last executing test programs: 2m38.641700997s ago: executing program 3 (id=1705): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="480000002d000100000040000000000004000080320011809e15c00619065e963eba3ef94d765eb5015fe09b7844e4b103706a1038bc9554"], 0x48}], 0x1}, 0x300) 2m38.606611798s ago: executing program 3 (id=1707): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000300)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000140)=""/72, 0x48}, {&(0x7f0000000380)=""/227, 0xe3}, {&(0x7f0000000480)=""/110, 0x6e}], 0x3, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x70}, 0x2020) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x0, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df}) signalfd4(r0, &(0x7f00000000c0)={[0xb53]}, 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000200)={0x800081, 0x858, 0x1, 0x7, 0x43, 0x558}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002d00010026bd7000fcdbdf250400000008000c00", @ANYRES32=r4, @ANYBLOB="0c0016"], 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg(r2, &(0x7f0000000b40)={&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @multicast1}, 0x1, 0x0, 0x4, 0x4}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)="9f2451e77331aac2f17c06a0011a8f60b11134d2cd648e00245e0ff51692624cf43db4b95e864178ce4a9ffe842588f4d7ada88d70a851dea39158167dd272b1a2bef68765c9383111268ef7367f0c4c56eff958cc137384306f9d7034ae6922f4179896b82f0d1fb61f2b38c6755035d1bf2fca572d316afa5c9275d0a40c3ad662addf7a97dc", 0x87}, {&(0x7f0000000740)="7c34fb16cbe0315084cb90b4bd0d012660aeb92b0107b7f98e7c98de5627f7965321439025bebb75aeecacf45bce7b585ff65863d8a24b5b98c3e4c0786df8b69da10dbabf12565bdaba50e702e310ae1aafbfadcf211fa677c3563b8f84a64283c4d3d6af764897e774506a49df0e9e6e83e29872820f17e6c6445943594aac99117881554a8b0097a87088b99bf55c55b54010ff7d902867c5aa5c8b4b541af51935e8a5c10d3e0c41e73b18429e2fc8a8d1dad997e2d7d037cb7a497181ab09eef0d49d466d695fd65d12bfe073fca050b8edd2ef4663c2c97268c35eae5fac07c7dfc6bb7565e5b025eb21876743", 0xf0}, {&(0x7f0000000840)="96627fc973366233acd7fded4bb947b2335765ceb77ea427776168f35c31c7ba8afc498689daa8cc137fcc598762a716b5721a31d9e890e10ce7dc54bdfb9a15ce7dc7e04893f9bb5580aff3cac00ceb282ffe7e150c70c9b7e3f1c3ff342543cbaae2f24046a2a891c0e68a4b0053ce5be81c44cc9910b367d6e0e01db03b341f5980e7646721d660ed98b8263e1cf6852a49652a44684596730ae5eaeaa562ffea04f0b5ce67436103a20f6d2c64258e0369aafd8d8ee1c7197984abbb8a587111b56537b53e943a04abc0c802e4293faf04336b995f53663d98dc5d8cf484d85c3d6bbe51d30807d5b15c799ca26b474e83017a35", 0xf6}, {&(0x7f0000000340)='h', 0x1}, {&(0x7f0000000940)="55c3992a2bbbf9291e44366763f0d10641b0b17f8b3a2d7201a70b858a7a8f4561371a25e5f924c43ee46d60a9738f81546847c6d652397fe1a7bc4098b03cf7f7975580d76631ca6fa1c0ee2b9dfc7ff5c20f65034e871013ea27edbf7b0b854091b0f76306602bf58708a6a684e23f34303c0eacdc32770cd657669fc20debfaba7ecf62a016d34832ee0a8ecd76333ef3cb59dd15f595511316322e68f0171d9780cf2775a4fded2928be046cc1838bf85f21124060ca6f1e4f464414", 0xbe}], 0x5, &(0x7f0000000a80)=[{0x60, 0x114, 0xfff, "bfbc076f8f6108e75a4c4dac06a9de1a134a2e4be57c9bc2be1c1931deb896c08845766f0475da23e83d0366c25bc1a3ca0eb22fddb36bc5deac6840e0edb94dbd03b2d88bab3feb39f905"}, {0x28, 0x111, 0x1, "8b8b166e11fea9cc2154f60b269834510bb7"}], 0x88}, 0x20000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m38.565618311s ago: executing program 3 (id=1708): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd955}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5ee4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa4a}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) dup2(0xffffffffffffffff, r5) ioctl$KVM_SET_CLOCK(r4, 0x4048aec9, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="60005e80080006000002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) 2m38.477654559s ago: executing program 3 (id=1709): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f01ffffffff000000000006241a00000008241c030008070009057f0300020000000904010000020d00000904010102020d00000905820200020000000905030200020d"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x3, 0x3, 0x7, 0x9}]}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @loopback}, 0x2, 0x1, 0x0, 0x800}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0xb29, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x0, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xadc}]}, 0x3c}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001040)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc92", 0xda}], 0x1}}], 0x2, 0x480e0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="14", 0xfffffffffffffe96, 0x10008095, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x7fff}) syz_usb_connect$cdc_ncm(0x5, 0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025e00020110d0070904000001020d000007240600015fe805240005000d240fff03000706241af7ff0009058103100f000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x8000000000000000) write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0xfffff66a, 0x10, 0x7f9, 0x10, 0x10, 0x4009, 0x8000, 0xd97, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m35.433473604s ago: executing program 3 (id=1715): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="480000002d000100000041000000000004000080320011809e15c00619065e963eba3ef94d765eb5015fe09b7844e4b103706a1038bc9554"], 0x48}], 0x1}, 0x300) 2m35.405559481s ago: executing program 3 (id=1716): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100376ea579602913f63ce73bdf0519cafa65e8340980c4011f331010203010902120001f702c00109048d08005981120f94e6b69da4a1bd42dcc67fcc6e7968f900c8082130232b3300379007afa0364990ac3ff7b6c05696023dd6602ebcf9fc2571cbea6138cbbfd7a50296ee6f5af6d610d025b91bedf45231ed94aa"], &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = epoll_create1(0x80000) r3 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100c000, &(0x7f0000000380)) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x20, 0x17, 0x6, "f4c5337b996e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000680)={0x20, 0x17, 0x2, "88f6"}, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) syz_clone(0x20b02211, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r0, r2, &(0x7f0000000100)=0x3, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x1, 0xa}, {0x6, 0x0, 0x0, 0xffff0001}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000280)=[{0x84, 0x8, 0x40, 0x800}, {0x6, 0x0, 0x0, 0xffff0001}]}) setitimer(0x2, 0x0, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r5, &(0x7f00000000c0)=""/177, 0xb1) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000880)={0x0, 0x3, 0x4, 0x3, 0xad, 0x9, 0x4, 0x6, {0x0, @in6={{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10000}}, 0x400, 0xffffffff, 0xffffff6f, 0x8001, 0xe9}}, &(0x7f0000000940)=0xb0) 2m20.157310891s ago: executing program 32 (id=1716): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100376ea579602913f63ce73bdf0519cafa65e8340980c4011f331010203010902120001f702c00109048d08005981120f94e6b69da4a1bd42dcc67fcc6e7968f900c8082130232b3300379007afa0364990ac3ff7b6c05696023dd6602ebcf9fc2571cbea6138cbbfd7a50296ee6f5af6d610d025b91bedf45231ed94aa"], &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = epoll_create1(0x80000) r3 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100c000, &(0x7f0000000380)) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x20, 0x17, 0x6, "f4c5337b996e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000680)={0x20, 0x17, 0x2, "88f6"}, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) syz_clone(0x20b02211, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r0, r2, &(0x7f0000000100)=0x3, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x1, 0xa}, {0x6, 0x0, 0x0, 0xffff0001}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000280)=[{0x84, 0x8, 0x40, 0x800}, {0x6, 0x0, 0x0, 0xffff0001}]}) setitimer(0x2, 0x0, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r5, &(0x7f00000000c0)=""/177, 0xb1) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000880)={0x0, 0x3, 0x4, 0x3, 0xad, 0x9, 0x4, 0x6, {0x0, @in6={{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10000}}, 0x400, 0xffffffff, 0xffffff6f, 0x8001, 0xe9}}, &(0x7f0000000940)=0xb0) 6.449592114s ago: executing program 2 (id=2519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x40200, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x8, 0x1, 0x3, 0x800, 0x9, 0x5, 0x3, 0x75, 0x8, 0x5, 0x86, 0x9, 0x6, 0x43, 0xf, 0x1, [0xa, 0x10001]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c1f0000", @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf25090000003c0003800800010000000000080003000000000014000200776c616e30000000000000000000000014000600fe8000000000000000000000000000aa"], 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x48040) recvfrom$unix(r3, &(0x7f0000000200)=""/74, 0x4a, 0x60, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x94}, 0x20004010) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000440)=0x6}) r8 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002095663207a251f26ee080102030109022400114d0409051f02ff0300000009058202480000000000000000000000000000000d9537f163f274ee4c1c1b2fd759949049a831507d60fd4529f09f6328da9f7ea7ce9fc88c6cabe3d21052548de685c7e8", @ANYRESHEX], 0x0) 4.797311435s ago: executing program 0 (id=2525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f00ff80002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 4.62206678s ago: executing program 2 (id=2526): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="800000000308010100000000000000000300000905"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="800000000308010100000000000000000300000905"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="827995ee0eb2e068de3e4574164122a7d176edb863cea4a99e6ca01f0cba1304e8b802ac15255e58304c787f87bbb6148e53f4b2bda62c827f569342b27ec9380a301ef26f0becafcea3ad5c18c27f6ff69909afda85470c1d6698565d9b6a671a5b03b3d661ecd828fa694eeb24bd094487e1f71181f27ad487fd2047e240aca27b11563fce03178e61c76aa708c2ff7cea99e5ff4a46cb9e4983eefed669848ce958a896a1ee2e704443600643ba274845965e3d0b3e949b45a0ded219ed8a99c53fa571c6359875c321d1000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000000), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.285542575s ago: executing program 2 (id=2528): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) eventfd(0x5) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2081410, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8, 0x0, 0x2000000}}}, 0xb8}}, 0x0) 4.213229281s ago: executing program 2 (id=2530): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0494c200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904", @ANYRESDEC=0x0], 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x5, 0x264, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x66, 0xc9, 0x8c, 0x8, 0xb05, 0x17d1, 0x639f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x252, 0x1, 0x1, 0x41, 0x10, 0xc, [{{0x9, 0x4, 0xda, 0x2, 0x9, 0xb5, 0x36, 0xab, 0x7f, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x3, 0x8, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x69a3, 0x3, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x24}, @country_functional={0xc, 0x24, 0x7, 0x1, 0xff, [0xc, 0x2, 0x7]}, @country_functional={0xa, 0x24, 0x7, 0x7f, 0x6, [0x1, 0x401]}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "090f2b09d70f"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5b3, 0xfff, 0x81}, {0x6, 0x24, 0x1a, 0xb}, [@country_functional={0x8, 0x24, 0x7, 0x7, 0xd30, [0x4]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xffff, 0xc4, 0x5, 0x5, 0x8}]}], [{{0x9, 0x5, 0xc, 0x8, 0x40, 0x7, 0x7, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0xb9}, @generic={0x37, 0x2, "3d8158ec0ba06d9c50a97f55a2041aced5e553a3c18941d3c363d8a62ea82d48a1d230c8a7afec6a230453d7a14bcf66b54144c21e"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x2, 0x1, 0x6, [@generic={0x20, 0xd, "b15e67a9954b5bffac726fe1eb2307f9ef3c692ee1f9e261a07bea1e0f7f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x60, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xff}]}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0x8, 0x1, 0x0, [@generic={0x29, 0x4, "bada0ac8d9961c0c20d7e4fa0a9b46ce9a7cef358131707d725b349bb73afe46c6a8b095f3e92c"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x1}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0xb, 0x8}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x6, 0x1, 0x7, [@generic={0x44, 0x4, "54c29dea13422b0ef7cb5ffb070c66c1bfb5fb69cf068b7ef8be6b005402a7b7b1def2d3f45a484a5b3d43db89573b5806af3c5303d0f1b3d6481848a7c02b0ca75c"}, @generic={0x2e, 0x24, "7c6c16b9e2810b20425ecf9c79cd7cf8a523ca36583220df8575c4c062d13cfba589357ea763cb22a182cac0"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xae, 0xf9, 0xd, [@generic={0x51, 0x11, "4aa393f6aa70369b46606c4111be6b5210f8a9dda70abd994640862461a2379595dfcf6340413d506ae949fcf8362ac815a14f790bcb26aa4b78c50a22a0e4048a12d5eb3f6c50318317866ab2c74f"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x2, 0x7, 0x10, [@generic={0x4, 0xa, "9986"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x1, 0x4, 0x4d, [@generic={0x7, 0x24, "23b4f10b20"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9d, 0xffff}]}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x6, 0x3, 0x9c, 0x8, 0x5}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x3, [{0xa4, &(0x7f0000000180)=@string={0xa4, 0x3, "127b67a7ea84a1d7ab1f20c7457674870ea4b4bfb1f67499525518f8bc088a08f53326d006290f62fb53c771ebf0b71af8f991ae2ebf7aaf8309b3fc4b9c88cc6eaee7e4b66a9abe66a6eb88c5fcabadde212ee10b16514a3c1e5e55052eb784af4251383be1a54b369269187285f3dd0d6be4430fef0c48d5b762736bb3d9f8aca32302a0cb7437820e45bf2d1b4bcc496697b89d7d46ba8652961998246fcf4776"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1409}}, {0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="7a038c33f05a7b4b7ef316b37d801bcacc695fbebb6334000d0000b71f36980d1e659b246dd32dd8260bed57db6df1478474a1ab2ea1ace387b30e12e35f53874f9a386978146aa9e2bf57e3813a6fcbfa6372583b0b7c4fb0ea8fbe91fcd78537a2a7989d53f5fd73c72de3707325ed9dbfea993fbd66d6d49f"]}]}) close(0x3) syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x292, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x8000, 0x0, 0x1, {0x22, 0x24f}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x4b, 0x7, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8, 0x7, 0x3}}]}}}]}}]}}, 0x0) 4.072903299s ago: executing program 0 (id=2531): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000080)=@arm64) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x5, 0x2, 0x94e, 0x1, 'syz1\x00', 0x5}, 0x1, [0x4c, 0x7a4d, 0x401, 0x5, 0xf50, 0x7ff, 0x1, 0xfffffffffffffffb, 0x8001, 0xb, 0x9, 0xe33, 0x3, 0x0, 0x1000, 0x40, 0x5, 0x5, 0x0, 0x2, 0x2, 0x1, 0x7, 0x6, 0x1, 0x8000000000000001, 0x25, 0xf8, 0x9, 0x6, 0xfff, 0xffffffffffffff01, 0x4, 0x0, 0x8000000000000000, 0x7ff, 0xc502, 0x9e9, 0x8, 0x6, 0x0, 0x7fff, 0x7fff, 0x2, 0x9, 0x5, 0x100000000, 0x1, 0x0, 0xf7f, 0x4, 0x3, 0xa, 0x80000000, 0xd, 0x9, 0x9b7, 0x2, 0x3, 0xfffffffffffffffc, 0x6, 0x2b, 0x5, 0x3, 0x8, 0x8, 0x3, 0x6, 0x8000000000000001, 0xffffffff, 0xfffffffffffffffc, 0x8, 0x7, 0xa, 0x4, 0x5, 0x1, 0x81, 0x8, 0x8, 0xff, 0x5, 0x4, 0xb49, 0x3, 0x400, 0x5, 0x200, 0x1ff, 0x4, 0x1ff, 0xa, 0x24, 0x4, 0x5, 0x0, 0x3, 0x6, 0xcfa, 0x7, 0x6, 0x4, 0x300000000000000, 0xffffffffffff8000, 0x0, 0xffffffffffff0001, 0x5e33, 0x200, 0xe, 0x4, 0x3, 0x48, 0xd, 0x2, 0x9, 0xffffffffffffff81, 0x9, 0x7, 0x6, 0x6, 0x5, 0x1, 0x400, 0x1, 0x2, 0xfffffffffffffffc, 0x5, 0x8]}) close(r0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000600)={0x2, 0x0, &(0x7f00000005c0)=[0x0, 0x0]}) close(r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000680)=0x72000000) syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r0) add_key$user(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="a53191ef3b9f833db0bed375e03e4f9507675f25ed16d633f7cfea6aedf0e6b07529d92dbfde0012044e6a70a5f04c8671a8d42e176a1cc2148cea08811677a2966450801903a9f5de05894e41813e029015f0f3d4d1c2b5c858943404346f2fedc1453e95cb296f681b1105b2ab7d52995e", 0x72, 0xfffffffffffffff9) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000800)) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000880)=@arm64={0x5, 0x78, 0x62, '\x00', 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x61}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000) r3 = syz_open_dev$video(&(0x7f0000000a40), 0x1, 0x400000) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000a80)={0x4, 0x0, [{0x1fc, 0x0, 0xe}, {0x892, 0x0, 0x8}, {0xb59, 0x0, 0xfffffffffffffff8}, {0x641, 0x0, 0x8000}]}) r4 = syz_usbip_server_init(0x4) splice(r4, &(0x7f0000000b00)=0x6, r3, &(0x7f0000000b40)=0x5, 0x7, 0x8) syz_usb_connect$uac1(0x2, 0x101, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0x40, 0x50, 0x87, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x8}, [@feature_unit={0xb, 0x24, 0x6, 0x2, 0x5, 0x2, [0x5, 0x5], 0x6}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x2, 0x6, [0x6, 0x7, 0x8, 0x4, 0x1, 0x6], 0xb}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x8, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x204, 0x3, 0x1, 0x7, 0x0, 0x7}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x1, 0x1, '\n='}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x1, "347688bc"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0x3, 0x3, "29630b1612"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x4, 0x1, 0xa, 'C(m'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xc, 0x4, 0x8, 0x0, "ee"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xe, 0x3, 0x63, 0x4, "5fcd3d"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xb, 0x2, 0xc, 0x5, "a72b34"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x2, 0x91, {0x7, 0x25, 0x1, 0x82, 0x5, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xb, 0x2, 0x53, 0x1, "88"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7, 0x9, 0x2, "3a7a1333"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x1, 0x9, {0x7, 0x25, 0x1, 0x1, 0xa, 0x7}}}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x200, 0x0, 0xfc, 0x40, 0x10, 0x8e}, 0x8, &(0x7f0000000d00)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x6b, &(0x7f0000000d40)=@string={0x6b, 0x3, "6a30bc421eead999184700294a5e747596627ae68134ff4c562c12e2288cc3494cd29eaee55cf11c27ee92631295435e80f6654ec05fb665d7d449da56f70cb31efa64d7372a4033ea087049038dd9dc352435971a436d6fa1c71268bcd21b87b5268571cb12d3661e"}}, {0x56, &(0x7f0000000dc0)=@string={0x56, 0x3, "d6e48ffe103e2e1abb18d51bf428069c6b6f5ed477ecec94a3f7f68482aab968ac7364f4bea030d0f2cb9b273fe12f1dd7484ef6d61f3d117b10f15446454a2bf9b312da38275bef80ea580ea1464fd3e3a38da5"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x44a}}, {0xc6, &(0x7f0000000ec0)=@string={0xc6, 0x3, "482652aa3450584e737953ab261189ecb12f5531ea28bfc92b436ded94e96908a9db652fb4e366eadc5ee464cb3855b1e312b6ebd244a4d81717db8605a1e9a6322888a020200ecb393aa7039ed9a1788d0caf96a295e62ede03aeda341575d759e9d0863397835fdf057ed86ccbb2a5881812e7d7c9e37c881381967277cd49f710a4dba66145767de05c7bf2c658914d82dbe7d06d3570475129e1df9b36a9fd6908cdeab93595c9f0ace01351ddcb7adab758f5c317c53734e90ad659076e090f1a83"}}, {0xe5, &(0x7f0000000fc0)=@string={0xe5, 0x3, "e18db3539f98d96f2bfafae8a4f9cebbb9979ab4d89e03463fe6bc2146c8587cc9eed42f36a9d2f869a5acc2ba139d9799bb76e72744aba4f5326ca708ae9b3889574df406f494532df8a7b88ae4b4a06682e05160990817c7208b5ec327a3122b1e4e349182a382bd0efb221556b9b7aea804dcecd16075a8c00a35e0c6e686d2e81a90467ff851ed4c4e9bb68e64ace4e15a599da86e637cec9a9a56fa5577389a3f9431b17643c4693d6460e206260cf2b523bfbbbd612e43be326e723c0a5e2a6401a3340f68e2e93df3ee626ec0db55d21154413f138281283efd801798d31473"}}]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001900)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f00000011c0)={0x6bc, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x9a, 0xf, [@perr={0x84, 0x6f, {0x0, 0x7, [{{0x0, 0x1}, @device_b, 0x81, @value=@device_b, 0x23}, {{}, @broadcast, 0x1, @void, 0x2d}, {{}, @device_a, 0x35c}, {{0x0, 0x1}, @broadcast, 0x27, @value=@broadcast, 0x11}, {{}, @device_a, 0x1, @void, 0x25}, {{}, @device_b, 0x5, @void, 0x23}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x23}]}}, @link_id={0x65, 0x12, {@from_mac, @broadcast}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x7f, 0x20}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x6d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_a, @initial, {0x4, 0xff}, @value=@ver_80211n={0x0, 0x7c7d, 0x1, 0x2, 0x0, 0x1}}, 0xffff, @default, 0x8, @void, @void, @void, @val={0x4, 0x6, {0x5, 0x3a}}, @val={0x6, 0x2, 0x10}, @void, @val={0x25, 0x3, {0x1, 0x11bfe52bffd6b280, 0xba}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x23, "4b500a83a8a46861e0e16805eba121bd440b9ae9fe3250b7335ac0aba1bd195fa41633"}]}}, @NL80211_ATTR_PROBE_RESP={0x589, 0x91, "a9bfd9e54890224ff6c9bdce5d3dff747585e29a54843f1ec0ec6566808bc238915422304b395db37ab77aa497b687427a3a1acd58389c45ee9f7e603791dc5a5f92d1106d885df4d6595050f42f01c65748078298d98702e51321353143d9520172811ca434f8d96658e9b9d2c8279e67f46b13b5d3fc1ad651aaf503485dd2bcdc6d859c53d59ce48e8bbe14b22968ab43bad0dc90012b8f68337c89f54d3d01407ab7e85929b9b9209f39135399a8cd00dd1ad50b78c01a536ab117d6b0758250f1e2d43761a0dd62a472823bf0d5351205c6207679e23e81eb320ef249a4070446f04216dc8f30d4498b63a72c0f2a9fbe31cb64eec1bea456ec70758a93698a55a02e5759f846ea158e8dff5aa1ceeca7f6f9b37d07902bfce3748774bc0c414d013eec05dd12c4ee446610932d1b1badbfe9f8101f0e9add1489bde5b040b5956b764c57bd10395ee36ba84ecbd2d031a128889e5fcb1de4a535d85e07b1a0ae3f731be3e5049faecb9d0f368506ce40cde0bd58b6fe92b704018011b042f1883a729660ba92107d491c3ae933e76b1bb1245ebbbcaf2b24915bda663d5fc6f9aa1aec88b2de04bd2183caa27d7f0a632d8783c3018bd92052ee8308542e515b56f1fb087ed067f87f048889d5b77b12b39a4051e33a80481500c11674b060ba457add060a0810452614637cb4eeca3a07af601f45ccdf5ac806bc99cfdd751cb75db0c86607c92a8dc981c9929d4a4b67454d570c6015394b538d79ce77fcd3854679c5749a6e99b96167a6b36d386042198a3c1061ba6957a547f2fb3307bdcf7d2d04ab090ccd2dccbd18a65ce272aecb1b628b35943ccbf17bf5f88bacb679324ad7952989eb41e2354dd48d933a02c4b23aa4d26a052f565f48c7d928ff8c063d70d36e79364fbb89c38cea5cbee0730fdb4f5a1170b4daf99449c5b87b893a81529116007b19c05da0be8666489183a2ef6ec5003aee655d1ca4f0002708617f5d295a7493f31b15216f489a641029ee15dfd07b5cfbc8625b46b12401ae0670dc3672c63f5dc82929c2b76b3097d67b0895723c8dcf1c61a17df569812261d81ad8666b196d1ca06466cfba8ff1c2d671e3b9717b416379f74be38e2d209fa7ee356e0488bc874362afe17dc3f4fcbf5b03f686a0a8acab0cadb8b328a258f5196de5aa46cdfed1571c9bf23888336befc24f60f83da256518130b183a1052414a9764a23c9cb4b1cc4e532a2b02caf5268c1256d5fc856f15a15da9579efc9904c69c1ae6c3fe98d64e387e8e984175d7e6e4b8dc00da13904417fc7352ccbcceb88b8f4dc5d29c46719f75aa312d8e11daefaa5b1f21f65515e34a6bcad6687f30d73cbd7fe9be2237331ce08c5ba365bbc127994732cc56361d0d4d6a789a8a8ef4dc47835b19642b1cdd6250cc12c8c6197579b372e678988b1154b835f2de7992f5d1199bedf2088599608a624daa5b286be08f125f492b82a1081edca54414ab1f180caed4eaec7f541c761f08a28b6b619887e9db8130f9cc33dd102c964143bacb50b2860fb78f2bbd703773ae64d3f734c8998a03492b7a99638fcd1f68c7aedc1bf6ce9eecc7c19c9ee5d3175beb0967657441a94c0b8b8e829f224ecd65adecec76f0a5f92761dae042bd9f107d21853b331e5c06ba057651689c3668b3b795a7e254796e7b32e93518e560280c583e65752224f13d0708ceee96e0aa79a3b87e73ff4f2e599376a6ee70a5a5d13a321364763bc4b73bdd545368da4d4f361341d37b9b0bf1fb047e582d902b960029f71cafa5cfb2d5711a75f52438ddcb018f8d8edeeefd14399ed72cdf2e8d31ec36eb563d021b061f788034e34194579d91d12953c2c1c3b396f03a925bda7adb9e3253300d3c8a448373e27fdeef613e2b2a860707f403399b9da973ba0a20ac816aca65564f9151cb01e50a05166ad90ecedff70ee22a96b6ca9e08b6808bb503bb6b7cc7df99db870"}, @NL80211_ATTR_IE_PROBE_RESP={0x8, 0x7f, [@ibss={0x6, 0x2, 0x7fff}]}]}, 0x6bc}, 0x1, 0x0, 0x0, 0xc808}, 0x4000) writev(r3, &(0x7f0000002a40)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="7584765ea38015df617ce248e886bfd0d2b677ac71599d87dbc5048cd02f5c4d6d90f4778003ed9a714999ef302d80c35d6801ab30e30ca92a8d7acfc2287f1705bd6bb4fada60197ba9bbf8e5725864bb157e595d0e4b4c9f33944f5cf4da463c481ca0093d2178e86d477b6885e3bd427c3df9752bf1990a529c917df92a11af2b674883d3252b61cc7bbcefaaa16971481b7ba25b905984688ba25a2f16b362d85c3d5964a8123c9400", 0xab}, {&(0x7f0000002a00)="9164f88ca3e05ded9311fff2e318c42cf0d798543e5df62a3f09f034d2a02b6a12601c872c", 0x25}], 0x3) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002b00)={'vcan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000002a80)="883cd625f514c5ee1b8eded9eb92c7922b14a90defd605c70146d9cb2c5c94604faced1fad860a2168de7059428cfaa907069fd76f62ae1e83e6bf3c0c729598eb5c5bcd8cf050", 0x47, 0x24008881, &(0x7f0000002b40)={0x11, 0x18, r7, 0x1, 0x8, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000002c80)={&(0x7f0000002b80), 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x48, r2, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x4e}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "367bc5b43b6084cb897d053db2"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9466e6cb3aa6f649a22b58c245"}]}, 0x48}, 0x1, 0x0, 0x0, 0x24018004}, 0x80c0) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000002cc0)=""/116, &(0x7f0000002d40)=0x74) socket(0x2, 0x5, 0x90c) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000002d80)={0x5, 0x101, 0x6, {0x6, 0x7dc3, 0x6, 0x5}}) 3.790078422s ago: executing program 4 (id=2533): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x167) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.366487543s ago: executing program 1 (id=2534): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x2, 0xe}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x2}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, '\x00', @raw_data=[0x6, 0x1, 0xffffffff, 0x9, 0xd666, 0x37, 0x8001, 0x7, 0x9, 0x722a, 0x1, 0xcb8, 0x3, 0x6, 0x8, 0x9, 0xf, 0x8, 0x3, 0x1, 0x2, 0x9, 0x8, 0x4, 0x7f, 0x7, 0x5, 0x1, 0x5, 0x29f7, 0x5000000, 0x7ff]}) 3.339509827s ago: executing program 1 (id=2535): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getpid() socket$vsock_stream(0x28, 0x1, 0x0) pwritev2(r1, &(0x7f0000002580)=[{&(0x7f0000000000)="fa0ca72a29487b13", 0x8}, {&(0x7f00000003c0)="25ae698db95ff4ca9546126c657a535840c82aed92e704dbb50c930c03a916d839707a20b1fdd183edcd1f07b5db73609223044d7a34b95f5f6f2d699706fe", 0x3f}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000002600)="bf1734fcec47d9f3440ecd904051394a9ec997dc9161fb9cc656f6ff3df6fdd735efff7540f1e275e4bbd8f027f18803fee73dcd648ed5aded4dfd51590af749aa9ac5f6715e1ef626952fa866230100a8faaef5fe90500553b53c1fa061452bd3d037e07ce69452202bd0908e620a5ca7c0212216f8c50b51860df049c95870cae1a3c3d142e8b4f7fe6468a956e394de3e9fc5a3db04a9942b82b05365f0d2dd017c5a5dfe25e587c97d81358ae88c227cbe5045f56dfd557e9ef14207609f8ad8c7375385a1e0e13ced2defd059d506a3a19c3946abfedcf958bbe28cb0db435b7e06c1bf7cdbf1a37a80ef5a0b54", 0xf0}, {&(0x7f0000000400)="8a9b55cc9772be3963b5c9b0e60860fd9c2b3d0633f9e7b84ca3d7a92f9eaabce45179ecbc45c1da86eee272", 0x2f}, {&(0x7f0000001580)="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", 0x1000}], 0x6, 0x2, 0x1, 0x8) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x10}}], 0x10, 0x4040814}, 0xc040) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="100100002e00010000000000fcdbdf250001f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141750bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e2348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734da31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65977deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c295d9bbe8217b5f566306d76baf7e22c417c44dac9024253f119fa36aab3c137a5e1bc80e04d"], 0x110}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.2684363s ago: executing program 1 (id=2536): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e3, &(0x7f0000000340)={r0}) pipe(&(0x7f00000001c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.64154943s ago: executing program 0 (id=2537): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000640)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x7, 0x0, @in6={0xa, 0x0, 0x0, @remote}, @in={0x2, 0x0, @private}}}, 0x118) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x309800, 0x1) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x900) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x11a, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000140), 0x12) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000020c0)={0x44, r6, 0x509, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x20}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}}, 0x4044000) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r9], 0x20}, 0x1, 0x0, 0x0, 0x4008084}, 0x2004c040) 2.575242251s ago: executing program 0 (id=2538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6, 0x0, 0x0, 0x7f}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="52010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB="e1", @ANYRESOCT], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) write$P9_RSTAT(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="600000007d0100416b583d00005900050001010000000000000000000000000300000001000000feffffffffffffff0600726f736530000600726f736530000d002f6465762f6e65742f74756e000d002f6465762f6e65742f74756e00000000000000458e0117b12ebceef811795f37d1c9a57a0162b552eb33b0f9f14bfb781a2e3274a5456399b7386de491f289b540664a"], 0x60) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f00000003c0)=@phonet={0x23, 0x0, 0x0, 0xb}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="27050200d40f00000600002f88a8", 0xe}], 0x1}, 0x40400a4) syz_usb_connect(0x3, 0x2d, &(0x7f0000019200)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x1, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6, 0x0, 0x0, 0x7f}]}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="52010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB="e1", @ANYRESOCT], 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') (async) read$eventfd(r1, &(0x7f0000000080), 0x8) (async) write$P9_RSTAT(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="600000007d0100416b583d00005900050001010000000000000000000000000300000001000000feffffffffffffff0600726f736530000600726f736530000d002f6465762f6e65742f74756e000d002f6465762f6e65742f74756e00000000000000458e0117b12ebceef811795f37d1c9a57a0162b552eb33b0f9f14bfb781a2e3274a5456399b7386de491f289b540664a"], 0x60) (async) socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f00000003c0)=@phonet={0x23, 0x0, 0x0, 0xb}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="27050200d40f00000600002f88a8", 0xe}], 0x1}, 0x40400a4) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000019200)={{0x12, 0x1, 0x0, 0x2, 0x2f, 0xb0, 0x40, 0x4d8, 0xfd08, 0x59b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb1, 0x9, 0x1, 0xa, 0x5f, 0x92, 0x40, [], [{{0x9, 0x5, 0x30932787f67e0187, 0x2, 0x40, 0x2, 0x5}}]}}]}}]}}, 0x0) (async) 2.511274815s ago: executing program 1 (id=2539): r0 = socket$packet(0x11, 0xa, 0x300) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffefa, r2, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000080)={r3}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r1, 0x100000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x0, 0x1}) ioctl$KVM_PPC_ALLOCATE_HTAB(r6, 0xc004aea7, &(0x7f0000000040)=0x68) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) sched_getparam(r8, &(0x7f0000000100)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000040)='H\x00', 0x2}], 0x1) 2.201573968s ago: executing program 1 (id=2540): r0 = syz_usb_connect(0x1, 0x69, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2e, 0x41, 0x82, 0x10, 0xeb0, 0x3457, 0xe17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x85, 0x2, 0x2, 0x3, 0x4d, 0x51, 0x1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0xbd1, 0x8, 0xa, 0x6a}, [@mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xb6, 0xe760}, @acm={0x4, 0x24, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x89, 0x2, 0xf7, 0x40, 0x0, 0x3}, @acm={0x4, 0x24, 0x2, 0xa}]}], [{{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x0, 0x4}}, {{0x9, 0x5, 0xe, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="200d06"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.200659806s ago: executing program 2 (id=2541): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x93, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x8, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "d0f45df1b573"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x800}, @country_functional={0xa, 0x24, 0x7, 0x59, 0x5, [0x5, 0x5b7b]}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xb7, 0x80, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x2315d136ac6d3a3f, 0x2, 0x0, 0x57}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0xf3, 0x81}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0x1, 0x6, 0x1, 0x40}, 0x76, &(0x7f00000001c0)={0x5, 0xf, 0x76, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0xfc, 0x800}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "c366666ffba463713377b7cac45b0107"}, @generic={0x36, 0x10, 0x3, "d51e42aeca37b8947374c6d101e232e9b9cefbb04cdd57007c09a2d354f296a3ae460d9f405a8958a49319cfd143d109a303c3"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x5, 0x1, 0x1, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x9, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0xdd, 0xb, 0xff, 0x7, 0xf7}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0x10, 0xb8, {0xb8, 0x5, "a4411227214b1f76452193fd21cca789cf1eca7898986c3ffaacd283821cfe9ebcef4da049a3e05df280493c7bc24041e11085ef6bb40d2cd0f330d5070b4284ca229333cdf6826309c9935849c6752b37b8fb3d8134bbe9f5229f1b4bae6e68f993eace9dcde1268217779de41b623324febc889f9359af475be87c58328ae7929ded012eea3cd609a5f312744c238d6cde69cc498e2c05842029f3c9cc57c6733ceeb525479eee760d1e4ef274308f1db18da8761e"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x0, 0x6, 0x7, "61ce18e4a858b9"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xfe}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0xa, 0x8, 0x4, 0xf2, 0x0, 0xb, 0x190, 0x4e7, 0xfffe, 0x6, 0x74, 0x8001}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000580)=ANY=[@ANYBLOB="000b01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.546152122s ago: executing program 4 (id=2542): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000044000)) syz_open_procfs(r2, &(0x7f0000000100)='attr/sockcreate\x00') ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80240, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) ioctl$TCFLSH(r6, 0x400455cb, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89b0, &(0x7f0000000040)={'vlan0\x00', 0x400}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x2006}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101}}}}, 0x3e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) 1.529123048s ago: executing program 1 (id=2543): ioprio_set$pid(0x2, 0x0, 0x4000) r0 = socket$inet6(0xa, 0x80002, 0x9) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x26, 0x4000004) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/stat\x00', 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xa1}], 0x1) tkill(r5, 0xb) write$sndseq(r3, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x0, @time={0xf5, 0x7}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x0, 0x20000}}, {0x0, 0x0, 0x0, 0x0, @time}], 0x70) read(r2, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040100010300000009210000000122020009058103"], 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002202"], 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.349441809s ago: executing program 0 (id=2544): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x5c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x49}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x28, r2, 0x200, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1000}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.348508253s ago: executing program 4 (id=2545): getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80800) recvfrom$unix(r0, &(0x7f0000000140)=""/67, 0x43, 0x2021, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async, rerun: 64) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000240)=']{$[!#]$\x00', 0x9) (async, rerun: 64) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000280)='FROZEN\x00', 0x7) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x28040) (async) r4 = socket$inet(0x2, 0x5, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x0, 0x108, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000440), {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xd955, 'syz0\x00', {0x1}}}}, {{@arp={@broadcast, @local, 0x0, 0x0, 0x7, 0x1, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x10, 0x8, 0x50, 0x8000, 0x6, 0x1b8, 'team_slave_0\x00', 'geneve0\x00', {0xff}, {0xff}, 0x0, 0x2b}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast1, 0xf, 0xffffffff}}}, {{@arp={@rand_addr=0x64010102, @rand_addr=0x64010102, 0x0, 0xff, 0x2, 0x10, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4, 0xea, 0x9, 0xfffe, 0x81, 0x564b, 'geneve0\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x68}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x67, 0x9, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000008c0)=0x1000) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000900)={0x0, 0x745}, &(0x7f0000000940)=0x8) sendto$unix(r0, &(0x7f0000000980)="634fa826adbad96bcfb0baca97818263ce29c46ba29a55ddea0f41366de0890ff039b63230c41dc10fffd6258e3c977e919f414ae772cbf7a0164ee68cbecea8afe8933d74d3f146ba40364d82187f3f061e2a21e7bd46708e51e1b9ca8c22b61698e5640d9acd6ccec56f31e6d528b0bddb51b88cc9c00db27a8a9badac51df84ecee8fda1a0a98426298cce45eceae36693aa7454008ce93e3dad9b84a7093b26c7b483d61baee142a7ce1171cde0afab801793a5524f2b75f90b1bb5213bdcfb2a3ba0329d8d79eaf3eb876de7e7b249c5060dbf0b2f0cb004a23057712d48c64120dd93b584d6649f32da3412523c4", 0xf1, 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r5, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async, rerun: 64) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r2) (async, rerun: 64) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000c40)) r9 = getpgrp(r1) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) (async) r11 = syz_open_procfs$userns(r1, &(0x7f0000000cc0)) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x198, r6, 0x400, 0x70bd2c, 0x3400000, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4a040}, 0x8000) (async) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000f40), &(0x7f0000000f80)=0x4) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000001840)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001800)={&(0x7f0000001000)={0x7e8, r3, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x7af, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x6}, @from_mac=@device_b, @broadcast, @random="4e7bab489073", {0x4, 0x6}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7e8}, 0x1, 0x0, 0x0, 0x8000}, 0x4048004) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x19, 0x1000, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) read$ptp(r10, &(0x7f0000001980)=""/214, 0xd6) (async) recvfrom$inet_nvme(r10, &(0x7f0000001a80)=""/57, 0x39, 0x2, &(0x7f0000001ac0)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80) (async) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000001b40)={{0xa, 0x4e24, 0xf3a, @private2, 0x8}, {0xa, 0x4e23, 0xdd, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x3}, 0xffffffffffffffff, {[0x5, 0x9, 0x5, 0xfffffffd, 0x8, 0x4, 0x6, 0x69]}}, 0x5c) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, 0xffffffffffffffff, 0x18b51000) 1.179300735s ago: executing program 0 (id=2546): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x121002) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000040)={{r0}, "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"}) syz_emit_vhci(&(0x7f0000001040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000001080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000010c0)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x0, 0xc8, 0x5, 0x81}}}, 0x9) pipe2$9p(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) mount$9p_fd(0x0, &(0x7f0000001100)='\x00', &(0x7f0000001140), 0x8000, &(0x7f00000011c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@fscache}], [{@obj_type={'obj_type', 0x3d, '/dev/input/event#\x00'}}]}}) syz_emit_vhci(&(0x7f0000001240)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x7, 0x1}}}, 0x7) r3 = userfaultfd(0x80800) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000001280)={&(0x7f0000400000/0xc00000)=nil, &(0x7f000078e000/0x1000)=nil, 0xc00000, 0x3}) syz_usb_connect(0x1, 0xc42, &(0x7f00000012c0)={{0x12, 0x1, 0x300, 0xc8, 0xe8, 0x3a, 0x8, 0x19d2, 0x118, 0x9a87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc30, 0x4, 0x0, 0xa, 0x80, 0x9, [{{0x9, 0x4, 0x9c, 0x6e, 0xd, 0xff, 0xff, 0xff, 0x7, [], [{{0x9, 0x5, 0x3, 0xc, 0x200, 0x80, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4c, 0x6}, @generic={0xd0, 0xd, "e26218620d5cc18e4d840bb3e19eeca2276c84d2ebd2acb0e459e84453d05e4853353baf0b1bd61fcf92ff66f34bdeb48803515847a902724e83f72beb9ca49260183d09180fb1c7388970aee56615e91f45010a62dff5aba387cd4ff1bf723ca70b165396577cc299f649c4ce52844fd6f7b34836535dfe2d4961ac4a387583f4c7e935851ddde56355d4ea5c53f02ee956f0d2fc7748226824a341ec9aec3dd6dd2282578aacb10940ed91375222f9fa5111f68985f3d928e7bd313c5efca5591df8dea9b506dd0e1ca9b6ad7a"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0xb, 0x8, 0x3e, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3a}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x1, 0x3, 0x8e}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x59, 0xd, 0xa9, [@generic={0xd8, 0xe, "6c35433929b5e6a3d6aa3dfe98d8286686399b4a422d76fb1000737139eda24f12506f367af4e9b39bf22578eedfdc3db54fd721dd827856f4e1a21902be347c942f6879bf9b2c58b997a0c21c9a8b8259826a07841e31877137597eef5c3e993ae07065747dbb95c4d6716c95e3eb05ca3cb65ca2a858be4b4a185bd1216844afeb6c16037ec1b1bd46a1ed9d29e7237419defbba8a69d65df32799feea6ef0c2ff2b313f70164cdfc3698f2b6fff4d17b2c6fffff8048107a6dbfa0104a30dcd5e704547b455174ccb32626597e8406ab3be262c6a"}, @generic={0xcc, 0x28, "6e4a841ea9cd0f1e4f07769c16424fa839cebc75dd0b0b03799228442a556fcf6c80a9895579970a87fd39d8125a481a6ff7f7f8869f8e9620e2ffff6158ba1a3b60f1d30a7c5ad31e8749cbd8fb3d87a0a615c625febd87f36c989bf5ec04f8f769d703627e5a3931d7d463cfea371a995d2579a2473859096e087e24808fd14c5b6ce39c8cbb9eea01b05cae0cf68973c84e5b9f2712b093d741143b1c15d21a44d168532c59b0efbc988fe0c8f8784adbf16361ab164ddc8363276fe9b01ef1c397d78031678f3c16"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x1d, 0x1}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x67, 0x7, 0x50}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x0, 0x3, 0x9, [@generic={0x61, 0x22, "01f39368ea3929b0e8e2bc6790a5fa24b9ac015c56a44d6b61c9ee18accfd1aa1deac8ff67061c4d71c3675985290e25737df791796cf18a8bad89ca131b1ff3acd4bc28d60c479ca80f1fd5ad7ea0ce820f4200e45e14ec8966d0057f08f2"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x0, 0xa, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x0, 0x0, 0x3, [@generic={0xf9, 0x31, "8afe7748e6a5e54bd1db46db4338f63036174a1f1d0b1cd27ced091001cdb8b8a70769e56e895b20b6e71d8a38008c7750fca4597d355416d2d5c1b5aed88c30003225d5b91faadb2bff45bcdda37e13cf17596e4206181684161157d070d215a555a9dab0f7a4be1dd8ec318fe299dbd3d39df84fdc53d767a437d1585694df5907230da653c5959e88949b2f518b354c1d10d32c6bc1cbddf69b6c5eceac4bb3075677fc8d0540b20e3e718fc2185565b12b86dea6300d59aec0d8e9e9f10739f96afea382a948cf04e161adaff6dd656f7839ada62637d169759ebeae9b7c7c78a39def48f802c085c10fbb4c163dde9a3b802c071e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x7f, 0xf}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x8, 0x5, 0xc, [@generic={0xd2, 0x23, "79f944ab66ccca50c7d8b3573d495bc14b95d7e7cf22d4cb2039d8c2e3bcc4bbd57cbc0ded1fd329921dad2fb80ffccf96062250941f1021664e5518c2fcd8cba6f5b911731a670405028f03476b32e516f1d50daa43d48cdcf55f17f33e6ed03659cb093acf6534971e71066866939161b23cbb738256813f9edadc6fc162979dffa8e49195eb4e5ede46d65f6d71c2f49fd68b7f9878f5456b8cc5ab700d7fbcfa779a113ca52df5e8692e299dd1c216dca4b4bb8f093e13ebe1d7283c27f479304c149c77fe7fd5885bc3446d923d"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x5, 0xf7, 0x7f, [@generic={0x7b, 0x8, "8be2288232fbc08de9766acc16b5179ddc81c67fa54a76cd147a32837328554f3f2099fc23952d9d91711a1fc6520ae36a59f5ce008f40a9de8dbddaa6d87b31fc021cb81330b3b6b4915a512196601d0aa7d34e1612aaa067ab67ea004a68372bd84923f2475ee45cadb3b02956a3a43564a21e0b54f3e647"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x8, 0x81, 0x2}}]}}, {{0x9, 0x4, 0x14, 0x6, 0x7, 0xe, 0x1, 0x0, 0x1, [], [{{0x9, 0x5, 0xd, 0x1, 0x10, 0x8, 0x10, 0x67}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x8, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0xf}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x3, 0xd, 0x6}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0xd, 0x0, 0xb, [@generic={0xfe, 0x4, "c1a3628c8b92413b312be9fa7e9b140b9c89fe147b5a179e61ee8ca4e5121133b5511240ea8215927fb392f4bb437dd584f477dd7cf8475fe3c72970a2559ebb4d3777293771b131fadcbbb78b9d78eaae2ec477aaf65927928d3ebff5e7451ba32a7a47e58532585c0a19012096e548b297a9ba726d31f7a03c72444162a1a5cff21f77a553c9cc4fbf3e350d0fc1b7cd55240ecb1ce080e0f0e7804b1e9acbe8dcdd16bf15e56bb8b0aa0218906f1ad6c0b003be146ade22b0a8d70e934faa05161a993e10e3509231e192b2350092d5994aa4f9ea344b569676ddb7e89f5525ccdc67b937dbf51bf56d612e950519256ab17783584fd729ba8d31"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xf8, 0xc0, 0x2, [@generic={0x15, 0x6, "5c0aa05161837f3828ac502465d66343278fd7"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x1, 0x8, 0xfa, [@generic={0x37, 0x9, "7d446f393d2ea66a5cd245660b61a51f2ea924a0baee75aed3470e9e553cdf1e148c3d4b9422b9f4dddcaf8ada7b6171c751d6f100"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x6}]}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x2, 0x9, 0x5, [@generic={0x78, 0x22, "325e4b67f9a4cc122e160336e0e7add47744898a16b8688c94d638b0e6ede62ed45d451cedb87ec9ab7e387152b0f3d085bd9cff37f16d81c30651856f7a371b10ccfea5a813d2c2206f04341e1c1da3e324578cf97ce2b771e45d8dd54e0eb432a0129a721eca9106ba31a2d0aa093f5f4ecd8b9585"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x398}]}}]}}, {{0x9, 0x4, 0xa4, 0xc1, 0x2, 0xff, 0x4, 0x36, 0x5, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x80, 0x4, 0xaf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x1, 0x1, 0x96, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8}]}}]}}, {{0x9, 0x4, 0xa5, 0x5, 0xf, 0xf, 0xe1, 0x62, 0x3, [@generic={0xa1, 0x23, "24367956805101c2caca9136c15a14a2cf90326bdd5f19bf243c322a653cb58c6465f30102b76a1faef23c2dc850772dc8384de8c1157575a334800f08cbd24d14e686741b5f37d5c42faa10c651e4e45dcbc7cfea134f3b95db578ce68b841218ee2cef690f95565c5c3062e3c3a71be0c64daa1d19f97289b33e495ab80903f3047e1967012b4fffed9238c9adcfa86de9d5295814811c6fd05bdaf76a2b"}], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x1, 0x4, 0x6}}, {{0x9, 0x5, 0xb, 0x4, 0x10, 0x4, 0x84}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x0, 0x81, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x8, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x1, 0x40, 0xfd}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x1, 0x2, 0xe2, [@generic={0x3a, 0x23, "2ba649ec4610fe43526520d118555a8d8757a5a855328f9e57d4385d3123872cb2f93f8088eedc408ad252abaa38f2670826bc5451e4ccd7"}, @generic={0x4a, 0x6, "358f5e3c60c35e3270b4afa3dda161be404b38c9864cb62d60d6e9f289b88bb2152fbf2349437b9c9657d9a4a357285f8da34fc58d11d5c5efe2cc1d8772b74f0ffd7446549788c9"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x6, 0xde, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x7, 0x40}]}}, {{0x9, 0x5, 0x5, 0x18, 0x4, 0x7f, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x9}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0xf, 0x8, 0xa}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x8, 0x7, 0x5}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0xa, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xc, 0xa, 0x7, [@generic={0xb5, 0x11, "52922cd64b3b24f5bbb73b6ffcd065bf8a29aa314a521d072c7712049d83035e63f619427b650fdb069eb53006b126f8bac3bc34060d89e2874a5eba2757bcb3b96bf72cf371f7f304f25d8267db6f961de11010da8f6ab427ec3b797ccea73a8704a0a280576c8d5b9dbcb1727f1afd7ff0f7cbbc84e60a5f08626d7369b99437bf724487a59a01dbfd2527e345c465d3a5d315c20a0b83cd6cf652a00731ac20da54471f1fb3ba517f8001f4faa8b00d94d5"}, @generic={0xa0, 0x3, "3fb0279d7ead33fce3c4ffdb4ef1e80fe34d7569cf0750bcb42559c1a494327ded1def6cb3b210a2bc34d496ae39ef706e35d6e5e69668fd92d86f1f4c2fbf5bc94194c072238ce0373235c26e2fa5070775ccda2bb0f6ea5436d9de73ba49c91034ebb232dd119c6281594f914e810f9acda639353769a4d0e7114343f7afa6000bd421da2738be110de476fef9317ae424d9af09c28e1b1a24a2c26684"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x18, 0x4, 0x1}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0xa, 0x2, 0x7}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x1, 0xfd, 0xfe, [@generic={0xcc, 0x24, "0c4301303d7fc9d28be05ab2e465b90d1c8a8a9fa311bb3ac275ee5639880a740f6a1c30956870f14f34070aab88228b1f96c9a438cf1d3ba119b2c51261652459ef2f2b8bc211dfd02b9288e4c34b7f252e1941a7238f36b3f39ef2297faf72b33aef1e19c00dda90e4e9edde131861993a69d056de3e5e8475cb0499c5916883d3a5fb787b510ac3daea93052403d4b8dea5bcf0d2c28509b06676e4019bef65665649977e1ec05417c1df8f4a63edacf83e6d1be00e799ce0b4269240906e930d5a9032ed5a88474f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x81}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x5, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0xff}]}}]}}]}}]}}, &(0x7f0000002200)={0xa, &(0x7f0000001f40)={0xa, 0x6, 0x300, 0x2, 0x3, 0x6, 0x8, 0x82}, 0x111, &(0x7f0000001f80)={0x5, 0xf, 0x111, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x9a, 0x54, 0x4, 0x5, 0xe}, @wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x7, 0x8, 0x0, 0x80}, @generic={0xf6, 0x10, 0x2, "b0e40beb13682b1f78ca8d7e7d40a295f885449b3f34bc52c8e7d0890274126c5bff4f2e518eff6a621d146a87ee5bcaa9343f7b1f9dd4299d008852234027d2b12842b09b484d661f79f7b077b5563a4fb0a6505d24283e20c612625020a500078b3b9b9d7d3e99f4e91a6fe8ff5ed868585728c17b9e5a88d365d844e36378cbe1f94e532f9cef6efedbd0c2513eda1aec1b1c6a66de63e428655fcc2aaff947dc18c850aae262350cbb6038cbfb79d04eb3493acb69988a7043df9df09bb2dc037e0d07a5a4ee2146e979333895c09f13d1ee8ad1064bd3ce150857a290cca6dfd64309291933a043becfb87fddc41d4252"}]}, 0x5, [{0x32, &(0x7f00000020c0)=@string={0x32, 0x3, "6ec7807f5f125053867e2b88ce8759870bd8678d536f51a7d612252cba8bbb552bbd2b71a6bf5107acc033b959f4ca2d"}}, {0x9, &(0x7f0000002100)=@string={0x9, 0x3, "872acef539b8ff"}}, {0x4, &(0x7f0000002140)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x1001}}]}) r4 = syz_usb_connect$cdc_ncm(0x2, 0x73, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x0, 0x60, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x101, 0xb, 0x8d, 0xbb}, {0x6, 0x24, 0x1a, 0xe, 0x2}, [@obex={0x5, 0x24, 0x15, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xb, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x68, 0xa, 0x54, 0x11}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x9, 0x1}}}}}}}]}}, &(0x7f0000002580)={0xa, &(0x7f0000002300)={0xa, 0x6, 0x200, 0x0, 0x9, 0xfb, 0x10, 0x3}, 0x11f, &(0x7f0000002340)={0x5, 0xf, 0x11f, 0x5, [@generic={0xe5, 0x10, 0x3, "e854f5079f0f1972aae6ecc348b87d383aec97a1df905950e17c2e8a4ca9be4053d309664a1fed51160fb2551b4f97ac94da79a7a79dc8f2af786e4f563056486c2dcffee048544cc6073ce2d5080824c06928fb50bef146e8238777864f8d1d06f96b2246c54dc10ef7eb1e3415eb263c15f9a91597747460830c9505a20762c24f962ef9e6708abe18832d035faf1dfa7266f0a8dd82944a19339f7ac2ca1dc4c6f414484cff1a19aee0b21f769231b02af5310684cb556ea7080d2268f28f353e929440fb6a0df69ac3f802f64e21c1fa55446cc503e81b8eef39bcd3cd6a5c8f"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x9, 0x4e, 0x3, 0x2}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0xffff, 0xff00, 0xc10, [0xc000, 0xffc000, 0xc0af, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0x60, 0x5, 0x1}]}, 0x3, [{0x6c, &(0x7f0000002480)=@string={0x6c, 0x3, "12654057d0724f669d159b082efb464d61372d6b71d8517978739cfd37bdbdfb318b3b3686241c70dc4680e5586e2cc30094e9793a37a8cdc38747ad50e0932f33aac7d74f40969fbbb44f86ec460a7c1301e7585fcbb3f7558800a56986fcd76d42ba336827a7c4c492"}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000002540)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_disconnect(r4) syz_emit_vhci(&(0x7f00000025c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1ff}}}, 0xd) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCCONS(r5, 0x541d) r6 = geteuid() r7 = geteuid() stat(&(0x7f0000004980)='./file0\x00', &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000004c00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r10 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000006c40)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006c80)={0x0, 0x0, 0x0}, &(0x7f0000006cc0)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000008ec0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000000b000)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private1}}, &(0x7f000000b100)=0xe8) read$FUSE(r2, &(0x7f000000b140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002600)="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", 0x2000, &(0x7f000000d2c0)={&(0x7f0000004600)={0x50, 0x0, 0xfffffffffffffffa, {0x7, 0x2b, 0x9, 0x200000, 0x1bf, 0x8, 0xe1, 0x7f, 0x0, 0x0, 0xa4, 0x9}}, &(0x7f0000004680)={0x18, 0x0, 0x4, {0x5}}, &(0x7f00000046c0)={0x18, 0x0, 0x1, {0x800}}, &(0x7f0000004700)={0x18, 0x0, 0x5, {0x7}}, &(0x7f0000004740)={0x18, 0x0, 0x0, {0xe9d}}, &(0x7f0000004780)={0x28, 0xffffffffffffffda, 0x9, {{0x0, 0x8, 0x1, 0xffffffffffffffff}}}, &(0x7f00000047c0)={0x60, 0x0, 0x2, {{0x2, 0x0, 0x2edf, 0x7, 0x6, 0x3, 0x0, 0x9}}}, &(0x7f0000004840)={0x18, 0x0, 0x3, {0x9}}, &(0x7f0000004880)={0x15, 0x0, 0x4, {'wfdno'}}, &(0x7f00000048c0)={0x20, 0x0, 0x0, {0x0, 0x7}}, &(0x7f0000004900)={0x78, 0x0, 0x7, {0x7ff, 0x8e2d, 0x0, {0x4, 0xe000000, 0x6f0, 0x7b4, 0x0, 0x5, 0xd0, 0x4, 0x1, 0xc000, 0x6, r6, 0x0, 0x3, 0xbed}}}, &(0x7f0000004a40)={0x90, 0x0, 0x3c5e4be8, {0x1, 0x2, 0x9, 0x8, 0xffffffc0, 0xfffffffb, {0x1, 0x8a2, 0x2, 0x5, 0x3, 0x0, 0x6, 0x7, 0x9, 0x8000, 0x0, r7, r8, 0xfffffffb, 0x8}}}, &(0x7f0000004b00)={0xe0, 0x0, 0xfffffffffffff53f, [{0x4, 0x5, 0x4, 0x5, '],{a'}, {0x1, 0x7, 0x4, 0x5, '\'{.-'}, {0x5, 0xc11, 0xe, 0x1681, 'version=9p2000'}, {0x5, 0x4, 0x3, 0xb, '9p\x00'}, {0x2, 0x3, 0x1, 0x4, '\\'}, {0x2, 0xfffffffffffffff7, 0xe, 0x8, 'version=9p2000'}]}, &(0x7f0000006d00)={0x158, 0x0, 0xa, [{{0x6, 0x1, 0x80000001, 0x67e, 0x7, 0x8, {0x4, 0x7c8c479a, 0xfffffffffffffff7, 0x4, 0x6, 0x8, 0x3, 0x3, 0xde0, 0x8000, 0x4, r9, r10, 0x0, 0x8}}, {0x5, 0x81, 0x0, 0x4}}, {{0x1, 0x3, 0xc, 0x3, 0xf, 0x7fff, {0x2, 0x2, 0x2, 0xa5, 0x0, 0x5, 0x4, 0xfffffff0, 0x6, 0xc000, 0xfffffff2, r12, r13, 0x4, 0x8}}, {0x0, 0x80, 0x12, 0xb56, '/dev/input/event#\x00'}}]}, &(0x7f000000af00)={0xa0, 0x0, 0x0, {{0x6, 0x3, 0x101, 0x6, 0x3, 0x10, {0x6, 0x1, 0x7fffffff, 0x80000001, 0xefc6, 0x3, 0x7, 0x0, 0x6e9e, 0x4000, 0xb5, r14, r15, 0x8f, 0x9}}, {0x0, 0x17}}}, &(0x7f000000afc0)={0x20, 0x0, 0x1000, {0x8, 0x0, 0x10, 0x4}}, &(0x7f000000d180)={0x130, 0x0, 0x6, {0xf694, 0xfffffff8, 0x0, '\x00', {0x4000, 0x7fff, 0x3, 0x4, r16, r17, 0x1000, '\x00', 0x2, 0x8, 0x4, 0x5c9, {0x2cc7, 0x3}, {0x7, 0xc302}, {0x8000000000000000, 0xc}, {0x0, 0xffff}, 0x2, 0x7c3, 0x3, 0x7}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_NET_SET(r11, &(0x7f000000d580)={&(0x7f000000d380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f000000d540)={&(0x7f000000d3c0)={0x170, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1513a1c5}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8d5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe0, 0x3, "a8dcebbd3a7362653bc08e7535594c2b977645bf3477b9ad3bf6ba1b55e72cb14b92eca4d40df62b8ac750f18d6481aebef99f4af0de76ee5f23fa8c3021acebbbe7e0554df627fc6d0c6b879b4f408502b5055e0e5e0d7321fefd3f7f31817e25a936cd79b06ba249fc29d65096f495482f5e15e74258b1e0d75a6f60397755056152ccf84d4c6efb81e9e6d7c715e046eb306fc2ef86ae07a5e2f67e219b92c3be0e5539b0f4916fd7799ba1bc1388794b9e4223f68193065648c0dadd2fa8b991f518e0143ff0dcb2d79f761d5168ec0cb6ae8aa748cd45ddc20e"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40000c4}, 0x400) 1.129792375s ago: executing program 4 (id=2547): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) read$FUSE(r1, &(0x7f0000004640)={0x2020}, 0x2020) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 737.280555ms ago: executing program 4 (id=2548): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) eventfd(0x5) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2081410, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8, 0x0, 0x4000000}}}, 0xb8}}, 0x0) 673.146075ms ago: executing program 4 (id=2549): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000140)=@secondary) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0xc0bc5310, &(0x7f00000000c0)={0x18}) syz_usb_control_io(r0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0xee00, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x10}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4845}, 0x800) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=2550): setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000840)=@bpq0, 0x10) r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8], [0x10000], [0x7]], '\x00', [{0xffffffff}, {0x0, 0x10}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffe}], '\x00', 0x1000}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x40, 0x11, 0xa7, {0xa7, 0x23, "16e5a68fb0b6ccb4ce27f78b17cea117dde890740265b7fbae2a629282d3a3db0ede772e0e6f8dcb0f860527e0f190d0a56d289c1c67284a503ab90089156e3dd5853755496e0083eaee357117163a3d8c3156d76136f1f6c17011dc48b048498de99817bb87bf9b64c7bb1d4f4ea01c0aca61ce6754cd82f970e9362d695ea0c7ab79edeebbfeff7fd6c5b67e01485fb83bf8378298a24de90782ea6af27eba5a676342a6"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f00000001c0)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x0, 0xf, 0x8, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x3, 0xa, 0x2, 0x65}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x0, 0x81}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0x4, 0xdd, "b5a0d5f4", "171c20b4"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0x4, 0xa, 0x6, 0xd, 0x9, 0x2}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0xa, 0xf6, "031f959a91f65ba38df707fe4ed4d896e939c41acb0418dd2f308624e6bf9c9094caca260e181b09c98f667f6d969bd44c0f8e026a1f14f4420c670c90445d9c0c5ed0e6455a549770450009a475c5fa75f8939c65e8f79bd62fbba92c3ec88874bdb7c3b684c7f1ba395b2cbb3e7924bd86f6e1ea2ea169f03fc6e20ab7bdff5d6d1d9adae7572946348bbadae4dd8398923144e82650f2035d30f595992b0f8ab7a1a1212ab31dfd5ed2fd441543a652b3ae2ec3f896555f5c345850afb53332f985c59bfe10089a7a14b93142d61c785cbffa6f88b87dc933136d381517590f5148a75a97f784e2b77bd0ad26c610e6cd4d6feb1c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x72}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000540)={0x40, 0xb, 0x2, "9473"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x13, 0x6}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "95e1"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xaec3}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x8d}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x6}}) kernel console output (not intermixed with test programs): 866/0x8b0 [ 478.227316][T15415] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.227360][T15415] netlink_unicast+0x82f/0x9e0 [ 478.227392][T15415] ? __pfx_netlink_unicast+0x10/0x10 [ 478.227418][T15415] ? netlink_sendmsg+0x642/0xb30 [ 478.227433][T15415] ? skb_put+0x11b/0x210 [ 478.227455][T15415] netlink_sendmsg+0x805/0xb30 [ 478.227482][T15415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.227504][T15415] ? aa_sock_msg_perm+0xf1/0x1d0 [ 478.227524][T15415] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 478.227547][T15415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.227565][T15415] __sock_sendmsg+0x21c/0x270 [ 478.227592][T15415] ____sys_sendmsg+0x505/0x830 [ 478.227618][T15415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.227647][T15415] ? import_iovec+0x74/0xa0 [ 478.227673][T15415] ___sys_sendmsg+0x21f/0x2a0 [ 478.227695][T15415] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.227754][T15415] ? __fget_files+0x2a/0x420 [ 478.227773][T15415] ? __fget_files+0x3a0/0x420 [ 478.227804][T15415] __x64_sys_sendmsg+0x19b/0x260 [ 478.227826][T15415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.227856][T15415] ? __pfx_ksys_write+0x10/0x10 [ 478.227879][T15415] ? do_syscall_64+0xbe/0xfa0 [ 478.227903][T15415] do_syscall_64+0xfa/0xfa0 [ 478.227920][T15415] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.227940][T15415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.227959][T15415] ? clear_bhb_loop+0x60/0xb0 [ 478.227981][T15415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.227999][T15415] RIP: 0033:0x7f6045d8eec9 [ 478.228019][T15415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.228034][T15415] RSP: 002b:00007f6043ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.228056][T15415] RAX: ffffffffffffffda RBX: 00007f6045fe5fa0 RCX: 00007f6045d8eec9 [ 478.228069][T15415] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 478.228081][T15415] RBP: 00007f6043ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 478.228092][T15415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.228103][T15415] R13: 00007f6045fe6038 R14: 00007f6045fe5fa0 R15: 00007fffb46a91b8 [ 478.228137][T15415] [ 478.630797][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.669191][T15417] netlink: 'syz.4.2238': attribute type 25 has an invalid length. [ 478.811395][T15422] ADFS-fs (loop0): error: unable to read block 3, try 0 [ 478.851911][ T5907] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO [ 478.864685][ T5907] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 478.877768][ T5907] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 478.890022][ T5907] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 478.899955][ T5907] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 478.911125][ T5907] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 478.931116][ T5907] usb 3-1: USB disconnect, device number 59 [ 479.132704][T15436] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2244'. [ 479.287150][T15446] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2248'. [ 479.296475][T15446] FAULT_INJECTION: forcing a failure. [ 479.296475][T15446] name failslab, interval 1, probability 0, space 0, times 0 [ 479.309763][T15446] CPU: 0 UID: 0 PID: 15446 Comm: syz.1.2248 Not tainted syzkaller #0 PREEMPT(full) [ 479.309786][T15446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 479.309797][T15446] Call Trace: [ 479.309806][T15446] [ 479.309813][T15446] dump_stack_lvl+0x189/0x250 [ 479.309839][T15446] ? __pfx____ratelimit+0x10/0x10 [ 479.309856][T15446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.309872][T15446] ? __pfx__printk+0x10/0x10 [ 479.309890][T15446] ? __pfx___might_resched+0x10/0x10 [ 479.309917][T15446] should_fail_ex+0x414/0x560 [ 479.309947][T15446] should_failslab+0xa8/0x100 [ 479.309968][T15446] __kmalloc_cache_noprof+0x6f/0x6f0 [ 479.309986][T15446] ? nft_delrule+0x57/0xba0 [ 479.310005][T15446] ? __lock_acquire+0xab9/0xd20 [ 479.310027][T15446] nft_delrule+0x57/0xba0 [ 479.310051][T15446] ? nft_pernet+0x23/0x240 [ 479.310079][T15446] nft_flush_table+0x291/0xea0 [ 479.310107][T15446] nf_tables_deltable+0x5cc/0xe10 [ 479.310132][T15446] ? __pfx_nf_tables_deltable+0x10/0x10 [ 479.310150][T15446] ? nfnl_pernet+0x23/0x240 [ 479.310184][T15446] ? __nla_parse+0x40/0x60 [ 479.310204][T15446] nfnetlink_rcv+0x11d9/0x2590 [ 479.310260][T15446] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 479.310294][T15446] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 479.310315][T15446] ? ref_tracker_free+0x63a/0x7d0 [ 479.310341][T15446] ? netlink_unicast+0x7fa/0x9e0 [ 479.310361][T15446] ? netlink_sendmsg+0x805/0xb30 [ 479.310405][T15446] ? __netlink_deliver_tap+0x866/0x8b0 [ 479.310429][T15446] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.310469][T15446] netlink_unicast+0x82f/0x9e0 [ 479.310499][T15446] ? __pfx_netlink_unicast+0x10/0x10 [ 479.310522][T15446] ? netlink_sendmsg+0x642/0xb30 [ 479.310537][T15446] ? skb_put+0x11b/0x210 [ 479.310558][T15446] netlink_sendmsg+0x805/0xb30 [ 479.310584][T15446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.310604][T15446] ? irqentry_exit+0x74/0x90 [ 479.310620][T15446] ? aa_sock_msg_perm+0xf1/0x1d0 [ 479.310639][T15446] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 479.310660][T15446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.310676][T15446] __sock_sendmsg+0x21c/0x270 [ 479.310708][T15446] ____sys_sendmsg+0x505/0x830 [ 479.310733][T15446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.310765][T15446] ? import_iovec+0x74/0xa0 [ 479.310790][T15446] ___sys_sendmsg+0x21f/0x2a0 [ 479.310811][T15446] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.310866][T15446] ? __fget_files+0x2a/0x420 [ 479.310886][T15446] ? __fget_files+0x3a0/0x420 [ 479.310916][T15446] __x64_sys_sendmsg+0x19b/0x260 [ 479.310937][T15446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.310964][T15446] ? __pfx_ksys_write+0x10/0x10 [ 479.310986][T15446] ? do_syscall_64+0xbe/0xfa0 [ 479.311008][T15446] do_syscall_64+0xfa/0xfa0 [ 479.311024][T15446] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.311041][T15446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.311063][T15446] ? clear_bhb_loop+0x60/0xb0 [ 479.311084][T15446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.311101][T15446] RIP: 0033:0x7f6beff8eec9 [ 479.311117][T15446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.311132][T15446] RSP: 002b:00007f6bf0ee3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.311151][T15446] RAX: ffffffffffffffda RBX: 00007f6bf01e5fa0 RCX: 00007f6beff8eec9 [ 479.311164][T15446] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 479.311175][T15446] RBP: 00007f6bf0ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 479.311184][T15446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 479.311194][T15446] R13: 00007f6bf01e6038 R14: 00007f6bf01e5fa0 R15: 00007fffe772f738 [ 479.311221][T15446] [ 479.675390][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.744626][ T5907] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 479.906820][ T5907] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.919575][ T5907] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 479.929956][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.938507][ T5907] usb 1-1: Product: syz [ 479.942778][ T5907] usb 1-1: Manufacturer: syz [ 479.947959][ T5907] usb 1-1: SerialNumber: syz [ 479.956380][ T5907] usb 1-1: config 0 descriptor?? [ 479.963616][ T5907] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 479.970279][ T5907] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 480.025489][ T5832] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 480.134092][ T5890] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 480.164358][ T5907] usb 1-1: USB disconnect, device number 26 [ 480.184046][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 480.192914][ T5832] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 480.203028][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.211439][ T5832] usb 3-1: Product: syz [ 480.217065][ T5832] usb 3-1: Manufacturer: syz [ 480.221644][ T5832] usb 3-1: SerialNumber: syz [ 480.229136][ T5832] usb 3-1: config 0 descriptor?? [ 480.243101][ T5832] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 480.289570][ T5890] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 480.308791][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.319193][ T5890] usb 2-1: Product: syz [ 480.323920][ T5890] usb 2-1: Manufacturer: syz [ 480.328806][ T5890] usb 2-1: SerialNumber: syz [ 480.365329][ T5890] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 480.383076][ T5907] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 480.734394][ T5869] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 480.795261][ T43] usb 2-1: USB disconnect, device number 47 [ 480.888148][ T5832] gspca_topro: reg_w err -71 [ 480.896727][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 480.911341][ T5869] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 480.919859][ T5832] gspca_topro: Sensor soi763a [ 480.926399][ T5869] usb 5-1: config 0 has no interface number 0 [ 480.938712][ T5869] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 480.952742][ T5832] usb 3-1: USB disconnect, device number 60 [ 480.967042][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.992979][ T5869] usb 5-1: Product: syz [ 480.998039][ T5869] usb 5-1: Manufacturer: syz [ 481.002646][ T5869] usb 5-1: SerialNumber: syz [ 481.007957][ T5876] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 481.024819][ T5869] usb 5-1: config 0 descriptor?? [ 481.043084][ T5869] smsc95xx v2.0.0 [ 481.167370][ T5876] usb 1-1: config 1 has an invalid descriptor of length 197, skipping remainder of the config [ 481.178225][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 31 [ 481.189750][ T5876] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 481.206571][ T5876] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.216178][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 481.224651][ T5876] usb 1-1: SerialNumber: syz [ 481.252992][ T5876] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 481.431204][T15491] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2256'. [ 481.487811][ T5907] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 481.504753][ T5907] ath9k_htc: Failed to initialize the device [ 481.515231][ T43] usb 2-1: ath9k_htc: USB layer deinitialized [ 481.630517][T15501] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2258'. [ 481.640012][T15501] FAULT_INJECTION: forcing a failure. [ 481.640012][T15501] name failslab, interval 1, probability 0, space 0, times 0 [ 481.653534][T15501] CPU: 0 UID: 0 PID: 15501 Comm: syz.1.2258 Not tainted syzkaller #0 PREEMPT(full) [ 481.653556][T15501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 481.653567][T15501] Call Trace: [ 481.653575][T15501] [ 481.653582][T15501] dump_stack_lvl+0x189/0x250 [ 481.653603][T15501] ? __pfx____ratelimit+0x10/0x10 [ 481.653620][T15501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.653638][T15501] ? __pfx__printk+0x10/0x10 [ 481.653656][T15501] ? __pfx___might_resched+0x10/0x10 [ 481.653678][T15501] ? fs_reclaim_acquire+0x7d/0x100 [ 481.653703][T15501] should_fail_ex+0x414/0x560 [ 481.653733][T15501] should_failslab+0xa8/0x100 [ 481.653754][T15501] __kmalloc_cache_noprof+0x6f/0x6f0 [ 481.653772][T15501] ? nft_delchain+0x54/0x4b0 [ 481.653797][T15501] nft_delchain+0x54/0x4b0 [ 481.653823][T15501] nft_flush_table+0xa14/0xea0 [ 481.653852][T15501] nf_tables_deltable+0x5cc/0xe10 [ 481.653877][T15501] ? __pfx_nf_tables_deltable+0x10/0x10 [ 481.653895][T15501] ? nfnl_pernet+0x23/0x240 [ 481.653925][T15501] ? __nla_parse+0x40/0x60 [ 481.653944][T15501] nfnetlink_rcv+0x11d9/0x2590 [ 481.653997][T15501] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 481.654033][T15501] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 481.654053][T15501] ? ref_tracker_free+0x63a/0x7d0 [ 481.654077][T15501] ? netlink_unicast+0x7fa/0x9e0 [ 481.654097][T15501] ? netlink_sendmsg+0x805/0xb30 [ 481.654141][T15501] ? __netlink_deliver_tap+0x866/0x8b0 [ 481.654166][T15501] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.654206][T15501] netlink_unicast+0x82f/0x9e0 [ 481.654238][T15501] ? __pfx_netlink_unicast+0x10/0x10 [ 481.654262][T15501] ? netlink_sendmsg+0x642/0xb30 [ 481.654277][T15501] ? skb_put+0x11b/0x210 [ 481.654297][T15501] netlink_sendmsg+0x805/0xb30 [ 481.654322][T15501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.654342][T15501] ? aa_sock_msg_perm+0xf1/0x1d0 [ 481.654362][T15501] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.654381][T15501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.654399][T15501] __sock_sendmsg+0x21c/0x270 [ 481.654424][T15501] ____sys_sendmsg+0x505/0x830 [ 481.654449][T15501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.654476][T15501] ? import_iovec+0x74/0xa0 [ 481.654508][T15501] ___sys_sendmsg+0x21f/0x2a0 [ 481.654528][T15501] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.654583][T15501] ? __fget_files+0x2a/0x420 [ 481.654602][T15501] ? __fget_files+0x3a0/0x420 [ 481.654632][T15501] __x64_sys_sendmsg+0x19b/0x260 [ 481.654655][T15501] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.654683][T15501] ? __pfx_ksys_write+0x10/0x10 [ 481.654705][T15501] ? do_syscall_64+0xbe/0xfa0 [ 481.654728][T15501] do_syscall_64+0xfa/0xfa0 [ 481.654745][T15501] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.654763][T15501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.654779][T15501] ? clear_bhb_loop+0x60/0xb0 [ 481.654799][T15501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.654815][T15501] RIP: 0033:0x7f6beff8eec9 [ 481.654831][T15501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.654845][T15501] RSP: 002b:00007f6bf0ee3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.654864][T15501] RAX: ffffffffffffffda RBX: 00007f6bf01e5fa0 RCX: 00007f6beff8eec9 [ 481.654877][T15501] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 481.654887][T15501] RBP: 00007f6bf0ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 481.654899][T15501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 481.654909][T15501] R13: 00007f6bf01e6038 R14: 00007f6bf01e5fa0 R15: 00007fffe772f738 [ 481.654939][T15501] [ 482.005920][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.017883][ T5876] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 482.033680][T15503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.042670][T15503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.163894][ T5876] usb 3-1: device descriptor read/64, error -71 [ 482.227735][T15507] fuseblk: Bad value for 'blksize' [ 482.264170][ T5869] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 482.280146][ T5869] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 482.403795][ T5876] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 482.543944][ T5876] usb 3-1: device descriptor read/64, error -71 [ 482.623853][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 482.654069][ T5876] usb usb3-port1: attempt power cycle [ 482.775359][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 482.785267][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 482.796519][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 482.806402][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 482.816644][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 482.827221][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.837941][ T10] usb 2-1: config 0 descriptor?? [ 482.993947][ T5876] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 483.014451][ T5876] usb 3-1: device descriptor read/8, error -71 [ 483.047161][ T10] hdpvr 2-1:0.0: unexpected answer of status request, len 0 [ 483.055085][ T10] hdpvr 2-1:0.0: device init failed [ 483.060370][ T10] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 483.253951][ T5876] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 483.257518][T15510] syzkaller1: entered promiscuous mode [ 483.267228][T15510] syzkaller1: entered allmulticast mode [ 483.274627][ T5876] usb 3-1: device descriptor read/8, error -71 [ 483.383962][ T5876] usb usb3-port1: unable to enumerate USB device [ 483.510824][ T5869] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 483.522155][ T5869] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 483.544094][ T5869] usb 5-1: USB disconnect, device number 48 [ 483.619021][T15522] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.2262'. [ 484.035001][ T5869] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 484.177750][ T5876] usb 1-1: USB disconnect, device number 27 [ 484.188156][ T5869] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.211975][ T5869] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.222741][ T5869] usb 5-1: config 0 interface 0 has no altsetting 0 [ 484.230262][ T5869] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 484.245277][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.257193][ T5869] usb 5-1: config 0 descriptor?? [ 484.533764][ T5876] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 484.668212][ T5869] usbhid 5-1:0.0: can't add hid device: -71 [ 484.675362][ T5869] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 484.683632][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 484.691422][ T5869] usb 5-1: USB disconnect, device number 49 [ 484.699309][ T5876] usb 1-1: descriptor type invalid, skip [ 484.707174][ T5876] usb 1-1: descriptor type invalid, skip [ 484.712853][ T5876] usb 1-1: descriptor type invalid, skip [ 484.720295][ T5876] usb 1-1: descriptor type invalid, skip [ 484.727347][ T5876] usb 1-1: config 1 interface 0 altsetting 175 bulk endpoint 0x1 has invalid maxpacket 64 [ 484.737350][ T5876] usb 1-1: config 1 interface 0 has no altsetting 0 [ 484.746426][ T5876] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 484.755738][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.763846][ T5876] usb 1-1: Product: syz [ 484.768703][ T5876] usb 1-1: Manufacturer: syz [ 484.773311][ T5876] usb 1-1: SerialNumber: syz [ 484.780773][T15532] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 484.903858][ T5912] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 485.033689][ T5912] usb 3-1: device descriptor read/64, error -71 [ 485.196710][ T10] usb 1-1: USB disconnect, device number 28 [ 485.248873][T15539] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2267'. [ 485.258089][T15539] FAULT_INJECTION: forcing a failure. [ 485.258089][T15539] name failslab, interval 1, probability 0, space 0, times 0 [ 485.272619][T15539] CPU: 1 UID: 0 PID: 15539 Comm: syz.4.2267 Not tainted syzkaller #0 PREEMPT(full) [ 485.272642][T15539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 485.272653][T15539] Call Trace: [ 485.272661][T15539] [ 485.272669][T15539] dump_stack_lvl+0x189/0x250 [ 485.272692][T15539] ? __pfx____ratelimit+0x10/0x10 [ 485.272710][T15539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.272727][T15539] ? __pfx__printk+0x10/0x10 [ 485.272747][T15539] ? __pfx___might_resched+0x10/0x10 [ 485.272769][T15539] ? fs_reclaim_acquire+0x7d/0x100 [ 485.272793][T15539] should_fail_ex+0x414/0x560 [ 485.272823][T15539] should_failslab+0xa8/0x100 [ 485.272845][T15539] __kmalloc_cache_noprof+0x6f/0x6f0 [ 485.272864][T15539] ? nft_delflowtable+0x57/0x470 [ 485.272892][T15539] nft_delflowtable+0x57/0x470 [ 485.272920][T15539] nft_flush_table+0x64a/0xea0 [ 485.272948][T15539] nf_tables_deltable+0x5cc/0xe10 [ 485.272974][T15539] ? __pfx_nf_tables_deltable+0x10/0x10 [ 485.272992][T15539] ? nfnl_pernet+0x23/0x240 [ 485.273024][T15539] ? __nla_parse+0x40/0x60 [ 485.273046][T15539] nfnetlink_rcv+0x11d9/0x2590 [ 485.273103][T15539] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 485.273137][T15539] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 485.273158][T15539] ? ref_tracker_free+0x63a/0x7d0 [ 485.273182][T15539] ? netlink_unicast+0x7fa/0x9e0 [ 485.273203][T15539] ? netlink_sendmsg+0x805/0xb30 [ 485.273246][T15539] ? __netlink_deliver_tap+0x866/0x8b0 [ 485.273271][T15539] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.273313][T15539] netlink_unicast+0x82f/0x9e0 [ 485.273345][T15539] ? __pfx_netlink_unicast+0x10/0x10 [ 485.273370][T15539] ? netlink_sendmsg+0x642/0xb30 [ 485.273384][T15539] ? skb_put+0x11b/0x210 [ 485.273410][T15539] netlink_sendmsg+0x805/0xb30 [ 485.273437][T15539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.273458][T15539] ? aa_sock_msg_perm+0xf1/0x1d0 [ 485.273477][T15539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.273501][T15539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.273517][T15539] __sock_sendmsg+0x21c/0x270 [ 485.273541][T15539] ____sys_sendmsg+0x505/0x830 [ 485.273562][T15539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.273588][T15539] ? import_iovec+0x74/0xa0 [ 485.273612][T15539] ___sys_sendmsg+0x21f/0x2a0 [ 485.273633][T15539] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.273688][T15539] ? __fget_files+0x2a/0x420 [ 485.273707][T15539] ? __fget_files+0x3a0/0x420 [ 485.273736][T15539] __x64_sys_sendmsg+0x19b/0x260 [ 485.273758][T15539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.273786][T15539] ? __pfx_ksys_write+0x10/0x10 [ 485.273808][T15539] ? do_syscall_64+0xbe/0xfa0 [ 485.273831][T15539] do_syscall_64+0xfa/0xfa0 [ 485.273847][T15539] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.273871][T15539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.273888][T15539] ? clear_bhb_loop+0x60/0xb0 [ 485.273910][T15539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.273927][T15539] RIP: 0033:0x7f50da18eec9 [ 485.273943][T15539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.273957][T15539] RSP: 002b:00007f50daf7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.273976][T15539] RAX: ffffffffffffffda RBX: 00007f50da3e5fa0 RCX: 00007f50da18eec9 [ 485.273990][T15539] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 485.274001][T15539] RBP: 00007f50daf7f090 R08: 0000000000000000 R09: 0000000000000000 [ 485.274012][T15539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.274022][T15539] R13: 00007f50da3e6038 R14: 00007f50da3e5fa0 R15: 00007fff032dfc18 [ 485.274054][T15539] [ 485.283694][ T5912] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 485.716057][ T5869] usb 2-1: USB disconnect, device number 48 [ 485.773984][ T5912] usb 3-1: device descriptor read/64, error -71 [ 485.883828][T15543] fuseblk: Bad value for 'blksize' [ 485.887530][ T5912] usb usb3-port1: attempt power cycle [ 485.900762][T15551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2271'. [ 485.954186][T15553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2271'. [ 486.042500][T15558] loop2: detected capacity change from 0 to 7 [ 486.051517][T12938] Dev loop2: unable to read RDB block 7 [ 486.057551][T12938] loop2: AHDI p1 p2 p3 p4 [ 486.061999][T12938] loop2: partition table partially beyond EOD, truncated [ 486.070093][T12938] loop2: p1 start 1601398130 is beyond EOD, truncated [ 486.078968][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 486.089064][T12938] loop2: p2 start 1702059890 is beyond EOD, truncated [ 486.096562][T12938] loop2: p3 size 150995200 extends beyond EOD, truncated [ 486.134283][T15558] Dev loop2: unable to read RDB block 7 [ 486.141770][T15558] loop2: AHDI p1 p2 p3 p4 [ 486.164874][T15558] loop2: partition table partially beyond EOD, truncated [ 486.172710][T15558] loop2: p1 start 1601398130 is beyond EOD, truncated [ 486.181258][T15558] loop2: p2 start 1702059890 is beyond EOD, truncated [ 486.188730][T15558] loop2: p3 size 150995200 extends beyond EOD, truncated [ 486.263548][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 486.284191][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 486.295492][T12938] udevd[12938]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 486.326752][ T24] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 486.366443][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.395487][T12938] udevd[12938]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 486.411759][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 486.432881][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.459437][ T24] usb 1-1: Product: ჱ [ 486.467279][ T24] usb 1-1: Manufacturer: ﳿ [ 486.471958][ T24] usb 1-1: SerialNumber: ⠁ [ 486.505732][ T5912] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 486.654302][ T5912] usb 3-1: device descriptor read/8, error -71 [ 486.700773][T15545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.727630][T15545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.758278][ T24] usb 1-1: 0:2 : does not exist [ 486.790473][ T24] usb 1-1: USB disconnect, device number 29 [ 486.838633][T12938] udevd[12938]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.984377][ T5912] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 487.030556][ T5912] usb 3-1: device descriptor read/8, error -71 [ 487.154216][ T5912] usb usb3-port1: unable to enumerate USB device [ 487.324245][T15570] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2277'. [ 487.460452][T15573] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2278'. [ 487.474228][T15573] FAULT_INJECTION: forcing a failure. [ 487.474228][T15573] name failslab, interval 1, probability 0, space 0, times 0 [ 487.489648][T15573] CPU: 1 UID: 0 PID: 15573 Comm: syz.4.2278 Not tainted syzkaller #0 PREEMPT(full) [ 487.489671][T15573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 487.489682][T15573] Call Trace: [ 487.489690][T15573] [ 487.489698][T15573] dump_stack_lvl+0x189/0x250 [ 487.489722][T15573] ? __pfx____ratelimit+0x10/0x10 [ 487.489741][T15573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.489759][T15573] ? __pfx__printk+0x10/0x10 [ 487.489779][T15573] ? __pfx___might_resched+0x10/0x10 [ 487.489801][T15573] ? fs_reclaim_acquire+0x7d/0x100 [ 487.489826][T15573] should_fail_ex+0x414/0x560 [ 487.489855][T15573] should_failslab+0xa8/0x100 [ 487.489876][T15573] __kmalloc_cache_noprof+0x6f/0x6f0 [ 487.489895][T15573] ? nft_delchain+0x54/0x4b0 [ 487.489917][T15573] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 487.489943][T15573] nft_delchain+0x54/0x4b0 [ 487.489970][T15573] nft_flush_table+0xa14/0xea0 [ 487.489999][T15573] nf_tables_deltable+0x5cc/0xe10 [ 487.490025][T15573] ? __pfx_nf_tables_deltable+0x10/0x10 [ 487.490043][T15573] ? nfnl_pernet+0x23/0x240 [ 487.490077][T15573] ? __nla_parse+0x40/0x60 [ 487.490098][T15573] nfnetlink_rcv+0x11d9/0x2590 [ 487.490161][T15573] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 487.490197][T15573] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 487.490217][T15573] ? ref_tracker_free+0x63a/0x7d0 [ 487.490240][T15573] ? netlink_unicast+0x7fa/0x9e0 [ 487.490261][T15573] ? netlink_sendmsg+0x805/0xb30 [ 487.490305][T15573] ? __netlink_deliver_tap+0x866/0x8b0 [ 487.490330][T15573] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.490372][T15573] netlink_unicast+0x82f/0x9e0 [ 487.490404][T15573] ? __pfx_netlink_unicast+0x10/0x10 [ 487.490429][T15573] ? netlink_sendmsg+0x642/0xb30 [ 487.490444][T15573] ? skb_put+0x11b/0x210 [ 487.490464][T15573] netlink_sendmsg+0x805/0xb30 [ 487.490491][T15573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.490512][T15573] ? aa_sock_msg_perm+0xf1/0x1d0 [ 487.490531][T15573] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.490552][T15573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.490571][T15573] __sock_sendmsg+0x21c/0x270 [ 487.490596][T15573] ____sys_sendmsg+0x505/0x830 [ 487.490620][T15573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.490648][T15573] ? import_iovec+0x74/0xa0 [ 487.490672][T15573] ___sys_sendmsg+0x21f/0x2a0 [ 487.490693][T15573] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.490749][T15573] ? __fget_files+0x2a/0x420 [ 487.490767][T15573] ? __fget_files+0x3a0/0x420 [ 487.490797][T15573] __x64_sys_sendmsg+0x19b/0x260 [ 487.490819][T15573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.490864][T15573] ? __pfx_ksys_write+0x10/0x10 [ 487.490886][T15573] ? do_syscall_64+0xbe/0xfa0 [ 487.490907][T15573] do_syscall_64+0xfa/0xfa0 [ 487.490924][T15573] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.490942][T15573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.490959][T15573] ? clear_bhb_loop+0x60/0xb0 [ 487.490980][T15573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.490998][T15573] RIP: 0033:0x7f50da18eec9 [ 487.491014][T15573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.491028][T15573] RSP: 002b:00007f50daf7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.491047][T15573] RAX: ffffffffffffffda RBX: 00007f50da3e5fa0 RCX: 00007f50da18eec9 [ 487.491061][T15573] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 487.491072][T15573] RBP: 00007f50daf7f090 R08: 0000000000000000 R09: 0000000000000000 [ 487.491084][T15573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.491094][T15573] R13: 00007f50da3e6038 R14: 00007f50da3e5fa0 R15: 00007fff032dfc18 [ 487.491126][T15573] [ 487.909346][T15576] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2279'. [ 488.065590][T15584] netlink: 308 bytes leftover after parsing attributes in process `syz.0.2281'. [ 488.120875][T15588] loop2: detected capacity change from 0 to 7 [ 488.129562][T15588] Dev loop2: unable to read RDB block 7 [ 488.135223][T15588] loop2: AHDI p1 p2 p3 p4 [ 488.139757][T15588] loop2: partition table partially beyond EOD, truncated [ 488.148584][T15588] loop2: p1 start 1601398130 is beyond EOD, truncated [ 488.155531][T15588] loop2: p2 start 1702059890 is beyond EOD, truncated [ 488.162340][T15588] loop2: p3 size 150995200 extends beyond EOD, truncated [ 488.202235][T12938] udevd[12938]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 488.282124][T15594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2285'. [ 488.293107][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803109ec00: rx timeout, send abort [ 488.301391][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880573b4000: rx timeout, send abort [ 488.309820][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803109ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 488.325076][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880573b4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 488.473465][ T5912] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 488.507715][T15601] FAULT_INJECTION: forcing a failure. [ 488.507715][T15601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.521308][T15601] CPU: 0 UID: 0 PID: 15601 Comm: syz.0.2288 Not tainted syzkaller #0 PREEMPT(full) [ 488.521332][T15601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 488.521344][T15601] Call Trace: [ 488.521352][T15601] [ 488.521360][T15601] dump_stack_lvl+0x189/0x250 [ 488.521384][T15601] ? __pfx____ratelimit+0x10/0x10 [ 488.521403][T15601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.521420][T15601] ? __pfx__printk+0x10/0x10 [ 488.521438][T15601] ? __might_fault+0xb0/0x130 [ 488.521466][T15601] should_fail_ex+0x414/0x560 [ 488.521495][T15601] _copy_from_user+0x2d/0xb0 [ 488.521516][T15601] ___sys_sendmsg+0x158/0x2a0 [ 488.521538][T15601] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.521592][T15601] ? __fget_files+0x2a/0x420 [ 488.521610][T15601] ? __fget_files+0x3a0/0x420 [ 488.521640][T15601] __x64_sys_sendmsg+0x19b/0x260 [ 488.521661][T15601] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.521689][T15601] ? __pfx_ksys_write+0x10/0x10 [ 488.521711][T15601] ? do_syscall_64+0xbe/0xfa0 [ 488.521734][T15601] do_syscall_64+0xfa/0xfa0 [ 488.521750][T15601] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.521769][T15601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.521787][T15601] ? clear_bhb_loop+0x60/0xb0 [ 488.521815][T15601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.521832][T15601] RIP: 0033:0x7f6045d8eec9 [ 488.521847][T15601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.521861][T15601] RSP: 002b:00007f6043ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.521880][T15601] RAX: ffffffffffffffda RBX: 00007f6045fe5fa0 RCX: 00007f6045d8eec9 [ 488.521893][T15601] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 488.521905][T15601] RBP: 00007f6043ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 488.521916][T15601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.521927][T15601] R13: 00007f6045fe6038 R14: 00007f6045fe5fa0 R15: 00007fffb46a91b8 [ 488.521958][T15601] [ 488.843386][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 488.850878][ T5912] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 488.859564][ T5912] usb 5-1: config 0 has no interface number 0 [ 488.867249][ T5912] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 488.888810][ T5912] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 488.905880][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.914621][ T5912] usb 5-1: Product: syz [ 488.918798][ T5912] usb 5-1: Manufacturer: syz [ 488.923443][ T5912] usb 5-1: SerialNumber: syz [ 488.941560][ T5912] usb 5-1: config 0 descriptor?? [ 488.954840][ T5912] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 488.966368][ T5912] em28xx 5-1:0.132: Video interface 132 found: isoc [ 489.215275][T15590] kvm: pic: non byte write [ 489.270263][T15624] loop2: detected capacity change from 0 to 7 [ 489.280286][T15624] Dev loop2: unable to read RDB block 7 [ 489.289530][T15624] loop2: AHDI p1 p2 p3 p4 [ 489.302879][T15624] loop2: partition table partially beyond EOD, truncated [ 489.310529][ T5869] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 489.324059][T15624] loop2: p1 start 1601398130 is beyond EOD, truncated [ 489.331678][T15624] loop2: p2 start 1702059890 is beyond EOD, truncated [ 489.340746][T15624] loop2: p3 size 150995200 extends beyond EOD, truncated [ 489.417474][T12938] udevd[12938]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 489.484863][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 489.494486][ T5869] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 489.502741][ T5869] usb 3-1: config 1 has no interface number 0 [ 489.511250][ T5869] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 489.521568][ T5869] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 489.533544][ T5869] usb 3-1: config 1 interface 105 has no altsetting 0 [ 489.546133][ T5869] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 489.563298][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.571776][ T5869] usb 3-1: Product: syz [ 489.579416][ T5869] usb 3-1: Manufacturer: syz [ 489.584924][ T5869] usb 3-1: SerialNumber: syz [ 489.614860][T15618] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 489.622425][T15618] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 489.868023][ T5869] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 489.913625][ T5869] usb 3-1: USB disconnect, device number 69 [ 489.982879][T15650] FAULT_INJECTION: forcing a failure. [ 489.982879][T15650] name failslab, interval 1, probability 0, space 0, times 0 [ 490.014629][T15650] CPU: 0 UID: 0 PID: 15650 Comm: syz.0.2297 Not tainted syzkaller #0 PREEMPT(full) [ 490.014663][T15650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.014674][T15650] Call Trace: [ 490.014682][T15650] [ 490.014690][T15650] dump_stack_lvl+0x189/0x250 [ 490.014716][T15650] ? __pfx____ratelimit+0x10/0x10 [ 490.014735][T15650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.014752][T15650] ? __pfx__printk+0x10/0x10 [ 490.014774][T15650] ? __pfx___might_resched+0x10/0x10 [ 490.014795][T15650] ? fs_reclaim_acquire+0x7d/0x100 [ 490.014819][T15650] should_fail_ex+0x414/0x560 [ 490.014847][T15650] should_failslab+0xa8/0x100 [ 490.014869][T15650] kmem_cache_alloc_node_noprof+0x77/0x710 [ 490.014887][T15650] ? __alloc_skb+0x112/0x2d0 [ 490.014909][T15650] ? netlink_autobind+0xdb/0x300 [ 490.014932][T15650] __alloc_skb+0x112/0x2d0 [ 490.014959][T15650] netlink_sendmsg+0x5c6/0xb30 [ 490.014984][T15650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.015005][T15650] ? aa_sock_msg_perm+0xf1/0x1d0 [ 490.015026][T15650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.015046][T15650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.015064][T15650] __sock_sendmsg+0x21c/0x270 [ 490.015089][T15650] ____sys_sendmsg+0x505/0x830 [ 490.015113][T15650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.015140][T15650] ? import_iovec+0x74/0xa0 [ 490.015163][T15650] ___sys_sendmsg+0x21f/0x2a0 [ 490.015184][T15650] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.015237][T15650] ? __fget_files+0x2a/0x420 [ 490.015255][T15650] ? __fget_files+0x3a0/0x420 [ 490.015284][T15650] __x64_sys_sendmsg+0x19b/0x260 [ 490.015305][T15650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.015333][T15650] ? __pfx_ksys_write+0x10/0x10 [ 490.015355][T15650] ? do_syscall_64+0xbe/0xfa0 [ 490.015377][T15650] do_syscall_64+0xfa/0xfa0 [ 490.015394][T15650] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.015412][T15650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.015429][T15650] ? clear_bhb_loop+0x60/0xb0 [ 490.015449][T15650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.015466][T15650] RIP: 0033:0x7f6045d8eec9 [ 490.015482][T15650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.015496][T15650] RSP: 002b:00007f6043ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.015515][T15650] RAX: ffffffffffffffda RBX: 00007f6045fe5fa0 RCX: 00007f6045d8eec9 [ 490.015529][T15650] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 490.015540][T15650] RBP: 00007f6043ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 490.015551][T15650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.015562][T15650] R13: 00007f6045fe6038 R14: 00007f6045fe5fa0 R15: 00007fffb46a91b8 [ 490.015591][T15650] [ 490.406082][ T5912] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 490.479131][T15657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.480961][ T5912] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 490.496864][ T5912] em28xx 5-1:0.132: board has no eeprom [ 490.563336][ T5912] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 490.571195][ T5912] em28xx 5-1:0.132: analog set to isoc mode. [ 490.583644][ T5907] em28xx 5-1:0.132: Registering V4L2 extension [ 490.646581][ T5907] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 490.656373][ T5907] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 490.675106][ T5907] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 490.694858][ T5907] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 490.778455][ T5907] em28xx 5-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 490.792539][ T5907] em28xx 5-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 490.804794][ T5907] em28xx 5-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 490.832832][ T5907] em28xx 5-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 490.921151][ T5907] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 490.932894][ T5907] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 490.956262][ T5907] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 490.968213][ T5907] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 490.982382][ T5907] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 490.997816][ T5907] em28xx 5-1:0.132: Config register raw data: 0xfffffffb [ 491.006963][ T5907] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 491.016616][ T5907] em28xx 5-1:0.132: No AC97 audio processor [ 491.045414][ T5907] usb 5-1: Decoder not found [ 491.057655][ T5907] em28xx 5-1:0.132: failed to create media graph [ 491.074265][ T5907] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 491.141654][ T5912] usb 5-1: USB disconnect, device number 50 [ 491.155746][ T5907] em28xx 5-1:0.132: Remote control support is not available for this card. [ 491.173912][ T5912] em28xx 5-1:0.132: Disconnecting em28xx [ 491.209771][ T5912] em28xx 5-1:0.132: Closing input extension [ 491.227122][ T5912] em28xx 5-1:0.132: Freeing device [ 491.230144][ T5876] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 491.305948][ T5869] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 491.424753][ T5876] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 491.447557][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.456765][ T5876] usb 1-1: Product: syz [ 491.460973][ T5876] usb 1-1: Manufacturer: syz [ 491.466633][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 491.472642][ T5876] usb 1-1: SerialNumber: syz [ 491.479120][ T5869] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.483559][ T5907] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 491.495012][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 491.514877][ T5876] usb 1-1: config 0 descriptor?? [ 491.520188][ T5869] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 491.560535][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.595341][T13453] Bluetooth: hci5: urb ffff88802fdbea00 submission failed (2) [ 491.610610][ T5869] usb 2-1: config 0 descriptor?? [ 491.677015][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.695190][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.706719][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 491.754654][ T5876] usb 1-1: USB disconnect, device number 30 [ 491.781284][ T5907] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 491.804926][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.834337][ T5907] usb 3-1: config 0 descriptor?? [ 491.877816][T15702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.887350][T15702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.028919][ T5869] uclogic 0003:28BD:0078.0036: interface is invalid, ignoring [ 492.083731][ T5907] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 492.114415][ T43] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 492.249425][ T5869] usb 2-1: USB disconnect, device number 49 [ 492.273201][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 492.285837][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.308348][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.327580][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 492.337189][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.356433][ T43] usb 5-1: config 0 descriptor?? [ 492.652370][T15730] block nbd0: Unsupported socket: should be TCP or UNIX. [ 492.664344][T15730] block nbd0: Unsupported socket: should be TCP or UNIX. [ 493.023230][ T5869] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 493.036519][T15742] fuseblk: Bad value for 'blksize' [ 493.140301][T15748] overlayfs: missing 'workdir' [ 493.165980][ T5869] usb 1-1: device descriptor read/64, error -71 [ 493.423172][ T5869] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 493.553228][ T5869] usb 1-1: device descriptor read/64, error -71 [ 493.665237][ T5869] usb usb1-port1: attempt power cycle [ 493.690752][T15756] netlink: 'syz.1.2317': attribute type 1 has an invalid length. [ 493.698671][T15756] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2317'. [ 494.272545][ T5912] usb 3-1: USB disconnect, device number 70 [ 494.783161][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 494.789176][ T5869] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 494.803085][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 494.804725][ T5912] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 494.823774][ T43] usb 5-1: USB disconnect, device number 51 [ 494.850766][ T5869] usb 1-1: device descriptor read/8, error -71 [ 495.016987][ T5912] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 495.031633][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.042539][T15782] vxfs: unable to read disk superblock at 1 [ 495.049708][ T5912] usb 3-1: Product: syz [ 495.054068][ T5912] usb 3-1: Manufacturer: syz [ 495.058664][ T5912] usb 3-1: SerialNumber: syz [ 495.064241][T15782] vxfs: unable to read disk superblock at 8 [ 495.070147][T15782] vxfs: can't find superblock. [ 495.114459][ T5869] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 495.153906][ T5869] usb 1-1: device descriptor read/8, error -71 [ 495.272285][ T5869] usb usb1-port1: unable to enumerate USB device [ 495.361540][T15790] pim6reg: entered allmulticast mode [ 495.796955][T15808] netlink: 'syz.1.2328': attribute type 1 has an invalid length. [ 495.805352][T15808] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2328'. [ 495.945770][T15805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2327'. [ 495.975549][T15805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2327'. [ 496.021426][T15815] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2330'. [ 497.174403][T15833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2334'. [ 497.238654][T15840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.248161][T15840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.442889][ T5907] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 497.483034][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 497.602836][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 497.609487][ T5907] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 497.617948][ T5907] usb 2-1: config 0 has no interface number 0 [ 497.624247][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 497.640895][ T5907] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.652387][ T5907] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.662343][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 497.675259][ T5907] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 497.685706][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.694099][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 497.706362][ T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 497.716565][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.725736][ T5907] usb 2-1: config 0 descriptor?? [ 497.730937][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 497.743864][ T10] usb 1-1: config 0 descriptor?? [ 497.751117][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 497.784836][ T5912] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 497.801557][ T5912] usb 3-1: USB disconnect, device number 71 [ 497.950109][ T10] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 498.206550][ T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 498.206897][T15853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.220818][T15853] IPv6: NLM_F_CREATE should be set when creating new route [ 498.222162][ T10] [drm] Initialized udl on minor 2 [ 498.228084][T15853] IPv6: NLM_F_CREATE should be set when creating new route [ 498.228118][T15853] IPv6: NLM_F_CREATE should be set when creating new route [ 498.371091][ T5907] input: HID 28bd:0094 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.0038/input/input39 [ 498.392823][ T5869] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 498.392984][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 498.421128][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 498.458134][ T5907] uclogic 0003:28BD:0094.0038: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 498.554768][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.556494][T15840] tmpfs: Unknown parameter 'usrquota0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.556494][T15840] 0 [ 498.587135][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.767307][T15841] tmpfs: Unknown parameter 'usrquota0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 498.767307][T15841] 0 [ 499.007299][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 499.022197][ T5869] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 499.025998][ T10] usb 2-1: USB disconnect, device number 50 [ 499.031314][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.064201][ T5869] usb 5-1: config 0 descriptor?? [ 499.112622][ T5890] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 499.130510][ T5907] usb 1-1: USB disconnect, device number 35 [ 499.157660][ T5890] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 499.255648][T15866] netlink: 'syz.0.2341': attribute type 1 has an invalid length. [ 499.263651][T15866] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2341'. [ 499.316908][T15851] syzkaller1: entered promiscuous mode [ 499.322496][T15851] syzkaller1: entered allmulticast mode [ 499.991045][T15887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2338'. [ 500.522668][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 500.571796][T15900] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2347'. [ 500.632865][ T5869] usbhid 5-1:0.0: can't add hid device: -71 [ 500.645992][ T5869] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 500.676957][ T5869] usb 5-1: USB disconnect, device number 52 [ 500.700327][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.730057][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.762077][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 500.775336][ T10] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 500.783778][ T10] usb 2-1: Manufacturer: syz [ 500.795606][ T10] usb 2-1: config 0 descriptor?? [ 501.221686][ T10] uclogic 0003:256C:006D.0039: interface is invalid, ignoring [ 501.246304][ T10] usb 2-1: USB disconnect, device number 51 [ 501.363226][ T5912] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 501.488877][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.520702][ T5912] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 501.541921][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.560967][T15934] FAULT_INJECTION: forcing a failure. [ 501.560967][T15934] name failslab, interval 1, probability 0, space 0, times 0 [ 501.575757][ T5912] usb 1-1: Product: syz [ 501.579973][ T5912] usb 1-1: Manufacturer: syz [ 501.601811][ T5912] usb 1-1: SerialNumber: syz [ 501.610451][T15934] CPU: 0 UID: 0 PID: 15934 Comm: syz.2.2350 Not tainted syzkaller #0 PREEMPT(full) [ 501.610476][T15934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 501.610488][T15934] Call Trace: [ 501.610496][T15934] [ 501.610512][T15934] dump_stack_lvl+0x189/0x250 [ 501.610535][T15934] ? __pfx____ratelimit+0x10/0x10 [ 501.610554][T15934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.610572][T15934] ? __pfx__printk+0x10/0x10 [ 501.610594][T15934] ? __pfx___might_resched+0x10/0x10 [ 501.610616][T15934] ? fs_reclaim_acquire+0x7d/0x100 [ 501.610640][T15934] should_fail_ex+0x414/0x560 [ 501.610669][T15934] should_failslab+0xa8/0x100 [ 501.610691][T15934] kmem_cache_alloc_node_noprof+0x77/0x710 [ 501.610709][T15934] ? __alloc_skb+0x112/0x2d0 [ 501.610732][T15934] ? netlink_autobind+0xdb/0x300 [ 501.610753][T15934] __alloc_skb+0x112/0x2d0 [ 501.610781][T15934] netlink_sendmsg+0x5c6/0xb30 [ 501.610807][T15934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.610828][T15934] ? aa_sock_msg_perm+0xf1/0x1d0 [ 501.610852][T15934] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.610873][T15934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.610891][T15934] __sock_sendmsg+0x21c/0x270 [ 501.610917][T15934] ____sys_sendmsg+0x505/0x830 [ 501.610940][T15934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.610968][T15934] ? import_iovec+0x74/0xa0 [ 501.610991][T15934] ___sys_sendmsg+0x21f/0x2a0 [ 501.611012][T15934] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.611065][T15934] ? __fget_files+0x2a/0x420 [ 501.611084][T15934] ? __fget_files+0x3a0/0x420 [ 501.611113][T15934] __x64_sys_sendmsg+0x19b/0x260 [ 501.611134][T15934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.611162][T15934] ? __pfx_ksys_write+0x10/0x10 [ 501.611182][T15934] ? do_syscall_64+0xbe/0xfa0 [ 501.611203][T15934] do_syscall_64+0xfa/0xfa0 [ 501.611220][T15934] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.611238][T15934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.611255][T15934] ? clear_bhb_loop+0x60/0xb0 [ 501.611276][T15934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.611292][T15934] RIP: 0033:0x7fa04cb8eec9 [ 501.611309][T15934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.611323][T15934] RSP: 002b:00007fa04daac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.611342][T15934] RAX: ffffffffffffffda RBX: 00007fa04cde5fa0 RCX: 00007fa04cb8eec9 [ 501.611355][T15934] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 501.611366][T15934] RBP: 00007fa04daac090 R08: 0000000000000000 R09: 0000000000000000 [ 501.611377][T15934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.611388][T15934] R13: 00007fa04cde6038 R14: 00007fa04cde5fa0 R15: 00007ffff2467388 [ 501.611417][T15934] [ 502.413280][ T5876] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 502.473022][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 502.568190][ T5876] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 502.582911][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.596058][ T5876] usb 5-1: Product: syz [ 502.600238][ T5876] usb 5-1: Manufacturer: syz [ 502.605550][ T5876] usb 5-1: SerialNumber: syz [ 502.638176][ T10] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 502.646867][ T10] usb 3-1: config 0 has no interface number 0 [ 502.662591][ T10] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 502.671862][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.680417][ T10] usb 3-1: Product: syz [ 502.686442][ T10] usb 3-1: Manufacturer: syz [ 502.691314][ T10] usb 3-1: SerialNumber: syz [ 502.699325][ T10] usb 3-1: config 0 descriptor?? [ 502.715540][ T10] hub 3-1:0.217: bad descriptor, ignoring hub [ 502.721985][ T10] hub 3-1:0.217: probe with driver hub failed with error -5 [ 502.854986][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.866009][T15971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.877522][T15971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.885185][T15971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.938893][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 502.947942][T15971] bond0: (slave batadv0): Releasing backup interface [ 502.951340][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 502.965038][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 502.973689][ T10] usb 3-1: media controller created [ 503.001579][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 503.096997][ T10] DVB: Unable to find symbol dib7000p_attach() [ 503.105815][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 503.163419][T15952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.172357][T15952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.222480][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 503.228669][ T10] Registered IR keymap rc-empty [ 503.250395][ T10] dvb-usb: could not initialize remote control. [ 503.260083][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 503.262987][T15979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.398729][ T5869] usb 3-1: USB disconnect, device number 72 [ 503.474135][ T5869] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 503.831862][ T5876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 503.864238][ T5876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 503.876034][ T5876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 503.887477][ T5876] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 504.214156][T16006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.241914][T16006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.250318][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 504.293080][T16008] openvswitch: netlink: Message has 1275 unknown bytes. [ 504.294444][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 504.317510][T16008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.342819][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 504.357940][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 504.368017][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 504.386440][ T5912] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 504.407981][ T5912] usb 1-1: USB disconnect, device number 36 [ 505.612695][ T5876] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 505.663636][ T5907] usb 5-1: USB disconnect, device number 53 [ 505.706328][T16065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2372'. [ 505.785562][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 505.805162][ T5876] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 505.832469][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.862043][ T5876] usb 3-1: config 0 has no interface number 0 [ 505.871868][T16072] fuse: Unknown parameter 'Bfd' [ 505.879218][ T5876] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 505.902523][ T5876] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.938769][ T5876] usb 3-1: config 0 interface 52 has no altsetting 0 [ 505.980269][ T5876] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 506.002332][ T5876] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 506.023528][ T5876] usb 3-1: Manufacturer: syz [ 506.031645][ T5876] usb 3-1: config 0 descriptor?? [ 506.232456][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 506.256641][ T5876] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input41 [ 506.276230][T16086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.276620][T16086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.279536][T16086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.279899][T16086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.292125][T16086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.302416][ T5876] usb 3-1: USB disconnect, device number 73 [ 506.304566][ C1] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 506.381293][T16086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.389956][T16087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.390436][T16086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.390803][T16086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.391211][T16087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.396250][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 506.396277][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.396297][ T10] usb 5-1: Product: syz [ 506.396312][ T10] usb 5-1: Manufacturer: syz [ 506.396327][ T10] usb 5-1: SerialNumber: syz [ 506.492628][ T5907] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 506.762667][T16105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2379'. [ 506.871136][T16105] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2379'. [ 507.005757][T16111] sg_write: data in/out 32710/64 bytes for SCSI command 0xbf-- guessing data in; [ 507.005757][T16111] program syz.1.2382 not setting count and/or reply_len properly [ 507.051756][T16111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2382'. [ 507.341536][T16126] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 507.371465][T16129] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 507.443399][T16132] FAULT_INJECTION: forcing a failure. [ 507.443399][T16132] name failslab, interval 1, probability 0, space 0, times 0 [ 507.459851][T16132] CPU: 0 UID: 0 PID: 16132 Comm: syz.2.2386 Not tainted syzkaller #0 PREEMPT(full) [ 507.459877][T16132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.459887][T16132] Call Trace: [ 507.459895][T16132] [ 507.459903][T16132] dump_stack_lvl+0x189/0x250 [ 507.459927][T16132] ? irqentry_exit+0x74/0x90 [ 507.459948][T16132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.459976][T16132] ? dump_stack+0x9/0x20 [ 507.459996][T16132] should_fail_ex+0x414/0x560 [ 507.460025][T16132] should_failslab+0xa8/0x100 [ 507.460047][T16132] __kmalloc_noprof+0xcb/0x7f0 [ 507.460064][T16132] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 507.460168][T16132] ? rcu_is_watching+0x15/0xb0 [ 507.460194][T16132] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 507.460221][T16132] genl_family_rcv_msg_doit+0xb8/0x300 [ 507.460248][T16132] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 507.460274][T16132] ? apparmor_capable+0x137/0x1b0 [ 507.460298][T16132] ? bpf_lsm_capable+0x9/0x20 [ 507.460312][T16132] ? security_capable+0x7e/0x2e0 [ 507.460341][T16132] genl_rcv_msg+0x60e/0x790 [ 507.460366][T16132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 507.460384][T16132] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 507.460415][T16132] netlink_rcv_skb+0x208/0x470 [ 507.460435][T16132] ? __lock_acquire+0xab9/0xd20 [ 507.460455][T16132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 507.460474][T16132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 507.460516][T16132] ? down_read+0x1ad/0x2e0 [ 507.460539][T16132] genl_rcv+0x28/0x40 [ 507.460555][T16132] netlink_unicast+0x82f/0x9e0 [ 507.460587][T16132] ? __pfx_netlink_unicast+0x10/0x10 [ 507.460611][T16132] ? netlink_sendmsg+0x642/0xb30 [ 507.460624][T16132] ? skb_put+0x11b/0x210 [ 507.460643][T16132] netlink_sendmsg+0x805/0xb30 [ 507.460665][T16132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.460683][T16132] ? aa_sock_msg_perm+0xf1/0x1d0 [ 507.460701][T16132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 507.460719][T16132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.460735][T16132] __sock_sendmsg+0x21c/0x270 [ 507.460761][T16132] ____sys_sendmsg+0x505/0x830 [ 507.460784][T16132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.460812][T16132] ? import_iovec+0x74/0xa0 [ 507.460836][T16132] ___sys_sendmsg+0x21f/0x2a0 [ 507.460855][T16132] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.460904][T16132] ? __fget_files+0x2a/0x420 [ 507.460945][T16132] ? __fget_files+0x3a0/0x420 [ 507.460974][T16132] __x64_sys_sendmsg+0x19b/0x260 [ 507.460994][T16132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 507.461022][T16132] ? __pfx_ksys_write+0x10/0x10 [ 507.461042][T16132] ? do_syscall_64+0xbe/0xfa0 [ 507.461064][T16132] do_syscall_64+0xfa/0xfa0 [ 507.461079][T16132] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.461097][T16132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.461114][T16132] ? clear_bhb_loop+0x60/0xb0 [ 507.461134][T16132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.461150][T16132] RIP: 0033:0x7fa04cb8eec9 [ 507.461166][T16132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.461179][T16132] RSP: 002b:00007fa04daac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.461195][T16132] RAX: ffffffffffffffda RBX: 00007fa04cde5fa0 RCX: 00007fa04cb8eec9 [ 507.461206][T16132] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 507.461217][T16132] RBP: 00007fa04daac090 R08: 0000000000000000 R09: 0000000000000000 [ 507.461227][T16132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.461236][T16132] R13: 00007fa04cde6038 R14: 00007fa04cde5fa0 R15: 00007ffff2467388 [ 507.461263][T16132] [ 507.865683][T16126] block nbd1: shutting down sockets [ 507.927469][T16143] dvmrp1: entered allmulticast mode [ 508.243523][T16159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.270631][T16159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.662167][ T5876] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 508.805241][T16175] FAULT_INJECTION: forcing a failure. [ 508.805241][T16175] name failslab, interval 1, probability 0, space 0, times 0 [ 508.819224][T16175] CPU: 1 UID: 0 PID: 16175 Comm: syz.2.2396 Not tainted syzkaller #0 PREEMPT(full) [ 508.819252][T16175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 508.819263][T16175] Call Trace: [ 508.819272][T16175] [ 508.819280][T16175] dump_stack_lvl+0x189/0x250 [ 508.819306][T16175] ? __pfx____ratelimit+0x10/0x10 [ 508.819326][T16175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.819347][T16175] ? __pfx__printk+0x10/0x10 [ 508.819370][T16175] ? __pfx___might_resched+0x10/0x10 [ 508.819393][T16175] ? fs_reclaim_acquire+0x7d/0x100 [ 508.819419][T16175] should_fail_ex+0x414/0x560 [ 508.819449][T16175] should_failslab+0xa8/0x100 [ 508.819471][T16175] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 508.819489][T16175] ? hwsim_del_radio_nl+0x3c1/0x1000 [ 508.819516][T16175] kstrndup+0x80/0x160 [ 508.819540][T16175] hwsim_del_radio_nl+0x3c1/0x1000 [ 508.819558][T16175] ? rcu_is_watching+0x15/0xb0 [ 508.819585][T16175] ? __nla_parse+0x40/0x60 [ 508.819603][T16175] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 508.819623][T16175] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 508.819655][T16175] genl_family_rcv_msg_doit+0x215/0x300 [ 508.819683][T16175] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 508.819717][T16175] ? bpf_lsm_capable+0x9/0x20 [ 508.819732][T16175] ? security_capable+0x7e/0x2e0 [ 508.819765][T16175] genl_rcv_msg+0x60e/0x790 [ 508.819790][T16175] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.819811][T16175] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 508.819845][T16175] netlink_rcv_skb+0x208/0x470 [ 508.819868][T16175] ? __lock_acquire+0xab9/0xd20 [ 508.819888][T16175] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.819910][T16175] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.819960][T16175] ? down_read+0x1ad/0x2e0 [ 508.819985][T16175] genl_rcv+0x28/0x40 [ 508.820003][T16175] netlink_unicast+0x82f/0x9e0 [ 508.820036][T16175] ? __pfx_netlink_unicast+0x10/0x10 [ 508.820061][T16175] ? netlink_sendmsg+0x642/0xb30 [ 508.820075][T16175] ? skb_put+0x11b/0x210 [ 508.820096][T16175] netlink_sendmsg+0x805/0xb30 [ 508.820123][T16175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.820144][T16175] ? aa_sock_msg_perm+0xf1/0x1d0 [ 508.820165][T16175] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 508.820185][T16175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.820203][T16175] __sock_sendmsg+0x21c/0x270 [ 508.820230][T16175] ____sys_sendmsg+0x505/0x830 [ 508.820256][T16175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.820285][T16175] ? import_iovec+0x74/0xa0 [ 508.820309][T16175] ___sys_sendmsg+0x21f/0x2a0 [ 508.820330][T16175] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.820382][T16175] ? __fget_files+0x2a/0x420 [ 508.820401][T16175] ? __fget_files+0x3a0/0x420 [ 508.820431][T16175] __x64_sys_sendmsg+0x19b/0x260 [ 508.820453][T16175] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 508.820481][T16175] ? __pfx_ksys_write+0x10/0x10 [ 508.820502][T16175] ? do_syscall_64+0xbe/0xfa0 [ 508.820526][T16175] do_syscall_64+0xfa/0xfa0 [ 508.820542][T16175] ? lockdep_hardirqs_on+0x9c/0x150 [ 508.820561][T16175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.820579][T16175] ? clear_bhb_loop+0x60/0xb0 [ 508.820601][T16175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.820618][T16175] RIP: 0033:0x7fa04cb8eec9 [ 508.820635][T16175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.820650][T16175] RSP: 002b:00007fa04daac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.820670][T16175] RAX: ffffffffffffffda RBX: 00007fa04cde5fa0 RCX: 00007fa04cb8eec9 [ 508.820683][T16175] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 508.820693][T16175] RBP: 00007fa04daac090 R08: 0000000000000000 R09: 0000000000000000 [ 508.820703][T16175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.820713][T16175] R13: 00007fa04cde6038 R14: 00007fa04cde5fa0 R15: 00007ffff2467388 [ 508.820745][T16175] [ 509.213098][ T5876] usb 1-1: config 1 has an invalid interface number: 188 but max is 0 [ 509.220047][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 509.221532][ T5876] usb 1-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 509.244823][ T5876] usb 1-1: config 1 has no interface number 0 [ 509.246577][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 509.251117][ T5876] usb 1-1: config 1 interface 188 altsetting 189 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.276579][ T5876] usb 1-1: config 1 interface 188 has no altsetting 0 [ 509.285801][ T5876] usb 1-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=be.5c [ 509.290657][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 509.295119][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.295143][ T5876] usb 1-1: Product: syz [ 509.319424][ T5876] usb 1-1: Manufacturer: syz [ 509.324102][ T5876] usb 1-1: SerialNumber: syz [ 509.376636][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 509.396311][T16177] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 509.404925][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 509.406207][T16177] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2398'. [ 509.454563][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 509.506980][ T10] usb 5-1: USB disconnect, device number 54 [ 509.677438][ T5876] rndis_host 1-1:1.188: skipping garbage [ 509.703640][ T5876] usb 1-1: bad CDC descriptors [ 509.733230][ T5876] cdc_acm 1-1:1.188: skipping garbage [ 509.786929][ T5876] usb 1-1: USB disconnect, device number 37 [ 509.941676][T16189] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.567654][T16203] loop6: detected capacity change from 0 to 524288000 [ 510.816714][T16206] loop6: detected capacity change from 524288000 to 1 [ 510.844790][T16203] Dev loop6: unable to read RDB block 9 [ 510.872125][T16203] loop6: unable to read partition table [ 510.899152][T16203] loop6: partition table beyond EOD, truncated [ 510.929341][T16203] loop_reread_partitions: partition scan of loop6 (u0v ) failed (rc=-5) [ 510.968066][ T5196] Dev loop6: unable to read RDB block 1 [ 510.989792][ T5196] loop6: unable to read partition table [ 510.998848][ T5196] loop6: partition table beyond EOD, truncated [ 511.029613][T16213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.041370][T16213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.132008][ T10] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 511.294662][ T10] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 511.303180][ T10] usb 5-1: config 0 has no interface number 0 [ 511.310012][ T10] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 511.321012][ T10] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 511.332033][ T5890] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 511.341159][ T10] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 511.350245][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.358326][ T5912] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 511.365937][ T10] usb 5-1: Product: syz [ 511.370127][ T10] usb 5-1: Manufacturer: syz [ 511.375310][ T10] usb 5-1: SerialNumber: syz [ 511.383145][ T10] usb 5-1: config 0 descriptor?? [ 511.392605][ T10] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 511.482046][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 511.492453][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.503033][ T5890] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 511.512359][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.523286][ T5890] usb 1-1: config 0 descriptor?? [ 511.532311][ T5890] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 511.543824][ T5912] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 511.553458][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.568200][ T5912] usb 3-1: Product: syz [ 511.573087][ T5912] usb 3-1: Manufacturer: syz [ 511.577837][ T5912] usb 3-1: SerialNumber: syz [ 511.605612][T16189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.616213][T16189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.639073][T16219] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 511.648048][ T10] usb 5-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 511.648286][T16219] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 511.661317][ T10] usb 5-1: USB disconnect, device number 55 [ 511.675476][ T10] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 511.685383][ T5907] usb 2-1: device descriptor read/64, error -110 [ 511.693702][ T10] cypress_m8 5-1:0.35: device disconnected [ 511.942938][ T5907] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 512.071977][ T5907] usb 2-1: device descriptor read/64, error -32 [ 512.192341][ T5907] usb usb2-port1: attempt power cycle [ 512.462171][ T5890] gspca_vc032x: reg_r err -110 [ 512.468152][ T5890] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 512.542010][ T5907] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 512.565142][ T5907] usb 2-1: device descriptor read/8, error -32 [ 512.624739][T16230] netlink: 'syz.1.2415': attribute type 1 has an invalid length. [ 512.633510][T16230] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2415'. [ 513.330009][ T5907] raw-gadget.2 gadget.1: failed to queue resume event [ 513.413484][ T5907] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 513.432535][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 513.441083][ T5907] usb 2-1: device descriptor read/8, error -32 [ 513.558599][ T5907] raw-gadget.2 gadget.1: failed to queue suspend event [ 513.567349][ T5907] usb usb2-port1: unable to enumerate USB device [ 513.815206][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.824355][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.033188][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 514.045652][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 514.059980][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 514.073852][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 514.084233][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 514.117006][ T5912] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 514.146118][ T5907] usb 1-1: USB disconnect, device number 38 [ 514.194801][ T5912] usb 3-1: USB disconnect, device number 74 [ 514.425545][T16252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.437435][T16252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.669128][T16260] netlink: 'syz.2.2425': attribute type 15 has an invalid length. [ 514.678363][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2425'. [ 514.922109][ T5876] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 515.090412][T16273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.099642][T16273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.101318][ T5876] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 515.141729][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.162834][ T5876] usb 3-1: config 0 descriptor?? [ 515.182017][ T5876] cp210x 3-1:0.0: cp210x converter detected [ 515.191801][ T5935] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 515.361748][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 515.383981][ T5935] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 515.401755][ T5935] usb 1-1: config 0 has no interface number 0 [ 515.408643][ T5935] usb 1-1: config 0 interface 12 has no altsetting 0 [ 515.428553][ T5935] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 515.448136][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.456235][ T5935] usb 1-1: Product: syz [ 515.460424][ T5935] usb 1-1: Manufacturer: syz [ 515.465238][ T5935] usb 1-1: SerialNumber: syz [ 515.476839][ T5935] usb 1-1: config 0 descriptor?? [ 515.574624][T16260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.592168][T16260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.642204][ T5876] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 515.649886][ T5876] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 515.683851][ T5876] usb 3-1: cp210x converter now attached to ttyUSB0 [ 515.707528][ T5876] usb 3-1: USB disconnect, device number 75 [ 515.745850][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 515.755405][ T5876] cp210x 3-1:0.0: device disconnected [ 515.861816][ T5912] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 516.022722][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 516.055114][ T5912] usb 5-1: config 0 has an invalid interface number: 4 but max is 2 [ 516.064048][ T5912] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 516.073890][ T5912] usb 5-1: config 0 has an invalid interface number: 39 but max is 2 [ 516.092155][ T5912] usb 5-1: config 0 has an invalid interface number: 250 but max is 2 [ 516.103306][ T5935] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 516.111839][ T5912] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 516.131769][ T5935] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 516.139092][ T5935] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 516.140301][ T5912] usb 5-1: config 0 has 4 interfaces, different from the descriptor's value: 3 [ 516.167013][ T5935] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 516.207486][ T5912] usb 5-1: config 0 has no interface number 0 [ 516.210021][T16303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.224668][ T5912] usb 5-1: config 0 has no interface number 2 [ 516.229149][ T5935] usb 1-1: USB disconnect, device number 39 [ 516.248188][ T5912] usb 5-1: config 0 has no interface number 3 [ 516.263331][ T5912] usb 5-1: config 0 interface 4 altsetting 249 bulk endpoint 0xA has invalid maxpacket 16 [ 516.275343][T16303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.302370][ T5912] usb 5-1: config 0 interface 4 altsetting 249 has an invalid descriptor for endpoint zero, skipping [ 516.327354][ T5912] usb 5-1: config 0 interface 4 altsetting 249 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 516.351336][ T5912] usb 5-1: too many endpoints for config 0 interface 39 altsetting 165: 163, using maximum allowed: 30 [ 516.390546][ T5912] usb 5-1: config 0 interface 39 altsetting 165 bulk endpoint 0xB has invalid maxpacket 32 [ 516.441757][ T5912] usb 5-1: config 0 interface 39 altsetting 165 has 1 endpoint descriptor, different from the interface descriptor's value: 163 [ 516.465338][ T5912] usb 5-1: config 0 interface 1 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 516.486483][ T5912] usb 5-1: config 0 interface 1 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 516.537752][ T5912] usb 5-1: config 0 interface 1 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 516.561366][ T5912] usb 5-1: config 0 interface 1 altsetting 5 endpoint 0x6 has an invalid bInterval 89, changing to 10 [ 516.602333][ T5912] usb 5-1: config 0 interface 1 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 516.621673][ T5912] usb 5-1: config 0 interface 250 altsetting 16 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 516.651949][ T5912] usb 5-1: config 0 interface 250 altsetting 16 has a duplicate endpoint with address 0x8, skipping [ 516.683360][ T5912] usb 5-1: config 0 interface 250 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 516.711063][ T5912] usb 5-1: config 0 interface 250 altsetting 16 has a duplicate endpoint with address 0xF, skipping [ 516.743574][ T5912] usb 5-1: config 0 interface 250 altsetting 16 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 516.767415][ T5912] usb 5-1: config 0 interface 4 has no altsetting 0 [ 516.781753][ T5912] usb 5-1: config 0 interface 39 has no altsetting 0 [ 516.798747][ T5912] usb 5-1: config 0 interface 1 has no altsetting 0 [ 516.805465][ T5912] usb 5-1: config 0 interface 250 has no altsetting 0 [ 516.821746][ T5869] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 516.824005][ T5912] usb 5-1: New USB device found, idVendor=19d2, idProduct=0168, bcdDevice=18.2c [ 516.849850][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.868195][ T5912] usb 5-1: Product: ට硵ᬉ῎䵴뜨炠瞉턨쭎䬝Ỽ퓗跠콥鲔⃏芊䎲쯂ㄌ⼧=Ṇ䅩盓楯쁢띫ڙ끙륪⢀鄢ﻺ߿鶄⾌풮壘运ꪪ䖲缫ꆄ㾛ㆵ塑诃幚䦮㳌❜ꆰ㭪鞦⟁濭衽姻卍㋁쌒ᣆᮩ榦⑺ [ 516.941088][ T5912] usb 5-1: Manufacturer: 耧髿훚ᇁk鷣걭岊欱襳쇽㚥್ᗖ瀕ᐵ஬䓟﫠琯孶ᯖ䰟暱終鷝콭嚭왛駡然汰᫆決䁺ᩋ奬˥蒇椼젖ⲏ燁㣮಩壌ơ㽷畅輝ꗪ꽮玝7鄘녫ꡋ㍢鳏瑠 [ 516.996359][ T5912] usb 5-1: SerialNumber: syz [ 517.001717][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 517.012731][ T5912] usb 5-1: config 0 descriptor?? [ 517.022529][ T5869] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 517.023317][T16275] raw-gadget.9 gadget.4: fail, usb_ep_enable returned -22 [ 517.030966][ T5869] usb 1-1: config 0 has no interface number 0 [ 517.069115][ T5869] usb 1-1: config 0 interface 184 has no altsetting 0 [ 517.080387][ T5869] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 517.117515][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.136408][ T5869] usb 1-1: Product: syz [ 517.146511][ T5869] usb 1-1: Manufacturer: syz [ 517.151609][ T5876] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 517.182727][ T5869] usb 1-1: SerialNumber: syz [ 517.201507][ T5869] usb 1-1: config 0 descriptor?? [ 517.218582][ T5869] smsc75xx v1.0.0 [ 517.258235][T16275] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2431'. [ 517.333790][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.351638][ T5876] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 517.389527][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.437649][ T5876] usb 3-1: config 0 descriptor?? [ 517.523935][ T5912] usb 5-1: selecting invalid altsetting 1 [ 517.529965][ T5912] usb 5-1: selecting invalid altsetting 0 [ 517.561567][ T5912] cdc_mbim 5-1:0.1: bind() failure [ 517.613628][ T5912] usb 5-1: USB disconnect, device number 56 [ 517.652734][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 517.697828][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 517.717209][ T5869] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 517.735125][ T5869] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 518.090488][ T5876] usb 3-1: string descriptor 0 read error: -71 [ 518.110661][ T5876] uclogic 0003:5543:0081.003A: failed retrieving string descriptor #200: -71 [ 518.151576][ T5876] uclogic 0003:5543:0081.003A: failed retrieving pen parameters: -71 [ 518.159717][ T5876] uclogic 0003:5543:0081.003A: failed probing pen v2 parameters: -71 [ 518.183526][ T5876] uclogic 0003:5543:0081.003A: failed probing parameters: -71 [ 518.201715][ T5876] uclogic 0003:5543:0081.003A: probe with driver uclogic failed with error -71 [ 518.225627][ T5876] usb 3-1: USB disconnect, device number 76 [ 518.615049][T16377] netlink: 'syz.1.2454': attribute type 1 has an invalid length. [ 518.623032][T16377] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2454'. [ 518.741851][ T5876] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 518.915011][T16322] Bluetooth: hci2: command 0x0406 tx timeout [ 518.921154][T16322] Bluetooth: hci4: command 0x0406 tx timeout [ 519.194094][ T5890] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 519.355920][ T5890] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 519.365269][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.373754][ T5890] usb 3-1: Product: syz [ 519.380614][ T5890] usb 3-1: Manufacturer: syz [ 519.385759][ T5890] usb 3-1: SerialNumber: syz [ 519.573488][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.594120][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.614018][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 519.640584][ T5869] usb 1-1: USB disconnect, device number 40 [ 519.664285][ T5876] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 519.688538][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.708161][ T5876] usb 5-1: config 0 descriptor?? [ 519.738621][T16398] syzkaller1: entered promiscuous mode [ 519.744189][T16398] syzkaller1: entered allmulticast mode [ 519.926875][T16375] overlayfs: failed to resolve './file1': -2 [ 520.052773][T16406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.053217][T16406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.135468][ T5876] pantherlord 0003:0810:0002.003B: unknown main item tag 0x2 [ 520.142429][ T5876] pantherlord 0003:0810:0002.003B: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.4-1/input0 [ 520.142459][ T5876] pantherlord 0003:0810:0002.003B: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 520.339644][ T5907] usb 5-1: USB disconnect, device number 57 [ 520.647686][T16415] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 520.964554][T16430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2469'. [ 520.979434][T16428] netlink: 'syz.0.2468': attribute type 1 has an invalid length. [ 520.988206][T16428] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2468'. [ 521.174197][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2470'. [ 521.704312][T16449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.740849][T16449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.778970][T16449] netlink: 'syz.1.2472': attribute type 1 has an invalid length. [ 522.167039][ T5890] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 522.193094][ T5890] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 522.221776][ T5890] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 522.267289][ T5890] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 522.312990][ T5890] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 522.357366][ T5890] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 522.382717][T16464] nbd: couldn't find a device at index -373156329 [ 522.392823][ T5890] usb 3-1: USB disconnect, device number 77 [ 522.473445][T16466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.484929][T16466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.495080][T16466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2475'. [ 522.505550][T16466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2475'. [ 522.799324][T16477] binder: 16476:16477 ioctl c0306201 2000000001c0 returned -22 [ 522.871278][ T5876] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 522.943713][T16487] loop3: detected capacity change from 0 to 7 [ 522.961844][T16487] Dev loop3: unable to read RDB block 7 [ 522.967439][T16487] loop3: unable to read partition table [ 522.983549][T16487] loop3: partition table beyond EOD, truncated [ 522.999945][T16487] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 523.011416][ T5876] usb 5-1: device descriptor read/64, error -71 [ 523.214132][T16492] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2480'. [ 523.272504][ T5876] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 523.426474][T16504] overlayfs: failed to set uuid (473/file0, err=-1); falling back to uuid=null. [ 523.435899][T16504] overlayfs: failed to verify upper root origin [ 523.441251][ T5876] usb 5-1: device descriptor read/64, error -71 [ 523.442278][ T5890] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 523.458825][T16505] netlink: 'syz.0.2482': attribute type 15 has an invalid length. [ 523.467739][T16505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2482'. [ 523.489086][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 523.561626][ T5876] usb usb5-port1: attempt power cycle [ 523.632636][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 523.645195][ T5890] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 523.661280][ T5890] usb 3-1: config 0 has no interface number 0 [ 523.674566][ T5890] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 523.689458][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.697810][ T5890] usb 3-1: Product: syz [ 523.704359][ T5890] usb 3-1: Manufacturer: syz [ 523.708966][ T5890] usb 3-1: SerialNumber: syz [ 523.726897][ T5890] usb 3-1: config 0 descriptor?? [ 523.739771][T16518] loop3: detected capacity change from 0 to 7 [ 523.749397][ T5890] smsc95xx v2.0.0 [ 523.755269][T16518] Dev loop3: unable to read RDB block 7 [ 523.761038][T16518] loop3: unable to read partition table [ 523.767676][T16518] loop3: partition table beyond EOD, truncated [ 523.774939][T16518] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 523.911354][ T5876] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 523.924200][T16525] ALSA: mixer_oss: invalid OSS volume '' [ 523.934223][T16527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.952379][ T5890] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 523.954152][ T5876] usb 5-1: device descriptor read/8, error -71 [ 523.971516][ T5890] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 524.023545][T16531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.037592][T16531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.050697][T16531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.059897][T16531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.211536][ T5876] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 524.225356][ T5890] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 524.252265][ T5876] usb 5-1: device descriptor read/8, error -71 [ 524.252978][ T5890] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 524.296807][ T5890] usb 3-1: USB disconnect, device number 78 [ 524.363329][T13453] Bluetooth: hci4: SCO packet for unknown connection handle 2248 [ 524.381595][ T5876] usb usb5-port1: unable to enumerate USB device [ 524.521252][ T5907] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 524.661337][ T5890] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 524.682618][ T5907] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 524.701130][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.720207][ T5907] usb 1-1: config 0 descriptor?? [ 524.740492][ T5907] cp210x 1-1:0.0: cp210x converter detected [ 524.831359][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 524.850360][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 524.865531][ T5890] usb 3-1: config 1 interface 0 has no altsetting 0 [ 524.879530][ T5890] usb 3-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 524.893832][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.911322][T16563] loop3: detected capacity change from 0 to 7 [ 524.920346][T16563] Dev loop3: unable to read RDB block 7 [ 524.926578][T16563] loop3: unable to read partition table [ 524.932524][ T5890] usb 3-1: Product: syz [ 524.938756][ T5890] usb 3-1: Manufacturer: syz [ 524.944007][T16563] loop3: partition table beyond EOD, truncated [ 524.950280][T16563] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 524.960100][ T5890] usb 3-1: SerialNumber: syz [ 524.984021][ T5196] Dev loop3: unable to read RDB block 7 [ 524.989688][ T5196] loop3: unable to read partition table [ 524.996248][ T5196] loop3: partition table beyond EOD, truncated [ 525.138789][T16539] IPVS: nq: FWM 3 0x00000003 - no destination available [ 525.152816][ T5907] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 525.173365][ T5907] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 525.180895][ T5907] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 525.194548][ T5890] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input42 [ 525.210437][ T5181] bcm5974 3-1:1.0: could not read from device [ 525.241328][ T5907] usb 1-1: cp210x converter now attached to ttyUSB0 [ 525.258805][ T5907] usb 1-1: USB disconnect, device number 41 [ 525.287282][ T5890] usb 3-1: USB disconnect, device number 79 [ 525.300861][ T5907] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 525.329934][ T5907] cp210x 1-1:0.0: device disconnected [ 525.544156][T16583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.553002][T16583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.051268][ T5869] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 526.101085][ T5907] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 526.201470][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 526.218990][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.242424][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 526.251066][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 526.259570][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 526.272691][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 526.277354][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.283882][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 526.313082][ T5869] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 526.321966][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.323491][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 526.340539][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 526.340587][ T5907] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 526.340609][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.348586][ T5907] usb 1-1: config 0 descriptor?? [ 526.391901][ T5869] usb 3-1: Product: syz [ 526.401847][ T5869] usb 3-1: Manufacturer: syz [ 526.406474][ T5869] usb 3-1: SerialNumber: syz [ 526.442795][ T5869] usb 3-1: config 0 descriptor?? [ 526.454456][T16616] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 526.580665][T16620] netlink: 'syz.4.2508': attribute type 1 has an invalid length. [ 526.588785][T16620] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2508'. [ 526.650307][ T5869] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 526.659570][ T5869] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 526.852561][ T5869] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 526.861566][ T5869] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 526.896638][ T5869] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 527.003972][T16594] netlink: 'syz.0.2503': attribute type 7 has an invalid length. [ 527.016526][T16594] netlink: 'syz.0.2503': attribute type 5 has an invalid length. [ 527.033467][T16594] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2503'. [ 527.053305][ T5869] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 527.074101][T16631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2503'. [ 527.559958][ T5907] microsoft 0003:045E:07DA.003C: ignoring exceeding usage max [ 527.583502][ T5907] microsoft 0003:045E:07DA.003C: unsupported Resolution Multiplier 0 [ 527.597725][ T5907] microsoft 0003:045E:07DA.003C: implement() called with n (152) > 32! (kworker/0:5) [ 527.660677][T16649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.672835][T16649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.857530][ T5869] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 527.867823][ T5869] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 527.890459][ T5869] usb 3-1: USB disconnect, device number 80 [ 528.550913][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 528.700981][ T10] usb 5-1: device descriptor read/64, error -71 [ 528.780043][T16686] netlink: 'syz.1.2520': attribute type 1 has an invalid length. [ 528.788524][T16686] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2520'. [ 528.958515][ T10] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 529.002983][ T5912] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 529.120875][ T10] usb 5-1: device descriptor read/64, error -71 [ 529.181159][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 529.200103][ T5907] microsoft 0003:045E:07DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 529.238383][ T5912] usb 3-1: config 77 has an invalid descriptor of length 31, skipping remainder of the config [ 529.251421][ T10] usb usb5-port1: attempt power cycle [ 529.325702][ T5912] usb 3-1: config 77 has 0 interfaces, different from the descriptor's value: 17 [ 529.341216][ T5907] microsoft 0003:045E:07DA.003C: no inputs found [ 529.368216][ T5907] microsoft 0003:045E:07DA.003C: could not initialize ff, continuing anyway [ 529.402555][ T5912] usb 3-1: New USB device found, idVendor=257a, idProduct=261f, bcdDevice= 8.ee [ 529.454441][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.473396][ T5907] usb 1-1: USB disconnect, device number 42 [ 529.503736][ T5912] usb 3-1: Product: syz [ 529.541044][ T5912] usb 3-1: Manufacturer: syz [ 529.565703][ T5912] usb 3-1: SerialNumber: syz [ 529.629486][T16695] fido_id[16695]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 529.650946][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 529.702321][ T10] usb 5-1: device descriptor read/8, error -71 [ 529.850895][ T5912] usb 3-1: USB disconnect, device number 81 [ 529.970862][ T10] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 529.992518][ T10] usb 5-1: device descriptor read/8, error -71 [ 530.104474][ T10] usb usb5-port1: unable to enumerate USB device [ 531.104660][T16760] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 531.111224][T16760] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 531.124518][T16762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.135215][T16762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.143643][T16760] vhci_hcd vhci_hcd.0: Device attached [ 531.282546][ T5876] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 531.331138][ T5912] vhci_hcd: vhci_device speed not set [ 531.401334][ T10] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 531.409153][ T5912] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 531.462689][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.473823][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.486290][ T5876] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 531.503019][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.519778][ T5876] usb 3-1: config 0 descriptor?? [ 531.583058][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.596172][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.610722][ T10] usb 1-1: Product: ж [ 531.614842][ T10] usb 1-1: Manufacturer: ﺏ㸐ᨮᢻᯕ⣴鰆潫푞铬蓶ꪂ梹玬ꂾ퀰쯲➛ᴯ䣗ῖᄽၻ哱䕆⭊돹✸๘䚡퍏ꏣꖍ [ 531.638100][ T10] usb 1-1: SerialNumber: ъ [ 531.690764][ T5907] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 531.854365][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 531.876499][ T5907] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 531.892697][T16763] vhci_hcd: connection reset by peer [ 531.903970][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.912711][ T2937] vhci_hcd: stop threads [ 531.916999][ T2937] vhci_hcd: release socket [ 531.932956][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 531.940184][ T5876] logitech 0003:046D:C294.003D: unknown main item tag 0x0 [ 531.952619][ T2937] vhci_hcd: disconnect device [ 531.958058][ T5876] logitech 0003:046D:C294.003D: unknown main item tag 0x0 [ 531.963594][ T5907] usb 5-1: config 0 descriptor?? [ 531.976034][ T5876] logitech 0003:046D:C294.003D: unknown main item tag 0x0 [ 531.989736][ T5876] logitech 0003:046D:C294.003D: unknown main item tag 0x0 [ 531.997656][ T5876] logitech 0003:046D:C294.003D: unknown main item tag 0x0 [ 532.005745][ T5876] logitech 0003:046D:C294.003D: unknown main item tag 0x0 [ 532.019673][ T5907] gspca_main: sq930x-2.14.0 probing 041e:403c [ 532.043440][ T5876] logitech 0003:046D:C294.003D: unknown main item tag 0x0 [ 532.050696][ T10] usb 1-1: USB disconnect, device number 43 [ 532.075988][ T5876] logitech 0003:046D:C294.003D: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.2-1/input0 [ 532.105389][T12938] udevd[12938]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.117994][ T5876] logitech 0003:046D:C294.003D: no inputs found [ 532.149677][T16756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.186635][T16756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.252763][T16756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.292346][T16756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.319590][T16756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.341550][T16756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.368000][ T5876] usb 3-1: USB disconnect, device number 82 [ 532.910723][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 532.982373][T16825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.007458][T16825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.022565][ T5907] gspca_sq930x: ucbus_write failed -71 [ 533.032514][ T5907] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 533.059819][ T5907] usb 5-1: USB disconnect, device number 66 [ 533.074669][ T10] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 533.086646][ T10] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 533.120176][ T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 533.131583][ T10] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 533.144961][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 533.157516][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.240888][ T5869] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 533.391767][T16813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.404746][T16813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.415132][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.417017][T16842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.443250][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.453959][T16842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.470603][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.497409][ T5869] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.507712][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.517606][ T10] ath6kl: Failed to submit usb control message: -71 [ 533.536180][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 533.536290][ T5869] usb 3-1: config 0 descriptor?? [ 533.556374][ T10] ath6kl: Unable to send get target info: -71 [ 533.585623][ T10] ath6kl: Failed to init ath6kl core: -71 [ 533.616268][ T10] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 533.663604][ T10] usb 1-1: USB disconnect, device number 44 [ 534.032069][ T5869] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 534.061216][T13453] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 534.120965][ T5876] libceph: connect (1)[c::]:6789 error -22 [ 534.139179][T16877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.160037][T16877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.175420][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 534.182730][T16853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.199441][T16853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.203212][T16877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.215218][T16877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.264635][T16827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.277141][T16827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.330585][ T10] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 534.441296][ T5869] libceph: connect (1)[c::]:6789 error -22 [ 534.450734][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 534.482548][ T10] usb 1-1: No LPM exit latency info found, disabling LPM. [ 534.498858][ T10] usb 1-1: config 0 has an invalid interface number: 156 but max is 3 [ 534.515977][ T10] usb 1-1: config 0 has an invalid interface number: 20 but max is 3 [ 534.528764][ T10] usb 1-1: config 0 has an invalid interface number: 193 but max is 3 [ 534.539759][ T10] usb 1-1: config 0 has an invalid interface number: 164 but max is 3 [ 534.549813][ T5907] usb 3-1: USB disconnect, device number 83 [ 534.559506][ T10] usb 1-1: config 0 has an invalid interface number: 165 but max is 3 [ 534.574523][ T10] usb 1-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 534.592495][ T10] usb 1-1: config 0 has no interface number 0 [ 534.603573][ T10] usb 1-1: config 0 has no interface number 1 [ 534.611578][ T10] usb 1-1: config 0 has no interface number 2 [ 534.617896][ T10] usb 1-1: config 0 has no interface number 3 [ 534.625129][ T10] usb 1-1: config 0 has no interface number 4 [ 534.634324][ T10] usb 1-1: config 0 interface 156 altsetting 110 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 534.645400][ T10] usb 1-1: config 0 interface 156 altsetting 110 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 534.656857][ T10] usb 1-1: config 0 interface 156 altsetting 110 has a duplicate endpoint with address 0xB, skipping [ 534.670547][ T10] usb 1-1: config 0 interface 156 altsetting 110 endpoint 0x8 has invalid maxpacket 16, setting to 8 [ 534.683290][ T10] usb 1-1: config 0 interface 156 altsetting 110 endpoint 0xE has invalid maxpacket 1023, setting to 8 [ 534.694859][ T10] usb 1-1: config 0 interface 156 altsetting 110 has a duplicate endpoint with address 0xF, skipping [ 534.706038][ T10] usb 1-1: config 0 interface 156 altsetting 110 has a duplicate endpoint with address 0xE, skipping [ 534.717234][ T10] usb 1-1: config 0 interface 156 altsetting 110 endpoint 0xC has invalid maxpacket 1023, setting to 8 [ 534.728735][ T10] usb 1-1: config 0 interface 156 altsetting 110 has a duplicate endpoint with address 0xE, skipping [ 534.743571][ T10] usb 1-1: config 0 interface 156 altsetting 110 has a duplicate endpoint with address 0x8, skipping [ 534.755698][ T10] usb 1-1: config 0 interface 156 altsetting 110 has a duplicate endpoint with address 0xF, skipping [ 534.770624][ T5869] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 534.774654][ T10] usb 1-1: config 0 interface 20 altsetting 6 endpoint 0xD has invalid maxpacket 16, setting to 0 [ 534.792926][ T10] usb 1-1: config 0 interface 20 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 534.803953][ T10] usb 1-1: config 0 interface 20 altsetting 6 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 534.815021][ T10] usb 1-1: config 0 interface 20 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 534.826033][ T10] usb 1-1: config 0 interface 20 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 7 [ 534.848621][ T10] usb 1-1: too many endpoints for config 0 interface 193 altsetting 163: 98, using maximum allowed: 30 [ 534.860278][ T10] usb 1-1: config 0 interface 193 altsetting 163 has a duplicate endpoint with address 0x2, skipping [ 534.872248][ T10] usb 1-1: config 0 interface 193 altsetting 163 has a duplicate endpoint with address 0x2, skipping [ 534.886316][ T10] usb 1-1: config 0 interface 193 altsetting 163 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 534.897461][ T10] usb 1-1: config 0 interface 193 altsetting 163 has 3 endpoint descriptors, different from the interface descriptor's value: 98 [ 534.924046][ T10] usb 1-1: config 0 interface 164 altsetting 193 endpoint 0x9 has invalid maxpacket 16, setting to 8 [ 534.935250][ T10] usb 1-1: config 0 interface 164 altsetting 193 has an invalid descriptor for endpoint zero, skipping [ 534.949117][ T10] usb 1-1: config 0 interface 165 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 534.950550][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 534.960412][ T10] usb 1-1: config 0 interface 165 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 534.965537][ T10] usb 1-1: config 0 interface 165 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 534.965562][ T10] usb 1-1: config 0 interface 165 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 534.965591][ T10] usb 1-1: config 0 interface 165 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 534.965613][ T10] usb 1-1: config 0 interface 165 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 534.979184][ T5876] libceph: connect (1)[c::]:6789 error -22 [ 534.987844][ T10] usb 1-1: config 0 interface 165 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 534.998813][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 535.055036][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 535.059416][ T10] usb 1-1: config 0 interface 165 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 8 [ 535.067040][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 535.090881][ T10] usb 1-1: config 0 interface 165 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 535.101696][ T10] usb 1-1: config 0 interface 165 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 535.116348][ T10] usb 1-1: config 0 interface 165 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 535.133124][ T5869] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 535.135516][ T10] usb 1-1: config 0 interface 165 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 535.145016][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.158104][ T10] usb 1-1: config 0 interface 165 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 535.176360][ T10] usb 1-1: config 0 interface 165 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 535.177113][ T5869] usb 5-1: Product: syz [ 535.187228][ T10] usb 1-1: config 0 interface 156 has no altsetting 0 [ 535.187249][ T10] usb 1-1: config 0 interface 20 has no altsetting 0 [ 535.187266][ T10] usb 1-1: config 0 interface 193 has no altsetting 0 [ 535.187283][ T10] usb 1-1: config 0 interface 164 has no altsetting 0 [ 535.187301][ T10] usb 1-1: config 0 interface 165 has no altsetting 0 [ 535.189453][ T10] usb 1-1: New USB device found, idVendor=19d2, idProduct=0118, bcdDevice=9a.87 [ 535.204098][ T5869] usb 5-1: Manufacturer: syz [ 535.226021][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.226045][ T10] usb 1-1: Product: ࠊ [ 535.226064][ T10] usb 1-1: Manufacturer: ⪇령 [ 535.226096][ T10] usb 1-1: SerialNumber: ࠄ [ 535.228884][ T10] usb 1-1: config 0 descriptor?? [ 535.247778][ T5869] usb 5-1: SerialNumber: syz [ 535.262493][T16871] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 535.295011][ T5869] usb 5-1: config 0 descriptor?? [ 535.309264][ T5869] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 535.319318][ T5869] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 535.496136][T16871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.506541][T16871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.540506][ T5890] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 535.700601][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 535.707793][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.722089][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.734694][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 535.747851][ T5890] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 535.760130][ T10] option 1-1:0.156: GSM modem (1-port) converter detected [ 535.767349][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.784562][ T5890] usb 3-1: config 0 descriptor?? [ 535.795233][ T10] uvcvideo 1-1:0.20: Found UVC 0.00 device ࠊ (19d2:0118) [ 535.802509][ T10] uvcvideo 1-1:0.20: No valid video chain found. [ 535.828184][ T10] usb 1-1: USB disconnect, device number 45 [ 535.841762][ T10] option 1-1:0.156: device disconnected [ 535.913676][ T5869] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 535.920292][ T5869] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 536.041068][ T31] INFO: task syz.3.1716:13048 blocked for more than 143 seconds. [ 536.048992][ T31] Not tainted syzkaller #0 [ 536.054882][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.063897][ T31] task:syz.3.1716 state:D stack:26856 pid:13048 tgid:13042 ppid:5835 task_flags:0x400740 flags:0x00080002 [ 536.077308][ T31] Call Trace: [ 536.080835][ T31] [ 536.083816][ T31] __schedule+0x1798/0x4cc0 [ 536.088462][ T31] ? validate_chain+0x897/0x2140 [ 536.093791][ T31] ? __lock_acquire+0xab9/0xd20 [ 536.098717][ T31] ? __pfx___schedule+0x10/0x10 [ 536.103660][ T31] ? schedule+0x91/0x360 [ 536.107953][ T31] schedule+0x165/0x360 [ 536.112186][ T31] schedule_timeout+0x9a/0x270 [ 536.117200][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 536.122678][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.128024][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.134015][ T5869] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 536.134841][ T31] __wait_for_common+0x3da/0x710 [ 536.146203][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 536.146592][ T5869] em28xx 5-1:0.0: No AC97 audio processor [ 536.153657][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 536.163669][ T5869] usb 5-1: USB disconnect, device number 67 [ 536.175018][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 536.180723][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.184077][ T5869] em28xx 5-1:0.0: Disconnecting em28xx [ 536.186009][ T31] wait_for_completion_state+0x1c/0x40 [ 536.197460][ T31] vfs_coredump+0x8cf/0x2a60 [ 536.205371][ T31] ? __lock_acquire+0xab9/0xd20 [ 536.215381][ T5869] em28xx 5-1:0.0: Freeing device [ 536.216643][ T31] ? __pfx_vfs_coredump+0x10/0x10 [ 536.226878][ T5890] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 536.234840][ T31] ? do_raw_spin_lock+0x121/0x290 [ 536.239896][ T31] ? __lock_acquire+0xab9/0xd20 [ 536.243830][ T5890] microsoft 0003:045E:07DA.003F: item fetching failed at offset 25/34 [ 536.250871][ T31] ? __lock_acquire+0xab9/0xd20 [ 536.258027][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 536.261392][ T5890] microsoft 0003:045E:07DA.003F: parse failed [ 536.263453][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 536.271303][ T5890] microsoft 0003:045E:07DA.003F: probe with driver microsoft failed with error -22 [ 536.277313][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 536.298868][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 536.305182][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 536.311749][ T31] ? stack_depot_save_flags+0x41b/0x860 [ 536.317518][ T31] ? kasan_save_track+0x4f/0x80 [ 536.322686][ T31] ? kasan_save_track+0x3e/0x80 [ 536.327725][ T31] ? __kasan_save_free_info+0x46/0x50 [ 536.333402][ T31] ? __kasan_slab_free+0x5c/0x80 [ 536.338436][ T31] ? kmem_cache_free+0x19b/0x690 [ 536.343486][ T31] ? get_signal+0xa4b/0x1340 [ 536.348164][ T31] ? arch_do_signal_or_restart+0xa0/0x790 [ 536.354802][ T31] ? exit_to_user_mode_loop+0x72/0x130 [ 536.360464][ T31] ? do_syscall_64+0x2bd/0xfa0 [ 536.365345][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.371599][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.377374][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.382645][ T31] get_signal+0x1108/0x1340 [ 536.387175][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 536.392977][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 536.399268][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 536.404951][ T31] exit_to_user_mode_loop+0x72/0x130 [ 536.410264][ T31] do_syscall_64+0x2bd/0xfa0 [ 536.415039][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.420234][ T5890] usb 3-1: USB disconnect, device number 84 [ 536.420333][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.432541][ T31] ? clear_bhb_loop+0x60/0xb0 [ 536.439231][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.445675][ T31] RIP: 0033:0x7fc43c58eec9 [ 536.450102][ T31] RSP: 002b:00007fc43a7d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 536.458681][ T31] RAX: 00000000000000ca RBX: 00007fc43c7e6098 RCX: 00007fc43c58eec9 [ 536.466736][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc43c7e609c [ 536.475696][ T31] RBP: 00007fc43c7e6090 R08: 3fffffffffffffff R09: 0000000000000000 [ 536.483932][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.492084][ T31] R13: 00007fc43c7e6128 R14: 00007ffdc882b340 R15: 00007ffdc882b428 [ 536.500072][ T31] [ 536.503227][ T31] [ 536.503227][ T31] Showing all locks held in the system: [ 536.510659][ T5912] vhci_hcd: vhci_device speed not set [ 536.511145][ T31] 1 lock held by khungtaskd/31: [ 536.522280][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 536.533656][ T31] 2 locks held by getty/5585: [ 536.538495][ T31] #0: ffff88803388a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 536.548865][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 536.560293][ T31] 1 lock held by kworker/1:4/5869: [ 536.565687][ T31] #0: ffff8880b873a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 536.575712][ T31] 3 locks held by kworker/0:4/5890: [ 536.581354][ T31] #0: ffff888020eae948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 536.593168][ T31] #1: ffffc90004597ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 536.605120][ T31] #2: ffff888144fd3198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 536.614072][ T31] 6 locks held by kworker/0:6/5912: [ 536.619270][ T31] #0: ffff888020eae948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 536.631170][ T31] #1: ffffc90004647ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 536.643115][ T31] #2: ffff8881457fb198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 536.652534][ T31] #3: ffff8881457ff518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 536.653528][T16872] ceph: No mds server is up or the cluster is laggy [ 536.663965][ T31] #4: ffff8881457aca68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 536.681642][ T31] #5: ffffffff8edadf30 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750 [ 536.693106][ T31] 2 locks held by syz.1.2543/16872: [ 536.698343][ T31] #0: ffff888031dd4870 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x758/0x8d0 [ 536.713838][ T31] #1: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 536.726338][ T31] [ 536.728678][ T31] ============================================= [ 536.728678][ T31] [ 536.742297][ T31] NMI backtrace for cpu 1 [ 536.742314][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 536.742334][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 536.742345][ T31] Call Trace: [ 536.742353][ T31] [ 536.742362][ T31] dump_stack_lvl+0x189/0x250 [ 536.742388][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.742405][ T31] ? __pfx__printk+0x10/0x10 [ 536.742432][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 536.742458][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 536.742484][ T31] ? __pfx__printk+0x10/0x10 [ 536.742504][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 536.742527][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 536.742552][ T31] watchdog+0xf60/0xfa0 [ 536.742577][ T31] ? watchdog+0x1e2/0xfa0 [ 536.742603][ T31] kthread+0x711/0x8a0 [ 536.742623][ T31] ? __pfx_watchdog+0x10/0x10 [ 536.742641][ T31] ? __pfx_kthread+0x10/0x10 [ 536.742660][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.742676][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.742693][ T31] ? __pfx_kthread+0x10/0x10 [ 536.742710][ T31] ret_from_fork+0x4bc/0x870 [ 536.742734][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 536.742761][ T31] ? __switch_to_asm+0x39/0x70 [ 536.742782][ T31] ? __switch_to_asm+0x33/0x70 [ 536.742799][ T31] ? __pfx_kthread+0x10/0x10 [ 536.742817][ T31] ret_from_fork_asm+0x1a/0x30 [ 536.742851][ T31] [ 536.742878][ T31] Sending NMI from CPU 1 to CPUs 0: [ 536.891233][ C0] NMI backtrace for cpu 0 [ 536.891250][ C0] CPU: 0 UID: 0 PID: 152 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 536.891267][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 536.891278][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 536.891301][ C0] RIP: 0010:unwind_next_frame+0xc9c/0x2390 [ 536.891325][ C0] Code: 4c 8b 6c 24 50 4c 8b 64 24 10 74 08 48 89 df e8 0a 0a b2 00 4c 89 23 ba 10 00 00 00 4c 89 ef 31 f6 e8 d8 0b b2 00 48 8b 14 24 c5 04 00 00 4c 89 7c 24 28 48 89 5c 24 78 4d 8d 66 08 4d 89 e5 [ 536.891338][ C0] RSP: 0018:ffffc90002e96858 EFLAGS: 00000246 [ 536.891351][ C0] RAX: ffffc90002e96978 RBX: ffffc90002e96960 RCX: 0000000000000000 [ 536.891363][ C0] RDX: ffffffff90c79a6c RSI: 0000000000000000 RDI: ffffc90002e96988 [ 536.891374][ C0] RBP: dffffc0000000000 R08: ffffc90002e96987 R09: 0000000000000000 [ 536.891386][ C0] R10: ffffc90002e96978 R11: fffff520005d2d31 R12: ffffc90002e970e0 [ 536.891398][ C0] R13: ffffc90002e96978 R14: ffffc90002e96928 R15: ffffc90002e96970 [ 536.891410][ C0] FS: 0000000000000000(0000) GS:ffff888125d2d000(0000) knlGS:0000000000000000 [ 536.891424][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.891435][ C0] CR2: 00005555593e15c8 CR3: 0000000077d18000 CR4: 00000000003526f0 [ 536.891449][ C0] Call Trace: [ 536.891456][ C0] [ 536.891466][ C0] ? unwind_next_frame+0xa5/0x2390 [ 536.891486][ C0] ? cfg80211_inform_single_bss_data+0xba9/0x1ac0 [ 536.891511][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 536.891527][ C0] arch_stack_walk+0x11c/0x150 [ 536.891550][ C0] ? cfg80211_inform_bss_data+0x203/0x3b40 [ 536.891573][ C0] stack_trace_save+0x9c/0xe0 [ 536.891587][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 536.891607][ C0] kasan_save_stack+0x3e/0x60 [ 536.891621][ C0] ? kasan_save_stack+0x3e/0x60 [ 536.891635][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 536.891654][ C0] ? kvfree_call_rcu+0x130/0x4c0 [ 536.891669][ C0] ? cfg80211_update_known_bss+0x830/0x1590 [ 536.891684][ C0] ? __cfg80211_bss_update+0x147/0x2120 [ 536.891704][ C0] ? cfg80211_inform_single_bss_data+0xba9/0x1ac0 [ 536.891749][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 536.891769][ C0] kvfree_call_rcu+0x130/0x4c0 [ 536.891787][ C0] cfg80211_update_known_bss+0x830/0x1590 [ 536.891804][ C0] ? cmp_bss+0x8b3/0xe80 [ 536.891822][ C0] __cfg80211_bss_update+0x147/0x2120 [ 536.891846][ C0] ? do_raw_spin_lock+0x121/0x290 [ 536.891862][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 536.891877][ C0] ? __kmalloc_noprof+0x432/0x7f0 [ 536.891894][ C0] ? cfg80211_inform_single_bss_data+0xb90/0x1ac0 [ 536.891917][ C0] cfg80211_inform_single_bss_data+0xba9/0x1ac0 [ 536.891943][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 536.891977][ C0] ? _ieee802_11_parse_elems_full+0x44aa/0x4550 [ 536.891996][ C0] ? cfg80211_inform_bss_data+0x1f0/0x3b40 [ 536.892026][ C0] cfg80211_inform_bss_data+0x203/0x3b40 [ 536.892060][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 536.892099][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 536.892127][ C0] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 536.892152][ C0] ? ieee80211_bss_info_update+0x2df/0x9e0 [ 536.892176][ C0] ieee80211_bss_info_update+0x749/0x9e0 [ 536.892200][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 536.892224][ C0] ? sta_info_get+0x4f/0x300 [ 536.892245][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xfab/0x2af0 [ 536.892270][ C0] ieee80211_ibss_rx_queued_mgmt+0xa4e/0x2af0 [ 536.892300][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xfab/0x2af0 [ 536.892321][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 536.892343][ C0] ? __lock_acquire+0xab9/0xd20 [ 536.892368][ C0] ? __lock_acquire+0xab9/0xd20 [ 536.892396][ C0] ? kcov_remote_start+0x18e/0x7f0 [ 536.892419][ C0] ieee80211_iface_work+0x85f/0x12d0 [ 536.892440][ C0] cfg80211_wiphy_work+0x2bb/0x470 [ 536.892457][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 536.892478][ C0] process_scheduled_works+0xae1/0x17b0 [ 536.892509][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 536.892536][ C0] worker_thread+0x8a0/0xda0 [ 536.892556][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 536.892576][ C0] ? __kthread_parkme+0x7b/0x200 [ 536.892599][ C0] kthread+0x711/0x8a0 [ 536.892616][ C0] ? __pfx_worker_thread+0x10/0x10 [ 536.892633][ C0] ? __pfx_kthread+0x10/0x10 [ 536.892648][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.892663][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.892678][ C0] ? __pfx_kthread+0x10/0x10 [ 536.892692][ C0] ret_from_fork+0x4bc/0x870 [ 536.892712][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 536.892734][ C0] ? __switch_to_asm+0x39/0x70 [ 536.892750][ C0] ? __switch_to_asm+0x33/0x70 [ 536.892765][ C0] ? __pfx_kthread+0x10/0x10 [ 536.892780][ C0] ret_from_fork_asm+0x1a/0x30 [ 536.892804][ C0] [ 536.894237][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 537.371460][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 537.380553][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.390850][ T31] Call Trace: [ 537.394120][ T31] [ 537.397035][ T31] dump_stack_lvl+0x99/0x250 [ 537.402137][ T31] ? __asan_memcpy+0x40/0x70 [ 537.406720][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.411993][ T31] ? __pfx__printk+0x10/0x10 [ 537.416575][ T31] vpanic+0x237/0x6d0 [ 537.420727][ T31] ? __pfx_vpanic+0x10/0x10 [ 537.425218][ T31] ? preempt_schedule_common+0x83/0xd0 [ 537.430660][ T31] panic+0xb9/0xc0 [ 537.434368][ T31] ? __pfx_panic+0x10/0x10 [ 537.438774][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 537.444137][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 537.450281][ T31] watchdog+0xf9f/0xfa0 [ 537.454432][ T31] ? watchdog+0x1e2/0xfa0 [ 537.458750][ T31] kthread+0x711/0x8a0 [ 537.462812][ T31] ? __pfx_watchdog+0x10/0x10 [ 537.467471][ T31] ? __pfx_kthread+0x10/0x10 [ 537.472044][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.477226][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.482407][ T31] ? __pfx_kthread+0x10/0x10 [ 537.486986][ T31] ret_from_fork+0x4bc/0x870 [ 537.491563][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 537.496749][ T31] ? __switch_to_asm+0x39/0x70 [ 537.501496][ T31] ? __switch_to_asm+0x33/0x70 [ 537.506613][ T31] ? __pfx_kthread+0x10/0x10 [ 537.511213][ T31] ret_from_fork_asm+0x1a/0x30 [ 537.515984][ T31] [ 537.519464][ T31] Kernel Offset: disabled [ 537.524140][ T31] Rebooting in 86400 seconds..