last executing test programs: 28.641711273s ago: executing program 3 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x2c}}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x40045108, 0xfffffffffffffffe) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r5 = fsopen(&(0x7f0000000200)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r4, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008810}, 0x40) 28.503618749s ago: executing program 3 (id=272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@rdmsr={0x66, 0x18, {0x40000072}}], 0x18}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) ioctl$KVM_RUN(r3, 0xae80, 0x0) 28.379257389s ago: executing program 3 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') link(&(0x7f0000000080)='./file0\x00', 0x0) lstat(&(0x7f0000001d00)='./file0\x00', 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3edfcc54ad1233f4e31af5e812744bcc662ef6fcd62d1047e64606cda8b0899548c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)=@delqdisc={0xc8, 0x25, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0x10, 0xffe0}, {0x10, 0x5}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x4c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x462c}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x8000, &(0x7f0000000040)=0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x400040, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r2, 0x0}]) 26.073638919s ago: executing program 3 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) tkill(0x0, 0xb) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200031010203010902120001000000000904"], 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000380)='2\x00', 0x2) (async) read$FUSE(r1, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$9p_unix(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000004300)='./file0/file0\x00', &(0x7f0000004340), 0x20000, &(0x7f0000004380)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x10001}}, {@fscache}, {@msize}, {@posixacl}, {@cachetag={'cachetag', 0x3d, '].'}}, {@cache_readahead}], [{@uid_lt={'uid<', r3}}, {@obj_type={'obj_type', 0x3d, 'rootmode'}}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, 'mountinfo\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x99'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@subj_user={'subj_user', 0x3d, '2\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@fowner_gt={'fowner>', r3}}, {@euid_lt={'euid<', r3}}]}}) (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) rt_tgsigqueueinfo(r4, r5, 0x30, &(0x7f0000000180)={0x24, 0x1, 0xfffffff1}) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000044c0), 0x4) (async) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) 25.966614842s ago: executing program 3 (id=289): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_usbip_server_init(0x3) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000300000001"], 0x60) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) clock_gettime(0x7, &(0x7f0000000080)={0x0, 0x0}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000f80)=@broute={'broute\x00', 0x20, 0x6, 0x90, [0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x2000000005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000ffffffff00"/144]}, 0x108) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)=""/153, 0x99}, {&(0x7f0000001ec0)=""/4056, 0xfd8}, {&(0x7f0000000e80)=""/4104, 0x1008}, {&(0x7f0000000940)=""/196, 0xc4}, {&(0x7f0000000e00)=""/94, 0x5e}, {&(0x7f00000002c0)=""/108, 0x6c}], 0x6}, 0x2000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00022bfd70000000ffdf02000000080062000000000008000a01ff00fffe"], 0x24}, 0x1, 0x0, 0x0, 0x24042016}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r11, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r12}, @void}}}, 0x28}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="010000009b0800000060030000000000", @ANYRES64=r6, @ANYRES64=r7/1000+10000, @ANYRES64=r13, @ANYRES64=r14/1000+60000, @ANYBLOB="030000800100000004000020000100001350f9a881eff6eb15dc9d2123dcadbd204a0b43da271b140a6069e439f70f38a33ddf88d2382c1af11f0c6ea0ff765427e30cbf00d0f425650cd9356b4fd799f3d0699b2898bf7d651ce1ae90d91f093febe6b857a19dde9b3ef5052cc38d6ac02a97539329f4d887847dc6b90542b8ca95a9ccc0a07bff9eb32ee0040ffb0010a62e3db3160168714feaabe7726f2324cc92cc7bcf984a660a1c5209fe19338251ff678e83d201fc315ecde4aaf7aa0d3f98989815ad4e64327370d69cbf60979bc5fb6c4a879488ca4ebde4b23a2fb35fe0be5b37b473664bed7bd05284ce4e2e"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000015) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) creat(&(0x7f00000001c0)='./file0\x00', 0x8) 25.777064138s ago: executing program 3 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') link(&(0x7f0000000080)='./file0\x00', 0x0) lstat(&(0x7f0000001d00)='./file0\x00', 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3edfcc54ad1233f4e31af5e812744bcc662ef6fcd62d1047e64606cda8b0899548c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)=@delqdisc={0xc8, 0x25, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0x10, 0xffe0}, {0x10, 0x5}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x4c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x462c}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000540)={0x40, 0x0, 0xb, "ec7bd583fa9558e0f3ec0e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0x40, 0x21, 0xbb, {0xbb, 0x7aa66ed8d0a195d2, "faaa6413c82302a10464419b3d4eef0d775f2c67a533b3912ad2ff204de319cfea131b063edc97819787bf2497a064ab1387c97dd37275d9f70b82e7a10c5f7fe595c867e69cf7b2f887cac29c1a85d2074d7e9d3b1122e1f94bb9b889aa6b1d7aacb77a7c169382a316b492e2ba181a9c069f082508397a51aff7403714a51693bcca753e25ff10cabfc2d5657eadc07d6ee0b917f108c67e61251b874d5ef9777babd8e9e20dd0e446c3c12645a6c3d6c635b04ca68c342c"}}, &(0x7f0000000200)={0x0, 0x3, 0xb9, @string={0xb9, 0x3, "c795bc886714a5c71f945629bf2c47d8599e5530d54a2482bb51fed39dbe0131f291603059f62431dba6abb06c5ce1282f9272bc6243599f44a703ef941792b9387eb5d7e103c8c0f4ebd9f74078cf6635776873decb7e2f1bc410d8cd69d55b15a4c54d67490656bfba9b266aac0885df083bbb62230af3a542293b86ac0de1810be7f226aeb53bf23cd2969612d38d8d05a04cc8a7205620618f6e8b268d6aac2060a6ff85bfd32978d49924841bcee694cda166b299"}}}, &(0x7f00000006c0)={0x44, &(0x7f00000002c0)={0x0, 0x17, 0x1d, "d1c5030cfdec3e46e7f35f2ba93b7643fe654f300b12cc9214f7d50653"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000380)={0x20, 0x81, 0x1, 'T'}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "029ee9"}, &(0x7f0000000480)={0x20, 0x83, 0x3, "b77147"}, &(0x7f00000004c0)={0x20, 0x84, 0x3, "11ef03"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "27a526"}}) 25.551453352s ago: executing program 32 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') link(&(0x7f0000000080)='./file0\x00', 0x0) lstat(&(0x7f0000001d00)='./file0\x00', 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3edfcc54ad1233f4e31af5e812744bcc662ef6fcd62d1047e64606cda8b0899548c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)=@delqdisc={0xc8, 0x25, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0x10, 0xffe0}, {0x10, 0x5}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x4c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x462c}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000540)={0x40, 0x0, 0xb, "ec7bd583fa9558e0f3ec0e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0x40, 0x21, 0xbb, {0xbb, 0x7aa66ed8d0a195d2, "faaa6413c82302a10464419b3d4eef0d775f2c67a533b3912ad2ff204de319cfea131b063edc97819787bf2497a064ab1387c97dd37275d9f70b82e7a10c5f7fe595c867e69cf7b2f887cac29c1a85d2074d7e9d3b1122e1f94bb9b889aa6b1d7aacb77a7c169382a316b492e2ba181a9c069f082508397a51aff7403714a51693bcca753e25ff10cabfc2d5657eadc07d6ee0b917f108c67e61251b874d5ef9777babd8e9e20dd0e446c3c12645a6c3d6c635b04ca68c342c"}}, &(0x7f0000000200)={0x0, 0x3, 0xb9, @string={0xb9, 0x3, "c795bc886714a5c71f945629bf2c47d8599e5530d54a2482bb51fed39dbe0131f291603059f62431dba6abb06c5ce1282f9272bc6243599f44a703ef941792b9387eb5d7e103c8c0f4ebd9f74078cf6635776873decb7e2f1bc410d8cd69d55b15a4c54d67490656bfba9b266aac0885df083bbb62230af3a542293b86ac0de1810be7f226aeb53bf23cd2969612d38d8d05a04cc8a7205620618f6e8b268d6aac2060a6ff85bfd32978d49924841bcee694cda166b299"}}}, &(0x7f00000006c0)={0x44, &(0x7f00000002c0)={0x0, 0x17, 0x1d, "d1c5030cfdec3e46e7f35f2ba93b7643fe654f300b12cc9214f7d50653"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000380)={0x20, 0x81, 0x1, 'T'}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "029ee9"}, &(0x7f0000000480)={0x20, 0x83, 0x3, "b77147"}, &(0x7f00000004c0)={0x20, 0x84, 0x3, "11ef03"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "27a526"}}) 8.517409996s ago: executing program 0 (id=383): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r2, 0x0, 0x300, 0x5) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x0, 0x23, 0x6, {0x6, 0xc, "02855e17"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x20, 0x1, 0x6f, "3216b97283e44b5daf5364dab2f019510377b92939ab97752600722f407853af3e65af66e28b69544c8f1fb0bf3e91ef245d56797a8273ded4e5b4248b07692fae366e2d5ed3737548b6fe7d7418bd86a4891db517bda213b9604f4ccc3afd306d0bb1cf957a4b257c68e42a107a88"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x7, 0x4, 0x1000, 0xffff, 0x80, 0x5, 0x1000, 0x40, 0x6000, 0x41, 0x0, 0xffff}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0xad}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x200}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) 7.059482352s ago: executing program 4 (id=385): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x3e, [0x2, 0x9, 0x0, 0x1, 0xc, 0xea45, 0xd, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x0, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x5, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0xffffffff, 0x3, 0x1, 0x4f, 0x6, 0x9, 0x7, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x9, 0x4, 0xa, 0x8, 0x0, 0x8, 0x0, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x40004, 0xfffffff7, 0x7fff, 0x4, 0x5, 0x2, 0x56f00ca9, 0x5, 0x2a, 0x1, 0x21], [0x1, 0x9, 0x9, 0x1, 0x5, 0x6, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0xb6fe, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x0, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1fd, 0x2a0, 0x5, 0x6, 0x8, 0x7, 0x80000007], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x10, 0x1, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x1a2e, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x0, 0x2, 0x4, 0xb, 0x9, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0xff, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0xb, 0x3d3, 0xffff9a7f, 0x200, 0x3, 0x2, 0x2000003, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x7, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xfff7ff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x1, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x6, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4054}, 0x40810) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000120000000000000000000001000107144e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000080ffffffffffffff0600000000000000ffff00000000000009000000000000000200000000000000f8ffffffffffffff020000000000000001000000000000002a000000000000000000000000000000feffffffffffffff0200000000000080fcffffff2abd700005350000020001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000140)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000400)=[{}, {}, {}, {}], &(0x7f0000000080), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x2, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000280)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000080)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r7, r8, r9, 0x0, 0x4000, 0x80000003, 0xffffffff, 0x1, 0x5, 0xe, 0xc, 0x675}) write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000040000600", 0x1c) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x4) 6.919127061s ago: executing program 4 (id=386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000180)={'virt_wifi0\x00', @ifru_settings={0x6, 0x8, @fr_pvc_info=0x0}}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x400, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x44014) syz_usb_connect(0x2, 0x4a, &(0x7f0000000840)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="b6"], 0x0) 5.426980957s ago: executing program 0 (id=391): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000002280)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 'BRTI'}, 0x0, 0x1, {}, 0xc93}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x1000000, 0x2, 0x4, 0x4000, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80, "68ab0498"}, 0x0, 0x1, {0x0}}) 5.369505433s ago: executing program 0 (id=392): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xd000, 0x9ae0, 0x8000, 0x8, 0x0, [{0x3, 0x7f, 0xff, '\x00', 0x9}, {0x4, 0xd, 0x18, '\x00', 0x4}, {0x27, 0xad, 0x1}, {0x9, 0xf9, 0x9, '\x00', 0x4}, {0x6, 0x2d, 0x8, '\x00', 0x8}, {0x5, 0x4, 0x8, '\x00', 0xbc}, {0x4, 0x4, 0x7, '\x00', 0xf0}, {0x9, 0x1, 0x1, '\x00', 0x40}, {0xf9, 0x5, 0x5, '\x00', 0x4}, {0x7e, 0x9, 0x31, '\x00', 0x9}, {0x6, 0x3, 0x0, '\x00', 0x8}, {0x13, 0x7, 0xd1, '\x00', 0x7}, {0xff, 0x9, 0x46, '\x00', 0x7}, {0x0, 0x5, 0xdd, '\x00', 0xd}, {0x0, 0x0, 0x5, '\x00', 0xba}, {0x8, 0x7, 0xd4, '\x00', 0x3}, {0xa, 0x3, 0x0, '\x00', 0xfe}, {0x7, 0xf9, 0x2, '\x00', 0x5}, {0x4, 0x5, 0xe, '\x00', 0x80}, {0xe, 0x2, 0x1}, {0x3, 0x3, 0xd, '\x00', 0x5}, {0x10, 0x6, 0x6, '\x00', 0xc}, {0x6, 0x18, 0x3, '\x00', 0x40}, {0x3, 0x9, 0x72, '\x00', 0xfb}]}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1cfb00f5"], 0xfdef) 5.249601608s ago: executing program 0 (id=393): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0xcb641, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x8000000003c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1000000000000, 0x512, 0x7, 0x0, 0xfffffffffffffffd, 0xe00, 0x8000000000, 0x80, 0xffc99a3b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10007f, 0x0, 0x0, 0x0, 0x60d2, 0x0, 0x5, 0x1, 0x2}) pipe2(&(0x7f0000000040), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x24}}, 0x80) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045007, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB='\r', @ANYRES8=r0, @ANYRESHEX=r3, @ANYRES16=r2, @ANYRES16=r5], 0x0) 3.895034677s ago: executing program 4 (id=398): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0xffdd) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0x19b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8001, 0xfe, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.746828058s ago: executing program 1 (id=399): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x40100) syz_usb_connect(0x5, 0xfc, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000298f47320ac0563023b48010203010902ea00010040000009048e0101032102"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x1, 0x1000}) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d2d458dd69928e1ac0000fcffffff000000000500", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$VHOST_VDPA_GET_STATUS(r1, 0x8001af71, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f04f8e9d3ccc6e54d7a48c2030019200000"], 0x7) 3.156984844s ago: executing program 2 (id=400): getpeername$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x3, "4ef4deb02c7a265c167d17c273b968d10f5f938de58aa7e3480599205fa64ddf", "1f4c17215a9782ffa90f87903269c5642b00", "15490596d924330507f680c1b48f5507cb0bb5745839f8ac29d1eda3f7f19394", "fe1799e756ddc4f01b5bf3985a29d6844169ed46a31321a942e8ae35b2e63d08", "a48239d05ccad5e472f46caab5494e6dfba7cb428ba8d82ef35f6e68446feaa7", "5d844685cfca28bca9298f10", 0x7, 0x0, 0x8, 0x8, 0x80}}) syz_usb_connect(0x2, 0x35, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x54, 0x5e, 0xd, 0x20, 0x499, 0x6bb7, 0x682f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xff, 0x70, 0x79, 0x0, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x21, 0x1, 0x26, 0xff}]}], [{{0x9, 0x5, 0x85, 0x3, 0x8, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="26360f01318fe838cfffba676567360f23de0f01c8dbe0c744240032da4979c744240251790000c7442406000000000f011c24b9800000c00f3235002000000f30c4c10b5d35cf440000dc13f30fb8f5", 0x50}], 0x1, 0x23, &(0x7f00000003c0), 0x0) r3 = epoll_create(0xd) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) 2.358027566s ago: executing program 1 (id=401): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 2.226657891s ago: executing program 1 (id=402): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'sed\x00', 0x1, 0x4, 0x17}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x7b}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x4e23, 0x2, 0x1ce, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x2000000, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.097032899s ago: executing program 0 (id=403): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="8fc5fae78fb67ed8652707fa74d47832", 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x4e21, @empty}}) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000300)={0x40, 0x15, 0x11, "6263f75accf1220fed7adfa09a4f0f2a89"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x19, 0x2, "5282"}, 0x0, 0x0, 0x0, 0x0}) 2.032617812s ago: executing program 4 (id=404): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000240)={0x1, 0x203, 0x2, 0x7ff, 0x5, 0x6b}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x2d, 0xb, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x400}]}]}, 0x2c}}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f0000000280)={0xdf, 0x0, 0x800}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)=ANY=[@ANYBLOB="4400000040000701feffffff00000000017c00000400d7002800018006000600800a000008001100", @ANYRES32=0x0, @ANYBLOB="14001900fe800000000000000000000000000019040002"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @multicast}) 1.77019869s ago: executing program 2 (id=405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = eventfd2(0x3, 0x80001) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000400)={0x0, 'caif0\x00', {}, 0x3ec9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b00080045f40029006400000106907800000000ac1414bb4e244e2400"/46, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="401000079078000ac7"], 0x3b) ioctl$COMEDI_BUFCONFIG(r6, 0x8020640d, &(0x7f0000000040)={0x1ff, 0x3, 0x7fff, 0x7}) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r7, 0xc0406441, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000440), 0x81401, 0x0) readv(r8, &(0x7f0000002840)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/82, 0x52}, {&(0x7f0000001600)=""/246, 0xf6}, {&(0x7f0000001700)=""/224, 0xe0}, {&(0x7f0000001800)=""/21, 0x15}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x4, 0x2, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_RMFB(r7, 0xc00464af, &(0x7f00000003c0)=r9) 1.769914026s ago: executing program 1 (id=406): socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x2bb8, &(0x7f0000002c80)={0x0, 0xe3d3, 0x0, 0x800008, 0x20021ed}, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) setreuid(0x0, r2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xff03, 0x0) write$dsp(r0, &(0x7f0000000040)="69a7999e9e44664afaf7ff832c63660eca5f719ec511777820859979f0b11087447876e53c86004102e71b9712c1fc18f6b8033ffa5e8dcb8f973fc82944e611040a617cae7e459f03dd186e66659447efc5a4fefac12a9c80aeed10e2be0d69ce33c573253029cf9028693d74c9c259fb3c7a40c06e34acd57c6afb0f62ae29", 0x80) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r7, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x648, 0x8, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 1.674580761s ago: executing program 2 (id=407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4001, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @multicast1}, {0xa004, 0x880b, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "ddc6d34fb301572b738aebde240bf6aa3a2be34afdd740ae4fd46cd0d1b75747", "fd4192d9e9b613f7313b7e0000000001", {"cc903f78aa4312af6f41619c1778b742", "ffeba34727d49e91538d573e40b9b737"}}}}}}}}, 0x8a) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x80000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x400, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000004c0)={'comedi_test\x00', [0x4f27, 0x5, 0x1, 0x2f, 0x66, 0xcc7, 0x3, 0x80007, 0xe6e2, 0x80100, 0x9, 0x4, 0xeffeffff, 0x7, 0x0, 0x80000101, 0x7, 0x5, 0x3, 0x0, 0x100208d, 0xf, 0xd27, 0xffffffbc, 0x7fff, 0x8, 0x3c, 0x10, 0x8, 0x0, 0xe9]}) 1.545482312s ago: executing program 2 (id=408): set_mempolicy(0x8006, &(0x7f0000000180)=0xfff, 0x7ff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r2, 0x10000) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x1) close_range(r0, 0xffffffffffffffff, 0x204) 1.350656446s ago: executing program 2 (id=409): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x8e, 0x88, 0x45, 0x10, 0xa07, 0x78, 0xf736, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0xd8, 0x40, 0x19, [{{0x9, 0x4, 0xf5, 0x7, 0x1, 0x44, 0x28, 0xc4, 0x98, [], [{{0x9, 0x5, 0x67037027c940c0eb, 0x2, 0x20, 0xa5, 0x2, 0x5}}]}}]}}]}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d71670dab91ae5b106d1c2843ce4304ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc38602f7f8b7e4d6b3bb83f9abe034d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b640f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c7490e6f85b04973390512b4a52fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c7d29faaac98f1299fb1dd174a79b15697edc8badb40500dbca74b1ebf60400c1808723e75eb0d3bf1d6a19c1bcd4235f17e1b00f7a41329670f7d087b53a6ec1ea26f9b87f7bbde89b7abffc784f40bf50bafb1754a0ec5cf72e9089b5d61b9740aa1c56f016dd00d7da62d26242bfc367d029cd67bcb19fef0163b26f5a6fea1270de2665889035884d5137da65ac46509dfb7cd208e92dcf60f2faf30a5e53c8a2e83b6ee7ab4bfc225320e76ea3c10f3d8d440cebb9868fcf5dc7f513157d7b8a9322b23b544ca2131d65720f9a9279715eadf1fc70e535f868a25b760d349e142202b7ad4b65b80befeef4f8c1386507a2321365931e6facedda8269229e4815e587b5fcc9ea37e3a0a58273b4376cd8eebac1bcfc597dfab36b14aa33851094d9441bae8a044afc9b7afb784bfbd08a9db6a0f26ba9dac482446a7277903c08f0c639639658e8d4e28a3147ec1ef16f645271a41e746bdcad23b9238399ff08de694cc9746e60f02c6660e7f9bc90e77b70983b5d90a2c21537512c878c1cdbc1248969b461e35ca569d572593cd7918d45c0f6de5e4a4adef3ddad9ac2fd4795d1cb54f10427f07f7eee39c1fdecd2a177fd764774524be8c9ca3e08004c00", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) 872.171336ms ago: executing program 1 (id=410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @msi={0xc, 0xc0000000, 0x6, 0x6}}]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r3, &(0x7f0000003540)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x4, @mcast2, 0x5}, 0x1c, 0x0}}], 0x1, 0x4004) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r5, @ANYBLOB="000126bd7000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099009aba00001f00000008005700a0100000"], 0x30}, 0x1, 0x0, 0x0, 0x40080c0}, 0x3004c095) 713.374321ms ago: executing program 1 (id=411): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000480)=[{0x1900, 0xa200, 0x0, 0x0}, {0xfffe, 0x800, 0x0, 0x0}], 0x2}) 118.775411ms ago: executing program 4 (id=412): set_mempolicy(0x8006, &(0x7f0000000180)=0xfff, 0x7ff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) set_mempolicy(0x0, &(0x7f0000000000)=0x7, 0x400) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r2, 0x10000) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 17.383972ms ago: executing program 2 (id=413): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdir(0x0, 0x0) chdir(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0x10008) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020}, 0x2020) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x84, 0x6}], 0x10}}], 0x1, 0x40804) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000001c0)={0xbc, 0x0, 0x2}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000002300)={[0x35, 0x7, 0x0, 0x180, 0x5fffffffffffffff, 0x10, 0xf4, 0x3ff, 0x80, 0x2, 0x6, 0x7fff, 0x0, 0x9, 0x0, 0xbdb], 0x51001, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.750239ms ago: executing program 0 (id=414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x800) read$qrtrtun(r3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000f40)={0x11d8, r1, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x698, 0x111, 0x0, 0x1, {0x694, 0x5, 0x0, 0x1, [{0x450, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x54c}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x28}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10f}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x20c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x140, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x82}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xac}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5ed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x577caf7f34608e7f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1aa}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x19c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff800}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff88b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x140, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7d6}, @NL80211_ATTR_PEER_MEASUREMENTS={0xb18, 0x111, 0x0, 0x1, {0xb14, 0x5, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}]}, {0x210, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x346}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x758b}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x538, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x208, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x73}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5e3ee270523ebefa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x168, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x96a}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8b1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6e}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x348, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x320, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}]}, 0x11d8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 0s ago: executing program 4 (id=415): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "eecd7680d0ad96df88959e565ba5d21a"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x24}}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000280)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r6, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0805e0d849"}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400), 0x416481, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xacc}, @NFULA_CFG_MODE={0xa, 0x2, {0x7f, 0xf5650a841a1a4cc9}}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x40001) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r9, 0x8, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r9, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={0x0, @default, @bpq0, 0x8, 'syz1\x00', @bcast, 0x1, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket$inet_udp(0x2, 0x2, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r10, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}]}, 0x58}}, 0x20008040) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4008040) r11 = socket$inet(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) setsockopt$inet_MCAST_LEAVE_GROUP(r11, 0x0, 0x2d, &(0x7f0000000c40)={0x4, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000d00)=0x7) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000d80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, r9, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x4805) kernel console output (not intermixed with test programs): idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 133.687481][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.697961][ T5875] usb 2-1: USB disconnect, device number 13 [ 133.729200][ T5927] usb 1-1: config 0 descriptor?? [ 133.979506][ T5820] usbhid 3-1:0.0: can't add hid device: -71 [ 133.987642][ T5820] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 134.001034][ T5820] usb 3-1: USB disconnect, device number 13 [ 134.146729][ T5927] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 134.148522][ T5875] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 134.317499][ T6305] syzkaller1: entered promiscuous mode [ 134.323371][ T6305] syzkaller1: entered allmulticast mode [ 134.348387][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 134.355488][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 134.369007][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 7 [ 134.384949][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50684, setting to 1024 [ 134.401489][ T5875] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 134.410748][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.418907][ T5875] usb 4-1: Product: syz [ 134.423106][ T5875] usb 4-1: Manufacturer: syz [ 134.427747][ T5875] usb 4-1: SerialNumber: syz [ 134.438937][ T5875] usb 4-1: config 0 descriptor?? [ 134.462833][ T5875] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 134.474463][ T5875] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 134.688543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 135.052495][ T5875] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 135.062813][ T5875] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 135.081154][ T5927] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 135.102062][ T5927] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 135.119121][ T5927] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -71 [ 135.155554][ T5927] usb 1-1: USB disconnect, device number 7 [ 135.208586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 135.218690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 135.227719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 135.417688][ T6322] syzkaller1: entered promiscuous mode [ 135.428246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 135.437506][ T6322] syzkaller1: entered allmulticast mode [ 135.696053][ T5875] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 135.769546][ T6328] warning: `syz.0.140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.785294][ T6328] loop2: detected capacity change from 0 to 7 [ 135.798686][ T6328] Dev loop2: unable to read RDB block 7 [ 135.806441][ T6328] loop2: unable to read partition table [ 135.813946][ T6328] loop2: partition table beyond EOD, truncated [ 135.821699][ T6328] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 135.918205][ T5927] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 136.068477][ T5927] usb 3-1: device descriptor read/64, error -71 [ 136.139197][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 136.147268][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 136.163383][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 136.173517][ T5820] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 136.183782][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 136.192681][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 136.210779][ T5875] usb 4-1: USB disconnect, device number 12 [ 136.302335][ T6340] Bluetooth: MGMT ver 1.23 [ 136.318271][ T5927] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 136.358836][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 136.365746][ T5820] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 136.375295][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.385874][ T5820] usb 2-1: config 0 descriptor?? [ 136.394961][ T5820] gspca_main: sunplus-2.14.0 probing 041e:400b [ 136.458308][ T5927] usb 3-1: device descriptor read/64, error -71 [ 136.548242][ T793] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.569457][ T5927] usb usb3-port1: attempt power cycle [ 136.703600][ T793] usb 1-1: config 2 has an invalid interface number: 194 but max is 0 [ 136.713101][ T793] usb 1-1: config 2 has no interface number 0 [ 136.726145][ T793] usb 1-1: config 2 interface 194 altsetting 6 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 136.748184][ T793] usb 1-1: config 2 interface 194 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.762698][ T793] usb 1-1: config 2 interface 194 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.775813][ T793] usb 1-1: config 2 interface 194 has no altsetting 0 [ 136.785076][ T793] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=ad.a7 [ 136.810556][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.818905][ T793] usb 1-1: Product: syz [ 136.823120][ T793] usb 1-1: Manufacturer: syz [ 136.838574][ T793] usb 1-1: SerialNumber: syz [ 136.908216][ T5927] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 136.939096][ T5927] usb 3-1: device descriptor read/8, error -71 [ 137.053310][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.067909][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.083691][ T793] cypress_m8 1-1:2.194: HID->COM RS232 Adapter converter detected [ 137.100030][ T793] cyphidcom ttyUSB0: required endpoint is missing [ 137.119832][ T793] usb 1-1: USB disconnect, device number 8 [ 137.133750][ T793] cypress_m8 1-1:2.194: device disconnected [ 137.178407][ T5927] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 137.216402][ T6332] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.142'. [ 137.220207][ T5927] usb 3-1: device descriptor read/8, error -71 [ 137.233711][ T5820] gspca_sunplus: reg_w_riv err -71 [ 137.244070][ T5820] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 137.269407][ T5820] usb 2-1: USB disconnect, device number 14 [ 137.348554][ T5927] usb usb3-port1: unable to enumerate USB device [ 137.578270][ T5894] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 137.732433][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 137.742152][ T5894] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 137.751871][ T5894] usb 4-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config [ 137.768540][ T5894] usb 4-1: config 0 has no interface number 0 [ 137.788173][ T5894] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 137.808217][ T5894] usb 4-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 137.830141][ T5894] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x2 has invalid maxpacket 21665, setting to 1024 [ 137.850166][ T5894] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 137.866125][ T5894] usb 4-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.886856][ T5894] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 137.900086][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.908718][ T5894] usb 4-1: Product: syz [ 137.913362][ T5894] usb 4-1: Manufacturer: syz [ 137.920140][ T5894] usb 4-1: SerialNumber: syz [ 137.959721][ T5894] usb 4-1: config 0 descriptor?? [ 137.974546][ T6347] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.988337][ T6347] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.235955][ T5894] usb 4-1: probing VID:PID(0424:012C) [ 138.251870][ T5894] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0B [ 138.265264][ T5894] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 138.272623][ T5894] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 138.282089][ T5894] vub300 4-1:0.133: probe with driver vub300 failed with error -22 [ 138.300869][ T5894] usb 4-1: USB disconnect, device number 13 [ 138.383618][ T6370] mac80211_hwsim hwsim9 4: renamed from wlan1 (while UP) [ 138.508297][ T793] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 138.658257][ T793] usb 2-1: Using ep0 maxpacket: 16 [ 138.665210][ T793] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 138.689489][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.696334][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.730669][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 7 [ 138.741877][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50684, setting to 1024 [ 138.756171][ T793] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 138.765700][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.775072][ T793] usb 2-1: Product: syz [ 138.779515][ T793] usb 2-1: Manufacturer: syz [ 138.784231][ T793] usb 2-1: SerialNumber: syz [ 138.793061][ T793] usb 2-1: config 0 descriptor?? [ 138.802609][ T793] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 138.812289][ T793] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 138.888497][ T5894] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 139.061456][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.072722][ T5894] usb 1-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 139.084454][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.095639][ T5894] usb 1-1: config 0 descriptor?? [ 139.148767][ T5820] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 139.198188][ T5921] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 139.308198][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 139.315763][ T5820] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 139.325563][ T5820] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.335804][ T5820] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.345915][ T5820] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.356026][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 139.361463][ T5820] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.374793][ T5820] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.384068][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.396426][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.416277][ T793] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 139.424218][ T5921] usb 3-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 139.424232][ T793] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 139.456160][ T5921] usb 3-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=ad.d9 [ 139.465381][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.473557][ T5921] usb 3-1: Product: syz [ 139.477790][ T5921] usb 3-1: Manufacturer: syz [ 139.482640][ T5921] usb 3-1: SerialNumber: syz [ 139.516729][ T5894] viewsonic 0003:0543:E621.0006: item fetching failed at offset 6/7 [ 139.526040][ T5894] viewsonic 0003:0543:E621.0006: probe with driver viewsonic failed with error -22 [ 139.630027][ T5820] usb 4-1: GET_CAPABILITIES returned 0 [ 139.635659][ T5820] usbtmc 4-1:16.0: can't read capabilities [ 139.711309][ T5921] s2255 3-1:192.0: Could not find bulk-in endpoint [ 139.724004][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.734344][ T5921] Sensoray 2255 driver load failed: 0xfffffff4 [ 139.741257][ T5921] s2255 3-1:192.0: probe with driver s2255 failed with error -12 [ 139.749559][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.786587][ T5921] usb 3-1: USB disconnect, device number 18 [ 139.844401][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.855629][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.867808][ T5927] usb 4-1: USB disconnect, device number 14 [ 140.057537][ T793] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 140.088920][ T5927] usb 1-1: USB disconnect, device number 9 [ 140.476248][ T793] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 140.483287][ T793] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 140.492792][ T793] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 140.499944][ T793] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 140.506763][ T793] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 140.519208][ T793] usb 2-1: USB disconnect, device number 15 [ 140.588217][ T5921] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 140.688569][ T5894] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 140.738552][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 140.750225][ T5921] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.769021][ T5921] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.775704][ T5921] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 140.787019][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.808642][ T5921] usb 3-1: config 0 descriptor?? [ 140.849032][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 140.858019][ T5894] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.868440][ T5894] usb 4-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.881733][ T5894] usb 4-1: config 1 interface 0 has no altsetting 0 [ 140.892435][ T5894] usb 4-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 140.902560][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.911147][ T5894] usb 4-1: Product: syz [ 140.915617][ T5894] usb 4-1: Manufacturer: syz [ 140.920972][ T5894] usb 4-1: SerialNumber: syz [ 141.139522][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.169225][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.249670][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8 [ 141.260507][ T5921] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 141.275761][ T5182] bcm5974 4-1:1.0: could not read from device [ 141.379165][ T5182] bcm5974 4-1:1.0: could not read from device [ 141.387133][ T5894] usb 4-1: USB disconnect, device number 15 [ 141.958327][ T793] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 142.109016][ T793] usb 1-1: too many configurations: 209, using maximum allowed: 8 [ 142.119453][ T793] usb 1-1: config index 0 descriptor too short (expected 259, got 43) [ 142.127912][ T793] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 142.136735][ T793] usb 1-1: can't read configurations, error -22 [ 142.248234][ T5921] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 142.268274][ T793] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 142.419989][ T793] usb 1-1: too many configurations: 209, using maximum allowed: 8 [ 142.420960][ T5921] usb 2-1: not running at top speed; connect to a high speed hub [ 142.432041][ T793] usb 1-1: config index 0 descriptor too short (expected 259, got 43) [ 142.441834][ T5921] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 142.447828][ T793] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 142.456341][ T5921] usb 2-1: config 1 has no interface number 1 [ 142.466128][ T793] usb 1-1: can't read configurations, error -22 [ 142.471721][ T5921] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 142.479006][ T793] usb usb1-port1: attempt power cycle [ 142.494676][ T5921] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.504529][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.512650][ T5921] usb 2-1: Product: syz [ 142.516998][ T5921] usb 2-1: Manufacturer: syz [ 142.525687][ T5921] usb 2-1: SerialNumber: syz [ 142.752243][ T5921] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 142.799905][ T5921] usb 2-1: USB disconnect, device number 16 [ 142.828488][ T793] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 142.853314][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.873120][ T793] usb 1-1: too many configurations: 209, using maximum allowed: 8 [ 142.878996][ T5875] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 142.889091][ T793] usb 1-1: config index 0 descriptor too short (expected 259, got 43) [ 142.907697][ T793] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 142.918903][ T793] usb 1-1: can't read configurations, error -22 [ 143.048352][ T793] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 143.068225][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 143.075231][ T793] usb 1-1: too many configurations: 209, using maximum allowed: 8 [ 143.087264][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 143.087276][ T793] usb 1-1: config index 0 descriptor too short (expected 259, got 43) [ 143.087298][ T793] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 143.087328][ T793] usb 1-1: can't read configurations, error -22 [ 143.090556][ T793] usb usb1-port1: unable to enumerate USB device [ 143.128714][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 7 [ 143.139991][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50684, setting to 1024 [ 143.154286][ T5875] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 143.164453][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.172899][ T5875] usb 4-1: Product: syz [ 143.179134][ T5875] usb 4-1: Manufacturer: syz [ 143.183794][ T5875] usb 4-1: SerialNumber: syz [ 143.192347][ T5875] usb 4-1: config 0 descriptor?? [ 143.202347][ T5875] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 143.211932][ T5875] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 143.374961][ T5820] usb 3-1: USB disconnect, device number 19 [ 143.387860][ T6428] netlink: 220 bytes leftover after parsing attributes in process `syz.1.183'. [ 143.411754][ T6428] unsupported nla_type 224 [ 143.485222][ T6430] FAULT_INJECTION: forcing a failure. [ 143.485222][ T6430] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 143.499655][ T6430] CPU: 1 UID: 0 PID: 6430 Comm: syz.2.184 Not tainted syzkaller #0 PREEMPT(full) [ 143.499688][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.499701][ T6430] Call Trace: [ 143.499709][ T6430] [ 143.499718][ T6430] dump_stack_lvl+0x189/0x250 [ 143.499746][ T6430] ? __pfx____ratelimit+0x10/0x10 [ 143.499782][ T6430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.499803][ T6430] ? __pfx__printk+0x10/0x10 [ 143.499849][ T6430] should_fail_ex+0x414/0x560 [ 143.499880][ T6430] _copy_to_user+0x31/0xb0 [ 143.499913][ T6430] simple_read_from_buffer+0xe1/0x170 [ 143.499942][ T6430] proc_fail_nth_read+0x1b3/0x220 [ 143.499978][ T6430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.500014][ T6430] ? rw_verify_area+0x2a6/0x4d0 [ 143.500043][ T6430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.500077][ T6430] vfs_read+0x200/0xa30 [ 143.500107][ T6430] ? fdget_pos+0x247/0x320 [ 143.500135][ T6430] ? __pfx___mutex_lock+0x10/0x10 [ 143.500156][ T6430] ? __pfx_vfs_read+0x10/0x10 [ 143.500188][ T6430] ? __fget_files+0x2a/0x420 [ 143.500216][ T6430] ? __fget_files+0x3a0/0x420 [ 143.500237][ T6430] ? __fget_files+0x2a/0x420 [ 143.500270][ T6430] ksys_read+0x145/0x250 [ 143.500302][ T6430] ? __pfx_ksys_read+0x10/0x10 [ 143.500336][ T6430] ? do_syscall_64+0xbe/0xf80 [ 143.500359][ T6430] do_syscall_64+0xfa/0xf80 [ 143.500379][ T6430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.500399][ T6430] ? clear_bhb_loop+0x60/0xb0 [ 143.500425][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.500444][ T6430] RIP: 0033:0x7f860938e15c [ 143.500462][ T6430] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.500479][ T6430] RSP: 002b:00007f860a2e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.500499][ T6430] RAX: ffffffffffffffda RBX: 00007f86095e5fa0 RCX: 00007f860938e15c [ 143.500513][ T6430] RDX: 000000000000000f RSI: 00007f860a2e80a0 RDI: 0000000000000004 [ 143.500536][ T6430] RBP: 00007f860a2e8090 R08: 0000000000000000 R09: 0000000000000000 [ 143.500548][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.500559][ T6430] R13: 00007f86095e6038 R14: 00007f86095e5fa0 R15: 00007ffde185ef08 [ 143.500590][ T6430] [ 143.868102][ T5921] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 143.941777][ T5875] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 143.949748][ T5875] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 144.018164][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 144.025514][ T5921] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 144.034593][ T5921] usb 2-1: config 0 has no interface number 0 [ 144.043932][ T5921] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 144.053536][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.064962][ T5921] usb 2-1: Product: syz [ 144.069649][ T5921] usb 2-1: Manufacturer: syz [ 144.074431][ T5921] usb 2-1: SerialNumber: syz [ 144.083435][ T5921] usb 2-1: config 0 descriptor?? [ 144.096646][ T5921] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 144.106918][ T5921] pctv452e: pctv452e_power_ctrl: 1 [ 144.106918][ T5921] [ 144.114671][ T5921] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 144.114671][ T5921] [ 144.125881][ T5921] dvb-usb: bulk message failed: -22 (5/0) [ 144.137537][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.148775][ T5921] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 144.157312][ T5921] usb 2-1: media controller created [ 144.164108][ T5921] dvb-usb: bulk message failed: -22 (8/0) [ 144.170981][ T5921] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 144.180074][ T5921] dvb-usb: MAC address reading failed. [ 144.202798][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.255369][ T5921] DVB: Unable to find symbol stb0899_attach() [ 144.261599][ T5921] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 144.311618][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.324138][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.348039][ T5921] rc_core: IR keymap rc-tt-1500 not found [ 144.353871][ T5921] Registered IR keymap rc-empty [ 144.362107][ T5921] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 144.378057][ T5921] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input11 [ 144.392227][ T5921] dvb-usb: schedule remote query interval to 100 msecs. [ 144.399449][ T5921] pctv452e: pctv452e_power_ctrl: 0 [ 144.399449][ T5921] [ 144.410167][ T5921] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 144.449572][ T6445] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 144.510100][ T5921] dvb-usb: bulk message failed: -22 (4/0) [ 144.516050][ T5921] dvb-usb: error -22 while querying for an remote control event. [ 144.572880][ T5875] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 144.592146][ T5921] usb 2-1: USB disconnect, device number 17 [ 144.647362][ T5921] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 144.783339][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 144.790328][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 144.797192][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 144.807548][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 144.828749][ T5875] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 144.856904][ T5875] usb 4-1: USB disconnect, device number 16 [ 145.168956][ T5921] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 145.198193][ T5875] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 145.318170][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 145.341041][ T5921] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 145.358001][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 145.363547][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 145.372693][ T5921] usb 3-1: can't read configurations, error -61 [ 145.382009][ T5875] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.395619][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.402683][ T5875] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 145.413498][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.430165][ T5875] usb 1-1: config 0 descriptor?? [ 145.518138][ T5921] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 145.678391][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 145.685200][ T5921] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 145.701619][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 145.718418][ T5921] usb 3-1: can't read configurations, error -61 [ 145.737841][ T5921] usb usb3-port1: attempt power cycle [ 145.860863][ T5875] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 146.058187][ T5927] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 146.078070][ T5820] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 146.088317][ T5921] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 146.110081][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 146.116350][ T5921] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 146.126812][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 146.134658][ T5921] usb 3-1: can't read configurations, error -61 [ 146.187997][ T5927] usb 4-1: device descriptor read/64, error -71 [ 146.237945][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 146.245333][ T5820] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 146.254691][ T5820] usb 2-1: config 0 has no interface number 0 [ 146.261360][ T5820] usb 2-1: config 0 interface 12 has no altsetting 0 [ 146.270895][ T5820] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 146.281102][ T5921] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 146.288814][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.296864][ T5820] usb 2-1: Product: syz [ 146.302092][ T5820] usb 2-1: Manufacturer: syz [ 146.306902][ T5820] usb 2-1: SerialNumber: syz [ 146.314689][ T5820] usb 2-1: config 0 descriptor?? [ 146.320297][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 146.327542][ T5921] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 146.339995][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 146.347679][ T5921] usb 3-1: can't read configurations, error -61 [ 146.355985][ T5921] usb usb3-port1: unable to enumerate USB device [ 146.437970][ T5927] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 146.567990][ T5927] usb 4-1: device descriptor read/64, error -71 [ 146.679099][ T5927] usb usb4-port1: attempt power cycle [ 147.027933][ T5927] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 147.048724][ T5927] usb 4-1: device descriptor read/8, error -71 [ 147.290249][ T5927] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 147.319404][ T5927] usb 4-1: device descriptor read/8, error -71 [ 147.428249][ T5927] usb usb4-port1: unable to enumerate USB device [ 147.986578][ T793] usb 1-1: USB disconnect, device number 14 [ 148.170498][ T5820] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 148.180846][ T5820] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 148.189358][ T5820] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 148.199582][ T5820] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 148.212404][ T5820] usb 2-1: USB disconnect, device number 18 [ 148.447925][ T793] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 148.597935][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 148.607201][ T793] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 148.619877][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 7 [ 148.631093][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50684, setting to 1024 [ 148.644521][ T793] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 148.653846][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.661951][ T793] usb 1-1: Product: syz [ 148.666122][ T793] usb 1-1: Manufacturer: syz [ 148.670878][ T793] usb 1-1: SerialNumber: syz [ 148.679319][ T793] usb 1-1: config 0 descriptor?? [ 148.694796][ T793] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 148.704264][ T793] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 149.092728][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 149.292203][ T793] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 149.299197][ T793] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 149.337860][ T5927] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 149.477802][ T5875] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 149.487788][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 149.495287][ T5927] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.506513][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.513424][ T5927] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 149.522695][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.536486][ T5927] usb 3-1: config 0 descriptor?? [ 149.630172][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.647731][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.664832][ T5875] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf4, bcdDevice= 0.00 [ 149.674213][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.686989][ T5875] usb 4-1: config 0 descriptor?? [ 149.914853][ T793] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 149.938906][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 149.963268][ T5927] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 150.101648][ T5875] hid-generic 0003:1E7D:2CF4.000A: unknown main item tag 0x0 [ 150.110999][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 150.115395][ T5875] hid-generic 0003:1E7D:2CF4.000A: unknown main item tag 0x0 [ 150.125521][ T793] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 150.126665][ T5875] hid-generic 0003:1E7D:2CF4.000A: unknown main item tag 0x0 [ 150.143604][ T5875] hid-generic 0003:1E7D:2CF4.000A: unknown main item tag 0x0 [ 150.151651][ T5875] hid-generic 0003:1E7D:2CF4.000A: unknown main item tag 0x0 [ 150.159705][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 150.167913][ T5875] hid-generic 0003:1E7D:2CF4.000A: unknown main item tag 0x0 [ 150.179113][ T793] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 150.187033][ T793] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 150.195201][ T5875] hid-generic 0003:1E7D:2CF4.000A: unknown main item tag 0x0 [ 150.196804][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 7 [ 150.214003][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50684, setting to 1024 [ 150.225638][ T793] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 150.233308][ T793] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 150.246124][ T5875] hid-generic 0003:1E7D:2CF4.000A: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf4] on usb-dummy_hcd.3-1/input0 [ 150.251617][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.278614][ T793] usb 1-1: USB disconnect, device number 15 [ 150.295021][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.318590][ T10] usb 2-1: Product: syz [ 150.322860][ T10] usb 2-1: Manufacturer: syz [ 150.327508][ T10] usb 2-1: SerialNumber: syz [ 150.359278][ T10] usb 2-1: config 0 descriptor?? [ 150.374518][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 150.387174][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 150.970762][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 150.978029][ T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 151.588465][ T10] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 151.809625][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 151.825287][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 151.834695][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 151.843278][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 151.850926][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 151.870328][ T10] usb 2-1: USB disconnect, device number 19 [ 152.004340][ T6538] netlink: 168 bytes leftover after parsing attributes in process `syz.0.221'. [ 152.113556][ T10] usb 3-1: USB disconnect, device number 24 [ 152.292117][ T6549] FAULT_INJECTION: forcing a failure. [ 152.292117][ T6549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.305612][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz.2.225 Not tainted syzkaller #0 PREEMPT(full) [ 152.305646][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.305658][ T6549] Call Trace: [ 152.305668][ T6549] [ 152.305676][ T6549] dump_stack_lvl+0x189/0x250 [ 152.305703][ T6549] ? __pfx____ratelimit+0x10/0x10 [ 152.305734][ T6549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.305760][ T6549] ? __pfx__printk+0x10/0x10 [ 152.305783][ T6549] ? __might_fault+0xb0/0x130 [ 152.305813][ T6549] should_fail_ex+0x414/0x560 [ 152.305836][ T6549] _copy_from_user+0x2d/0xb0 [ 152.305859][ T6549] kstrtouint_from_user+0xc4/0x170 [ 152.305880][ T6549] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 152.305911][ T6549] proc_fail_nth_write+0x88/0x200 [ 152.305936][ T6549] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 152.305964][ T6549] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 152.305989][ T6549] vfs_write+0x27e/0xb30 [ 152.306018][ T6549] ? __pfx_vfs_write+0x10/0x10 [ 152.306042][ T6549] ? __fget_files+0x2a/0x420 [ 152.306063][ T6549] ? __fget_files+0x3a0/0x420 [ 152.306079][ T6549] ? __fget_files+0x2a/0x420 [ 152.306103][ T6549] ksys_write+0x145/0x250 [ 152.306127][ T6549] ? __pfx_ksys_write+0x10/0x10 [ 152.306153][ T6549] ? do_syscall_64+0xbe/0xf80 [ 152.306169][ T6549] do_syscall_64+0xfa/0xf80 [ 152.306184][ T6549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.306199][ T6549] ? clear_bhb_loop+0x60/0xb0 [ 152.306217][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.306232][ T6549] RIP: 0033:0x7f860938e1ff [ 152.306247][ T6549] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 152.306259][ T6549] RSP: 002b:00007f860a2e8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 152.306275][ T6549] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f860938e1ff [ 152.306285][ T6549] RDX: 0000000000000001 RSI: 00007f860a2e80a0 RDI: 0000000000000005 [ 152.306293][ T6549] RBP: 00007f860a2e8090 R08: 0000000000000000 R09: 0000000000000000 [ 152.306302][ T6549] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 152.306310][ T6549] R13: 00007f86095e6038 R14: 00007f86095e5fa0 R15: 00007ffde185ef08 [ 152.306334][ T6549] [ 152.649338][ T6554] syzkaller1: entered promiscuous mode [ 152.655109][ T6554] syzkaller1: entered allmulticast mode [ 153.048207][ T5875] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 153.089649][ T5921] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 153.215994][ T5875] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 153.230841][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.239671][ T5875] usb 3-1: Product: syz [ 153.243992][ T5875] usb 3-1: Manufacturer: syz [ 153.249232][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 153.265312][ T44] usb 4-1: USB disconnect, device number 21 [ 153.279651][ T5875] usb 3-1: SerialNumber: syz [ 153.285036][ T5921] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.315351][ T5921] usb 2-1: config 0 interface 0 has no altsetting 0 [ 153.325739][ T5875] usb 3-1: config 0 descriptor?? [ 153.333260][ T6566] netlink: 68 bytes leftover after parsing attributes in process `syz.0.233'. [ 153.340027][ T5921] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 153.347251][ T5875] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 153.358123][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.373420][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 153.389890][ T5921] usb 2-1: config 0 descriptor?? [ 153.400632][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 153.745284][ T5875] gspca_sunplus: reg_r err -71 [ 153.750346][ T5875] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 153.758636][ T793] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 153.772804][ T5875] usb 3-1: USB disconnect, device number 25 [ 153.778866][ T44] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 153.812445][ T5921] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 153.907945][ T793] usb 4-1: device descriptor read/64, error -71 [ 153.967842][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 153.975202][ T44] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 153.987212][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 7 [ 153.998354][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50684, setting to 1024 [ 154.012475][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 154.021886][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.030929][ T44] usb 1-1: Product: syz [ 154.035156][ T44] usb 1-1: Manufacturer: syz [ 154.040049][ T44] usb 1-1: SerialNumber: syz [ 154.047969][ T44] usb 1-1: config 0 descriptor?? [ 154.059886][ T44] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 154.073747][ T44] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 154.167541][ T793] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 154.317736][ T793] usb 4-1: device descriptor read/64, error -71 [ 154.427933][ T793] usb usb4-port1: attempt power cycle [ 154.674738][ T44] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 154.683716][ T44] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 154.777467][ T793] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 154.798152][ T793] usb 4-1: device descriptor read/8, error -71 [ 155.047493][ T793] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 155.070217][ T793] usb 4-1: device descriptor read/8, error -71 [ 155.177846][ T793] usb usb4-port1: unable to enumerate USB device [ 155.295228][ T44] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 155.511682][ T44] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 155.522064][ T44] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 155.529471][ T44] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 155.536376][ T44] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 155.543789][ T44] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 155.561802][ T44] usb 1-1: USB disconnect, device number 16 [ 155.617437][ T6215] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 155.777429][ T6215] usb 3-1: Using ep0 maxpacket: 16 [ 155.785192][ T6215] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 155.796841][ T6215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 7 [ 155.807969][ T6215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50684, setting to 1024 [ 155.821629][ T6215] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 155.830744][ T6215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.838844][ T6215] usb 3-1: Product: syz [ 155.843047][ T6215] usb 3-1: Manufacturer: syz [ 155.847842][ T6215] usb 3-1: SerialNumber: syz [ 155.859071][ T6215] usb 3-1: config 0 descriptor?? [ 155.877595][ T6215] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 155.887693][ T6215] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 155.895302][ T793] usb 2-1: USB disconnect, device number 20 [ 156.257439][ T793] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 156.347422][ T44] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 156.410082][ T793] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 156.418565][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.429752][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.439727][ T793] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.452810][ T793] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.461937][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.472067][ T6215] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 156.479662][ T793] usb 2-1: config 0 descriptor?? [ 156.489470][ T6215] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 156.522412][ T44] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 156.531979][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.556441][ T44] usb 1-1: config 0 descriptor?? [ 156.776481][ T44] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 156.785460][ T44] [drm:udl_init] *ERROR* Selecting channel failed [ 156.813510][ T44] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 156.834586][ T44] [drm] Initialized udl on minor 2 [ 156.849909][ T44] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 156.863422][ T44] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 156.874345][ T5921] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 156.888087][ T44] usb 1-1: USB disconnect, device number 17 [ 156.896432][ T5921] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 156.911210][ T793] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 156.921131][ T793] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 156.935918][ T793] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 156.950947][ T793] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 156.960844][ T793] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 156.972395][ T793] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 156.980770][ T793] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 157.003569][ T793] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 157.011258][ T793] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 157.022179][ T793] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 157.049463][ T793] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 157.108365][ T6215] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 157.209788][ T6600] netlink: 'syz.1.246': attribute type 1 has an invalid length. [ 157.228118][ T6600] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 157.293318][ T793] usb 2-1: USB disconnect, device number 21 [ 157.521995][ T6215] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 157.529144][ T6215] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 157.535933][ T6215] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 157.544964][ T6215] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 157.553383][ T6215] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 157.567505][ T6215] usb 3-1: USB disconnect, device number 26 [ 157.608324][ T44] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 157.771179][ T44] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 157.780471][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.788741][ T44] usb 1-1: Product: syz [ 157.792973][ T44] usb 1-1: Manufacturer: syz [ 157.797668][ T44] usb 1-1: SerialNumber: syz [ 157.804590][ T44] usb 1-1: config 0 descriptor?? [ 158.018748][ T6620] add_ndev_hash(bond0) on ffff88807c6bc000 done [ 158.032081][ T44] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 158.061151][ T6620] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 158.093785][ T6620] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 158.587269][ T5921] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 158.667504][ T793] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 158.757802][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 158.766498][ T5921] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 158.775294][ T5921] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 158.784035][ T5921] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 158.793216][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.803001][ T5921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 158.812862][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 158.826000][ T5921] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 158.833068][ T793] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 158.835116][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.854355][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.866109][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.876633][ T5921] usb 3-1: config 0 descriptor?? [ 158.882382][ T793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.895862][ T793] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.905454][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.916964][ T793] usb 4-1: config 0 descriptor?? [ 159.119605][ T5921] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 159.146736][ T5921] usb 3-1: USB disconnect, device number 27 [ 159.168475][ T5921] usblp0: removed [ 159.369051][ T793] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 159.608841][ T6638] netlink: 'syz.3.262': attribute type 1 has an invalid length. [ 159.626498][ T6638] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 159.667261][ T5921] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 159.675501][ T44] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 159.687209][ T793] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 159.702296][ T5927] usb 4-1: USB disconnect, device number 26 [ 159.702357][ T44] usb 1-1: USB disconnect, device number 18 [ 159.827359][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 159.835147][ T5921] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 159.843845][ T5921] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 159.853442][ T5921] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 159.857311][ T793] usb 2-1: Using ep0 maxpacket: 16 [ 159.863755][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.879284][ T5921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.882586][ T793] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 159.889224][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 159.903126][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 7 [ 159.915480][ T5921] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 159.932785][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50684, setting to 1024 [ 159.945030][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.953321][ T5921] usb 3-1: config 0 descriptor?? [ 159.961437][ T793] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 159.973347][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.983767][ T793] usb 2-1: Product: syz [ 159.988261][ T793] usb 2-1: Manufacturer: syz [ 159.992893][ T793] usb 2-1: SerialNumber: syz [ 160.000922][ T793] usb 2-1: config 0 descriptor?? [ 160.011145][ T793] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 160.020905][ T793] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 160.181512][ T6632] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 160.189000][ T5921] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 160.226636][ T6632] CIFS mount error: No usable UNC path provided in device string! [ 160.226636][ T6632] [ 160.238724][ T6632] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 160.452831][ C0] usblp0: nonzero read bulk status received: -71 [ 160.459979][ T5927] usb 3-1: USB disconnect, device number 28 [ 160.640052][ T793] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 160.646937][ T793] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 160.682183][ T6630] usblp0: removed [ 160.691233][ T6661] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.826266][ T6665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 160.851327][ T6665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.108655][ T5927] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 161.267384][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 161.273353][ T793] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 161.285612][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 161.298444][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 7 [ 161.311919][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50684, setting to 1024 [ 161.341048][ T5927] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.357215][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.365355][ T5927] usb 4-1: Product: syz [ 161.369767][ T5927] usb 4-1: Manufacturer: syz [ 161.374495][ T5927] usb 4-1: SerialNumber: syz [ 161.382416][ T5927] usb 4-1: config 0 descriptor?? [ 161.392132][ T5927] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 161.404667][ T5927] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 161.417166][ T6215] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 161.557187][ T6215] usb 1-1: device descriptor read/64, error -71 [ 161.707124][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 161.718646][ T793] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 161.728893][ T793] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 161.736688][ T793] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 161.743722][ T793] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 161.750786][ T793] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 161.771329][ T793] usb 2-1: USB disconnect, device number 22 [ 161.797104][ T6215] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 161.882348][ T10] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 161.891649][ T10] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 161.900307][ T10] usb 3-1: Product: syz [ 161.904568][ T10] usb 3-1: Manufacturer: syz [ 161.909545][ T10] usb 3-1: SerialNumber: syz [ 161.919119][ T10] usb 3-1: config 0 descriptor?? [ 161.927083][ T6215] usb 1-1: device descriptor read/64, error -71 [ 161.936083][ T10] ch341 3-1:0.0: ch341-uart converter detected [ 161.995708][ T5927] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 162.002596][ T5927] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 162.037352][ T6215] usb usb1-port1: attempt power cycle [ 162.296499][ T6684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.380960][ T6215] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 162.417810][ T6215] usb 1-1: device descriptor read/8, error -71 [ 162.444193][ T6687] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.613303][ T5927] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 162.632786][ T5927] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 162.643119][ T5927] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 162.652203][ T5927] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 162.659245][ T5927] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 162.666353][ T5927] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 162.672978][ T6215] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 162.686471][ T5927] usb 4-1: USB disconnect, device number 27 [ 162.707674][ T6215] usb 1-1: device descriptor read/8, error -71 [ 162.827065][ T6215] usb usb1-port1: unable to enumerate USB device [ 162.935783][ T10] usb 3-1: failed to send control message: -71 [ 162.947704][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 162.962803][ T10] usb 3-1: USB disconnect, device number 29 [ 162.973790][ T10] ch341 3-1:0.0: device disconnected [ 163.527348][ T5841] Bluetooth: hci2: connection err: -111 [ 163.810232][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.819757][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.827881][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.836047][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.844668][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.087024][ T5927] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 164.120013][ T6709] chnl_net:caif_netlink_parms(): no params data found [ 164.242400][ T5927] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 164.265376][ T5927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.288730][ T5875] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 164.289607][ T5927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 164.316390][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.324220][ T5927] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 164.327521][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.339359][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.348524][ T6709] bridge_slave_0: entered allmulticast mode [ 164.359392][ T6709] bridge_slave_0: entered promiscuous mode [ 164.368639][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.377173][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.384532][ T6709] bridge_slave_1: entered allmulticast mode [ 164.395970][ T5927] hub 3-1:1.0: bad descriptor, ignoring hub [ 164.397972][ T6709] bridge_slave_1: entered promiscuous mode [ 164.407182][ T5927] hub 3-1:1.0: probe with driver hub failed with error -5 [ 164.418126][ T5927] cdc_wdm 3-1:1.0: skipping garbage [ 164.423389][ T5927] cdc_wdm 3-1:1.0: skipping garbage [ 164.437008][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 164.447185][ T5927] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 164.456071][ T5875] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 164.483952][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 7 [ 164.495548][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50684, setting to 1024 [ 164.518418][ T5875] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 164.543378][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.556030][ T5875] usb 2-1: Product: syz [ 164.575760][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.587448][ T5875] usb 2-1: Manufacturer: syz [ 164.592109][ T5875] usb 2-1: SerialNumber: syz [ 164.602065][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.614666][ T5875] usb 2-1: config 0 descriptor?? [ 164.632283][ T5875] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 164.651982][ T5875] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 164.664743][ T6726] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 164.684205][ T44] usb 3-1: USB disconnect, device number 30 [ 164.728176][ T6709] team0: Port device team_slave_0 added [ 164.738861][ T6709] team0: Port device team_slave_1 added [ 164.789204][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.796205][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.824318][ T6709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.839219][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.846331][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.873134][ T6709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.978016][ T6709] hsr_slave_0: entered promiscuous mode [ 164.985413][ T6709] hsr_slave_1: entered promiscuous mode [ 164.995077][ T6709] debugfs: 'hsr0' already exists in 'hsr' [ 165.002090][ T6709] Cannot create hsr debugfs directory [ 165.095174][ T6730] syzkaller1: entered promiscuous mode [ 165.101000][ T6730] syzkaller1: entered allmulticast mode [ 165.229053][ T5875] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 165.237742][ T5875] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 165.416567][ T6709] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.441730][ T6709] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.465027][ T6709] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.481169][ T6709] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.683945][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.724518][ T6709] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.739864][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.747142][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.757288][ T5927] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 165.774138][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.781426][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.850931][ T5875] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 165.866103][ T5875] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 165.875509][ T5875] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 165.882017][ T5840] Bluetooth: hci0: command tx timeout [ 165.890522][ T5875] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 165.900471][ T5875] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 165.913242][ T5875] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 165.918347][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 165.927469][ T5927] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 165.939967][ T5875] usb 2-1: USB disconnect, device number 23 [ 165.946824][ T5927] usb 3-1: config 0 has no interface number 0 [ 165.953004][ T5927] usb 3-1: config 0 interface 63 has no altsetting 0 [ 165.957725][ T6215] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 165.976795][ T5927] usb 3-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=3b.9a [ 165.985931][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.014532][ T5927] usb 3-1: config 0 descriptor?? [ 166.127034][ T6215] usb 1-1: Using ep0 maxpacket: 32 [ 166.142450][ T6215] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 166.153910][ T6215] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 166.166154][ T6215] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.177485][ T6215] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 166.196598][ T6215] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 166.215497][ T6215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.227506][ T6215] usb 1-1: Product: syz [ 166.232414][ T5927] usb 3-1: string descriptor 0 read error: -71 [ 166.232486][ T6215] usb 1-1: Manufacturer: syz [ 166.248784][ T5927] gspca_main: t613-2.14.0 probing 17a1:0128 [ 166.255747][ T5927] gspca_t613: unknown sensor 0000 [ 166.263123][ T6215] usb 1-1: SerialNumber: syz [ 166.288684][ T5927] t613 3-1:0.63: probe with driver t613 failed with error -22 [ 166.297090][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 166.305895][ T5927] usb 3-1: USB disconnect, device number 31 [ 166.324797][ T6215] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input13 [ 166.364944][ T6709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.507045][ T6215] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 166.515487][ T6215] (id 0x00) [ 166.616829][ T6215] rc_core: IR keymap rc-imon-pad not found [ 166.623009][ T6215] Registered IR keymap rc-empty [ 166.629276][ T6215] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 166.640503][ T6215] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 166.721829][ T6215] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 166.749635][ T6215] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input14 [ 166.786006][ T6215] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:23> initialized [ 166.859920][ T6709] veth0_vlan: entered promiscuous mode [ 166.876612][ T6709] veth1_vlan: entered promiscuous mode [ 166.957075][ T6709] veth0_macvtap: entered promiscuous mode [ 166.981264][ T6709] veth1_macvtap: entered promiscuous mode [ 167.040644][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.066076][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.080377][ T5927] usb 1-1: USB disconnect, device number 23 [ 167.118599][ T6147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.140475][ T6147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.167513][ T6147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.177706][ T6147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.296166][ T6147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.304693][ T6147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.350927][ T6147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.359846][ T6147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.493024][ T6767] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.566917][ T6769] overlayfs: failed to resolve './file1/file0': -2 [ 167.642685][ T5914] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 167.816736][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 167.822097][ T5927] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 167.839260][ T5914] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 167.848193][ T5914] usb 3-1: config 0 has no interface number 0 [ 167.860504][ T5914] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 167.875733][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.890366][ T5914] usb 3-1: Product: syz [ 167.894639][ T5914] usb 3-1: Manufacturer: syz [ 167.899918][ T5914] usb 3-1: SerialNumber: syz [ 167.908280][ T5914] usb 3-1: config 0 descriptor?? [ 167.923959][ T5914] smsc95xx v2.0.0 [ 167.957438][ T5840] Bluetooth: hci0: command tx timeout [ 167.989165][ T6784] mac80211_hwsim hwsim3 4: renamed from wlan1 (while UP) [ 167.998535][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.014057][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 168.025192][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.039884][ T5927] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 168.049815][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.066144][ T5927] usb 5-1: config 0 descriptor?? [ 168.296436][ T5820] usb 5-1: USB disconnect, device number 2 [ 168.324629][ T5914] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 168.335611][ T5914] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 168.486786][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 168.637467][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 168.644881][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.656537][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.666508][ T10] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 168.677747][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.689423][ T10] usb 1-1: config 0 descriptor?? [ 168.987034][ T6794] capability: warning: `syz.4.317' uses 32-bit capabilities (legacy support in use) [ 169.110930][ T10] hid_parser_main: 20 callbacks suppressed [ 169.110955][ T10] hid-multitouch 0003:1FD2:6007.000E: unknown main item tag 0x2 [ 169.141800][ T10] hid-multitouch 0003:1FD2:6007.000E: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 169.189912][ T6799] netlink: 'syz.4.318': attribute type 20 has an invalid length. [ 169.250493][ T6799] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 169.307167][ T6215] usb 1-1: USB disconnect, device number 24 [ 169.367626][ T5914] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 169.410439][ T5914] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 169.443736][ T5914] usb 3-1: USB disconnect, device number 32 [ 169.739115][ T5894] hid-generic 0010:7FFFFFFF:0FFF.000F: ignoring exceeding usage max [ 169.750544][ T5894] hid-generic 0010:7FFFFFFF:0FFF.000F: item fetching failed at offset 5/33 [ 169.760579][ T5894] hid-generic 0010:7FFFFFFF:0FFF.000F: probe with driver hid-generic failed with error -22 [ 169.853978][ T6815] FAULT_INJECTION: forcing a failure. [ 169.853978][ T6815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.896571][ T6815] CPU: 1 UID: 0 PID: 6815 Comm: syz.1.325 Not tainted syzkaller #0 PREEMPT(full) [ 169.896598][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.896611][ T6815] Call Trace: [ 169.896619][ T6815] [ 169.896626][ T6815] dump_stack_lvl+0x189/0x250 [ 169.896650][ T6815] ? __pfx____ratelimit+0x10/0x10 [ 169.896679][ T6815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.896701][ T6815] ? __pfx__printk+0x10/0x10 [ 169.896756][ T6815] should_fail_ex+0x414/0x560 [ 169.896789][ T6815] _copy_to_user+0x31/0xb0 [ 169.896822][ T6815] comedi_unlocked_ioctl+0xa57/0x1020 [ 169.896853][ T6815] ? kasan_quarantine_put+0xdd/0x220 [ 169.896895][ T6815] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 169.896926][ T6815] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 169.896954][ T6815] ? do_vfs_ioctl+0xbe8/0x1430 [ 169.896983][ T6815] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 169.897006][ T6815] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 169.897078][ T6815] ? __fget_files+0x2a/0x420 [ 169.897108][ T6815] ? __fget_files+0x3a0/0x420 [ 169.897137][ T6815] ? __fget_files+0x2a/0x420 [ 169.897163][ T6815] ? bpf_lsm_file_ioctl+0x9/0x20 [ 169.897184][ T6815] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 169.897213][ T6815] __se_sys_ioctl+0xfc/0x170 [ 169.897246][ T6815] do_syscall_64+0xfa/0xf80 [ 169.897268][ T6815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.897289][ T6815] ? clear_bhb_loop+0x60/0xb0 [ 169.897315][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.897335][ T6815] RIP: 0033:0x7fe4d0b8f749 [ 169.897355][ T6815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.897372][ T6815] RSP: 002b:00007fe4d1a7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.897393][ T6815] RAX: ffffffffffffffda RBX: 00007fe4d0de5fa0 RCX: 00007fe4d0b8f749 [ 169.897408][ T6815] RDX: 0000200000000180 RSI: 0000000080506409 RDI: 0000000000000003 [ 169.897420][ T6815] RBP: 00007fe4d1a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 169.897432][ T6815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.897444][ T6815] R13: 00007fe4d0de6038 R14: 00007fe4d0de5fa0 R15: 00007ffe435754d8 [ 169.897477][ T6815] [ 169.967673][ T5914] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.147195][ T5840] Bluetooth: hci0: command tx timeout [ 170.319652][ T5914] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 170.327976][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.364601][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.386565][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.422131][ T5914] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.436863][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.437816][ T44] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 170.460759][ T5914] usb 5-1: config 0 descriptor?? [ 170.546616][ T5894] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 170.638454][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 170.666559][ T44] usb 1-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 170.717625][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.738608][ T5894] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 170.747329][ T5894] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 170.767672][ T44] usb 1-1: config 0 descriptor?? [ 170.786733][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.798487][ T6819] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 170.826656][ T5894] usb 3-1: config 0 descriptor?? [ 170.895838][ T5914] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 170.926820][ T5914] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 170.947943][ T5914] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 170.966120][ T5914] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 170.984324][ T5914] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 171.002475][ T5914] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 171.025910][ T5914] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 171.062338][ T5914] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 171.080250][ T5914] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 171.098058][ T44] asus 0003:0B05:1807.0011: item fetching failed at offset 0/5 [ 171.110600][ T6811] netlink: 'syz.4.323': attribute type 1 has an invalid length. [ 171.133530][ T5914] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 171.146539][ T44] asus 0003:0B05:1807.0011: Asus hid parse failed: -22 [ 171.153587][ T44] asus 0003:0B05:1807.0011: probe with driver asus failed with error -22 [ 171.207416][ T6811] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 171.224664][ T5927] usb 3-1: USB disconnect, device number 33 [ 171.265530][ T6840] comedi comedi4: bad chanlist[0]=0xffffffff chan=65535 range length=2 [ 171.315771][ T5914] usb 1-1: USB disconnect, device number 25 [ 171.400972][ T44] usb 5-1: USB disconnect, device number 3 [ 171.440336][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.334'. [ 171.784841][ T6846] FAULT_INJECTION: forcing a failure. [ 171.784841][ T6846] name failslab, interval 1, probability 0, space 0, times 0 [ 171.798816][ T6846] CPU: 1 UID: 0 PID: 6846 Comm: syz.2.336 Not tainted syzkaller #0 PREEMPT(full) [ 171.798846][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.798859][ T6846] Call Trace: [ 171.798868][ T6846] [ 171.798877][ T6846] dump_stack_lvl+0x189/0x250 [ 171.798909][ T6846] ? __pfx____ratelimit+0x10/0x10 [ 171.798941][ T6846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.798962][ T6846] ? __pfx__printk+0x10/0x10 [ 171.798997][ T6846] ? __pfx___might_resched+0x10/0x10 [ 171.799029][ T6846] ? fs_reclaim_acquire+0x7d/0x100 [ 171.799055][ T6846] should_fail_ex+0x414/0x560 [ 171.799087][ T6846] should_failslab+0xa8/0x100 [ 171.799112][ T6846] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 171.799141][ T6846] ? rcu_read_lock_any_held+0xb3/0x120 [ 171.799170][ T6846] ? sock_alloc_inode+0x28/0xc0 [ 171.799201][ T6846] ? __pfx_sock_alloc_inode+0x10/0x10 [ 171.799226][ T6846] sock_alloc_inode+0x28/0xc0 [ 171.799251][ T6846] alloc_inode+0x6a/0x1b0 [ 171.799274][ T6846] do_accept+0x114/0x7f0 [ 171.799332][ T6846] ? __pfx_do_accept+0x10/0x10 [ 171.799386][ T6846] __sys_accept4+0x127/0x210 [ 171.799417][ T6846] ? __pfx___sys_accept4+0x10/0x10 [ 171.799446][ T6846] ? __pfx_ksys_write+0x10/0x10 [ 171.799483][ T6846] __x64_sys_accept+0x7d/0x90 [ 171.799514][ T6846] do_syscall_64+0xfa/0xf80 [ 171.799535][ T6846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.799557][ T6846] ? clear_bhb_loop+0x60/0xb0 [ 171.799614][ T6846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.799634][ T6846] RIP: 0033:0x7f860938f749 [ 171.799654][ T6846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.799672][ T6846] RSP: 002b:00007f860a2e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 171.799695][ T6846] RAX: ffffffffffffffda RBX: 00007f86095e5fa0 RCX: 00007f860938f749 [ 171.799710][ T6846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 171.799722][ T6846] RBP: 00007f860a2e8090 R08: 0000000000000000 R09: 0000000000000000 [ 171.799734][ T6846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.799746][ T6846] R13: 00007f86095e6038 R14: 00007f86095e5fa0 R15: 00007ffde185ef08 [ 171.799781][ T6846] [ 172.096574][ T5914] IPVS: starting estimator thread 0... [ 172.197179][ T5840] Bluetooth: hci0: command tx timeout [ 172.202922][ T6849] IPVS: using max 27 ests per chain, 64800 per kthread [ 172.239777][ T6855] FAULT_INJECTION: forcing a failure. [ 172.239777][ T6855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.263487][ T6855] CPU: 1 UID: 0 PID: 6855 Comm: syz.0.340 Not tainted syzkaller #0 PREEMPT(full) [ 172.263516][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.263536][ T6855] Call Trace: [ 172.263544][ T6855] [ 172.263553][ T6855] dump_stack_lvl+0x189/0x250 [ 172.263579][ T6855] ? __pfx____ratelimit+0x10/0x10 [ 172.263610][ T6855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.263632][ T6855] ? __pfx__printk+0x10/0x10 [ 172.263677][ T6855] should_fail_ex+0x414/0x560 [ 172.263709][ T6855] _copy_to_user+0x31/0xb0 [ 172.263742][ T6855] simple_read_from_buffer+0xe1/0x170 [ 172.263772][ T6855] proc_fail_nth_read+0x1b3/0x220 [ 172.263813][ T6855] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.263850][ T6855] ? rw_verify_area+0x2a6/0x4d0 [ 172.263879][ T6855] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.263914][ T6855] vfs_read+0x200/0xa30 [ 172.263942][ T6855] ? fdget_pos+0x247/0x320 [ 172.263970][ T6855] ? __pfx___mutex_lock+0x10/0x10 [ 172.263992][ T6855] ? __pfx_vfs_read+0x10/0x10 [ 172.264023][ T6855] ? __fget_files+0x2a/0x420 [ 172.264052][ T6855] ? __fget_files+0x3a0/0x420 [ 172.264076][ T6855] ? __fget_files+0x2a/0x420 [ 172.264110][ T6855] ksys_read+0x145/0x250 [ 172.264138][ T6855] ? __fget_files+0x2a/0x420 [ 172.264162][ T6855] ? __pfx_ksys_read+0x10/0x10 [ 172.264196][ T6855] ? do_syscall_64+0xbe/0xf80 [ 172.264221][ T6855] do_syscall_64+0xfa/0xf80 [ 172.264240][ T6855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.264261][ T6855] ? clear_bhb_loop+0x60/0xb0 [ 172.264287][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.264307][ T6855] RIP: 0033:0x7fb98df8e15c [ 172.264327][ T6855] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 172.264345][ T6855] RSP: 002b:00007fb98edfb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.264366][ T6855] RAX: ffffffffffffffda RBX: 00007fb98e1e5fa0 RCX: 00007fb98df8e15c [ 172.264381][ T6855] RDX: 000000000000000f RSI: 00007fb98edfb0a0 RDI: 0000000000000004 [ 172.264394][ T6855] RBP: 00007fb98edfb090 R08: 0000000000000000 R09: 0000000000000000 [ 172.264407][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.264419][ T6855] R13: 00007fb98e1e6038 R14: 00007fb98e1e5fa0 R15: 00007ffc34883408 [ 172.264453][ T6855] [ 172.676508][ T5921] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 172.826691][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 172.834740][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 172.856522][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 7 [ 172.867796][ T5927] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 172.877060][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50684, setting to 1024 [ 172.893576][ T5921] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 172.903220][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.914142][ T5921] usb 3-1: Product: syz [ 172.918882][ T5921] usb 3-1: Manufacturer: syz [ 172.923595][ T5921] usb 3-1: SerialNumber: syz [ 172.931632][ T5921] usb 3-1: config 0 descriptor?? [ 172.940692][ T5921] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 172.950081][ T5921] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 173.036550][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 173.044797][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.055967][ T5927] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 173.065193][ T793] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 173.073287][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.095228][ T5927] usb 2-1: config 0 descriptor?? [ 173.136537][ T5914] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 173.240565][ T793] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 173.248826][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.259816][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.269797][ T793] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.284586][ T793] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.297869][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.306435][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 173.314015][ T5914] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 173.324472][ T793] usb 1-1: config 0 descriptor?? [ 173.336620][ T5914] usb 5-1: config 0 has no interface number 0 [ 173.349354][ T5914] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 173.360684][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.369116][ T5914] usb 5-1: Product: syz [ 173.373331][ T5914] usb 5-1: Manufacturer: syz [ 173.378190][ T5914] usb 5-1: SerialNumber: syz [ 173.387166][ T5914] usb 5-1: config 0 descriptor?? [ 173.397181][ T5914] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 173.546066][ T5921] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 173.553135][ T5921] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 173.570906][ T6863] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 173.591873][ T5927] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 173.609852][ T5914] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 173.625262][ T5914] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 173.763829][ T793] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 174.008411][ T6869] netlink: 'syz.0.347': attribute type 1 has an invalid length. [ 174.018701][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 174.026857][ T44] usb 5-1: USB disconnect, device number 4 [ 174.045405][ T44] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 174.058416][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.068118][ T6869] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 174.084199][ T44] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 174.109075][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.135482][ T24] usb 2-1: USB disconnect, device number 24 [ 174.152883][ T44] quatech2 5-1:0.51: device disconnected [ 174.167400][ T5921] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 174.182339][ T793] usb 1-1: USB disconnect, device number 26 [ 174.390338][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 174.398833][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 174.408302][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 174.415710][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 174.422637][ T5921] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 174.433507][ T5921] usb 3-1: USB disconnect, device number 34 [ 174.987051][ T5927] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 175.041001][ T6891] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.354'. [ 175.050584][ T6891] netlink: 280 bytes leftover after parsing attributes in process `syz.2.354'. [ 175.104924][ T6893] FAULT_INJECTION: forcing a failure. [ 175.104924][ T6893] name failslab, interval 1, probability 0, space 0, times 0 [ 175.121023][ T6893] CPU: 0 UID: 0 PID: 6893 Comm: syz.1.355 Not tainted syzkaller #0 PREEMPT(full) [ 175.121053][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.121066][ T6893] Call Trace: [ 175.121074][ T6893] [ 175.121083][ T6893] dump_stack_lvl+0x189/0x250 [ 175.121111][ T6893] ? __pfx____ratelimit+0x10/0x10 [ 175.121143][ T6893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.121165][ T6893] ? __pfx__printk+0x10/0x10 [ 175.121200][ T6893] ? __pfx___might_resched+0x10/0x10 [ 175.121234][ T6893] ? fs_reclaim_acquire+0x7d/0x100 [ 175.121261][ T6893] should_fail_ex+0x414/0x560 [ 175.121291][ T6893] should_failslab+0xa8/0x100 [ 175.121317][ T6893] kmem_cache_alloc_noprof+0x88/0x710 [ 175.121349][ T6893] ? vm_area_alloc+0x24/0x140 [ 175.121385][ T6893] vm_area_alloc+0x24/0x140 [ 175.121416][ T6893] mmap_region+0xdea/0x1d10 [ 175.121461][ T6893] ? __pfx_mmap_region+0x10/0x10 [ 175.121541][ T6893] ? __lock_acquire+0x6b6/0x2cf0 [ 175.121591][ T6893] ? __lock_acquire+0x6b6/0x2cf0 [ 175.121622][ T6893] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 175.121668][ T6893] ? bpf_lsm_mmap_addr+0x9/0x20 [ 175.121687][ T6893] ? security_mmap_addr+0x71/0x270 [ 175.121709][ T6893] ? shmem_mapping+0xd/0x50 [ 175.121730][ T6893] ? memfd_check_seals_mmap+0xc5/0x200 [ 175.121760][ T6893] do_mmap+0xc45/0x10d0 [ 175.121798][ T6893] ? __pfx_do_mmap+0x10/0x10 [ 175.121821][ T6893] ? down_write_killable+0x178/0x230 [ 175.121849][ T6893] ? __pfx_down_write_killable+0x10/0x10 [ 175.121870][ T6893] ? common_file_perm+0x1b5/0x220 [ 175.121904][ T6893] vm_mmap_pgoff+0x2a6/0x4d0 [ 175.121936][ T6893] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 175.121961][ T6893] ? __fget_files+0x2a/0x420 [ 175.121998][ T6893] ? __fget_files+0x2a/0x420 [ 175.122021][ T6893] ? __fget_files+0x2a/0x420 [ 175.122048][ T6893] ksys_mmap_pgoff+0x51f/0x760 [ 175.122082][ T6893] do_syscall_64+0xfa/0xf80 [ 175.122101][ T6893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.122123][ T6893] ? clear_bhb_loop+0x60/0xb0 [ 175.122149][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.122169][ T6893] RIP: 0033:0x7fe4d0b8f749 [ 175.122190][ T6893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.122208][ T6893] RSP: 002b:00007fe4d1a7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 175.122230][ T6893] RAX: ffffffffffffffda RBX: 00007fe4d0de5fa0 RCX: 00007fe4d0b8f749 [ 175.122245][ T6893] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000000000 [ 175.122257][ T6893] RBP: 00007fe4d1a7b090 R08: 0000000000000003 R09: 0000000000000000 [ 175.122270][ T6893] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 175.122281][ T6893] R13: 00007fe4d0de6038 R14: 00007fe4d0de5fa0 R15: 00007ffe435754d8 [ 175.122315][ T6893] [ 175.438735][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.449948][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.456517][ T5921] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 175.460061][ T5927] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 175.476394][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.488713][ T5927] usb 1-1: config 0 descriptor?? [ 175.623161][ T5921] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 175.645321][ T5921] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 175.655706][ T5921] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.665947][ T5921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.697831][ T5921] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.716279][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.724325][ T5921] usb 5-1: Product: syz [ 175.729800][ T5921] usb 5-1: Manufacturer: syz [ 175.735625][ T5921] usb 5-1: SerialNumber: syz [ 175.826807][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 175.910191][ T5927] hid_parser_main: 21 callbacks suppressed [ 175.910214][ T5927] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 175.944418][ T5927] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 175.961339][ T5921] usb 5-1: 0:2 : does not exist [ 175.977913][ T24] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 175.989518][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.016114][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.032022][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.058562][ T5921] usb 5-1: USB disconnect, device number 5 [ 176.064555][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.084310][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.108483][ T5927] cp2112 0003:10C4:EA90.0014: Part Number: 0x82 Device Version: 0xFE [ 176.118173][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.137839][ T24] usb 2-1: config 0 descriptor?? [ 176.240177][ T6905] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 176.248412][ T6905] netlink: 244 bytes leftover after parsing attributes in process `syz.2.357'. [ 176.554992][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 176.574033][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 176.596650][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 176.604162][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 176.617567][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 176.619030][ T6915] batadv_slave_0: entered promiscuous mode [ 176.625018][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 176.639599][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 176.656995][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 176.686346][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 176.700875][ T6913] batadv_slave_0: left promiscuous mode [ 176.718610][ T24] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 176.809848][ T6901] netlink: 'syz.1.356': attribute type 1 has an invalid length. [ 176.865811][ T6901] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 176.969670][ T24] usb 2-1: USB disconnect, device number 25 [ 176.986484][ T6921] cp2112 0003:10C4:EA90.0014: Error starting transaction: -38 [ 177.356214][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 177.516182][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 177.538320][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 177.566263][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 7 [ 177.580136][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50684, setting to 1024 [ 177.598517][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 177.608070][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.626138][ T24] usb 3-1: Product: syz [ 177.631897][ T6931] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.364'. [ 177.650365][ T24] usb 3-1: Manufacturer: syz [ 177.665516][ T24] usb 3-1: SerialNumber: syz [ 177.696890][ T24] usb 3-1: config 0 descriptor?? [ 177.710161][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 177.757659][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 177.778314][ T6930] gfs2: not a GFS2 filesystem [ 177.816395][ T10] usb 1-1: USB disconnect, device number 27 [ 178.030490][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 178.056259][ T5927] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 178.219858][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 50, changing to 9 [ 178.232639][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 2047, setting to 1024 [ 178.247829][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 178.264234][ T5927] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 178.273836][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.282300][ T5927] usb 2-1: Product: syz [ 178.287537][ T5927] usb 2-1: Manufacturer: syz [ 178.292174][ T5927] usb 2-1: SerialNumber: syz [ 178.301805][ T5927] usb 2-1: config 0 descriptor?? [ 178.310144][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 178.318155][ T6930] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 178.337189][ T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 178.346450][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 178.508562][ T10] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.520462][ T10] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.536373][ T6930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.548739][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.555441][ T10] usb 1-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 178.572314][ T6930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.583019][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.601836][ T5927] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.612210][ T10] usb 1-1: config 0 descriptor?? [ 178.714883][ T5927] usb 2-1: USB disconnect, device number 26 [ 178.815543][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.947583][ T24] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 179.157920][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 179.166717][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 179.173528][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 179.180647][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 179.188309][ T24] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 179.204511][ T24] usb 3-1: USB disconnect, device number 35 [ 179.439660][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 179.450707][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 179.463556][ T10] usb 1-1: USB disconnect, device number 28 [ 179.482148][ T6948] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 179.722378][ T6951] tipc: Started in network mode [ 179.730069][ T6951] tipc: Node identity , cluster identity 4711 [ 179.910517][ T6955] binder: BINDER_SET_CONTEXT_MGR bad uid 8576 != 0 [ 179.919211][ T6955] binder: 6954:6955 ioctl 4018620d 200000000100 returned -1 [ 179.956797][ T5841] Bluetooth: hci4: command 0x1003 tx timeout [ 179.956809][ T5840] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 180.057398][ T6957] input: syz1 as /devices/virtual/input/input15 [ 180.080569][ T6957] FAULT_INJECTION: forcing a failure. [ 180.080569][ T6957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.118652][ T6957] CPU: 0 UID: 0 PID: 6957 Comm: syz.0.374 Not tainted syzkaller #0 PREEMPT(full) [ 180.118681][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.118694][ T6957] Call Trace: [ 180.118702][ T6957] [ 180.118710][ T6957] dump_stack_lvl+0x189/0x250 [ 180.118736][ T6957] ? __pfx____ratelimit+0x10/0x10 [ 180.118765][ T6957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.118786][ T6957] ? __pfx__printk+0x10/0x10 [ 180.118817][ T6957] ? __might_fault+0xb0/0x130 [ 180.118859][ T6957] should_fail_ex+0x414/0x560 [ 180.118891][ T6957] _copy_from_user+0x2d/0xb0 [ 180.118923][ T6957] input_event_from_user+0xb2/0x280 [ 180.118955][ T6957] ? __pfx_input_event_from_user+0x10/0x10 [ 180.118992][ T6957] ? input_event+0xb2/0xe0 [ 180.119017][ T6957] uinput_write+0x279/0xfc0 [ 180.119047][ T6957] ? __pfx_uinput_write+0x10/0x10 [ 180.119069][ T6957] ? bpf_lsm_file_permission+0x9/0x20 [ 180.119089][ T6957] ? security_file_permission+0x75/0x290 [ 180.119132][ T6957] ? rw_verify_area+0x255/0x4d0 [ 180.119162][ T6957] ? __pfx_uinput_write+0x10/0x10 [ 180.119183][ T6957] vfs_write+0x27e/0xb30 [ 180.119223][ T6957] ? __pfx_vfs_write+0x10/0x10 [ 180.119255][ T6957] ? __fget_files+0x2a/0x420 [ 180.119281][ T6957] ? __fget_files+0x2a/0x420 [ 180.119303][ T6957] ? __fget_files+0x3a0/0x420 [ 180.119326][ T6957] ? __fget_files+0x2a/0x420 [ 180.119359][ T6957] ksys_write+0x145/0x250 [ 180.119392][ T6957] ? __pfx_ksys_write+0x10/0x10 [ 180.119433][ T6957] ? do_syscall_64+0xbe/0xf80 [ 180.119457][ T6957] do_syscall_64+0xfa/0xf80 [ 180.119478][ T6957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.119499][ T6957] ? clear_bhb_loop+0x60/0xb0 [ 180.119524][ T6957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.119545][ T6957] RIP: 0033:0x7fb98df8f749 [ 180.119575][ T6957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.119593][ T6957] RSP: 002b:00007fb98edfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.119618][ T6957] RAX: ffffffffffffffda RBX: 00007fb98e1e5fa0 RCX: 00007fb98df8f749 [ 180.119634][ T6957] RDX: 000000000000045c RSI: 0000200000000080 RDI: 0000000000000003 [ 180.119646][ T6957] RBP: 00007fb98edfb090 R08: 0000000000000000 R09: 0000000000000000 [ 180.119659][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.119671][ T6957] R13: 00007fb98e1e6038 R14: 00007fb98e1e5fa0 R15: 00007ffc34883408 [ 180.119707][ T6957] [ 180.448935][ T6963] input: syz1 as /devices/virtual/input/input16 [ 180.681613][ T6973] dlm: no locking on control device [ 180.806162][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 180.866007][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 180.895989][ T5913] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 180.958482][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.966271][ T5927] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 180.970400][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 180.985612][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.994661][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 181.005789][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 181.018913][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.020066][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.028322][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 181.045553][ T24] usb 5-1: Product: syz [ 181.049929][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 181.052391][ T24] usb 5-1: Manufacturer: syz [ 181.065516][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.065568][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 181.065606][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 181.066818][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 181.104464][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 181.109678][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.109730][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 181.109750][ T10] usb 3-1: Product: syz [ 181.109767][ T10] usb 3-1: Manufacturer: syz [ 181.136477][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 181.144517][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 181.151624][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 181.159884][ T5927] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.171987][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 181.179834][ T5927] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 181.190765][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 181.199367][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 181.212006][ T5927] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.221930][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 7 [ 181.233394][ T10] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 181.241426][ T5927] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 181.252558][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 181.259798][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50684, setting to 1024 [ 181.275550][ T5927] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 181.289565][ T5927] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.299120][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 181.307643][ T5927] usb 1-1: Product: syz [ 181.313028][ T5913] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 181.322309][ T5927] usb 1-1: Manufacturer: syz [ 181.327019][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.335043][ T5913] usb 2-1: Product: syz [ 181.340825][ T5913] usb 2-1: Manufacturer: syz [ 181.346092][ T5913] usb 2-1: SerialNumber: syz [ 181.352197][ T24] usb 5-1: USB disconnect, device number 6 [ 181.357516][ T6969] cdc_wdm 5-1:1.0: Error submitting int urb - -19 [ 181.370679][ T6969] FAULT_INJECTION: forcing a failure. [ 181.370679][ T6969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.384176][ T6969] CPU: 0 UID: 0 PID: 6969 Comm: syz.2.381 Not tainted syzkaller #0 PREEMPT(full) [ 181.384203][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.384215][ T6969] Call Trace: [ 181.384222][ T6969] [ 181.384230][ T6969] dump_stack_lvl+0x189/0x250 [ 181.384255][ T6969] ? __pfx____ratelimit+0x10/0x10 [ 181.384298][ T6969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.384319][ T6969] ? __pfx__printk+0x10/0x10 [ 181.384362][ T6969] should_fail_ex+0x414/0x560 [ 181.384392][ T6969] _copy_to_user+0x31/0xb0 [ 181.384425][ T6969] simple_read_from_buffer+0xe1/0x170 [ 181.384455][ T6969] proc_fail_nth_read+0x1b3/0x220 [ 181.384490][ T6969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.384525][ T6969] ? rw_verify_area+0x2a6/0x4d0 [ 181.384553][ T6969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.384586][ T6969] vfs_read+0x200/0xa30 [ 181.384614][ T6969] ? fdget_pos+0x247/0x320 [ 181.384641][ T6969] ? __pfx___mutex_lock+0x10/0x10 [ 181.384662][ T6969] ? __pfx_vfs_read+0x10/0x10 [ 181.384694][ T6969] ? __fget_files+0x2a/0x420 [ 181.384722][ T6969] ? __fget_files+0x3a0/0x420 [ 181.384744][ T6969] ? __fget_files+0x2a/0x420 [ 181.384778][ T6969] ksys_read+0x145/0x250 [ 181.384810][ T6969] ? __pfx_ksys_read+0x10/0x10 [ 181.384844][ T6969] ? do_syscall_64+0xbe/0xf80 [ 181.384868][ T6969] do_syscall_64+0xfa/0xf80 [ 181.384888][ T6969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.384910][ T6969] ? clear_bhb_loop+0x60/0xb0 [ 181.384935][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.384956][ T6969] RIP: 0033:0x7f860938e15c [ 181.384975][ T6969] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 181.384993][ T6969] RSP: 002b:00007f860a2e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.385014][ T6969] RAX: ffffffffffffffda RBX: 00007f86095e5fa0 RCX: 00007f860938e15c [ 181.385029][ T6969] RDX: 000000000000000f RSI: 00007f860a2e80a0 RDI: 0000000000000004 [ 181.385042][ T6969] RBP: 00007f860a2e8090 R08: 0000000000000000 R09: 0000000000000000 [ 181.385055][ T6969] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 181.385067][ T6969] R13: 00007f86095e6038 R14: 00007f86095e5fa0 R15: 00007ffde185ef08 [ 181.385100][ T6969] [ 181.624074][ T5913] usb 2-1: config 0 descriptor?? [ 181.639897][ T5927] cdc_wdm 1-1:1.0: skipping garbage [ 181.645160][ T5927] cdc_wdm 1-1:1.0: skipping garbage [ 181.653507][ T5927] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 181.659567][ T5927] cdc_wdm 1-1:1.0: Unknown control protocol [ 181.673738][ T5913] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 181.684578][ T5913] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 181.709726][ T10] usb 3-1: USB disconnect, device number 36 [ 182.232780][ T5913] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 182.240025][ T5913] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 182.555921][ T5929] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 182.685977][ T5929] usb 5-1: device descriptor read/64, error -71 [ 182.851897][ T5913] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 182.947474][ T5929] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 183.062134][ T5913] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 183.069260][ T5913] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 183.076226][ T5913] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 183.083256][ T5913] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 183.090446][ T5929] usb 5-1: device descriptor read/64, error -71 [ 183.097490][ T5913] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 183.108127][ T5913] usb 2-1: USB disconnect, device number 27 [ 183.206291][ T5929] usb usb5-port1: attempt power cycle [ 183.545861][ T5929] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 183.566611][ T5929] usb 5-1: device descriptor read/8, error -71 [ 183.744460][ T5913] usb 1-1: USB disconnect, device number 29 [ 183.805902][ T5929] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 183.830295][ T5929] usb 5-1: device descriptor read/8, error -71 [ 183.961791][ T5929] usb usb5-port1: unable to enumerate USB device [ 184.235832][ T5913] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 184.302709][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 184.355965][ T7005] netlink: 264 bytes leftover after parsing attributes in process `syz.1.396'. [ 184.365175][ T7005] FAULT_INJECTION: forcing a failure. [ 184.365175][ T7005] name failslab, interval 1, probability 0, space 0, times 0 [ 184.380145][ T7005] CPU: 1 UID: 0 PID: 7005 Comm: syz.1.396 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.380176][ T7005] Tainted: [L]=SOFTLOCKUP [ 184.380184][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.380195][ T7005] Call Trace: [ 184.380209][ T7005] [ 184.380218][ T7005] dump_stack_lvl+0x189/0x250 [ 184.380243][ T7005] ? __pfx____ratelimit+0x10/0x10 [ 184.380274][ T7005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.380295][ T7005] ? __pfx__printk+0x10/0x10 [ 184.380329][ T7005] ? __pfx___might_resched+0x10/0x10 [ 184.380366][ T7005] ? fs_reclaim_acquire+0x7d/0x100 [ 184.380372][ T5913] usb 1-1: device descriptor read/64, error -71 [ 184.380393][ T7005] should_fail_ex+0x414/0x560 [ 184.380479][ T7005] should_failslab+0xa8/0x100 [ 184.380557][ T7005] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 184.380657][ T7005] ? __alloc_skb+0x255/0x430 [ 184.380731][ T7005] ? napi_skb_cache_get+0x4a5/0x780 [ 184.380804][ T7005] ? napi_skb_cache_get+0x151/0x780 [ 184.380890][ T7005] __alloc_skb+0x255/0x430 [ 184.381013][ T7005] ? __pfx___alloc_skb+0x10/0x10 [ 184.381115][ T7005] ? netlink_ack_tlv_len+0x6c/0x210 [ 184.381181][ T7005] netlink_ack+0x146/0xa50 [ 184.381235][ T7005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.381308][ T7005] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 184.381382][ T7005] ? __pfx_nl802154_post_doit+0x10/0x10 [ 184.381497][ T7005] netlink_rcv_skb+0x28c/0x470 [ 184.381561][ T7005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.381637][ T7005] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.381742][ T7005] ? down_read+0x274/0x2e0 [ 184.381795][ T7005] ? genl_rcv+0xd/0x40 [ 184.381871][ T7005] genl_rcv+0x28/0x40 [ 184.381958][ T7005] netlink_unicast+0x82f/0x9e0 [ 184.382061][ T7005] ? __pfx_netlink_unicast+0x10/0x10 [ 184.382117][ T7005] ? netlink_sendmsg+0x642/0xb30 [ 184.382172][ T7005] ? skb_put+0x11b/0x210 [ 184.382246][ T7005] netlink_sendmsg+0x805/0xb30 [ 184.382301][ T7005] ? aa_sk_perm+0x15f/0x920 [ 184.382386][ T7005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.382451][ T7005] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 184.382546][ T7005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.382608][ T7005] sock_sendmsg_nosec+0x18f/0x1d0 [ 184.382670][ T7005] ____sys_sendmsg+0x577/0x880 [ 184.382753][ T7005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.382838][ T7005] ? import_iovec+0x74/0xa0 [ 184.382925][ T7005] ___sys_sendmsg+0x21f/0x2a0 [ 184.382991][ T7005] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.383066][ T7005] ? rcu_read_lock_any_held+0xb3/0x120 [ 184.383214][ T7005] ? __fget_files+0x2a/0x420 [ 184.383284][ T7005] ? __fget_files+0x3a0/0x420 [ 184.383406][ T7005] __x64_sys_sendmsg+0x19b/0x260 [ 184.383479][ T7005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.383564][ T7005] ? __pfx_ksys_write+0x10/0x10 [ 184.383656][ T7005] ? do_syscall_64+0xbe/0xf80 [ 184.383713][ T7005] do_syscall_64+0xfa/0xf80 [ 184.383768][ T7005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.383822][ T7005] ? clear_bhb_loop+0x60/0xb0 [ 184.383887][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.383926][ T7005] RIP: 0033:0x7fe4d0b8f749 [ 184.383984][ T7005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.384026][ T7005] RSP: 002b:00007fe4d1a7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.384087][ T7005] RAX: ffffffffffffffda RBX: 00007fe4d0de5fa0 RCX: 00007fe4d0b8f749 [ 184.384123][ T7005] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000004 [ 184.384164][ T7005] RBP: 00007fe4d1a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 184.384196][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.384241][ T7005] R13: 00007fe4d0de6038 R14: 00007fe4d0de5fa0 R15: 00007ffe435754d8 [ 184.384327][ T7005] [ 184.815856][ T5929] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 184.975920][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 184.985899][ T5929] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 184.995127][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.003849][ T5913] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 185.011597][ T5929] usb 3-1: Product: syz [ 185.016081][ T5929] usb 3-1: Manufacturer: syz [ 185.020806][ T5929] usb 3-1: SerialNumber: syz [ 185.032613][ T5929] r8152-cfgselector 3-1: Unknown version 0x0000 [ 185.039116][ T5929] r8152-cfgselector 3-1: config 0 descriptor?? [ 185.157048][ T5913] usb 1-1: device descriptor read/64, error -71 [ 185.266081][ T5913] usb usb1-port1: attempt power cycle [ 185.452771][ T24] r8152-cfgselector 3-1: USB disconnect, device number 37 [ 185.615580][ T5913] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 185.636287][ T5913] usb 1-1: device descriptor read/8, error -71 [ 185.707394][ T5875] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 185.725404][ T5820] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 185.875286][ T5820] usb 5-1: Using ep0 maxpacket: 16 [ 185.875772][ T5913] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 185.880650][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 185.896596][ T5875] usb 2-1: config 0 has an invalid interface number: 142 but max is 0 [ 185.905039][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.906871][ T5913] usb 1-1: device descriptor read/8, error -71 [ 185.915626][ T5875] usb 2-1: config 0 has no interface number 0 [ 185.927846][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.938926][ T5875] usb 2-1: config 0 interface 142 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.952275][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.962148][ T5875] usb 2-1: config 0 interface 142 has no altsetting 0 [ 185.969068][ T5820] usb 5-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 185.979641][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.989699][ T5875] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=48.3b [ 186.000331][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.009503][ T5820] usb 5-1: config 0 descriptor?? [ 186.025915][ T5913] usb usb1-port1: unable to enumerate USB device [ 186.033238][ T5875] usb 2-1: Product: syz [ 186.043124][ T5875] usb 2-1: Manufacturer: syz [ 186.048182][ T5875] usb 2-1: SerialNumber: syz [ 186.066585][ T5875] usb 2-1: config 0 descriptor?? [ 186.276325][ T7012] loop3: detected capacity change from 0 to 1 [ 186.288630][ T7012] Dev loop3: unable to read RDB block 1 [ 186.294312][ T7012] loop3: unable to read partition table [ 186.300495][ T7012] loop3: partition table beyond EOD, truncated [ 186.307066][ T7012] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 186.341532][ T5875] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.142/input/input17 [ 186.351850][ T24] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 186.367042][ T5182] bcm5974 2-1:0.142: could not read from device [ 186.384623][ T5182] bcm5974 2-1:0.142: could not read from device [ 186.398709][ T5875] usb 2-1: USB disconnect, device number 28 [ 186.406726][ T5182] bcm5974 2-1:0.142: could not read from device [ 186.420853][ T5820] hid_parser_main: 6 callbacks suppressed [ 186.420875][ T5820] elecom 0003:056E:019B.0016: unknown main item tag 0x0 [ 186.434254][ T5820] elecom 0003:056E:019B.0016: unknown main item tag 0x0 [ 186.442076][ T5820] elecom 0003:056E:019B.0016: unknown main item tag 0x0 [ 186.452213][ T5820] elecom 0003:056E:019B.0016: unknown main item tag 0x0 [ 186.459461][ T5820] elecom 0003:056E:019B.0016: unknown main item tag 0x0 [ 186.467225][ T5820] elecom 0003:056E:019B.0016: unknown main item tag 0x0 [ 186.487213][ T5820] elecom 0003:056E:019B.0016: unknown main item tag 0x0 [ 186.496438][ T5820] elecom 0003:056E:019B.0016: unknown main item tag 0x0 [ 186.503464][ T5820] elecom 0003:056E:019B.0016: unknown main item tag 0x0 [ 186.510749][ T5820] elecom 0003:056E:019B.0016: unknown main item tag 0x0 [ 186.530207][ T5820] elecom 0003:056E:019B.0016: hidraw0: USB HID v80.01 Device [HID 056e:019b] on usb-dummy_hcd.4-1/input0 [ 186.551542][ T24] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 186.559935][ T24] usb 3-1: config 0 has no interface number 0 [ 186.578075][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 186.592256][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.601209][ T24] usb 3-1: Product: syz [ 186.605768][ T24] usb 3-1: Manufacturer: syz [ 186.610410][ T24] usb 3-1: SerialNumber: syz [ 186.618216][ T24] usb 3-1: config 0 descriptor?? [ 186.642713][ T5820] usb 5-1: USB disconnect, device number 11 [ 186.663057][ T7015] fido_id[7015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 186.828902][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.851850][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.867375][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.937328][ T24] usb 3-1: USB disconnect, device number 38 [ 186.971575][ T5973] udevd[5973]: setting mode of /dev/bus/usb/003/038 to 020664 failed: No such file or directory [ 186.988092][ T5973] udevd[5973]: setting owner of /dev/bus/usb/003/038 to uid=0, gid=0 failed: No such file or directory [ 187.023900][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.311290][ T24] IPVS: starting estimator thread 0... [ 187.406916][ T7026] IPVS: using max 28 ests per chain, 67200 per kthread [ 187.454635][ T5914] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 187.474518][ T5929] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 187.509723][ T7028] 8021q: VLANs not supported on caif0 [ 187.573618][ T7034] comedi comedi2: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 187.618498][ T5914] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 187.628731][ T5914] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 187.643951][ T5914] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 187.654056][ T5929] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 187.662758][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.674292][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.682411][ T5914] usb 1-1: Product: syz [ 187.687156][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.697381][ T5914] usb 1-1: Manufacturer: syz [ 187.702079][ T5914] usb 1-1: SerialNumber: syz [ 187.707150][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.725241][ T5914] usb 1-1: config 0 descriptor?? [ 187.732266][ T7022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 187.741897][ T5929] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.751946][ T7022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 187.763423][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.779529][ T5929] usb 5-1: config 0 descriptor?? [ 187.965442][ T7022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 187.973407][ T7022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 188.094108][ T5913] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 188.200080][ T5929] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 188.246379][ T5913] usb 3-1: config 5 has an invalid interface number: 245 but max is 0 [ 188.255679][ T5913] usb 3-1: config 5 has no interface number 0 [ 188.261901][ T5913] usb 3-1: config 5 interface 245 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 188.276776][ T5913] usb 3-1: config 5 interface 245 has no altsetting 0 [ 188.286703][ T5913] usb 3-1: New USB device found, idVendor=0a07, idProduct=0078, bcdDevice=f7.36 [ 188.313930][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.322250][ T5913] usb 3-1: Product: syz [ 188.334991][ T5913] usb 3-1: Manufacturer: syz [ 188.342953][ T5913] usb 3-1: SerialNumber: syz [ 188.445115][ T7024] netlink: 'syz.4.404': attribute type 1 has an invalid length. [ 188.464594][ T7024] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 188.548922][ T24] usb 5-1: USB disconnect, device number 12 [ 188.563106][ T7038] netlink: 348 bytes leftover after parsing attributes in process `syz.2.409'. [ 188.587564][ T5913] adutux 3-1:5.245: interrupt endpoints not found [ 188.616417][ T5913] usb 3-1: USB disconnect, device number 39 [ 188.629550][ T5914] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 188.667007][ T5914] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 188.689284][ T5914] usb 1-1: USB disconnect, device number 34 [ 188.706386][ T5914] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 188.783664][ T5875] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 188.933933][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 188.942001][ T5875] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.952216][ T5875] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 188.960586][ T5875] usb 2-1: config 4 has no interface number 0 [ 188.966833][ T5875] usb 2-1: config 4 interface 30 has no altsetting 0 [ 188.978472][ T5875] usb 2-1: string descriptor 0 read error: -22 [ 188.984883][ T5875] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 188.994147][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.010297][ T5875] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 189.018472][ T5875] dw2102: su3000_power_ctrl: 1, initialized 0 [ 189.025226][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 189.035341][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.048036][ T5875] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 189.056033][ T5875] usb 2-1: media controller created [ 189.071994][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 189.078150][ T5875] dw2102: i2c transfer failed. [ 189.083151][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 189.089085][ T5875] dw2102: i2c transfer failed. [ 189.103514][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 189.123481][ T5875] dw2102: i2c transfer failed. [ 189.128326][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 189.143424][ T5875] dw2102: i2c transfer failed. [ 189.162696][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 189.185141][ T5875] dw2102: i2c transfer failed. [ 189.191092][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 189.197166][ T5875] dw2102: i2c transfer failed. [ 189.234936][ T7045] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 189.246905][ T7045] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 189.255365][ T7045] CPU: 1 UID: 0 PID: 7045 Comm: syz.1.411 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.266167][ T7045] Tainted: [L]=SOFTLOCKUP [ 189.270519][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.280608][ T7045] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 189.286555][ T7045] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 cd 17 61 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 189.306228][ T7045] RSP: 0018:ffffc900034f7a88 EFLAGS: 00010202 [ 189.312321][ T7045] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 189.320312][ T7045] RDX: ffffffff87c7a135 RSI: ffffffff8f2da8f0 RDI: 0000000000001900 [ 189.328331][ T7045] RBP: 0000000000000000 R08: ffff888025959e80 R09: 0000000000000002 [ 189.336331][ T7045] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 189.344318][ T7045] R13: 1ffff1100fc04f58 R14: 0000000000000002 R15: ffff88807e027ac8 [ 189.352317][ T7045] FS: 00007fe4d1a7b6c0(0000) GS:ffff888125ade000(0000) knlGS:0000000000000000 [ 189.361264][ T7045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.367865][ T7045] CR2: 00007fb98ed156c0 CR3: 00000000330d2000 CR4: 00000000003526f0 [ 189.375875][ T7045] Call Trace: [ 189.379173][ T7045] [ 189.382130][ T7045] __i2c_transfer+0x871/0x2110 [ 189.386924][ T7045] ? i2c_transfer+0x120/0x3a0 [ 189.391684][ T7045] ? __pfx___i2c_transfer+0x10/0x10 [ 189.396906][ T7045] ? rt_mutex_lock_nested+0x172/0x1e0 [ 189.402328][ T7045] ? i2c_transfer+0x120/0x3a0 [ 189.407025][ T7045] i2c_transfer+0x25b/0x3a0 [ 189.411551][ T7045] ? __pfx_i2c_transfer+0x10/0x10 [ 189.416598][ T7045] ? _copy_from_user+0x94/0xb0 [ 189.421391][ T7045] i2cdev_ioctl_rdwr+0x460/0x740 [ 189.426387][ T7045] i2cdev_ioctl+0x64b/0x820 [ 189.430917][ T7045] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 189.435969][ T7045] ? __fget_files+0x3a0/0x420 [ 189.440663][ T7045] ? __fget_files+0x2a/0x420 [ 189.445271][ T7045] ? bpf_lsm_file_ioctl+0x9/0x20 [ 189.450226][ T7045] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 189.455279][ T7045] __se_sys_ioctl+0xfc/0x170 [ 189.459899][ T7045] do_syscall_64+0xfa/0xf80 [ 189.464423][ T7045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.470520][ T7045] ? clear_bhb_loop+0x60/0xb0 [ 189.475216][ T7045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.481126][ T7045] RIP: 0033:0x7fe4d0b8f749 [ 189.485647][ T7045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.505271][ T7045] RSP: 002b:00007fe4d1a7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.513717][ T7045] RAX: ffffffffffffffda RBX: 00007fe4d0de5fa0 RCX: 00007fe4d0b8f749 [ 189.521704][ T7045] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 189.529688][ T7045] RBP: 00007fe4d0c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 189.537676][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.545663][ T7045] R13: 00007fe4d0de6038 R14: 00007fe4d0de5fa0 R15: 00007ffe435754d8 [ 189.553665][ T7045] [ 189.556700][ T7045] Modules linked in: [ 189.561597][ T7045] ---[ end trace 0000000000000000 ]--- [ 189.568300][ T5875] dvb-usb: MAC address: 02:02:02:02:02:02 [ 189.581893][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.620456][ T7045] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 189.631597][ T7045] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 cd 17 61 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 189.651610][ T7045] RSP: 0018:ffffc900034f7a88 EFLAGS: 00010202 [ 189.658149][ T7045] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 189.667646][ T7045] RDX: ffffffff87c7a135 RSI: ffffffff8f2da8f0 RDI: 0000000000001900 [ 189.675763][ T7045] RBP: 0000000000000000 R08: ffff888025959e80 R09: 0000000000000002 [ 189.717838][ T7045] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 189.726874][ T7045] R13: 1ffff1100fc04f58 R14: 0000000000000002 R15: ffff88807e027ac8 [ 189.735631][ T7045] FS: 00007fe4d1a7b6c0(0000) GS:ffff888125ade000(0000) knlGS:0000000000000000 [ 189.745129][ T7045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.751817][ T7045] CR2: 00007fb98e1b42f8 CR3: 00000000330d2000 CR4: 00000000003526f0 [ 189.760916][ T7045] Kernel panic - not syncing: Fatal exception [ 189.767613][ T7045] Kernel Offset: disabled [ 189.771947][ T7045] Rebooting in 86400 seconds..