last executing test programs: 6.526878363s ago: executing program 3 (id=3004): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e", 0x9f}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 6.446722261s ago: executing program 3 (id=3006): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe213806be4a3d1}, 0x4000) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/231, 0xe7}], 0x1}, 0xe}], 0x2, 0x2021, 0x0) 6.365498955s ago: executing program 3 (id=3008): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES8], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) 3.550154608s ago: executing program 2 (id=3033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1da}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}, {&(0x7f0000000300)="0109da00", 0x4}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x0) 3.488418754s ago: executing program 2 (id=3034): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="04000000400800b70400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000080000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c", 0x98}], 0x3, 0xc, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.437449095s ago: executing program 2 (id=3035): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.189896598s ago: executing program 3 (id=3036): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="04000000400800b70400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000080000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44d"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d3", 0x94}], 0x3, 0xc, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.113698241s ago: executing program 3 (id=3037): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x3d, 0x2, 0xfffffff8, 0xfffe, 0x0, 0x4, 0xfc, 0xfa, 0xf9, 0x9, 0x7, 0x404, 0xfffe, 0x0, 0x0, 0x40000045}}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) splice(r2, 0x0, r2, 0x0, 0x4, 0x4) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x103000) 2.447440977s ago: executing program 2 (id=3038): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) 1.517684016s ago: executing program 2 (id=3053): ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000000c0)={{{0x1, 0x1}}, 0x0, 0x5, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x5, 0x2, 0x180, 0x4, 0x0, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x7, 0x4, 0xbdb], 0x5000, 0x42900}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x45}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x4, 0x7d, 0x7, 0x36, 0x2, 0x2, 0x87}, {0x0, 0x33325000, 0xe, 0x2f, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x3000, 0xd000, 0xf, 0x3, 0x16, 0xa, 0xab, 0x8, 0xc, 0x9, 0x8, 0x97}, {0xeeee0000, 0xeeef0000, 0xf, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x1, 0x0, 0x5, 0x7, 0x5, 0xa, 0x3, 0x8, 0x81, 0x42, 0x70}, {0x0, 0x25000, 0x8, 0x5, 0xcd, 0x9, 0x1, 0x9, 0x2, 0xfa, 0xb0, 0x81}, {0x30000, 0x30}, {0xdddd0000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x6, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 829.528569ms ago: executing program 0 (id=3058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, r1, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random='\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048844) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x400c0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x94, r3, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec06107871d16dfc197afa6705b11a76332f0442fe42ac1b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8e9808241d86c85c1ff01a0273f14e75fc70f479f139ca73"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x80) 763.047295ms ago: executing program 0 (id=3060): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="04000000400800b70400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000080000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd46", 0x85}], 0x3, 0xc, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 652.456622ms ago: executing program 2 (id=3061): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x3, 0x4, 0x1, 0xc, 0x12, 0x4, 0xd, 0xfffffffc, 0x2, 0x1, 0xfffffffe, 0x1, 0x2, 0x101, 0x4, 0x9, 0x3, 0x352f, 0x99, 0xcaa7, 0x80, 0x20001e58, 0x7, 0x2000e67, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]}) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32=r1]) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0xa, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e22, @remote}}]}, 0x590) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) (async) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="090802000020000000002500000008000300", @ANYRES32=r4, @ANYBLOB="2cd2fadfc91c30935cf11777dfc60d67cdb3e088444eab04ab8829b52949d0e1b3babe69"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 646.083689ms ago: executing program 3 (id=3062): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hopopts={{0x20, 0x29, 0x36, {0x5e, 0x1, '\x00', [@pad1, @pad1, @generic={0x8}]}}}], 0x20}}], 0x1, 0x810) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) accept4$inet6(r2, &(0x7f0000000780)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000340)=0x1c, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 595.251695ms ago: executing program 1 (id=3063): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="04000000400800b70400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000080000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c", 0x98}], 0x3, 0xc, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 538.068719ms ago: executing program 0 (id=3064): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="04000000400800b70400000000000000", @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000080000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44d"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d3", 0x94}], 0x3, 0xc, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 482.571579ms ago: executing program 0 (id=3065): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="04000000400800b70400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000080000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c9732"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 463.342745ms ago: executing program 1 (id=3066): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="04af3654f3f8f34a7b682b41c169d199aa5476063db3209fbe5ef169369c4e79d3e7", @ANYRES16=r2, @ANYBLOB="1d0b27bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48850) 369.59066ms ago: executing program 0 (id=3067): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="04000000400800b70400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000080000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd9"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d3", 0x94}], 0x3, 0xc, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 368.502044ms ago: executing program 1 (id=3068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, r1, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random='\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048844) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x10) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x400c0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x94, r3, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec06107871d16dfc197afa6705b11a76332f0442fe42ac1b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8e9808241d86c85c1ff01a0273f14e75fc70f479f139ca73"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x80) 360.466627ms ago: executing program 0 (id=3069): ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000000c0)={{{0x1, 0x1}}, 0x0, 0x5, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000100)={{0x80, 0x81}, 'port0\x00', 0x20, 0x50000, 0x7fff, 0x0, 0x5, 0x9, 0x90, 0x0, 0x1, 0xb7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090248000101000000090400000002020000052406000005240000000d240f01000000000000000000052401"], 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x5, 0x2, 0x180, 0x4, 0x0, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x7, 0x4, 0xbdb], 0x5000, 0x42900}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x45}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x4, 0x7d, 0x7, 0x36, 0x2, 0x2, 0x87}, {0x0, 0x33325000, 0xe, 0x2f, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0xeeef0000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x3000, 0xd000, 0xf, 0x3, 0x14, 0xa, 0xab, 0x8, 0xc, 0x9, 0x8, 0x97}, {0xeeee0000, 0xeeef0000, 0xf, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x1, 0x0, 0x5, 0x7, 0x5, 0xa, 0x3, 0x8, 0x81, 0x42, 0x70}, {0x0, 0x25000, 0x8, 0x5, 0xcd, 0x9, 0x1, 0x9, 0x2, 0xfa, 0xb0, 0x81}, {0x30000, 0x30}, {0xdddd0000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x6, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 292.692633ms ago: executing program 1 (id=3070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=@delchain={0x1b6c, 0x65, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0xfff1}, {0xd, 0xc}, {0x9, 0x7}}, [@f_tcindex={{0xc}, {0x3b8, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_ACT={0x2d8, 0x7, [@m_ct={0xb8, 0x3, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010100}, @TCA_CT_MARK={0x8, 0x5, 0x200}, @TCA_CT_LABELS={0x14, 0x7, "bfb58275c43b324b7197bf7b1d9ef298"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_LABELS_MASK={0x14, 0x8, "463c2a324874cb5c05702f2818cead69"}]}, {0x3c, 0x6, "129ae2ab28f889ea87685af0c4a48734175fe13ec883af9aeaf0ca301b1d2101e0b00468e81b219ac57a9eba46db75b70e9a17c24d3881d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x80, 0x8, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_ACTION={0x6, 0x3, 0x18}]}, {0x45, 0x6, "95ad085797c55e03ace849397b8f5151efbefbc2e06f1433a4d5664080b68f23eb2e6b891a0dacc613f3d2c5840186de0b0a6f3d08d65cd41133aecbbd2e045dfd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x118, 0x6, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1000}]}, {0xe1, 0x6, "4ddae6d638bc1a4d6dc184505431198fd1481b7f939038196da31758ec2f7feca2a67b741bfeb44850328d18491f6ff4a4eb6538e108cbf463daf0f8a69efc57c1cdc9dac404237adf3a8888cf96c602f4cac137454a81fd0115ebc4ea5e0e97fe1693071973222eed8af6f4b0d395fe7a1f183f1e828540abae305dc0ebc7f4fab9c770bcf4932caa65650f46f740a901d882785f315a3152f9478e99ba529de66bc7b3abf35c0ae07df4ad53bba4209e8bb597df2f05eeea6344215c60a7249d92316e43486ad87550a651e6e7fd0d5ebd9fbe019b15713f6bf29bcb"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x84, 0x7, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffffff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}]}, {0x2d, 0x6, "e790c4fde91db94e980c7399ce43c957384851a7280b4180a87fba57b4622c5e143e83c2bc9f2e7704"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xc9d5}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_POLICE={0xac, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5e4, 0x5, 0xfff, 0x5, 0x5, {0x2, 0x4b9f130eb0e50fe1, 0x19, 0x6, 0x7f, 0x1}, {0x80, 0x2, 0x2, 0x94, 0x8, 0x2}, 0xd, 0x800, 0x7f}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffff94, 0xffffffffffffffff, 0x80, 0x80, 0x10000, {0xa, 0x1, 0x5, 0x1, 0xfffc, 0x1}, {0x7, 0x2, 0x6, 0x800, 0x2, 0x1}, 0x1, 0xe, 0xdb}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x67e8}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x3}]}}, @f_rsvp6={{0xa}, {0x60, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00'}, @TCA_RSVP_POLICE={0x48, 0x5, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0xffffffff, 0x1ff, 0x584d6398, {0x5, 0x1, 0x87, 0x4, 0x20, 0x9}, {0x3, 0x0, 0x4, 0x6, 0x8, 0x8}, 0x2, 0x8, 0x5}}]}]}}, @f_rsvp6={{0xa}, {0x44c, 0x2, [@TCA_RSVP_POLICE={0x28, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5d0e}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}]}, @TCA_RSVP_POLICE={0x420, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x1, 0x7a15, 0xee, 0x9, 0x3, 0x1, 0x3, 0x7, 0x100, 0xb4f9, 0x5, 0x1, 0x94, 0x6, 0x5, 0x1, 0x0, 0x5, 0x67c, 0xffff, 0xa3cc, 0x8000, 0x7f, 0x9a, 0x10, 0x9, 0x9, 0x5, 0xb1, 0x0, 0x4, 0x8000, 0x0, 0x2, 0x7f, 0x10001, 0x4, 0x1, 0x4ab, 0xfffffff8, 0xd0a, 0x5, 0x40, 0xce2, 0x7, 0x2, 0x2, 0x8, 0x6, 0x7c, 0xffffffff, 0x5, 0x10, 0x8, 0x7, 0x7fffffff, 0x7fffffff, 0x4, 0xfff, 0xbb, 0x8000, 0xfffffff7, 0xfffff801, 0x7f, 0x1, 0x7fff, 0x7, 0x6, 0x7fffffff, 0xaa42, 0x8, 0x8001, 0x2, 0x4, 0x86c, 0x1, 0x4, 0x0, 0x3, 0x1, 0x4, 0x8001, 0x400, 0x41f3, 0x0, 0x1, 0x35, 0x20000, 0x5b, 0x5, 0x1, 0x2, 0x9, 0xe59, 0x1, 0x8, 0x1, 0x6, 0xffffcc39, 0x7ae, 0x2, 0x5, 0x9, 0x3b, 0x6, 0x466b5c28, 0xf06, 0x8, 0x6, 0x0, 0x4, 0x200, 0x0, 0x882, 0xc6c, 0x6, 0x2, 0x3, 0x0, 0x328d, 0x5b520e5e, 0x5, 0x401, 0x2, 0x3, 0x9, 0x9, 0x0, 0x3, 0x2, 0x9, 0xb5f, 0x1, 0xfffffff9, 0x8000, 0x1, 0x7f, 0x4, 0xa, 0x6, 0x1000, 0x7, 0x9, 0xa, 0x7, 0x8, 0x757, 0xfffff800, 0x7, 0x10, 0x3, 0x23a, 0x7fffffff, 0xffff, 0x3, 0x8c4d, 0xb, 0x5, 0x2, 0x7, 0x7fffffff, 0x4, 0x83c, 0x6, 0x4, 0x0, 0x5, 0xdd3b, 0x100, 0x6, 0xd, 0x3, 0x1, 0x4, 0xffff3d8f, 0x80000001, 0x6, 0x2, 0x2e, 0x14, 0x1000, 0x6, 0x1688, 0x3, 0x10001, 0xfffffffa, 0x2, 0x400, 0x1000, 0x6, 0x2, 0x9, 0x1, 0x8000, 0x4, 0xf7, 0xffff755a, 0x7, 0x9f2d, 0x4, 0x1, 0x3495, 0x5, 0xe, 0x0, 0xaa0b, 0x3, 0xda, 0xec, 0xffffffff, 0x4, 0x81, 0x0, 0x4, 0xe, 0xfe5c, 0x0, 0x10000, 0x0, 0x800, 0x8, 0x2, 0x7, 0x0, 0x5, 0x8, 0xb1e, 0x37, 0x10, 0x2, 0x4, 0x100, 0x7fff, 0x1, 0x5, 0x8000, 0x7e, 0x61f2da02, 0xffffffff, 0x3, 0x7, 0x14000, 0xe, 0x75ca61eb, 0x3, 0xa, 0x2, 0x10000, 0x101, 0xffffffff, 0x80000000, 0x5, 0x1, 0x75, 0x3]}]}]}}, @f_rsvp={{0x9}, {0x8a0, 0x2, [@TCA_RSVP_POLICE={0x89c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x401, 0x7, 0x137b, 0x7f, 0xb60, 0x4, 0x4, 0x79, 0xe, 0x8, 0x5, 0x4, 0xb0, 0x80000000, 0xc, 0x10001, 0xd0ea, 0x6, 0x2, 0x96f, 0x4, 0xffffff03, 0x5, 0xbc7, 0x80, 0x0, 0x4, 0x6, 0x7fffffff, 0x4, 0x7, 0x0, 0x8, 0x4, 0x1, 0x5, 0x8, 0x2205, 0x2, 0x5, 0x4, 0x7fff, 0x2, 0x0, 0x80000001, 0xfc66, 0x40, 0x7f, 0x6, 0x5, 0x8, 0x1ff, 0x8001, 0xa, 0x7, 0x5, 0xffffffcb, 0xffffffdd, 0x6, 0x4, 0x3, 0x2, 0x5, 0x0, 0x8, 0x1ff, 0x0, 0x9, 0x0, 0x1, 0xffffffff, 0x3, 0x4, 0x5, 0x80000001, 0x5ba9, 0xfffffff2, 0x6, 0x4, 0xcc3, 0x4, 0x7ff, 0x6, 0x85, 0x3, 0x2f47, 0x3, 0x8001, 0x5, 0x7ff, 0xd105, 0x8, 0x8, 0x9, 0x383, 0x1, 0x0, 0xb545, 0x7, 0x0, 0x3, 0x1, 0x9, 0xffff, 0x7, 0xd94, 0x9, 0x9, 0x8, 0xe, 0x8001, 0x3, 0xffffffb5, 0x5, 0x1, 0x3, 0xc000000, 0xfffffff9, 0x9, 0x9, 0x8, 0x4, 0x3, 0x101, 0x9, 0x3, 0xffffffd3, 0xbd, 0xe, 0x1, 0x86e, 0x6, 0xb5, 0xf, 0x83e, 0x80, 0x4, 0x6, 0x3, 0x9, 0xffff8001, 0x6, 0x3, 0x7, 0x8, 0xa, 0x2, 0xffff8000, 0x7, 0xc0f, 0x8, 0xf, 0x8, 0x81, 0x1ff, 0x8000, 0x203, 0x4, 0x70000000, 0x8001, 0xff, 0x100, 0x0, 0x6, 0x8000, 0x7ff, 0x3, 0xffffffff, 0x35ca, 0x3, 0x3, 0x3, 0xa7, 0xe56d, 0x3, 0x2, 0x0, 0xc47, 0x9, 0x9, 0xfffffffd, 0x7, 0x40, 0x1, 0x9, 0x2, 0x1, 0x80000000, 0xe, 0xde, 0x927, 0x3, 0xe8, 0x8, 0x4, 0x1, 0x0, 0x2b7, 0x9, 0x2, 0x5, 0x0, 0x5, 0xef6, 0x33, 0x1ff, 0x9, 0x10001, 0x40, 0xfffffffc, 0x2, 0x0, 0x4, 0xe70, 0xc, 0x2d20, 0x9, 0x1000, 0x19e7de87, 0x1, 0x10001, 0xfffffffd, 0x8, 0x401, 0x2, 0x6, 0x80, 0x2, 0x9, 0x0, 0x9786, 0x9, 0x9, 0x0, 0x5, 0x4, 0x6, 0x2, 0x7, 0x10001, 0xb, 0x3, 0x0, 0xe96, 0xffff, 0x1, 0x100, 0xc479, 0x4, 0x2, 0x9a1a, 0x7f667a26, 0xe0, 0x5, 0x8001]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x6, 0x8000, 0x7f, 0x8001, {0x6b, 0x0, 0x0, 0x5cd, 0x1, 0x7}, {0xd8, 0x1, 0xa, 0x7f, 0x7, 0x6}, 0x6, 0x1ff, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x1, 0x9, 0x8000, 0x6, {0x1, 0x2, 0x25, 0x80, 0xfffb, 0x8001}, {0x2, 0x1, 0xe, 0x8, 0x2}, 0x3, 0x39, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x7ff, 0xfffffffc, 0x3, 0x1, 0xe9, 0x6, 0x7fffffff, 0x4, 0xfffffff7, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x800, 0x8, 0x5c2195fd, 0x100, 0x1, 0x8, 0x6, 0x5, 0x6, 0x9, 0x6, 0x4043, 0x3, 0xe, 0x0, 0x81, 0x9, 0x0, 0x7, 0x80, 0x8, 0x400, 0x0, 0x4de, 0x1, 0x79f6f051, 0x7, 0x7, 0x8000, 0x7, 0x2, 0x800, 0x32, 0xfffffff9, 0x9, 0x6, 0x200, 0x4, 0x1, 0x10, 0x8001, 0x3, 0x5, 0x86aa, 0x11, 0x7fffffff, 0x0, 0x9, 0x7, 0x7f, 0x7ff, 0x9, 0x3, 0x101, 0x6, 0x9, 0x4, 0xffffff7f, 0x9, 0x7, 0x3, 0x40, 0x7ff, 0x0, 0x1000, 0xaa2, 0x0, 0x1ff, 0x8, 0x2, 0x8, 0xf, 0x6, 0x3, 0xe, 0x0, 0x6, 0x7, 0x5, 0x8, 0x5, 0x0, 0xff, 0xfffffff9, 0x9, 0x7f, 0x9, 0x0, 0x101, 0xff, 0xffe00000, 0x0, 0x8, 0x6, 0x6, 0x6, 0x4, 0x9, 0x9, 0xc, 0x3ff, 0x7fffffff, 0x4, 0x8, 0x3, 0x200, 0x80000000, 0x2, 0x1ff, 0x6, 0x4, 0x0, 0x100, 0x5, 0x7, 0x2, 0xffff, 0x6, 0x80, 0x1, 0x6, 0x9, 0x7fff, 0x4, 0x8, 0xcdb70c2, 0x0, 0x0, 0x6, 0xca00, 0xffff, 0x10000, 0x0, 0x7, 0x6, 0x1, 0x2, 0x80000001, 0x0, 0x4, 0x7, 0xffffff00, 0x3, 0xf, 0x4, 0x9, 0x8, 0xfffffff7, 0x6, 0x10001, 0x65, 0x1, 0x100, 0x0, 0x9, 0xd, 0x3, 0xb, 0x0, 0x6, 0xb, 0x0, 0x8, 0x7, 0x7, 0x3, 0xfffffff7, 0xcf, 0xc77, 0x3, 0xff, 0x81, 0x7, 0x3, 0x1, 0x9, 0x101, 0x2, 0x80, 0x0, 0x3, 0xd, 0x4, 0x2, 0x6fe, 0x4, 0x58, 0x3, 0x4, 0xab9, 0x1ff, 0x7fff, 0x0, 0x7, 0x8, 0x9, 0xffff, 0x1, 0x6, 0x1, 0xffffff80, 0x7, 0x4, 0x6, 0x1, 0x6, 0x4, 0x0, 0x2000000, 0x5, 0x8, 0xfffffff8, 0x8001, 0x1, 0x6, 0xc, 0x9, 0x3, 0x6, 0xffffffff, 0xfe000000, 0x80000001, 0x5, 0x3, 0x2, 0x2, 0x8, 0x80000000, 0x0, 0x4, 0x4, 0x8, 0x8, 0x400, 0x7fffffff, 0x7fffffff, 0x3469, 0x2629, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x0, 0xfff1}}]}}, @f_rsvp={{0x9}, {0x4a8, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_POLICE={0x480, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x4, 0x101, 0x5, 0x7, {0x5, 0x0, 0x7, 0x95, 0x80, 0x2}, {0x7, 0x2, 0xffff, 0x800, 0xb, 0xa22}, 0x1, 0x3, 0x80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x13f9, 0x1, 0x1, 0x97, 0x7, 0x401, 0x4, 0x0, 0x1, 0xf, 0xcb, 0x40, 0x6, 0x4, 0xf, 0x8, 0x2, 0xa9, 0x7, 0x9, 0x10, 0xfff, 0x200, 0x3, 0x1c, 0x8, 0x3, 0x9e9, 0x6, 0xfffffff8, 0x9, 0x6, 0x6, 0x101, 0x400, 0xf1, 0x4, 0xc, 0x5bfc, 0xc226, 0xee9, 0xffff0000, 0x8, 0xa, 0x1, 0x1, 0x2, 0x1850, 0x8, 0x7d, 0x8, 0x450d, 0x2, 0x1, 0x0, 0x1, 0x100, 0x2, 0x4, 0x8, 0x536, 0x6, 0xf, 0x10001, 0x8, 0xffffffc0, 0x10, 0x5, 0x9, 0x2, 0x8000, 0x9, 0x0, 0x9494, 0x8, 0x8, 0x9, 0x1, 0x4, 0x7fffffff, 0x6, 0x1, 0x7, 0x0, 0xff, 0xe4, 0x9, 0x6, 0x9, 0xa42c, 0x10001, 0x7, 0xf, 0xb, 0xb9d, 0x7, 0x6, 0x10000, 0x61c, 0x1, 0x1, 0x6, 0x6, 0x0, 0x1, 0x1, 0x5, 0x5, 0xb, 0x7, 0x53, 0x1ff, 0xc, 0x6, 0xdb9, 0x0, 0x7, 0x9, 0xffffffff, 0x7fff, 0x60, 0xf, 0x6, 0x8, 0x8, 0x6, 0x1, 0x98, 0x6, 0x6, 0x8001, 0x949f, 0x5, 0x18, 0x8, 0x1c6000, 0xfffffff9, 0xdefa, 0x9, 0x2, 0x1, 0x9, 0x0, 0x5, 0xffff8516, 0x7, 0x4, 0x8, 0xd, 0x6, 0xd01, 0x8, 0xe, 0x5, 0x7, 0x4c, 0x6, 0x2, 0x5, 0x7, 0x1, 0x8, 0x6, 0x10000, 0x6, 0x200, 0x9, 0x3ff, 0xff, 0x9, 0x0, 0x7fff, 0x6, 0x8, 0x4, 0x1c4, 0xf1, 0x100, 0x5054d75b, 0x50, 0x80, 0x100, 0x7c, 0xfffffffc, 0x8, 0x3000, 0x9, 0x316, 0x5, 0xfffffff7, 0x1, 0x7, 0x2, 0x5, 0x6, 0x7, 0x2, 0x59, 0x3, 0x0, 0x6, 0x80000000, 0x6, 0xef1, 0x0, 0x0, 0x6, 0x1000, 0x4, 0x0, 0x2, 0x8, 0x40, 0xffff, 0x1, 0x6, 0x6, 0x6, 0x7, 0x80, 0x0, 0x2, 0xa, 0x100, 0xfffffffa, 0xb04, 0x0, 0x876, 0x9, 0x10, 0x1, 0x1, 0x3, 0x3af, 0xff, 0x9, 0x7, 0xcb, 0xc39, 0x7, 0x4b05141, 0x0, 0x0, 0x3b, 0x3, 0x2b2, 0x6f, 0xce, 0x8, 0x3, 0x3, 0xb, 0x4, 0x5, 0x9, 0x9ff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_RSVP_POLICE={0x1c, 0x5, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}]}]}}, @f_rsvp={{0x9}, {0x53c, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x200, 0x72, 0x6}, {0xff, 0x9, 0xb}, 0x86, 0x3, 0xc}}, @TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5}}, @TCA_RSVP_ACT={0xbc, 0x6, [@m_ct={0xb8, 0x12, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "bbba10b274702f68fc0cbc8247b829fd"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}]}, {0x54, 0x6, "13d13d99157fc9982e518dd72c7b624d95f282005430a4a57216f0886974a88ca691f09f586551f352a66b53ad402721a542726f5f0df584600e5897c6b9b18702f83c144e9ffad9bb13cdee90ae0a4b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffff, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x911, 0x1, 0xffffffff}, {0x2, 0x9, 0xf9}, 0x11, 0x80, 0x1}}, @TCA_RSVP_POLICE={0x41c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x27, 0x8386, 0x6, 0x5, 0xb, 0x1000, 0x5, 0x6, 0x2, 0x1, 0x2, 0x8, 0x4, 0x5, 0x9, 0x100, 0x1, 0x7, 0x3, 0x2, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x1000, 0x3, 0x10, 0x1000, 0x2, 0x1, 0x9, 0xefd9, 0x9, 0x8f9, 0x4, 0x203, 0xd, 0x1, 0xffff, 0x6, 0x6, 0x0, 0x5df, 0x4, 0xf0, 0x3, 0x5, 0x2, 0x5, 0x3, 0x3ff, 0x3, 0x1, 0xfffffffa, 0x3, 0x1, 0xffff, 0x9, 0x3, 0x231, 0x53, 0x72, 0x10001, 0xfffffe00, 0x7, 0x100, 0xe, 0xf688, 0x4, 0x7fff, 0x88, 0x0, 0xfffffff7, 0x6, 0x5, 0x7, 0x163b, 0x3, 0x4, 0x0, 0x5, 0x0, 0x3dc6, 0x10000, 0xfffffd97, 0x5, 0x400, 0xedd1, 0x9, 0xffff, 0x9, 0x0, 0x3, 0x2, 0xdc3, 0x80000001, 0xa, 0x8, 0x80000001, 0xfffffffb, 0x3, 0x6, 0x7, 0x6, 0x9, 0x2, 0x6, 0x0, 0xa7, 0xf, 0x1, 0x4, 0xcc1, 0x3, 0x6, 0x1, 0x5, 0x7, 0x4399e5c4, 0x5, 0x300, 0x1, 0x1, 0x2, 0x8, 0x7f, 0x2, 0xe, 0x2, 0x1, 0x5a, 0x6bc4, 0x8001, 0x7, 0x1, 0x0, 0x2, 0xc, 0x10000, 0x0, 0x0, 0xc, 0x7, 0x68, 0xfffffffc, 0xfc6, 0x1, 0x2, 0x3, 0x80, 0x9, 0xffffffff, 0x3ff, 0x9, 0x81, 0xcbd1, 0x47c, 0x1, 0x18d, 0xfffffeff, 0x400, 0x5, 0x3c000000, 0x80, 0x1, 0x8, 0x7, 0x1, 0x3, 0x10, 0x0, 0x7fff, 0x728, 0x7, 0x7, 0xfc, 0x5, 0x2af7, 0x5, 0xffff, 0x9, 0x4, 0x1ff, 0x7, 0x5, 0x3, 0x7, 0x6, 0x9, 0x40, 0x7, 0x6, 0x1, 0x100000, 0x2, 0xfffffffc, 0x0, 0x3, 0xffff8ef9, 0x400, 0xfff, 0x9, 0x4, 0x9, 0xcb, 0xc, 0x7, 0xfa, 0x2ee8ee04, 0x80, 0x5, 0x1, 0x3, 0x6, 0xfffffad8, 0x3, 0x0, 0x8, 0x6, 0x4, 0x100, 0x3, 0x80000000, 0x5, 0x400, 0x3, 0xc62, 0x0, 0x1, 0x0, 0x2, 0x70, 0x100, 0xcd86, 0x9, 0x159, 0x2, 0xffffffff, 0x68, 0x6, 0xffffff7f, 0x4a7, 0x1, 0x4, 0xfffffffa, 0x2, 0x8, 0x4, 0x3ff, 0x3ff, 0x5, 0x54, 0xff, 0x8c98, 0xfffffe53]}]}]}}]}, 0x1b6c}}, 0x8884) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)="00214717a7070000000003060000000000000000a8a6761d5874f72cf86d73d32f46381d8fee86d9ca0e6a9c4db5a40fef56", 0x54}], 0x1, 0xe, 0x200004) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x6000c8f4) 132.141018ms ago: executing program 1 (id=3071): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="04000000400800b70400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000080000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c9732"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c", 0x98}], 0x2, 0xc, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 1 (id=3072): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="04000000400800b70400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000080000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd46", 0x85}], 0x3, 0xc, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): rned -16 [ 500.869831][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 500.882049][ T983] usb 4-1: USB disconnect, device number 29 [ 501.019411][ T5894] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 501.049384][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 501.057442][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.069333][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.00 [ 501.083384][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.099418][ T24] usb 3-1: config 0 descriptor?? [ 501.149879][ T5894] usb 1-1: device descriptor read/64, error -71 [ 501.177865][ T799] usb 2-1: USB disconnect, device number 7 [ 501.188757][ T799] usblp0: removed [ 501.326216][ T24] usb 3-1: string descriptor 0 read error: -71 [ 501.343257][ T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input187 [ 501.356739][T13080] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2567'. [ 501.374135][ T5189] bcm5974 3-1:0.0: could not read from device [ 501.385354][T13080] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2567'. [ 501.419340][ T5894] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 501.453145][ T24] usb 3-1: USB disconnect, device number 16 [ 501.468543][ T5848] bcm5974 3-1:0.0: could not read from device [ 501.569300][ T5894] usb 1-1: device descriptor read/64, error -71 [ 501.681581][ T42] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 501.690229][ T5894] usb usb1-port1: attempt power cycle [ 501.698382][ T42] ath9k_htc: Failed to initialize the device [ 501.710821][ T983] usb 4-1: ath9k_htc: USB layer deinitialized [ 502.039404][ T5894] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 502.039404][ T983] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 502.064376][ T5894] usb 1-1: device descriptor read/8, error -71 [ 502.139392][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 502.168491][T13100] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2576'. [ 502.181753][T13100] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2576'. [ 502.199335][ T983] usb 4-1: Using ep0 maxpacket: 32 [ 502.211571][ T983] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 502.222118][ T983] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 502.233945][ T983] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 502.246833][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.258858][ T983] usb 4-1: config 0 descriptor?? [ 502.278698][ T983] mos7840 4-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 502.289309][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 502.300050][ T24] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 502.312704][ T5894] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 502.321851][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.331937][ T24] usb 3-1: Product: syz [ 502.336162][ T24] usb 3-1: Manufacturer: syz [ 502.341276][ T24] usb 3-1: SerialNumber: syz [ 502.354393][ T5894] usb 1-1: device descriptor read/8, error -71 [ 502.364688][ T24] usb 3-1: config 0 descriptor?? [ 502.469978][ T5894] usb usb1-port1: unable to enumerate USB device [ 502.579799][ T5901] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 502.600752][ T24] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 502.613191][ T24] usb 3-1: USB disconnect, device number 17 [ 502.650747][ T5154] Bluetooth: hci2: command tx timeout [ 502.693882][ T983] mos7840 ttyUSB0: probe with driver mos7840 failed with error -5 [ 502.742828][ T5901] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 502.753036][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.768138][ T5901] usb 2-1: config 0 descriptor?? [ 502.896383][ T983] mos7840 ttyUSB1: probe with driver mos7840 failed with error -32 [ 502.982273][T13102] mmap: syz.1.2577 (13102) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 503.007571][T13102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.017414][T13102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.657574][T13120] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2585'. [ 503.668208][T13120] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2585'. [ 503.838365][ T5901] usb 2-1: Cannot set autoneg [ 503.844462][ T5901] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 503.863116][ T5901] usb 2-1: USB disconnect, device number 8 [ 503.936830][ T5836] usb 4-1: USB disconnect, device number 30 [ 503.976003][ T5836] mos7840 4-1:0.0: device disconnected [ 504.000178][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 504.160003][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 504.182074][ T10] usb 3-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 504.192976][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 504.206166][ T983] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 504.219409][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 504.232922][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 504.244251][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.259392][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 504.272227][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 504.280661][ T10] usb 3-1: Manufacturer: syz [ 504.288702][ T10] usb 3-1: config 0 descriptor?? [ 504.404936][ T983] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 504.424712][ T983] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.443034][ T983] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 504.455614][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.488047][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2594'. [ 504.518707][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2594'. [ 504.609390][ T10] rc_core: IR keymap rc-hauppauge not found [ 504.627274][ T10] Registered IR keymap rc-empty [ 504.634303][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 504.659404][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 504.682277][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 504.696807][ T983] usb 1-1: usb_control_msg returned -32 [ 504.706126][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input188 [ 504.720811][ T5154] Bluetooth: hci2: command tx timeout [ 504.723700][ T983] usbtmc 1-1:16.0: can't read capabilities [ 504.752712][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 504.792721][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 504.820435][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 504.847218][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 504.869430][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 504.889445][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 504.898432][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 504.929802][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 504.961345][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 504.989480][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 505.009505][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 505.032160][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 505.042564][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 505.060498][ T10] usb 3-1: USB disconnect, device number 18 [ 505.067219][ T24] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 505.080056][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 505.090914][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.101144][ T24] usb 2-1: Product: syz [ 505.105776][ T24] usb 2-1: Manufacturer: syz [ 505.111606][ T24] usb 2-1: SerialNumber: syz [ 505.130135][ T42] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 505.143861][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 505.167748][ T5901] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 505.258106][ T5836] usb 1-1: USB disconnect, device number 18 [ 505.309632][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 505.317183][ T42] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 505.329082][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.343644][ T42] usb 4-1: config 0 descriptor?? [ 505.354516][ T42] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 505.387914][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.398453][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.409935][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.419991][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.430199][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.441588][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.460974][ T24] usb 2-1: USB disconnect, device number 9 [ 505.938848][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2605'. [ 505.953716][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2605'. [ 506.249741][ T5901] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 506.257465][ T5901] ath9k_htc: Failed to initialize the device [ 506.266346][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 506.429357][ T799] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 506.478039][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2615'. [ 506.492393][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2615'. [ 506.567424][ T42] gspca_vc032x: reg_w err -71 [ 506.573272][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.579823][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.585666][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.593989][ T799] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 506.605765][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.614300][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 506.622720][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.629046][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.635611][ T799] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.659032][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.665280][ T799] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 506.674861][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.681469][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.687121][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.693444][ T799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.702290][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.712182][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.723458][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.730451][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.736372][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.747298][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.754082][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.762062][ T42] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.777442][ T42] gspca_vc032x: Unknown sensor... [ 506.785065][ T42] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 506.798111][ T42] usb 4-1: USB disconnect, device number 31 [ 506.804938][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 506.814535][ T24] usb 2-1: config index 0 descriptor too short (expected 241, got 72) [ 506.828164][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 506.844428][ T24] usb 2-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 506.857131][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.876055][ T24] usb 2-1: config 0 descriptor?? [ 506.894519][ T24] mos7840 2-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 506.924780][ T799] usb 3-1: usb_control_msg returned -32 [ 506.935412][ T799] usbtmc 3-1:16.0: can't read capabilities [ 506.968337][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.978391][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.294920][ T24] mos7840 ttyUSB0: probe with driver mos7840 failed with error -5 [ 507.495617][ T24] mos7840 ttyUSB1: probe with driver mos7840 failed with error -32 [ 507.600923][ T799] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 507.760409][ T799] usb 1-1: Using ep0 maxpacket: 16 [ 507.769282][ T799] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.782444][ T799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 507.794333][ T799] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 507.805941][ T799] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.822321][ T799] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 507.832194][ T799] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 507.841095][ T799] usb 1-1: Manufacturer: syz [ 507.850684][ T799] usb 1-1: config 0 descriptor?? [ 508.489358][ T799] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 508.526232][ T24] usb 2-1: USB disconnect, device number 10 [ 508.550896][ T24] mos7840 2-1:0.0: device disconnected [ 508.632002][ T799] usb 4-1: device descriptor read/64, error -71 [ 508.886647][ T799] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 508.944089][T13238] 9pnet: Found fid 0 not clunked [ 508.992207][T13239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2638'. [ 509.019337][ T799] usb 4-1: device descriptor read/64, error -71 [ 509.133966][ T799] usb usb4-port1: attempt power cycle [ 509.206751][ T5901] usb 3-1: USB disconnect, device number 19 [ 509.479652][ T799] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 509.500498][ T799] usb 4-1: device descriptor read/8, error -71 [ 509.719315][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 509.739320][ T799] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 509.764686][ T799] usb 4-1: device descriptor read/8, error -71 [ 509.876967][ T10] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 509.887677][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 509.891075][ T799] usb usb4-port1: unable to enumerate USB device [ 509.896859][ T10] usb 2-1: Product: syz [ 509.910464][ T5836] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 509.919679][ T10] usb 2-1: Manufacturer: syz [ 509.924914][ T10] usb 2-1: SerialNumber: syz [ 509.934042][ T10] usb 2-1: config 0 descriptor?? [ 509.943991][ T10] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 509.952144][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 509.964567][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 509.975753][ T10] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 509.984539][ T10] usb 2-1: media controller created [ 510.006361][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 510.092480][ T5836] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 510.104660][ T5836] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.123221][ T5836] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 510.135422][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.212253][T13267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.223274][T13267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.235798][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 510.280851][ T10] DVB: Unable to find symbol mt352_attach() [ 510.287688][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 510.298453][ T10] zl10353_read_register: readreg error (reg=127, ret==-121) [ 510.307290][ T10] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 510.350408][ T9] usb 1-1: USB disconnect, device number 19 [ 510.366067][ T5836] usb 3-1: usb_control_msg returned -32 [ 510.378892][ T5836] usbtmc 3-1:16.0: can't read capabilities [ 510.459470][ T10] rc_core: IR keymap rc-dvico-mce not found [ 510.466168][ T10] Registered IR keymap rc-empty [ 510.480785][ T10] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 510.498839][ T10] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input189 [ 510.512848][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 510.522983][ T10] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 510.632874][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 510.751166][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 510.786716][T13280] 9p: Bad value for 'rfdno' [ 510.792629][T13281] 9p: Bad value for 'rfdno' [ 510.859495][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 510.969743][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 511.089868][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 511.209496][ T5836] dvb-usb: bulk message failed: -22 (1/0) [ 511.289318][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 511.304120][T13291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2661'. [ 511.319298][ T5836] dvb-usb: bulk message failed: -22 (1/0) [ 511.429418][ T5836] dvb-usb: bulk message failed: -22 (1/0) [ 511.459321][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 511.467695][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.479545][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 511.494022][ T10] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 511.509463][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.525608][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 511.535542][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 511.548226][ T10] usb 1-1: Manufacturer: syz [ 511.553797][ T5836] dvb-usb: bulk message failed: -22 (1/0) [ 511.564380][ T10] usb 1-1: config 0 descriptor?? [ 511.669397][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 511.799502][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 511.911018][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 511.961516][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2670'. [ 512.019440][ T5836] dvb-usb: bulk message failed: -22 (1/0) [ 512.149535][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 512.259375][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 512.371063][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 512.489391][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 512.517778][ T5836] usb 2-1: USB disconnect, device number 11 [ 512.667210][ T5836] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 512.718807][ T10] usb 3-1: USB disconnect, device number 20 [ 512.728387][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 512.836442][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2682'. [ 512.868180][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2682'. [ 513.070566][T13348] FAULT_INJECTION: forcing a failure. [ 513.070566][T13348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.085789][T13348] CPU: 1 UID: 0 PID: 13348 Comm: syz.3.2687 Not tainted syzkaller #0 PREEMPT(full) [ 513.085822][T13348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 513.085837][T13348] Call Trace: [ 513.085846][T13348] [ 513.085855][T13348] dump_stack_lvl+0xe8/0x150 [ 513.085893][T13348] should_fail_ex+0x412/0x560 [ 513.085934][T13348] _copy_from_user+0x2d/0xb0 [ 513.085963][T13348] get_timespec64+0x96/0x1b0 [ 513.085989][T13348] ? __pfx_get_timespec64+0x10/0x10 [ 513.086024][T13348] __x64_sys_recvmmsg+0x14b/0x250 [ 513.086051][T13348] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 513.086086][T13348] do_syscall_64+0xe2/0xf80 [ 513.086116][T13348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.086137][T13348] ? trace_irq_disable+0x37/0x100 [ 513.086175][T13348] ? clear_bhb_loop+0x40/0x90 [ 513.086202][T13348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.086224][T13348] RIP: 0033:0x7f5a9c59aeb9 [ 513.086246][T13348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.086263][T13348] RSP: 002b:00007f5a9d494028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 513.086288][T13348] RAX: ffffffffffffffda RBX: 00007f5a9c815fa0 RCX: 00007f5a9c59aeb9 [ 513.086304][T13348] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 513.086318][T13348] RBP: 00007f5a9d494090 R08: 0000200000003700 R09: 0000000000000000 [ 513.086332][T13348] R10: 0000000040010360 R11: 0000000000000246 R12: 0000000000000001 [ 513.086345][T13348] R13: 00007f5a9c816038 R14: 00007f5a9c815fa0 R15: 00007fff21feba28 [ 513.086379][T13348] [ 513.549451][ T799] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 513.599906][ T5901] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 513.699430][ T799] usb 3-1: Using ep0 maxpacket: 16 [ 513.707288][ T799] usb 3-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 513.719061][ T799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 513.730656][ T799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 513.742069][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 513.742307][ T799] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 513.762237][ T799] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.777961][ T5901] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 513.789010][ T799] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 513.801493][ T5901] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.816868][ T799] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 513.826034][ T5901] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 513.836864][ T799] usb 3-1: Manufacturer: syz [ 513.846674][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.858501][ T799] usb 3-1: config 0 descriptor?? [ 513.919705][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 513.927884][ T10] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 513.943459][ T10] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 513.955598][ T10] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.969963][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 513.980785][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 513.991013][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.004491][ T10] usb 4-1: Product: syz [ 514.010249][ T10] usb 4-1: Manufacturer: syz [ 514.015565][ T10] usb 4-1: SerialNumber: syz [ 514.070085][ T983] usb 1-1: USB disconnect, device number 20 [ 514.085383][ T5901] usb 2-1: usb_control_msg returned -32 [ 514.091734][ T5901] usbtmc 2-1:16.0: can't read capabilities [ 514.219336][ T799] rc_core: IR keymap rc-hauppauge not found [ 514.225981][ T799] Registered IR keymap rc-empty [ 514.235903][ T799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 514.250156][ T10] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 36 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 514.270740][ T799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 514.312867][ T799] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 514.330823][ T799] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input190 [ 514.349864][ T799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 514.379764][ T799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 514.399621][ T799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 514.419491][ T799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 514.440469][ T799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 514.452491][ T983] usb 4-1: USB disconnect, device number 36 [ 514.459637][ T799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 514.474215][ T983] usblp1: removed [ 514.489548][ T799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 514.509907][ T799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 514.529466][ T799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 514.549403][ T799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 514.571876][ T799] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 514.582647][ T42] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 514.591021][ T799] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 514.620376][ T10] usb 3-1: USB disconnect, device number 21 [ 514.750653][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 514.758997][ T42] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 514.770235][ T42] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 514.781425][ T42] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.796093][ T42] usb 1-1: config 1 interface 0 has no altsetting 0 [ 514.805905][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 514.818742][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.828506][ T42] usb 1-1: Product: syz [ 514.833123][ T42] usb 1-1: Manufacturer: syz [ 514.838511][ T42] usb 1-1: SerialNumber: syz [ 515.054827][ T42] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 21 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 515.250559][T13363] FAULT_INJECTION: forcing a failure. [ 515.250559][T13363] name failslab, interval 1, probability 0, space 0, times 0 [ 515.265225][T13363] CPU: 0 UID: 0 PID: 13363 Comm: syz.0.2694 Not tainted syzkaller #0 PREEMPT(full) [ 515.265253][T13363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 515.265268][T13363] Call Trace: [ 515.265277][T13363] [ 515.265286][T13363] dump_stack_lvl+0xe8/0x150 [ 515.265321][T13363] should_fail_ex+0x412/0x560 [ 515.265363][T13363] should_failslab+0xa8/0x100 [ 515.265387][T13363] __kmalloc_noprof+0xe8/0x760 [ 515.265422][T13363] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 515.265456][T13363] tomoyo_realpath_from_path+0xe3/0x5d0 [ 515.265484][T13363] ? tomoyo_domain+0xd7/0x130 [ 515.265515][T13363] ? tomoyo_path_number_perm+0x219/0x630 [ 515.265536][T13363] tomoyo_path_number_perm+0x246/0x630 [ 515.265560][T13363] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 515.265594][T13363] ? __lock_acquire+0x6b5/0x2cf0 [ 515.265635][T13363] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 515.265689][T13363] ? __fget_files+0x2a/0x420 [ 515.265718][T13363] ? __fget_files+0x2a/0x420 [ 515.265742][T13363] ? __fget_files+0x3a0/0x420 [ 515.265766][T13363] ? __fget_files+0x2a/0x420 [ 515.265796][T13363] security_file_ioctl+0xc3/0x2a0 [ 515.265833][T13363] __se_sys_ioctl+0x47/0x170 [ 515.265869][T13363] do_syscall_64+0xe2/0xf80 [ 515.265899][T13363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.265920][T13363] ? trace_irq_disable+0x37/0x100 [ 515.265949][T13363] ? clear_bhb_loop+0x40/0x90 [ 515.265976][T13363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.265998][T13363] RIP: 0033:0x7fc9f519aeb9 [ 515.266019][T13363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.266036][T13363] RSP: 002b:00007fc9f60cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 515.266059][T13363] RAX: ffffffffffffffda RBX: 00007fc9f5415fa0 RCX: 00007fc9f519aeb9 [ 515.266074][T13363] RDX: 0000000000000000 RSI: 000000000000060b RDI: 0000000000000004 [ 515.266086][T13363] RBP: 00007fc9f60cd090 R08: 0000000000000000 R09: 0000000000000000 [ 515.266100][T13363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.266112][T13363] R13: 00007fc9f5416038 R14: 00007fc9f5415fa0 R15: 00007fff3a285848 [ 515.266144][T13363] [ 515.266154][T13363] ERROR: Out of memory at tomoyo_realpath_from_path. [ 515.449486][ T42] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 515.497112][ T10] usb 1-1: USB disconnect, device number 21 [ 515.559676][ T10] usblp1: removed [ 515.651729][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.663867][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.674870][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 515.691398][ T42] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 515.701957][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.713455][ T42] usb 3-1: config 0 descriptor?? [ 515.839531][ T799] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 516.002858][ T799] usb 4-1: Using ep0 maxpacket: 16 [ 516.011646][ T799] usb 4-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 516.023284][ T799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 516.037071][ T799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 516.064164][ T799] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 516.075578][ T799] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.092230][ T799] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 516.102363][ T799] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 516.113504][ T799] usb 4-1: Manufacturer: syz [ 516.132095][ T799] usb 4-1: config 0 descriptor?? [ 516.158642][ T42] plantronics 0003:047F:FFFF.004C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 516.390358][ T42] usb 2-1: USB disconnect, device number 12 [ 516.469569][ T799] rc_core: IR keymap rc-hauppauge not found [ 516.475911][ T799] Registered IR keymap rc-empty [ 516.481562][ T799] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 516.512084][ T799] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 516.512116][T13388] kvm: user requested TSC rate below hardware speed [ 516.527134][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 516.540605][ T799] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 516.565068][ T799] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input191 [ 516.584318][ T799] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 516.609706][ T799] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 516.630651][ T799] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 516.649438][ T799] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 516.669448][ T799] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 516.679259][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 516.689532][ T799] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 516.705587][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.714201][ T799] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 516.717805][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 516.738286][ T10] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 516.752766][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.769667][ T799] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 516.778059][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 516.789564][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 516.798550][ T10] usb 1-1: Manufacturer: syz [ 516.800053][ T799] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 516.817774][ T10] usb 1-1: config 0 descriptor?? [ 516.839419][ T799] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 516.880124][ T799] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 516.897074][ T799] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 516.917198][ T799] usb 4-1: USB disconnect, device number 37 [ 517.459864][ T799] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 517.629312][ T799] usb 2-1: Using ep0 maxpacket: 32 [ 517.637381][ T799] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 517.647562][ T799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.659561][ T799] usb 2-1: config 0 descriptor?? [ 517.670410][ T799] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 518.215965][ T9] usb 3-1: USB disconnect, device number 22 [ 518.859335][ T42] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 518.879555][ T799] gspca_vc032x: reg_w err -71 [ 518.884642][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.893003][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.898730][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.904711][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.912520][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.918089][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.924793][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.931359][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.937630][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.944922][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.951272][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.956977][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.962781][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.968540][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.974173][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.981247][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.986939][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.992656][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 518.998589][ T799] gspca_vc032x: Unknown sensor... [ 519.004627][ T799] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 519.017208][ T799] usb 2-1: USB disconnect, device number 13 [ 519.026313][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.043093][ T42] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 519.055468][ T42] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 519.066014][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.077980][ T42] usb 3-1: config 0 descriptor?? [ 519.261319][ T9] usb 1-1: USB disconnect, device number 22 [ 519.295958][ T42] usb 3-1: string descriptor 0 read error: -71 [ 519.311999][ T42] usb 3-1: USB disconnect, device number 23 [ 519.879254][ T42] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 519.949717][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 520.121384][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 520.139272][ T9] usb 4-1: config 0 has no interface number 0 [ 520.161107][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.192115][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.209767][ T9] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 520.229347][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.261460][ T9] usb 4-1: config 0 descriptor?? [ 520.303230][T13471] netlink: 'syz.1.2740': attribute type 1 has an invalid length. [ 520.333563][T13471] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2740'. [ 520.669356][ T5901] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 520.689413][ T42] usb 1-1: device descriptor read/64, error -71 [ 520.708651][ T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.004D/input/input192 [ 520.789355][ T799] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 520.821819][ T5901] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 520.832750][ T5901] usb 2-1: config 0 has no interface number 0 [ 520.840596][ T5901] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.852652][ T5901] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.868844][ T5901] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 520.888418][T13452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.898288][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.909008][T13452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.924216][ T5901] usb 2-1: config 0 descriptor?? [ 520.939700][ T9] holtek_kbd 0003:04D9:A055.004D: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 520.941366][ T42] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 521.001957][ T799] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.013709][ T799] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 521.031110][ T5881] usb 4-1: USB disconnect, device number 38 [ 521.049935][ T799] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 521.065565][ T799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.087608][ T799] usb 3-1: config 0 descriptor?? [ 521.108150][T13481] fido_id[13481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 521.149650][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 521.157772][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.174261][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 521.190053][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 521.214149][ T42] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 521.224906][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.241806][ T42] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 521.254774][ T42] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 521.271113][ T42] usb 1-1: Manufacturer: syz [ 521.286753][ T42] usb 1-1: config 0 descriptor?? [ 521.324745][ T799] usb 3-1: string descriptor 0 read error: -71 [ 521.335184][ T799] usb 3-1: USB disconnect, device number 24 [ 521.569344][ T42] rc_core: IR keymap rc-hauppauge not found [ 521.581366][ T42] Registered IR keymap rc-empty [ 521.587677][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 521.603697][T13471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.610341][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 521.621035][T13471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.642009][ T5901] usbhid 2-1:0.1: can't add hid device: -71 [ 521.648498][ T5901] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 521.660831][ T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 521.687137][ T5901] usb 2-1: USB disconnect, device number 14 [ 521.710242][ T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input193 [ 521.741307][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 521.772473][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 521.799697][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 521.829413][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 521.850984][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 521.883089][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 521.929379][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 521.949469][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 521.970507][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 522.009417][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 522.044476][ T42] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 522.058328][ T42] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 522.075135][ T42] usb 1-1: USB disconnect, device number 24 [ 522.260012][T13501] netlink: 'syz.1.2753': attribute type 3 has an invalid length. [ 522.268838][T13501] netlink: 'syz.1.2753': attribute type 3 has an invalid length. [ 522.285890][T13501] netlink: 'syz.1.2753': attribute type 3 has an invalid length. [ 522.298057][T13501] netlink: 'syz.1.2753': attribute type 3 has an invalid length. [ 522.333451][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 522.512583][ T9] usb 3-1: config 0 has no interfaces? [ 522.523120][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 522.567889][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 522.589374][ T9] usb 3-1: Product: syz [ 522.593864][ T9] usb 3-1: Manufacturer: syz [ 522.620180][ T9] usb 3-1: SerialNumber: syz [ 522.628586][ T9] usb 3-1: config 0 descriptor?? [ 522.650862][ T799] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 522.781007][T13519] xt_socket: unknown flags 0xe4 [ 522.832575][ T799] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 522.849308][ T799] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 522.870371][ T9] usb 3-1: USB disconnect, device number 25 [ 522.893659][ T799] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 522.918858][ T799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.934026][ T799] usb 2-1: config 0 descriptor?? [ 522.969624][ T799] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 523.239471][ T799] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 523.339497][ T5836] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 523.389664][ T799] usb 4-1: Using ep0 maxpacket: 32 [ 523.395499][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 523.400411][ T799] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 523.414692][ T799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.427708][ T799] usb 4-1: config 0 descriptor?? [ 523.443864][ T799] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 523.499314][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 523.506801][ T5836] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 523.516600][ T5836] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 523.530687][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 523.541239][ T5836] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 523.554523][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 523.567911][ T5836] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.584441][ T5836] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 523.595363][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.610658][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 523.620735][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.633026][ T9] usb 3-1: Product: syz [ 523.638513][ T9] usb 3-1: Manufacturer: syz [ 523.649858][ T9] usb 3-1: SerialNumber: syz [ 523.857991][ T5836] usb 1-1: usb_control_msg returned -32 [ 523.864651][ T5836] usbtmc 1-1:16.0: can't read capabilities [ 523.944882][ T9] rtl8150 3-1:1.0: couldn't reset the device [ 523.952707][ T9] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 523.971500][ T9] usb 3-1: USB disconnect, device number 26 [ 524.222278][T13532] usbtmc 1-1:16.0: INITIATE_CLEAR returned 0 [ 524.273366][T13532] overlay: ./file0 is not a directory [ 524.585080][ T983] usb 1-1: USB disconnect, device number 25 [ 524.661758][ T799] gspca_vc032x: reg_w err -71 [ 524.667161][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.675001][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.680369][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 524.687940][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.695808][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.703088][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.709095][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.715331][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.723035][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.728964][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.735210][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.741537][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.747949][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.754862][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.760505][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.767283][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.773665][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.779857][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.785893][ T799] gspca_vc032x: I2c Bus Busy Wait 00 [ 524.792589][ T799] gspca_vc032x: Unknown sensor... [ 524.798326][ T799] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 524.812276][ T799] usb 4-1: USB disconnect, device number 39 [ 524.839397][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 524.848170][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.862453][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 524.877329][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 524.890817][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 524.902685][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.920646][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 524.930620][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 524.939706][ T9] usb 3-1: Manufacturer: syz [ 524.948902][ T9] usb 3-1: config 0 descriptor?? [ 524.959463][T13522] Bluetooth: hci4: command 0x0406 tx timeout [ 525.279750][ T9] rc_core: IR keymap rc-hauppauge not found [ 525.290182][ T9] Registered IR keymap rc-empty [ 525.295474][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 525.332264][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 525.361666][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 525.383488][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input194 [ 525.414629][ T983] usb 2-1: USB disconnect, device number 15 [ 525.432280][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 525.459471][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 525.489696][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 525.512286][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 525.549601][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 525.590343][ T42] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 525.601266][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 525.633132][T13548] FAULT_INJECTION: forcing a failure. [ 525.633132][T13548] name failslab, interval 1, probability 0, space 0, times 0 [ 525.640234][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 525.647550][T13548] CPU: 1 UID: 0 PID: 13548 Comm: syz.0.2771 Not tainted syzkaller #0 PREEMPT(full) [ 525.647635][T13548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 525.647684][T13548] Call Trace: [ 525.647717][T13548] [ 525.647741][T13548] dump_stack_lvl+0xe8/0x150 [ 525.647839][T13548] should_fail_ex+0x412/0x560 [ 525.647947][T13548] should_failslab+0xa8/0x100 [ 525.648012][T13548] __kmalloc_noprof+0xe8/0x760 [ 525.648097][T13548] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 525.648185][T13548] tomoyo_realpath_from_path+0xe3/0x5d0 [ 525.648269][T13548] ? tomoyo_domain+0xd7/0x130 [ 525.648347][T13548] ? tomoyo_path_number_perm+0x219/0x630 [ 525.648422][T13548] tomoyo_path_number_perm+0x246/0x630 [ 525.648519][T13548] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 525.648629][T13548] ? __lock_acquire+0x6b5/0x2cf0 [ 525.648732][T13548] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 525.648871][T13548] ? __fget_files+0x2a/0x420 [ 525.648942][T13548] ? __fget_files+0x2a/0x420 [ 525.649005][T13548] ? __fget_files+0x3a0/0x420 [ 525.649069][T13548] ? __fget_files+0x2a/0x420 [ 525.649153][T13548] security_file_ioctl+0xc3/0x2a0 [ 525.649250][T13548] __se_sys_ioctl+0x47/0x170 [ 525.649345][T13548] do_syscall_64+0xe2/0xf80 [ 525.649431][T13548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.649494][T13548] ? trace_irq_disable+0x37/0x100 [ 525.649567][T13548] ? clear_bhb_loop+0x40/0x90 [ 525.649635][T13548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.649685][T13548] RIP: 0033:0x7fc9f519aeb9 [ 525.649747][T13548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.649803][T13548] RSP: 002b:00007fc9f60cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.649866][T13548] RAX: ffffffffffffffda RBX: 00007fc9f5415fa0 RCX: 00007fc9f519aeb9 [ 525.649909][T13548] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 525.649942][T13548] RBP: 00007fc9f60cd090 R08: 0000000000000000 R09: 0000000000000000 [ 525.649982][T13548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.650015][T13548] R13: 00007fc9f5416038 R14: 00007fc9f5415fa0 R15: 00007fff3a285848 [ 525.650102][T13548] [ 525.650334][T13548] ERROR: Out of memory at tomoyo_realpath_from_path. [ 525.754340][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 525.850707][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 525.869809][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 525.931216][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.949366][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 525.962156][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 525.972008][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 526.012198][ T42] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 526.026342][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 526.035985][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.041125][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 526.074365][ T42] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 526.085523][ T42] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 526.100545][ T9] usb 3-1: USB disconnect, device number 27 [ 526.107620][ T42] usb 4-1: Manufacturer: syz [ 526.143822][ T42] usb 4-1: config 0 descriptor?? [ 526.380499][T13555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2774'. [ 526.480429][T13555] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2774'. [ 527.139272][ T5901] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 527.319615][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 527.328615][ T5901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.341558][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.357057][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 527.371457][ T5901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 527.384065][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.403871][ T5901] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 527.417156][ T5901] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 527.429014][ T5901] usb 3-1: Manufacturer: syz [ 527.442849][ T5901] usb 3-1: config 0 descriptor?? [ 527.485254][T13604] FAULT_INJECTION: forcing a failure. [ 527.485254][T13604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.500569][T13604] CPU: 0 UID: 0 PID: 13604 Comm: syz.0.2795 Not tainted syzkaller #0 PREEMPT(full) [ 527.500599][T13604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 527.500614][T13604] Call Trace: [ 527.500623][T13604] [ 527.500632][T13604] dump_stack_lvl+0xe8/0x150 [ 527.500670][T13604] should_fail_ex+0x412/0x560 [ 527.500712][T13604] _copy_from_user+0x2d/0xb0 [ 527.500750][T13604] ___sys_sendmsg+0x1c6/0x360 [ 527.500782][T13604] ? __lock_acquire+0x6b5/0x2cf0 [ 527.500813][T13604] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.500895][T13604] ? __fget_files+0x2a/0x420 [ 527.500921][T13604] ? __fget_files+0x3a0/0x420 [ 527.500954][T13604] __x64_sys_sendmsg+0x1bd/0x2a0 [ 527.500997][T13604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.501042][T13604] ? __pfx_ksys_write+0x10/0x10 [ 527.501085][T13604] do_syscall_64+0xe2/0xf80 [ 527.501113][T13604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.501135][T13604] ? trace_irq_disable+0x37/0x100 [ 527.501165][T13604] ? clear_bhb_loop+0x40/0x90 [ 527.501192][T13604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.501215][T13604] RIP: 0033:0x7fc9f519aeb9 [ 527.501235][T13604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.501253][T13604] RSP: 002b:00007fc9f60cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.501276][T13604] RAX: ffffffffffffffda RBX: 00007fc9f5415fa0 RCX: 00007fc9f519aeb9 [ 527.501294][T13604] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001b [ 527.501308][T13604] RBP: 00007fc9f60cd090 R08: 0000000000000000 R09: 0000000000000000 [ 527.501322][T13604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.501334][T13604] R13: 00007fc9f5416038 R14: 00007fc9f5415fa0 R15: 00007fff3a285848 [ 527.501369][T13604] [ 527.849479][ T5901] rc_core: IR keymap rc-hauppauge not found [ 527.866683][ T5901] Registered IR keymap rc-empty [ 527.890448][ T5901] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.920583][T13612] netlink: 'syz.0.2797': attribute type 10 has an invalid length. [ 527.936494][ T5901] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 527.951250][T13612] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2797'. [ 527.973057][T13612] batman_adv: batadv0: Adding interface: virt_wifi0 [ 527.984213][ T5901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 527.998047][T13612] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.037601][T13612] batman_adv: batadv0: Interface activated: virt_wifi0 [ 528.099059][ T5901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input195 [ 528.145253][ T5901] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 528.179573][ T5901] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 528.239944][ T5901] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 528.265971][T13616] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2799'. [ 528.289405][ T5901] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 528.319595][ T5901] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 528.373653][ T5901] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 528.399972][ T5901] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 528.440018][ T5901] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 528.511000][ T5901] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 528.529720][ T5901] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 528.572044][ T5901] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 528.583321][ T42] rc_core: IR keymap rc-hauppauge not found [ 528.591485][ T42] Registered IR keymap rc-empty [ 528.597129][ T5901] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 528.612811][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 528.653340][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 528.675139][ T5901] usb 3-1: USB disconnect, device number 28 [ 528.711848][ T42] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 528.761574][ T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input196 [ 528.808771][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 528.832298][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 528.869976][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 528.902300][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 528.932805][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 529.003551][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 529.030095][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 529.071956][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 529.123392][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 529.162699][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 529.232646][ T42] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 529.243014][T13640] FAULT_INJECTION: forcing a failure. [ 529.243014][T13640] name failslab, interval 1, probability 0, space 0, times 0 [ 529.261043][T13640] CPU: 0 UID: 0 PID: 13640 Comm: syz.2.2806 Not tainted syzkaller #0 PREEMPT(full) [ 529.261073][T13640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 529.261088][T13640] Call Trace: [ 529.261097][T13640] [ 529.261107][T13640] dump_stack_lvl+0xe8/0x150 [ 529.261143][T13640] should_fail_ex+0x412/0x560 [ 529.261183][T13640] should_failslab+0xa8/0x100 [ 529.261207][T13640] __kmalloc_noprof+0xe8/0x760 [ 529.261242][T13640] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 529.261286][T13640] tomoyo_realpath_from_path+0xe3/0x5d0 [ 529.261314][T13640] ? tomoyo_domain+0xd7/0x130 [ 529.261347][T13640] ? tomoyo_path_number_perm+0x219/0x630 [ 529.261369][T13640] tomoyo_path_number_perm+0x246/0x630 [ 529.261395][T13640] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 529.261435][T13640] ? __lock_acquire+0x6b5/0x2cf0 [ 529.261476][T13640] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 529.261529][T13640] ? __fget_files+0x2a/0x420 [ 529.261559][T13640] ? __fget_files+0x2a/0x420 [ 529.261582][T13640] ? __fget_files+0x3a0/0x420 [ 529.261603][T13640] ? __fget_files+0x2a/0x420 [ 529.261633][T13640] security_file_ioctl+0xc3/0x2a0 [ 529.261672][T13640] __se_sys_ioctl+0x47/0x170 [ 529.261708][T13640] do_syscall_64+0xe2/0xf80 [ 529.261738][T13640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.261760][T13640] ? trace_irq_disable+0x37/0x100 [ 529.261788][T13640] ? clear_bhb_loop+0x40/0x90 [ 529.261813][T13640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.261835][T13640] RIP: 0033:0x7fb0ce99aeb9 [ 529.261856][T13640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.261873][T13640] RSP: 002b:00007fb0ccbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.261895][T13640] RAX: ffffffffffffffda RBX: 00007fb0cec16090 RCX: 00007fb0ce99aeb9 [ 529.261910][T13640] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 529.261931][T13640] RBP: 00007fb0ccbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 529.261949][T13640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.261962][T13640] R13: 00007fb0cec16128 R14: 00007fb0cec16090 R15: 00007ffc7759e9e8 [ 529.261996][T13640] [ 529.262007][T13640] ERROR: Out of memory at tomoyo_realpath_from_path. [ 529.266285][ T42] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 529.545609][T13644] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2808'. [ 529.632102][ T42] usb 4-1: USB disconnect, device number 40 [ 529.809428][ T5901] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 529.875427][T13653] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2813'. [ 529.979666][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 529.987614][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.001883][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 530.014291][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 530.027204][ T5901] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 530.041883][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.058785][ T5901] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 530.072767][ T5901] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 530.083424][ T5901] usb 1-1: Manufacturer: syz [ 530.092541][ T5901] usb 1-1: config 0 descriptor?? [ 530.099346][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 530.179554][ T42] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 530.257855][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2818'. [ 530.267680][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 530.276970][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.291713][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 530.313365][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 530.325720][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 530.338124][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.359500][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 530.363006][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 530.375776][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 530.380297][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.397274][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 530.410337][ T9] usb 4-1: Manufacturer: syz [ 530.416005][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.435019][ T42] usb 2-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75 [ 530.436470][ T9] usb 4-1: config 0 descriptor?? [ 530.446099][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.482703][ T42] usb 2-1: Product: syz [ 530.489627][ T42] usb 2-1: Manufacturer: syz [ 530.494881][ T42] usb 2-1: SerialNumber: syz [ 530.514680][ T42] usb 2-1: config 0 descriptor?? [ 530.546220][T13666] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2819'. [ 530.699911][T13668] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 530.711889][T13668] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 530.723719][T13668] overlayfs: failed to get uuid (63/file1, err=-13); falling back to uuid=null. [ 530.752332][T13659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.765951][T13659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.788836][ T42] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 530.800247][ T42] peak_usb 2-1:0.0: unable to read PCAN-USB Pro FD firmware info (err -71) [ 530.812369][ T9] rc_core: IR keymap rc-hauppauge not found [ 530.819954][ T9] Registered IR keymap rc-empty [ 530.825973][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 530.859572][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 530.880778][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 530.880785][ T42] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 530.887944][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input197 [ 530.926084][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 530.928915][ T42] usb 2-1: USB disconnect, device number 16 [ 530.950919][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 530.969677][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 530.981729][ T983] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 531.002260][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.029580][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.049419][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.070450][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.089519][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.120656][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.149928][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.160607][ T983] usb 3-1: config index 0 descriptor too short (expected 63524, got 36) [ 531.174570][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 531.185238][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 531.198127][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 531.215790][ T983] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 531.238962][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.247661][ T9] usb 4-1: USB disconnect, device number 41 [ 531.258061][ T983] usb 3-1: Product: syz [ 531.262731][ T983] usb 3-1: Manufacturer: syz [ 531.270314][ T983] usb 3-1: SerialNumber: syz [ 531.287199][ T983] usb 3-1: config 0 descriptor?? [ 531.735221][T13668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.773169][T13668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.788008][ T5881] usb 3-1: USB disconnect, device number 29 [ 532.410384][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2827'. [ 532.517709][T13693] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2828'. [ 532.709939][ T5901] rc_core: IR keymap rc-hauppauge not found [ 532.716674][ T5901] Registered IR keymap rc-empty [ 532.736763][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 532.790100][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 532.830699][ T5901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 532.880713][ T5901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input198 [ 532.935084][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 532.949364][ T5881] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 532.979353][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 533.010125][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 533.021036][T13713] FAULT_INJECTION: forcing a failure. [ 533.021036][T13713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.040073][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 533.059363][T13713] CPU: 0 UID: 0 PID: 13713 Comm: syz.2.2836 Not tainted syzkaller #0 PREEMPT(full) [ 533.059394][T13713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 533.059407][T13713] Call Trace: [ 533.059416][T13713] [ 533.059426][T13713] dump_stack_lvl+0xe8/0x150 [ 533.059462][T13713] should_fail_ex+0x412/0x560 [ 533.059501][T13713] _copy_from_user+0x2d/0xb0 [ 533.059530][T13713] ___sys_sendmsg+0x1c6/0x360 [ 533.059563][T13713] ? __lock_acquire+0x6b5/0x2cf0 [ 533.059593][T13713] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.059632][T13713] ? kstrtouint+0x6e/0xe0 [ 533.059690][T13713] ? __fget_files+0x2a/0x420 [ 533.059716][T13713] ? __fget_files+0x3a0/0x420 [ 533.059751][T13713] __sys_sendmmsg+0x27c/0x4e0 [ 533.059778][T13713] ? __pfx___sys_sendmmsg+0x10/0x10 [ 533.059797][T13713] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 533.059892][T13713] ? ksys_write+0x242/0x270 [ 533.059926][T13713] ? __pfx_ksys_write+0x10/0x10 [ 533.059963][T13713] __x64_sys_sendmmsg+0xa0/0xc0 [ 533.059986][T13713] do_syscall_64+0xe2/0xf80 [ 533.060016][T13713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.060037][T13713] ? trace_irq_disable+0x37/0x100 [ 533.060064][T13713] ? clear_bhb_loop+0x40/0x90 [ 533.060092][T13713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.060114][T13713] RIP: 0033:0x7fb0ce99aeb9 [ 533.060135][T13713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.060153][T13713] RSP: 002b:00007fb0ccbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 533.060175][T13713] RAX: ffffffffffffffda RBX: 00007fb0cec15fa0 RCX: 00007fb0ce99aeb9 [ 533.060192][T13713] RDX: 0000000000000001 RSI: 0000200000006140 RDI: 0000000000000003 [ 533.060205][T13713] RBP: 00007fb0ccbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 533.060219][T13713] R10: 000000002400c0c5 R11: 0000000000000246 R12: 0000000000000001 [ 533.060233][T13713] R13: 00007fb0cec16038 R14: 00007fb0cec15fa0 R15: 00007ffc7759e9e8 [ 533.060267][T13713] [ 533.150832][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 533.329583][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 533.340294][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 533.354812][ T5881] usb 2-1: config 1 has an invalid interface number: 3 but max is 2 [ 533.364178][ T5881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.377302][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 533.385269][ T5881] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 533.397141][ T5881] usb 2-1: too many endpoints for config 1 interface 3 altsetting 191: 186, using maximum allowed: 30 [ 533.409415][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 533.417783][ T5881] usb 2-1: config 1 interface 3 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 186 [ 533.434561][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 533.442398][ T5881] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 533.453554][ T5881] usb 2-1: config 1 interface 3 has no altsetting 0 [ 533.466100][ T5901] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 533.492332][ T5881] usb 2-1: string descriptor 0 read error: -22 [ 533.499530][ T5881] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 533.509120][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.512383][ T5901] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 533.522302][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2837'. [ 533.563828][ T5901] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 533.585372][ T5881] usb 2-1: low speed audio streaming not supported [ 533.604658][ T5901] usb 1-1: USB disconnect, device number 26 [ 533.761891][T13697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.793001][T13697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.059785][T13736] FAULT_INJECTION: forcing a failure. [ 534.059785][T13736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.076977][T13736] CPU: 0 UID: 0 PID: 13736 Comm: syz.2.2847 Not tainted syzkaller #0 PREEMPT(full) [ 534.077008][T13736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 534.077022][T13736] Call Trace: [ 534.077031][T13736] [ 534.077041][T13736] dump_stack_lvl+0xe8/0x150 [ 534.077077][T13736] should_fail_ex+0x412/0x560 [ 534.077117][T13736] _copy_from_user+0x2d/0xb0 [ 534.077146][T13736] ___sys_sendmsg+0x1c6/0x360 [ 534.077179][T13736] ? __lock_acquire+0x6b5/0x2cf0 [ 534.077208][T13736] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.077284][T13736] ? __fget_files+0x2a/0x420 [ 534.077310][T13736] ? __fget_files+0x3a0/0x420 [ 534.077343][T13736] __x64_sys_sendmsg+0x1bd/0x2a0 [ 534.077378][T13736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.077419][T13736] ? __pfx_ksys_write+0x10/0x10 [ 534.077460][T13736] do_syscall_64+0xe2/0xf80 [ 534.077488][T13736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.077508][T13736] ? trace_irq_disable+0x37/0x100 [ 534.077534][T13736] ? clear_bhb_loop+0x40/0x90 [ 534.077560][T13736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.077580][T13736] RIP: 0033:0x7fb0ce99aeb9 [ 534.077601][T13736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.077619][T13736] RSP: 002b:00007fb0ccbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.077642][T13736] RAX: ffffffffffffffda RBX: 00007fb0cec15fa0 RCX: 00007fb0ce99aeb9 [ 534.077658][T13736] RDX: 0000000004008004 RSI: 0000200000000180 RDI: 0000000000000004 [ 534.077672][T13736] RBP: 00007fb0ccbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 534.077686][T13736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.077698][T13736] R13: 00007fb0cec16038 R14: 00007fb0cec15fa0 R15: 00007ffc7759e9e8 [ 534.077730][T13736] [ 534.485835][T13749] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2852'. [ 534.671844][T13760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2858'. [ 534.684475][T13760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2858'. [ 534.862243][T13767] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2862'. [ 535.079393][ T5881] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 535.251388][ T5881] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 535.260159][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.274270][ T5881] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 535.289074][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 535.309547][ T5881] usb 4-1: Product: syz [ 535.314033][ T5881] usb 4-1: Manufacturer: syz [ 535.329209][ T5881] usb 4-1: SerialNumber: syz [ 535.341137][ T5881] usb 4-1: config 0 descriptor?? [ 535.353953][ T5881] hub 4-1:0.0: bad descriptor, ignoring hub [ 535.368195][ T5881] hub 4-1:0.0: probe with driver hub failed with error -5 [ 535.434328][ T5881] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 535.481912][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 535.570148][ T9] usb 2-1: USB disconnect, device number 17 [ 535.661062][ T5836] usb 4-1: USB disconnect, device number 42 [ 536.019271][ T983] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 536.104886][T13806] cgroup: Invalid name [ 536.139326][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 536.214658][ T983] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 536.235991][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.244798][ T983] usb 4-1: Product: syz [ 536.259253][ T983] usb 4-1: Manufacturer: syz [ 536.264297][ T983] usb 4-1: SerialNumber: syz [ 536.321285][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 536.328813][ T9] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 536.345051][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.364808][ T9] usb 1-1: config 0 descriptor?? [ 536.376703][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 536.429350][ T5901] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 536.533252][ T983] rtl8150 4-1:1.0: couldn't reset the device [ 536.541665][ T983] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 536.565113][ T983] usb 4-1: USB disconnect, device number 43 [ 536.589247][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 536.601802][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.636032][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 536.648665][ T5901] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 536.658908][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.668933][ T5901] usb 3-1: Product: syz [ 536.673734][ T5901] usb 3-1: Manufacturer: syz [ 536.678574][ T5901] usb 3-1: SerialNumber: syz [ 536.903007][T13808] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2880'. [ 536.913181][T13808] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2880'. [ 537.003146][ T5901] usb 3-1: 0:2 : does not exist [ 537.035790][ T5901] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 537.111674][ T5901] usb 3-1: USB disconnect, device number 30 [ 537.167738][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.434995][T13833] FAULT_INJECTION: forcing a failure. [ 537.434995][T13833] name failslab, interval 1, probability 0, space 0, times 0 [ 537.451227][T13833] CPU: 0 UID: 0 PID: 13833 Comm: syz.3.2891 Not tainted syzkaller #0 PREEMPT(full) [ 537.451255][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 537.451269][T13833] Call Trace: [ 537.451281][T13833] [ 537.451291][T13833] dump_stack_lvl+0xe8/0x150 [ 537.451325][T13833] should_fail_ex+0x412/0x560 [ 537.451364][T13833] should_failslab+0xa8/0x100 [ 537.451388][T13833] __kmalloc_noprof+0xe8/0x760 [ 537.451419][T13833] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 537.451453][T13833] tomoyo_realpath_from_path+0xe3/0x5d0 [ 537.451482][T13833] ? tomoyo_domain+0xd7/0x130 [ 537.451526][T13833] ? tomoyo_path_number_perm+0x219/0x630 [ 537.451549][T13833] tomoyo_path_number_perm+0x246/0x630 [ 537.451573][T13833] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 537.451606][T13833] ? __lock_acquire+0x6b5/0x2cf0 [ 537.451647][T13833] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 537.451701][T13833] ? __fget_files+0x2a/0x420 [ 537.451729][T13833] ? __fget_files+0x2a/0x420 [ 537.451746][T13833] ? __fget_files+0x3a0/0x420 [ 537.451763][T13833] ? __fget_files+0x2a/0x420 [ 537.451784][T13833] security_file_ioctl+0xc3/0x2a0 [ 537.451811][T13833] __se_sys_ioctl+0x47/0x170 [ 537.451836][T13833] do_syscall_64+0xe2/0xf80 [ 537.451857][T13833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.451872][T13833] ? trace_irq_disable+0x37/0x100 [ 537.451892][T13833] ? clear_bhb_loop+0x40/0x90 [ 537.451927][T13833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.451943][T13833] RIP: 0033:0x7f5a9c59aeb9 [ 537.451958][T13833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.451974][T13833] RSP: 002b:00007f5a9d494028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.451991][T13833] RAX: ffffffffffffffda RBX: 00007f5a9c815fa0 RCX: 00007f5a9c59aeb9 [ 537.452002][T13833] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 537.452012][T13833] RBP: 00007f5a9d494090 R08: 0000000000000000 R09: 0000000000000000 [ 537.452022][T13833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.452031][T13833] R13: 00007f5a9c816038 R14: 00007f5a9c815fa0 R15: 00007fff21feba28 [ 537.452055][T13833] [ 537.452086][T13833] ERROR: Out of memory at tomoyo_realpath_from_path. [ 537.698542][ T9] gspca_vc032x: reg_w err -71 [ 537.706548][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.715313][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.729022][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.744958][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.763749][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.769979][ T983] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 537.784790][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.791080][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.797099][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.802993][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.808624][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.816210][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.822822][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.828742][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.852827][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.874212][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.880672][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.886280][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.895556][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 537.901160][ T9] gspca_vc032x: Unknown sensor... [ 537.906677][ T9] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 537.939249][ T983] usb 2-1: Using ep0 maxpacket: 16 [ 537.944150][T13839] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2893'. [ 537.947582][ T9] usb 1-1: USB disconnect, device number 27 [ 537.979252][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.001299][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 538.024628][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 538.034968][ T983] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 538.045740][ T983] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.064272][ T983] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 538.074738][ T983] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 538.083417][ T983] usb 2-1: Manufacturer: syz [ 538.106610][ T983] usb 2-1: config 0 descriptor?? [ 538.829673][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 538.999839][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 539.009440][ T10] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 539.031756][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.062873][ T10] usb 1-1: config 0 descriptor?? [ 539.100500][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 539.318623][T13887] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2907'. [ 540.310488][ T10] gspca_vc032x: reg_w err -71 [ 540.341434][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.347419][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.377464][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.394563][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.418762][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.431639][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.437124][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.464374][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.479271][ T983] rc_core: IR keymap rc-hauppauge not found [ 540.485968][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.491715][ T983] Registered IR keymap rc-empty [ 540.497161][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.503549][ T983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 540.520247][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.535224][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.555858][ T983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 540.566410][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.580320][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.585878][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.596601][T13937] FAULT_INJECTION: forcing a failure. [ 540.596601][T13937] name failslab, interval 1, probability 0, space 0, times 0 [ 540.605911][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.618950][ T983] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 540.636601][T13937] CPU: 1 UID: 0 PID: 13937 Comm: syz.3.2922 Not tainted syzkaller #0 PREEMPT(full) [ 540.636634][T13937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 540.636649][T13937] Call Trace: [ 540.636658][T13937] [ 540.636668][T13937] dump_stack_lvl+0xe8/0x150 [ 540.636704][T13937] should_fail_ex+0x412/0x560 [ 540.636744][T13937] should_failslab+0xa8/0x100 [ 540.636768][T13937] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 540.636802][T13937] ? __alloc_skb+0x1d0/0x7d0 [ 540.636839][T13937] __alloc_skb+0x1d0/0x7d0 [ 540.636874][T13937] tcp_stream_alloc_skb+0x3d/0x350 [ 540.636903][T13937] tcp_sendmsg_locked+0x131c/0x53b0 [ 540.636940][T13937] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 540.637005][T13937] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 540.637040][T13937] ? __local_bh_enable_ip+0xd0/0x130 [ 540.637072][T13937] tcp_sendmsg+0x2f/0x50 [ 540.637095][T13937] sock_sendmsg_nosec+0x128/0x1d0 [ 540.637125][T13937] __sys_sendto+0x3ff/0x590 [ 540.637160][T13937] ? __pfx___sys_sendto+0x10/0x10 [ 540.637187][T13937] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 540.637232][T13937] ? __fget_files+0x3a0/0x420 [ 540.637270][T13937] ? ksys_write+0x242/0x270 [ 540.637303][T13937] ? __pfx_ksys_write+0x10/0x10 [ 540.637339][T13937] __x64_sys_sendto+0xde/0x100 [ 540.637374][T13937] do_syscall_64+0xe2/0xf80 [ 540.637403][T13937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.637425][T13937] ? trace_irq_disable+0x37/0x100 [ 540.637451][T13937] ? clear_bhb_loop+0x40/0x90 [ 540.637478][T13937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.637500][T13937] RIP: 0033:0x7f5a9c59aeb9 [ 540.637578][T13937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.637596][T13937] RSP: 002b:00007f5a9d494028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 540.637620][T13937] RAX: ffffffffffffffda RBX: 00007f5a9c815fa0 RCX: 00007f5a9c59aeb9 [ 540.637637][T13937] RDX: 0000000000000b47 RSI: 0000200000002240 RDI: 0000000000000003 [ 540.637651][T13937] RBP: 00007f5a9d494090 R08: 0000000000000000 R09: 0000000000000000 [ 540.637665][T13937] R10: 0000000004004085 R11: 0000000000000246 R12: 0000000000000001 [ 540.637678][T13937] R13: 00007f5a9c816038 R14: 00007f5a9c815fa0 R15: 00007fff21feba28 [ 540.637712][T13937] [ 540.639745][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.899529][ T983] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input199 [ 540.926385][ T983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 540.940734][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 540.946631][ T10] gspca_vc032x: Unknown sensor... [ 540.952119][ T10] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 540.962297][ T983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 540.992452][ T10] usb 1-1: USB disconnect, device number 28 [ 541.009296][ T983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 541.069685][ T983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 541.089343][ T983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 541.110386][ T983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 541.130532][ T983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 541.186136][ T983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 541.219312][ T983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 541.247487][ T983] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 541.282135][ T983] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 541.302249][ T983] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 541.326627][ T983] usb 2-1: USB disconnect, device number 18 [ 541.729616][T12937] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 541.819595][ T983] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 541.881767][T12937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.893199][T12937] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 541.902783][T12937] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 541.912703][T12937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.924977][T12937] usb 4-1: config 0 descriptor?? [ 541.979264][ T983] usb 2-1: Using ep0 maxpacket: 32 [ 541.988885][ T983] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 542.006423][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.021146][ T983] usb 2-1: config 0 descriptor?? [ 542.042706][ T983] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 542.071225][ T5901] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 542.234580][ T5901] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 542.244421][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.253465][ T5901] usb 3-1: Product: syz [ 542.257770][ T5901] usb 3-1: Manufacturer: syz [ 542.262939][ T5901] usb 3-1: SerialNumber: syz [ 542.272598][ T5901] usb 3-1: config 0 descriptor?? [ 542.319350][ T5836] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 542.469340][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 542.473956][ T5836] usb 1-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 542.501716][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.501810][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 542.501839][ T5836] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 542.501866][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.515266][ T5836] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 542.515333][ T5836] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 542.515360][ T5836] usb 1-1: Manufacturer: syz [ 542.544732][ T5836] usb 1-1: config 0 descriptor?? [ 542.600989][ T5901] hso 3-1:0.0: Failed to find INT IN ep [ 542.601707][ T5901] usb-storage 3-1:0.0: USB Mass Storage device detected [ 542.702454][T12937] Bluetooth: Can't get version to change to load ram patch err [ 542.714789][T12937] Bluetooth: Loading patch file failed [ 542.720890][T12937] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 542.738287][T12937] usb 4-1: USB disconnect, device number 44 [ 542.818145][ T10] usb 3-1: USB disconnect, device number 31 [ 542.879324][ T5836] rc_core: IR keymap rc-hauppauge not found [ 542.885836][ T5836] Registered IR keymap rc-empty [ 542.891259][ T5836] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.909535][ T5836] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.930522][ T5836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 542.945323][ T5836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input200 [ 542.962679][ T5836] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.989603][ T5836] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.009697][ T5836] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.029631][ T5836] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.049635][ T5836] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.069469][ T5836] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.090270][ T5836] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.109577][ T5836] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.129422][ T5836] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.149612][ T5836] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 543.172252][ T5836] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 543.184349][ T5836] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 543.250801][ T983] gspca_vc032x: reg_w err -71 [ 543.261359][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.275784][ T5881] usb 1-1: USB disconnect, device number 29 [ 543.280531][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.299693][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.314761][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.331170][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.336694][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.346784][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.353876][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.360102][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.365950][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.371742][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.378040][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.384030][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.398169][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.405721][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.414225][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.424893][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.456049][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 543.466184][ T983] gspca_vc032x: Unknown sensor... [ 543.479820][ T983] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 543.509758][ T983] usb 2-1: USB disconnect, device number 19 [ 543.889443][ T983] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 544.059562][ T983] usb 4-1: Using ep0 maxpacket: 16 [ 544.071896][ T983] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.096192][ T983] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 544.150242][ T983] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 544.180005][ T983] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 544.202120][ T983] usb 4-1: Manufacturer: syz [ 544.224012][ T983] usb 4-1: config 0 descriptor?? [ 544.482843][T14039] FAULT_INJECTION: forcing a failure. [ 544.482843][T14039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.496851][T14039] CPU: 1 UID: 0 PID: 14039 Comm: syz.2.2967 Not tainted syzkaller #0 PREEMPT(full) [ 544.496882][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 544.496897][T14039] Call Trace: [ 544.496906][T14039] [ 544.496915][T14039] dump_stack_lvl+0xe8/0x150 [ 544.496950][T14039] should_fail_ex+0x412/0x560 [ 544.496990][T14039] _copy_from_user+0x2d/0xb0 [ 544.497018][T14039] ___sys_sendmsg+0x1c6/0x360 [ 544.497050][T14039] ? __lock_acquire+0x6b5/0x2cf0 [ 544.497079][T14039] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.497149][T14039] ? __fget_files+0x2a/0x420 [ 544.497175][T14039] ? __fget_files+0x3a0/0x420 [ 544.497211][T14039] __x64_sys_sendmsg+0x1bd/0x2a0 [ 544.497248][T14039] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 544.497292][T14039] ? __pfx_ksys_write+0x10/0x10 [ 544.497335][T14039] do_syscall_64+0xe2/0xf80 [ 544.497366][T14039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.497387][T14039] ? trace_irq_disable+0x37/0x100 [ 544.497415][T14039] ? clear_bhb_loop+0x40/0x90 [ 544.497442][T14039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.497464][T14039] RIP: 0033:0x7fb0ce99aeb9 [ 544.497484][T14039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.497504][T14039] RSP: 002b:00007fb0ccbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.497526][T14039] RAX: ffffffffffffffda RBX: 00007fb0cec15fa0 RCX: 00007fb0ce99aeb9 [ 544.497542][T14039] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000005 [ 544.497556][T14039] RBP: 00007fb0ccbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 544.497570][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.497582][T14039] R13: 00007fb0cec16038 R14: 00007fb0cec15fa0 R15: 00007ffc7759e9e8 [ 544.497614][T14039] [ 544.521225][ T983] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 544.850388][ T983] usb 1-1: Using ep0 maxpacket: 32 [ 544.876318][ T983] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 544.899826][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.924695][ T983] usb 1-1: config 0 descriptor?? [ 544.943192][ T983] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 545.609333][ T5836] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 545.759368][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 545.767339][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.779344][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.790751][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 545.801414][ T5836] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 545.812033][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.826879][ T5836] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 545.836499][ T5836] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 545.846898][ T5836] usb 2-1: Manufacturer: syz [ 545.856083][ T5836] usb 2-1: config 0 descriptor?? [ 546.139264][ T5836] rc_core: IR keymap rc-hauppauge not found [ 546.145866][ T5836] Registered IR keymap rc-empty [ 546.154186][ T5836] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.164928][ T983] gspca_vc032x: reg_w err -71 [ 546.177016][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.183184][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.188817][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.196117][ T5836] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.206705][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.212580][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.218455][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.226152][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.237368][ T5836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 546.257362][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.262986][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.271293][ T5836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input201 [ 546.284403][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.295557][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.306528][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.312365][ T5836] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.321639][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.327482][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.334339][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.341502][ T5836] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.349207][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.354829][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.364150][ T5836] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.374888][ T983] gspca_vc032x: I2c Bus Busy Wait 00 [ 546.380569][ T983] gspca_vc032x: Unknown sensor... [ 546.386115][ T983] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 546.396604][ T5836] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.404067][T13522] Bluetooth: hci3: command 0x0406 tx timeout [ 546.411579][ T983] usb 1-1: USB disconnect, device number 30 [ 546.419435][ T5836] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.460054][ T5836] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.484142][T14067] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2979'. [ 546.495720][ T5836] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.529583][ T5836] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.549430][ T5836] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.569857][ T5836] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 546.603837][ T5836] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 546.614070][ T5836] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 546.628475][ T5836] usb 2-1: USB disconnect, device number 20 [ 546.666030][ T5881] usb 4-1: USB disconnect, device number 45 [ 547.075714][T14089] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2988'. [ 547.380683][ T983] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 547.539333][ T983] usb 2-1: Using ep0 maxpacket: 16 [ 547.547618][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.558962][ T983] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 547.573908][ T983] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 547.585505][ T983] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 547.594097][ T983] usb 2-1: Manufacturer: syz [ 547.602852][ T983] usb 2-1: config 0 descriptor?? [ 547.749361][ T5881] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 547.921652][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 547.931525][ T5881] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 547.941782][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.952846][ T5881] usb 3-1: config 0 descriptor?? [ 547.968969][ T5881] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 548.049399][T12937] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 548.219396][T12937] usb 1-1: Using ep0 maxpacket: 16 [ 548.227726][T12937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.238752][T12937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 548.250604][T12937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 548.262251][T12937] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 548.272930][T12937] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.288398][T12937] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 548.298699][T12937] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 548.310760][T12937] usb 1-1: Manufacturer: syz [ 548.323532][T12937] usb 1-1: config 0 descriptor?? [ 548.599885][T12937] rc_core: IR keymap rc-hauppauge not found [ 548.614724][T12937] Registered IR keymap rc-empty [ 548.620864][T12937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 548.640495][T12937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 548.670881][T12937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 548.686151][T12937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input202 [ 548.702407][T12937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 548.729595][T12937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 548.760560][T12937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 548.779372][T12937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 548.800523][T12937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 548.819417][T12937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 548.839448][T12937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 548.859379][T12937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 548.882607][T12937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 548.909448][T12937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 548.942627][T12937] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 548.952747][T12937] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 548.971207][T12937] usb 1-1: USB disconnect, device number 31 [ 549.173545][ T5881] gspca_vc032x: reg_w err -71 [ 549.182201][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.188327][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.194079][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.201158][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.206692][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.212330][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.217753][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.224799][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.230712][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.236496][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.242852][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.248525][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.255097][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.261981][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.267413][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.273249][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.278696][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.286702][ T5881] gspca_vc032x: I2c Bus Busy Wait 00 [ 549.292314][ T5881] gspca_vc032x: Unknown sensor... [ 549.297834][ T5881] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 549.316816][ T5881] usb 3-1: USB disconnect, device number 32 [ 550.182920][ T5881] usb 2-1: USB disconnect, device number 21 [ 550.379812][ T5901] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 550.409283][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 550.539531][T14138] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3011'. [ 550.548995][ T5901] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 550.567529][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 550.585694][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 550.593229][ T5901] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 550.604522][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.614492][ T24] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 550.628656][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.640909][ T5901] usb 4-1: config 0 descriptor?? [ 550.647873][T14149] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 550.667501][ T5901] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 550.680995][ T24] usb 3-1: config 0 descriptor?? [ 550.694282][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 551.072759][T14161] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3021'. [ 551.200163][ T5901] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 551.359540][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 551.371471][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.384637][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 551.397144][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 551.413342][ T5901] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 551.424779][ T5901] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 551.434210][ T5901] usb 2-1: Manufacturer: syz [ 551.456240][ T5901] usb 2-1: config 0 descriptor?? [ 551.912855][ T24] gspca_vc032x: reg_w err -71 [ 551.917629][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 551.926960][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 551.932644][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 551.938369][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 551.944425][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 551.950811][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 551.957070][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 551.964339][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 551.971075][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 551.976767][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 551.983009][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 551.992086][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 551.997614][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 552.003980][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 552.010405][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 552.016307][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 552.022287][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 552.027686][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 552.033182][ T24] gspca_vc032x: Unknown sensor... [ 552.038575][ T24] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 552.049373][ T24] usb 3-1: USB disconnect, device number 33 [ 552.366335][T14175] FAULT_INJECTION: forcing a failure. [ 552.366335][T14175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.380251][T14175] CPU: 1 UID: 0 PID: 14175 Comm: syz.0.3027 Not tainted syzkaller #0 PREEMPT(full) [ 552.380281][T14175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 552.380291][T14175] Call Trace: [ 552.380300][T14175] [ 552.380308][T14175] dump_stack_lvl+0xe8/0x150 [ 552.380334][T14175] should_fail_ex+0x412/0x560 [ 552.380363][T14175] _copy_from_user+0x2d/0xb0 [ 552.380383][T14175] ___sys_sendmsg+0x1c6/0x360 [ 552.380407][T14175] ? __lock_acquire+0x6b5/0x2cf0 [ 552.380429][T14175] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.380456][T14175] ? kstrtouint+0x6e/0xe0 [ 552.380497][T14175] ? __fget_files+0x2a/0x420 [ 552.380515][T14175] ? __fget_files+0x3a0/0x420 [ 552.380540][T14175] __sys_sendmmsg+0x27c/0x4e0 [ 552.380559][T14175] ? __pfx___sys_sendmmsg+0x10/0x10 [ 552.380572][T14175] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 552.380613][T14175] ? ksys_write+0x242/0x270 [ 552.380637][T14175] ? __pfx_ksys_write+0x10/0x10 [ 552.380662][T14175] __x64_sys_sendmmsg+0xa0/0xc0 [ 552.380678][T14175] do_syscall_64+0xe2/0xf80 [ 552.380700][T14175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.380714][T14175] ? trace_irq_disable+0x37/0x100 [ 552.380739][T14175] ? clear_bhb_loop+0x40/0x90 [ 552.380786][T14175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.380809][T14175] RIP: 0033:0x7fc9f519aeb9 [ 552.380830][T14175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.380853][T14175] RSP: 002b:00007fc9f60cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 552.380886][T14175] RAX: ffffffffffffffda RBX: 00007fc9f5415fa0 RCX: 00007fc9f519aeb9 [ 552.380903][T14175] RDX: 0000000000000002 RSI: 0000200000005000 RDI: 0000000000000003 [ 552.380917][T14175] RBP: 00007fc9f60cd090 R08: 0000000000000000 R09: 0000000000000000 [ 552.380929][T14175] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 552.380942][T14175] R13: 00007fc9f5416038 R14: 00007fc9f5415fa0 R15: 00007fff3a285848 [ 552.380979][T14175] [ 552.929534][ T5881] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 553.089288][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 553.097233][ T5881] usb 1-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 553.112864][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 553.127301][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 553.138531][ T5881] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 553.159429][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.180385][ T5901] usb 4-1: USB disconnect, device number 46 [ 553.191722][ T5881] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 553.202413][ T5881] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 553.213833][ T5881] usb 1-1: Manufacturer: syz [ 553.228188][ T5881] usb 1-1: config 0 descriptor?? [ 553.490209][ T5881] rc_core: IR keymap rc-hauppauge not found [ 553.496500][ T5881] Registered IR keymap rc-empty [ 553.502342][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.530169][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.550459][ T5881] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 553.565374][ T5881] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input203 [ 553.581937][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.609510][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.629395][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.649406][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.659312][ T5901] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 553.671835][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.709634][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.729325][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.749385][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.769416][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.789560][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.811989][ T5881] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 553.821657][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 553.827215][ T5881] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 553.844798][ T5901] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 553.860277][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.876621][ T5901] usb 4-1: config 0 descriptor?? [ 553.903285][ T5901] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 553.927730][ T5836] usb 1-1: USB disconnect, device number 32 [ 553.994660][ T5881] usb 2-1: USB disconnect, device number 22 [ 555.081796][T14231] FAULT_INJECTION: forcing a failure. [ 555.081796][T14231] name failslab, interval 1, probability 0, space 0, times 0 [ 555.095823][T14231] CPU: 1 UID: 0 PID: 14231 Comm: syz.2.3053 Not tainted syzkaller #0 PREEMPT(full) [ 555.095858][T14231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 555.095873][T14231] Call Trace: [ 555.095882][T14231] [ 555.095892][T14231] dump_stack_lvl+0xe8/0x150 [ 555.095928][T14231] should_fail_ex+0x412/0x560 [ 555.095967][T14231] should_failslab+0xa8/0x100 [ 555.095990][T14231] __kmalloc_noprof+0xe8/0x760 [ 555.096023][T14231] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 555.096057][T14231] tomoyo_realpath_from_path+0xe3/0x5d0 [ 555.096086][T14231] ? tomoyo_domain+0xd7/0x130 [ 555.096118][T14231] ? tomoyo_path_number_perm+0x219/0x630 [ 555.096138][T14231] tomoyo_path_number_perm+0x246/0x630 [ 555.096161][T14231] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 555.096193][T14231] ? __lock_acquire+0x6b5/0x2cf0 [ 555.096230][T14231] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 555.096282][T14231] ? __fget_files+0x2a/0x420 [ 555.096310][T14231] ? __fget_files+0x2a/0x420 [ 555.096333][T14231] ? __fget_files+0x3a0/0x420 [ 555.096356][T14231] ? __fget_files+0x2a/0x420 [ 555.096386][T14231] security_file_ioctl+0xc3/0x2a0 [ 555.096423][T14231] __se_sys_ioctl+0x47/0x170 [ 555.096458][T14231] do_syscall_64+0xe2/0xf80 [ 555.096488][T14231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.096509][T14231] ? trace_irq_disable+0x37/0x100 [ 555.096537][T14231] ? clear_bhb_loop+0x40/0x90 [ 555.096565][T14231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.096585][T14231] RIP: 0033:0x7fb0ce99aeb9 [ 555.096606][T14231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.096624][T14231] RSP: 002b:00007fb0ccbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.096647][T14231] RAX: ffffffffffffffda RBX: 00007fb0cec15fa0 RCX: 00007fb0ce99aeb9 [ 555.096664][T14231] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 555.096677][T14231] RBP: 00007fb0ccbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 555.096690][T14231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.096702][T14231] R13: 00007fb0cec16038 R14: 00007fb0cec15fa0 R15: 00007ffc7759e9e8 [ 555.096743][T14231] [ 555.096784][T14231] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.299775][T13522] Bluetooth: hci2: command 0x0406 tx timeout [ 555.307964][ T5901] gspca_vc032x: reg_w err -71 [ 555.379320][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.384695][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.408224][T14231] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 555.409915][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.428356][T14231] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 555.433769][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.450993][T14231] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 555.459697][T14231] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 555.463509][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.476234][T14231] kvm: requested 77104 ns i8254 timer period limited to 200000 ns [ 555.485393][T14231] kvm: requested 196114 ns i8254 timer period limited to 200000 ns [ 555.494479][T14231] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 555.503561][T14231] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 555.518534][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.526514][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.541786][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.574232][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.579926][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.585542][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.605129][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.629663][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.635324][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.659212][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.664770][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.671526][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.679064][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 555.687578][ T5901] gspca_vc032x: Unknown sensor... [ 555.693225][ T5901] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 555.710412][ T5901] usb 4-1: USB disconnect, device number 47 [ 555.824649][T14253] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 555.923270][T14261] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.3063'. [ 556.090860][ T5881] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 556.199315][ T5901] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 556.250322][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 556.260749][ T5881] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 556.269749][ T5881] usb 3-1: config 0 has no interface number 0 [ 556.278750][ T5881] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 556.290215][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.298546][ T5881] usb 3-1: Product: syz [ 556.304023][ T5881] usb 3-1: Manufacturer: syz [ 556.308909][ T5881] usb 3-1: SerialNumber: syz [ 556.325012][ T5881] usb 3-1: config 0 descriptor?? [ 556.334030][ T5881] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 556.370200][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 556.378032][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.388879][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 556.400910][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 556.413315][ T5901] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 556.419656][T12937] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 556.426401][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.468466][ T5901] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 556.478284][ T5901] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 556.487533][ T5901] usb 4-1: Manufacturer: syz [ 556.498772][ T5901] usb 4-1: config 0 descriptor?? [ 556.520880][T14280] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.3072'. [ 556.534194][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 556.546389][ C1] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 556.555017][ C1] CPU: 1 UID: 0 PID: 5881 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 556.564566][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 556.574899][ C1] Workqueue: usb_hub_wq hub_event [ 556.580217][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 556.585743][ C1] Code: 11 31 ff 89 ee e8 2e f3 37 00 85 ed 0f 85 ef 0c 00 00 e8 e1 ee 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 556.606134][ C1] RSP: 0018:ffffc90000a087f8 EFLAGS: 00010002 [ 556.612870][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 556.621358][ C1] RDX: ffffc90002362000 RSI: 0000000000000041 RDI: 0000000000000042 [ 556.629485][ C1] RBP: 0000000000000000 R08: ffff888033bd001f R09: 1ffff1100677a003 [ 556.637718][ C1] R10: dffffc0000000000 R11: ffffed100677a004 R12: dffffc0000000000 [ 556.646217][ C1] R13: ffff888033bd0018 R14: 00000000000001c0 R15: 0000000000000000 [ 556.654621][ C1] FS: 0000000000000000(0000) GS:ffff88812515d000(0000) knlGS:0000000000000000 [ 556.663754][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.670569][ C1] CR2: 00007fb0ccbd3fd8 CR3: 000000001c382000 CR4: 00000000003526f0 [ 556.678914][ C1] Call Trace: [ 556.682261][ C1] [ 556.685450][ C1] ? __asan_memcpy+0x40/0x70 [ 556.690247][ C1] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 556.696924][ C1] queue_work_on+0x106/0x1d0 [ 556.701890][ C1] qt2_read_bulk_callback+0xe96/0x1030 [ 556.707521][ C1] ? __pfx_qt2_read_bulk_callback+0x10/0x10 [ 556.713574][ C1] ? kcov_remote_start+0x88/0x7a0 [ 556.718905][ C1] ? kcov_remote_start+0x88/0x7a0 [ 556.724175][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 556.730146][ C1] dummy_timer+0xbbd/0x45d0 [ 556.734980][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 556.740378][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 556.746868][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 556.752452][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 556.757757][ C1] __hrtimer_run_queues+0x529/0xc30 [ 556.763618][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 556.769717][ C1] ? read_tsc+0x9/0x20 [ 556.773874][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 556.779202][ C1] handle_softirqs+0x22a/0x7c0 [ 556.784272][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 556.789500][ C1] __irq_exit_rcu+0x5f/0x150 [ 556.794218][ C1] irq_exit_rcu+0x9/0x30 [ 556.798673][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 556.804633][ C1] [ 556.807628][ C1] [ 556.810621][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 556.817082][ C1] RIP: 0010:unwind_next_frame+0x247/0x23c0 [ 556.822979][ C1] Code: 00 00 45 8b 6d 00 44 89 f8 ff c0 48 8d 2c 85 70 18 74 91 48 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 25 1c 00 00 44 8b 45 00 <41> ff c0 4a 8d 04 6d 00 00 00 00 4c 01 e8 48 8d 34 45 f8 f3 bd 90 [ 556.844325][ C1] RSP: 0018:ffffc9000458e7b8 EFLAGS: 00000246 [ 556.850716][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000080000000 [ 556.858990][ C1] RDX: 00000000000aadf5 RSI: ffffffff8c294fe0 RDI: ffffffff8c294fa0 [ 556.867529][ C1] RBP: ffffffff91880e0c R08: 00000000000e3f38 R09: ffffffff8e95e1a0 [ 556.875901][ C1] R10: ffffc9000458e8d8 R11: ffffffff81b06b70 R12: ffffffff85fd66dd [ 556.884235][ C1] R13: 00000000000e3f2f R14: ffffc9000458e888 R15: 000000000004fd66 [ 556.892273][ C1] ? device_add+0xbd/0xb70 [ 556.896756][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 556.903150][ C1] ? unwind_next_frame+0xd4/0x23c0 [ 556.908439][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 556.913855][ C1] ? device_add+0xbe/0xb70 [ 556.918547][ C1] ? device_add+0xbe/0xb70 [ 556.923136][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 556.929638][ C1] arch_stack_walk+0x11b/0x150 [ 556.934843][ C1] ? device_add+0xbe/0xb70 [ 556.939334][ C1] stack_trace_save+0xa9/0x100 [ 556.944142][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 556.949642][ C1] ? number+0x111/0xf80 [ 556.953914][ C1] ? __pfx_number+0x10/0x10 [ 556.958631][ C1] kasan_save_track+0x3e/0x80 [ 556.963606][ C1] ? kasan_save_track+0x3e/0x80 [ 556.968680][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 556.973750][ C1] ? __kmalloc_cache_noprof+0x31c/0x660 [ 556.979416][ C1] ? device_add+0xbe/0xb70 [ 556.984614][ C1] __kasan_kmalloc+0x93/0xb0 [ 556.989894][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 556.995426][ C1] ? device_add+0xbe/0xb70 [ 557.000248][ C1] ? __kmalloc_cache_noprof+0x15b/0x660 [ 557.005839][ C1] device_add+0xbe/0xb70 [ 557.010419][ C1] ? allocate_minors+0x206/0x2b0 [ 557.015865][ C1] usb_serial_probe+0x26f4/0x2e50 [ 557.021227][ C1] ? __pfx_usb_serial_generic_read_bulk_callback+0x10/0x10 [ 557.029254][ C1] ? __pfx_usb_serial_generic_read_bulk_callback+0x10/0x10 [ 557.036789][ C1] usb_probe_interface+0x668/0xc90 [ 557.042191][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 557.048592][ C1] really_probe+0x267/0xaf0 [ 557.053537][ C1] __driver_probe_device+0x18c/0x320 [ 557.059150][ C1] driver_probe_device+0x4f/0x240 [ 557.064778][ C1] __device_attach_driver+0x2d4/0x4c0 [ 557.070282][ C1] bus_for_each_drv+0x258/0x2f0 [ 557.075167][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 557.081278][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 557.087496][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 557.092830][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 557.098938][ C1] __device_attach+0x2c5/0x450 [ 557.104054][ C1] ? __pfx___device_attach+0x10/0x10 [ 557.109753][ C1] ? _raw_spin_unlock+0x28/0x50 [ 557.115004][ C1] device_initial_probe+0xa1/0xd0 [ 557.120608][ C1] bus_probe_device+0x12a/0x220 [ 557.125942][ C1] ? device_add+0x726/0xb70 [ 557.130842][ C1] device_add+0x7b6/0xb70 [ 557.135394][ C1] usb_set_configuration+0x1a87/0x2110 [ 557.141186][ C1] usb_generic_driver_probe+0x8d/0x150 [ 557.147535][ C1] usb_probe_device+0x1c4/0x3b0 [ 557.152772][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 557.158585][ C1] really_probe+0x267/0xaf0 [ 557.163365][ C1] __driver_probe_device+0x18c/0x320 [ 557.168823][ C1] driver_probe_device+0x4f/0x240 [ 557.174344][ C1] __device_attach_driver+0x2d4/0x4c0 [ 557.180395][ C1] bus_for_each_drv+0x258/0x2f0 [ 557.186260][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 557.194144][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 557.200118][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 557.205900][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 557.212287][ C1] __device_attach+0x2c5/0x450 [ 557.217244][ C1] ? __pfx___device_attach+0x10/0x10 [ 557.223211][ C1] ? _raw_spin_unlock+0x28/0x50 [ 557.228292][ C1] device_initial_probe+0xa1/0xd0 [ 557.233552][ C1] bus_probe_device+0x12a/0x220 [ 557.238859][ C1] ? device_add+0x726/0xb70 [ 557.243578][ C1] device_add+0x7b6/0xb70 [ 557.248287][ C1] usb_new_device+0xa08/0x16f0 [ 557.253266][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 557.258958][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 557.264322][ C1] hub_event+0x2a1c/0x4f30 [ 557.268887][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 557.274499][ C1] ? __pfx_hub_event+0x10/0x10 [ 557.279308][ C1] ? process_one_work+0x87c/0x15a0 [ 557.284555][ C1] ? process_one_work+0x87c/0x15a0 [ 557.289699][ C1] process_one_work+0x949/0x15a0 [ 557.294776][ C1] ? __pfx_process_one_work+0x10/0x10 [ 557.300226][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 557.305596][ C1] worker_thread+0xb46/0x1140 [ 557.310581][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 557.316873][ C1] kthread+0x388/0x470 [ 557.321108][ C1] ? __pfx_worker_thread+0x10/0x10 [ 557.326447][ C1] ? __pfx_kthread+0x10/0x10 [ 557.331175][ C1] ret_from_fork+0x51b/0xa40 [ 557.336104][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 557.341280][ C1] ? __switch_to+0xc7d/0x1400 [ 557.346202][ C1] ? __pfx_kthread+0x10/0x10 [ 557.350947][ C1] ret_from_fork_asm+0x1a/0x30 [ 557.355963][ C1] [ 557.359464][ C1] Modules linked in: [ 557.363853][ C1] ---[ end trace 0000000000000000 ]--- [ 557.369869][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 557.376049][ C1] Code: 11 31 ff 89 ee e8 2e f3 37 00 85 ed 0f 85 ef 0c 00 00 e8 e1 ee 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 557.396936][ C1] RSP: 0018:ffffc90000a087f8 EFLAGS: 00010002 [ 557.403494][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 557.412112][ C1] RDX: ffffc90002362000 RSI: 0000000000000041 RDI: 0000000000000042 [ 557.420700][ C1] RBP: 0000000000000000 R08: ffff888033bd001f R09: 1ffff1100677a003 [ 557.429245][ C1] R10: dffffc0000000000 R11: ffffed100677a004 R12: dffffc0000000000 [ 557.437956][ C1] R13: ffff888033bd0018 R14: 00000000000001c0 R15: 0000000000000000 [ 557.447503][ C1] FS: 0000000000000000(0000) GS:ffff88812515d000(0000) knlGS:0000000000000000 [ 557.457132][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 557.463962][ C1] CR2: 00007fb0ccbd3fd8 CR3: 000000001c382000 CR4: 00000000003526f0 [ 557.472182][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 557.480519][ C1] Kernel Offset: disabled [ 557.485054][ C1] Rebooting in 86400 seconds..