00000000003526f0 [ 145.566840][ T5790] Kernel panic - not syncing: Fatal exception [ 145.567437][ T5790] Kernel Offset: disabled