last executing test programs: 10.751098938s ago: executing program 2 (id=439): r0 = gettid() rt_sigqueueinfo(r0, 0xc, &(0x7f0000000080)={0x0, 0x0, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r2, r2, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) userfaultfd(0x801) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[], 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000180)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.158516065s ago: executing program 1 (id=446): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x20101) r1 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9000001c}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000340600000000000000fcdbdf250b004500736d635f6962000008000100000000000c00450069625f737270740007004500736100008a07629e84f51584d67161bc0a89b47792bcaf4c1c8c1acb3ab77d80a64fa30215c2f6e401a16e4f53a452a56407eb4cf5d619951ac760dacc394a3857010048b80c035e7c2449f072dc721cde6f7bf9cffb3dc175c8b63423af54794fb59597"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x6, 0xffff}, {0xfff2, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1e01000000000000", @ANYRES64=0x3], 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8, 0x0, 0x1, 0x1, 0x0, 0x101}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) connect$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x8003, @remote}}, 0x1e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x5c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}]}]}, 0x5c}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRES16=r8, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x202140) ioctl$BTRFS_IOC_SNAP_DESTROY(r9, 0x5000940f, &(0x7f00000010c0)={{r6}, "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"}) socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b20102020194052406"], 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000390427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="3c45070000000000140012800900010076657468000000006800028008001300", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x24004805}, 0xc080) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1a6) userfaultfd(0x800) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 9.153505642s ago: executing program 0 (id=447): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x920, 0x12) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f00000006c0)=@vmx={0x0, 0x0, 0x2080, {0xeeee8000, 0xd000, {}, 0x0, 0xffffffffffffffff}, {"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", "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"}}) preadv(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) (async) preadv(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x1}]}}]}, 0x3c}}, 0x0) 8.947627975s ago: executing program 3 (id=449): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f0000000040)=[{0x4, 0x0, 0x800}, {0x2}, {0x4, 0x100, 0x800}], 0x3) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000300)) 8.820552869s ago: executing program 2 (id=450): syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x882) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000011c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000001240), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001280), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000002340)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x4, 0x9, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000002380), 0x20040, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23000f) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000023c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000002400)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f00000024c0)=0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=ANY=[@ANYBLOB="0025bd7000000000000400000008000800020000000b001f002a7b26217b7d000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x44) setsockopt(r2, 0x84, 0x81, &(0x7f00000025c0)="1a00000002000000", 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x4040000) sendmsg$NFT_BATCH(r6, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004080) unshare(0x6020400) 8.649183813s ago: executing program 3 (id=451): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) (async, rerun: 64) r2 = syz_open_dev$video4linux(0x0, 0x100200, 0x62cc0) (rerun: 64) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000180)={0x980902, 0x3, @value=0x7fffffff}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000003700)={'#! ', './file0'}, 0xb) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r4, 0x1, 0x46, 0x0, &(0x7f0000003680)) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002300)='/proc/tty/drivers\x00', 0x0, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201e031b9640903e6e8dc40e1050804d6a40102030109021b00010c0b40090904630e01b912d00109050d00280207ffaa"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x20004004) (async, rerun: 32) write$apparmor_current(0xffffffffffffffff, 0x0, 0x17) (async, rerun: 32) read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) cachestat(r3, &(0x7f0000000040), &(0x7f000009de80), 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002200)=ANY=[@ANYBLOB="35feffff251b01031dbd7002fadb0400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x440d0) syz_genetlink_get_family_id$l2tp(&(0x7f0000002240), r7) recvmmsg(r7, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000002380)=""/183, 0xb7}, {&(0x7f0000002480)=""/123, 0x7b}, {&(0x7f0000002500)=""/44, 0x2c}, {&(0x7f0000002540)=""/4090, 0xffa}, {&(0x7f0000003540)=""/146, 0x92}, {&(0x7f0000003600)=""/109, 0x6d}], 0x6}, 0x4}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x10040, 0x0) (async, rerun: 64) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x51, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xc0, 0x70, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x6, 0xf3, 0x1, {0x22, 0x3b6}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x3, 0x3}}}}}]}}]}}, 0x0) (rerun: 64) getsockopt(r1, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000036c0), 0x2, 0x0) 7.716838086s ago: executing program 0 (id=452): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc0400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x600, 0x400}) 7.547337391s ago: executing program 0 (id=453): prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = memfd_create(&(0x7f0000000140)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) fcntl$setlease(r0, 0x400, 0x1) socket$rxrpc(0x21, 0x2, 0xa) unshare(0x24040400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, &(0x7f0000000240)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d550230102030109021300"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000380)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000400)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0x0) listen(r3, 0x80000003) r5 = syz_open_dev$I2C(&(0x7f0000000480), 0x1, 0xae00) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000004c0)={&(0x7f0000000500)=[{0x1, 0x800, 0x0, 0x0}], 0x100000000000010d}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a0010400000000000000000f6846782d754558914000300683372300000b8559e1245db1e000000000000000000001400110070"], 0x44}, 0x1, 0x0, 0x0, 0x24004814}, 0xd472065b6d937c54) socket$netlink(0x10, 0x3, 0x0) 7.247688587s ago: executing program 1 (id=455): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioprio_set$pid(0x2, 0x0, 0x0) r6 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.404696231s ago: executing program 1 (id=457): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002c40)='memory.events\x00', 0x275a, 0x0) splice(r0, 0x0, r0, 0x0, 0x2, 0x2) futex_waitv(&(0x7f00000021c0)=[{0x80000000, &(0x7f0000000640)=0x1}, {0x100000001, &(0x7f0000000680)=0x9, 0x1}, {0x98a3, &(0x7f0000000740)=0x2a80000000, 0x82}, {0x8, &(0x7f0000000780)=0x8, 0x82}, {0x8, &(0x7f00000007c0)=0xb, 0x2}, {0xd3c, &(0x7f0000000800)=0x101, 0x82}, {0x1, &(0x7f0000000840)=0x1, 0x82}, {0xe5, &(0x7f0000000880)=0x34, 0x82}, {0x2, &(0x7f00000008c0)=0xf, 0x82}, {0x100, &(0x7f0000000900)=0x8001, 0x82}, {0x3, &(0x7f0000000940)=0x80000000, 0x82}, {0xa, &(0x7f0000000980)=0xfffffffffffffffa, 0x82}, {0x9, &(0x7f00000009c0)=0x7, 0x82}, {0x70, &(0x7f0000000a00)=0x7, 0x2}, {0x1, &(0x7f0000000a40)=0x544, 0x82}, {0x8, &(0x7f0000000a80)=0x7f, 0x2}, {0x800000000, &(0x7f0000000ac0)=0x1, 0x82}, {0x3, &(0x7f0000000b00)=0xb, 0x2}, {0x8, &(0x7f0000000b40)=0x2000000, 0x2}, {0x0, &(0x7f0000000b80)=0x100000000, 0x2}, {0x2, &(0x7f0000000bc0)=0x8, 0x2}, {0x19, &(0x7f0000000c00)=0x9, 0x82}, {0x4, &(0x7f0000000c40)=0x100000001, 0x2}, {0x8000, &(0x7f0000000c80)=0xf, 0x2}, {0x2, &(0x7f0000000cc0)=0x7, 0x82}, {0x0, &(0x7f0000000d00)=0x4000000000000000, 0x82}, {0xbf8, &(0x7f0000000d40)=0x8, 0x80}, {0x8, &(0x7f0000000d80)=0xff, 0x82}, {0x3, &(0x7f0000000dc0)=0x6, 0x82}, {0x0, &(0x7f0000000e00)=0x5, 0x2}, {0x6, &(0x7f0000000e40)=0x4db, 0x82}, {0x8000, &(0x7f0000000e80)=0xfffffffffffff81a, 0x82}, {0x1, &(0x7f0000000ec0)=0x800, 0x106}, {0x2, &(0x7f0000000f00)=0x47, 0x2}, {0x1, &(0x7f0000000f40)=0x4, 0x82}, {0x5, &(0x7f0000000f80)=0x7, 0x2}, {0x0, &(0x7f0000000fc0)=0x1, 0x82}, {0xdc, &(0x7f0000001000)=0x9, 0x2}, {0x7, &(0x7f0000001040)=0x8000000000000000, 0x82}, {0x6, &(0x7f0000001080)=0x4, 0x82}, {0x3, &(0x7f00000010c0)=0x71, 0x2}, {0x7, &(0x7f0000001100)=0xd, 0x82}, {0x7, &(0x7f0000001140)=0x5, 0x2}, {0x1, &(0x7f0000001180)=0x7, 0x82}, {0x4, &(0x7f00000011c0)=0x5, 0x82}, {0x8, &(0x7f0000001200)=0x8, 0x82}, {0x7, &(0x7f0000001240)=0x8, 0x80}, {0x8001, &(0x7f0000001280)=0x10001, 0x2}, {0x5, &(0x7f00000012c0)=0x8, 0x2}, {0x8, &(0x7f0000001300)=0x800, 0x2}, {0x1, &(0x7f0000001340)=0xce09, 0x2}, {0x9, &(0x7f0000001380)=0xc, 0xfc3a2c9e650c2e9d}, {0xf2, &(0x7f00000013c0)=0x2, 0x2}, {0x4, &(0x7f0000001400)=0x40, 0x82}, {0x0, &(0x7f0000001440)=0xc, 0x2}, {0x8, &(0x7f0000001480)=0x34cf, 0x2}, {0x400, &(0x7f00000014c0)=0x6, 0x80}, {0x0, &(0x7f0000001500)=0x7, 0x82}, {0xe8, &(0x7f0000001540)=0xfffffffffffffff8, 0x2}, {0x101, &(0x7f0000001580)=0x1, 0x82}, {0x7, &(0x7f00000015c0), 0x82}, {0x5, &(0x7f0000001600)=0x9, 0x2}, {0x5, &(0x7f0000001640)=0x2c12}, {0x7, &(0x7f0000001680)=0x4, 0x2}, {0x0, &(0x7f00000016c0)=0x10, 0x2}, {0x8000, &(0x7f0000001700)=0xfffffffffffffff7, 0x82}, {0xd98, &(0x7f0000001740)=0xd3, 0x82}, {0x86, &(0x7f0000001780)=0x8, 0x82}, {0x3, &(0x7f00000017c0)=0x3}, {0xff1d, &(0x7f0000001800)=0x2, 0x2}, {0x8, &(0x7f0000001840)=0x5, 0x82}, {0x2, &(0x7f0000001880)=0xffffffffffffffff, 0x2}, {0x80000001, &(0x7f00000018c0)=0x4, 0x82}, {0x7fffffffffffffff, &(0x7f0000001900)=0x1c00000000000, 0x82}, {0x0, &(0x7f0000001940)=0xfffffffffffffffd, 0x2}, {0x2, &(0x7f0000001980)=0x4, 0x82}, {0x101, &(0x7f00000019c0), 0x82}, {0x8000000000000001, &(0x7f0000001a00)=0xc8, 0x82}, {0x5, &(0x7f0000001a40)=0x7, 0x2}, {0x1b, &(0x7f0000001a80)=0xbd5, 0x82}, {0x0, &(0x7f0000001ac0)=0x9, 0x82}, {0x4, &(0x7f0000001b00)=0x3, 0x82}, {0x3, &(0x7f0000001b40)=0x6, 0x80}, {0x40, &(0x7f0000001b80), 0x82}, {0xc9a6, &(0x7f0000001bc0)=0x4, 0x82}, {0x3, &(0x7f0000001c00)=0x1800000, 0x82}, {0xffff000000000000, &(0x7f0000001c40)=0x3, 0x2}, {0x173, &(0x7f0000001c80)=0x5, 0x2}, {0x800, &(0x7f0000001cc0), 0x82}, {0x8, &(0x7f0000001d00)=0x7fff, 0x2}, {0x1, &(0x7f0000001d40)=0x1, 0x82}, {0x10, &(0x7f0000001d80)=0x6, 0x2}, {0xbe, &(0x7f0000001dc0)=0x7fffffffffffffff, 0x2}, {0x6, &(0x7f0000001e00)=0xfffffffffffffffd, 0x82}, {0x3, &(0x7f0000001e40)=0x8, 0x82}, {0x9, &(0x7f0000001e80)=0x7fffffffffffffff, 0x2}, {0x0, &(0x7f0000001ec0)=0xa, 0x2}, {0x10, &(0x7f0000001f00), 0x82}, {0x9, &(0x7f0000001f40)=0x8, 0x82}, {0x2, &(0x7f0000001f80)=0x592f, 0x82}, {0x1, &(0x7f0000001fc0)=0x13d80, 0x82}, {0x4, &(0x7f0000002000)=0xb, 0x82}, {0xb, &(0x7f0000002040)=0x65, 0x82}, {0x1, &(0x7f0000002080)=0x4, 0x82}, {0x3, &(0x7f00000020c0)=0x1, 0x82}, {0x0, &(0x7f0000002100), 0x82}, {0x9, &(0x7f0000002140)=0x40, 0x2}, {0x8, &(0x7f0000002180)=0x9, 0x82}], 0x6c, 0x0, &(0x7f0000002c00), 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/235, 0xeb}, {&(0x7f0000000240)=""/248, 0xf8}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/93, 0x5d}, {&(0x7f0000000480)=""/209, 0xd1}, {&(0x7f0000000580)=""/118, 0x76}, {&(0x7f0000000600)=""/19, 0x13}, {&(0x7f0000000000)=""/86, 0x56}], 0x8) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX, @ANYRES64=r1], 0x0) 5.448955093s ago: executing program 3 (id=458): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x3d6}], 0x1, 0x2b, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000200)={0x0, 0xaa30, 0x2, 0x2, 0x5b}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000005c0)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0x4, 0x7, 0x26, 0x7, 0x6f, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000580)=r3, 0x12) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000100)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000180)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xc}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfff3}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x1e}]}}]}, 0x40}}, 0x0) 5.324010321s ago: executing program 2 (id=459): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 5.232907807s ago: executing program 4 (id=460): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xb, "e94641e5"}, @global=@item_012={0x1, 0x1, 0x9, "e1"}]}}, 0x0}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000001c0)={0x0, [[0xffffffff, 0xffffffff, 0xfffffffc, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff]], '\x00', [{0x10, 0xf7, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x1, 0x9, 0x0, 0x0, 0x1}, {0xad5, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x100}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='X\x00'], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) r2 = syz_open_dev$midi(&(0x7f00000016c0), 0x2, 0x2182) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045730, &(0x7f0000001700)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000480)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x100008001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f00000000c0)=0x7ff) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000006c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000540)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0}) 5.04931557s ago: executing program 1 (id=461): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f0000000040)=[{0x4, 0x0, 0x800}, {0x2}, {0x4, 0x100, 0x800}], 0x3) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000300)) 4.951053586s ago: executing program 1 (id=462): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x1) unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) socket$packet(0x11, 0xa, 0x300) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x450, 0x0, 0x1f0, 0x288, 0x320, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x80, 'kmp\x00', 'abc\x00', 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x3000000, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x6) 4.655076675s ago: executing program 0 (id=463): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000380)) r1 = socket(0x2b, 0x80801, 0x1) listen(r1, 0xf) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000400)=@gcm_256={{0x304}, "6d8ad51c89718190", "eb4f103f66632a63c875ca4d03828329bac212458fc9feec4cfb63f0af75dad4", "c16e54c8", "410d61da48bb80af"}, 0x38) listen(r1, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000004c0)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0x1000, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000580)=[@acquire], 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f00000006c0)=0x8) preadv2(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000000180)}], 0x3, 0xee, 0x2, 0x11) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000700)={r5}, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000780)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000900)=""/2}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000940)={0xe0003002}) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb75}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x20000000, 0x3, 0x403}}]}, {0x20}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000ac0)=0xffffff7e, 0x4) 4.444742864s ago: executing program 3 (id=464): r0 = mq_open(&(0x7f0000000000)='-\x00', 0x80, 0x30, &(0x7f0000000040)={0x5902, 0x9, 0xb, 0x8}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendfile(r0, r1, &(0x7f0000000080)=0x4, 0x9) r2 = epoll_create1(0x0) r3 = syz_open_dev$media(&(0x7f00000004c0), 0x3e, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000005c0)={0x200b}) 4.392949186s ago: executing program 3 (id=465): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82040) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0xfffeffff}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(r1, 0x400, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x28, 0x0, &(0x7f0000001380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r2, 0x84, 0x83, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="65786563203a0008c499100949c23262e80dfac1d62de5d32dceea7045b533260ba0d34f2345c44997fd"], 0x2a) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6f) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) socket$inet6_tcp(0xa, 0x1, 0x0) set_mempolicy(0x4000, 0x0, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) socket$inet(0x2, 0x6, 0x9) r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x169101) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffb, 0x0, 0x4}) openat$mice(0xffffff9c, &(0x7f0000000180), 0x4b8500) 4.363388718s ago: executing program 2 (id=466): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xffffffff, 0x0, 0x9, 0x1, 0x0, 0xfa11, 0xac}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000040)={0x20001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e06, 0x1, @remote, 0x10009}, 0x21) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents(r3, &(0x7f00000001c0)=""/35, 0x23) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x12, 0x11}}) r4 = openat(r1, &(0x7f0000000240)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) sendmmsg$inet(r2, 0x0, 0x0, 0x2400c8c4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {0xe, 0x4}}}, 0x24}}, 0x80c0) r6 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0xc1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x10001, 0x5}) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000140)=0x1, 0x4) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r7, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES64=r2, @ANYRESHEX=r7], 0xc8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.664826357s ago: executing program 0 (id=467): syz_ublk_setup_io_uring(0x588b, &(0x7f0000000180)={0x0, 0x30b5, 0x40, 0x200003, 0x158}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d80), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000dc0)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e00)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @link_local}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0xff, 0x0, 0x1fe]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000380)={0x0, 0x6bd2, 0x1000, 0x2, 0x158}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000004c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000580)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) capset(&(0x7f0000000a80)={0x20080522}, &(0x7f0000000ac0)={0x1000, 0x10ffff, 0xfffffffd}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r13, 0x1, 0x3c, &(0x7f0000000b00)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r13, 0x6, 0x13, &(0x7f0000000b40)=0x1, 0x4) connect$inet(r13, &(0x7f0000000b80)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r13, 0x6, 0x13, &(0x7f0000000bc0)=0xffffffffffffffff, 0x4) sendmmsg(r13, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)="a9", 0x1}], 0x20c}}], 0x2, 0x4000045) syz_ublk_setup_queues(r12, r10, &(0x7f00000005c0)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f00000008c0)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x6, 0x0, &(0x7f0000000a00)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x20084884) r14 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r14, &(0x7f0000000140)={'stack ', '\x1e\xbbv\x00\a\xa9\x02\x002T{gdj\x01\x00\xcf'}, 0x17) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) 3.517378442s ago: executing program 4 (id=468): r0 = socket(0x10, 0x803, 0x0) (async) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f00000001c0)=""/184, 0xb8) (async) getdents(r3, &(0x7f0000000280)=""/184, 0xb8) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xfd, 0xe3, 0x1, 0x1, @empty, @local, 0x20, 0x8, 0xd735, 0x8001}}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_getvlan={0x38, 0x72, 0x100, 0x70bd29, 0x25dfd3ff, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}}, 0x8091) 3.486452964s ago: executing program 1 (id=469): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x142) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x149800, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, '\x00', "bb6710bc8150e4a1a117d7b27caf00", "8c76287d"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000180)=0x5, 0x4) 3.14938376s ago: executing program 4 (id=470): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000003c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20802, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x40003) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) r7 = userfaultfd(0x801) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000300)={&(0x7f0000000400)=@hci, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r9, &(0x7f00000005c0)={0x0, 0x18, &(0x7f0000000600), 0x31}, 0x0) close(r9) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x2}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000007a40)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r5, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2.868501075s ago: executing program 2 (id=471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3a}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x4004894) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000200)={0x1, @in6={{0xa, 0x4e22, 0x40, @remote, 0x6}}, 0x4e23}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000300)={r4, 0x5, 0x3}, 0x8) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x103882, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000380)=@l={0x92, 0xb, 0xc0, 0x19, 0xd, 0x6d, 0x9}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) r6 = syz_open_dev$vim2m(&(0x7f0000000440), 0x3700000000000000, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000480)={0x1, 0x4, 0x7ff, 0x88800}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f00000004c0)={0x101, 0x1, 0x0, 0x8}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000500)={r2, 0x7}, &(0x7f0000000540)=0x8) r8 = syz_open_dev$swradio(&(0x7f0000000580), 0x0, 0x2) ioctl$VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000000600)=@userptr={0x3, 0xb, 0x4, 0xe200, 0x9, {0x0, 0xea60}, {0x5, 0xd, 0x6e, 0x3, 0x0, 0x6, "9dfface8"}, 0xd, 0x2, {&(0x7f00000005c0)}, 0xbc}) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000700)={'wg0\x00'}) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000740), 0x280, 0x0) sendmsg$nl_route(r11, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@ipv6_newaddr={0x58, 0x14, 0x800, 0x70bd25, 0x25dfdbfe, {0xa, 0xd8733b91db06ccee, 0x10, 0xfd, r10}, [@IFA_LOCAL={0x14, 0x2, @empty}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40801}, 0x0) open$dir(&(0x7f00000008c0)='./file0\x00', 0x40, 0x11b) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000900), 0x80000, 0x0) ioctl$SNDCTL_DSP_SPEED(r12, 0xc0045002, &(0x7f0000000940)=0x8) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000000980)={0x0, 0x9, 0x1c0000, 0x7, 0xffffff80, 0x0, 0x8000, 0x9e}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r11, 0xc008644c, &(0x7f00000009c0)={r13}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r7, 0xf507, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xbf, &(0x7f0000000a00)=@generic={0x4, 0x2, 0xb7, "62c6abc5", "2a18672cc7c355143c03ab4a011b74d4964cba3964e2ad6be9ebd729b710b648d102f5a5082193d8a497ac9c7baa592b57f31cf5997c475665bdcc5adabb4fa3f082ac5eecaa2838eef1b059c7b1c91fe8bc023022cf590f9c7f319a0af001852b9fe72174232db90a1b88dd8b0005c9a2e2dce057f5c422a4ad7b0149ab74d00b6ae2d641d94b030de53be9b8b403c35aa9122bf42a85d92dbaf4901d0ed55fe02be07f0104c1f6ba816f9b5fea18e0b3e9c39ed340f1"}) recvmmsg(r0, &(0x7f0000003340)=[{{&(0x7f0000000ac0)=@ax25={{0x3, @netrom}, [@null, @remote, @netrom, @remote, @remote, @remote, @bcast, @rose]}, 0x80, &(0x7f0000002100)=[{&(0x7f0000000b40)=""/63, 0x3f}, {&(0x7f0000000b80)=""/137, 0x89}, {&(0x7f0000000c40)=""/150, 0x96}, {&(0x7f0000000d00)=""/120, 0x78}, {&(0x7f0000000d80)=""/138, 0x8a}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/165, 0xa5}, {&(0x7f0000001f00)=""/178, 0xb2}, {&(0x7f0000001fc0)=""/251, 0xfb}, {&(0x7f00000020c0)}], 0xa, &(0x7f00000021c0)=""/4096, 0x1000}, 0x400}, {{&(0x7f00000031c0)=@un=@abs, 0x80, &(0x7f0000003240), 0x0, &(0x7f0000003280)=""/177, 0xb1}, 0x240000}], 0x2, 0x140, &(0x7f00000033c0)) 1.976203629s ago: executing program 4 (id=472): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f0000000040)=[{0x4, 0x0, 0x800}, {0x2}, {0x4, 0x0, 0x800}], 0x3) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000300)) 1.709433348s ago: executing program 4 (id=473): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7fffffffffffffff, 0x7f, 0x1}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x10) (async) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x14) (async) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') (async) syz_usb_connect(0x5, 0xacb, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0xcc, 0x96, 0x1f, 0x10, 0xccd, 0x36, 0x1e46, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab9, 0x4, 0x31, 0x8, 0x20, 0x10, "", [{{0x9, 0x4, 0x9b, 0xc, 0xd, 0x70, 0x6b, 0x9a, 0x3, [], [{{0x9, 0x5, 0x9, 0x14, 0x200, 0xf, 0xf8}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x1, 0x81, 0x6, [@generic={0xc7, 0xa, "ac6675165b2931020e1fd8f31dd7cdf6184d4d7579e6de8de7691883352de1c1f4bc0ee7f796d90dbcdea016842b48d7c7eae2af11c329ec56b2338c18f1494b0040702f77d44a21d7267613c52c577e466fea525e1a49f1db49f93c879737361ccba04d2aa05d26e0602c330689eaacff7ca4d23c6d6ebf53abbee788de4f8f32e56d8a26cb96e954c03b4b2c4cca5716f28175b360d78836b829e5482805f7c8eb56c4350dc9282de7533ab06cb3032d2ec1de2e9807b86dff65de14ecfe8a6975d5e024"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x210, 0x10, 0xf7, 0x5f}}, {{0x9, 0x5, 0x9, 0x0, 0x240, 0x9, 0x80, 0xf, [@generic={0x2, 0xc}]}}, {{0x9, 0x5, 0x80, 0x10, 0x420, 0x9a, 0x9, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xe6, 0x4f57}]}}, {{0x9, 0x5, 0x4, 0x8, 0x40, 0x3, 0x5, 0x9}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x6, 0x4, 0x8, [@generic={0xcd, 0x30, "9b87201101e7052ba59f62bd43f51800bc22a81713c2e8d2572dcbfbb7871cefc547502017be4eae30a83ee169e377f4cfdf86da6153cdda8ff501b6f2d75797d7bb55d2b450ffc85b2452c90cd19c408f1a0adbf416f25b421b6ab60277f27dca78f6beb8bdd7d1ea20eea336a16409ecf6f4c0f530fdf67181d6306148e3b1ed158ef24897f2658e042bb9c5e33eed5551eec946843c25c264a1b725c9501575c0981596f3928f6c8e34f19f14930c314c1ac46252ea3c51145f6de6bb0b9a39fdb8fb6a102d81714bbc"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x2}]}}, {{0x9, 0x5, 0xc, 0x0, 0x448, 0x46, 0x7, 0x6, [@generic={0x2f, 0x1, "0c0ee74a02562ebbb920dae9b2c16f28c86558d9a6eba7eff494a58e5f1586d21594913eb6aa4a47ba025c506e"}]}}, {{0x9, 0x5, 0x9243bfb7ae02cc53, 0x1, 0x40, 0x3, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x6a2}, @generic={0x9a, 0xa, "f1c1203056b48de16752aa9de3feac0676ff0c105f0d194554ce484481959481344d0ba4a4475b8246af4a6c518554b0bd1772f94982290980e9856875e47f5a059ee841ceec20727db5accb576ff3a76568fd4a41b8a5eebda7929b28f6d72f3fd0d282260eb352e537adfce342bdb90282095e910c00ab7ddfe5f7ad3d3abcf9cc8141a62aeca15abcdecc2784fb217e3e4ee169f44915"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x1, 0x3, 0x3, [@generic={0x92, 0x10, "7e9884c91efacee04e4291ca099084e25fe6fd74d2d33fad97c4c27f7c191e02cc2aeed7ce0e5ff60a056ca57f6e8cf4c73b1776d89800c36ac2c610243bcb0eaef24aa10924867e5418b3950fbaedaa855c65cb7fdb1e8d1be8ddd17ca7afa3cbb4a14d5a361e3dee7942850d15345422a6d5626f102a4ec2977c9ef25a02051c21a2841c0ce2693c051a1e69989af3"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x12, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8d, 0x1}, @generic={0x13, 0x24, "06aec324754bed00ceceaf3d327a607e5d"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x7f, 0x1, 0x75}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0xa, 0x1, 0x7, [@generic={0x3e, 0x0, "bb940bb4ffd704db84e4585a3c16051d02ba391edaf422a7b27c9209981c111e772ff0b6950d27360d8d92d62484c0e2031a987d7f30ff247dcf1d1a"}, @generic={0x6b, 0x10, "a82ab4494cc00b2e7b60111ad537662f97d4d8f81dbf82b5b35b44b1f3c89b3a3cf0835ac73bd4905fe7738569777d801ce2dff7f368b8fe206b38a3b728b91419e86b06e397430910c79bbc525f53d12845f1e7938e6a301bbdc49e96b6af9a27717c23f91de825da"}]}}]}}, {{0x9, 0x4, 0x1d, 0x0, 0xc, 0x13, 0xeb, 0x99, 0x20, [@hid_hid={0x9, 0x21, 0xcb59, 0xf, 0x1, {0x22, 0xd61}}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x10}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x5, "fa"}]}], [{{0x9, 0x5, 0x7, 0x2, 0x20, 0x6, 0x8, 0x6, [@generic={0xd8, 0x22, "8461bef7565994e2a7ac69547bba5453fe6cae82342727636795d3766064a4ec47535b235245b3e58b116d75c9f8196811825423c371e4afa31654e6380cd4424c6ffbc61138ae97a833be80004e9fbeb199fae5acb1f2dac448ae5983c2bb3bbbf93540b9ab7d782202534a69f7e737ef2b3e8ea458adeea5e5b3590844f1b6f7d0db4f24d4d6158c40fc0f89ebe628d73a3d254dcff594b24830b78b51dc018c10f935a73da5d1469ff24a94eb536a6ffdc8e8314d3b1aa788b9aab739d5a4f6051164b71767cbe794cf6a9728a10706e28203261e"}, @generic={0x80, 0x0, "1b54024b2cd89615d447fa992dc6cff0c80542987d477e49292916c924efbd30a014159532a259eee2695d5174481ed587c85b3c70ebd139fa6d74ead609c780e009c7c7937fe935d87ac174698aca149608448c3457ea92f029f3129d4a2579da2e176cff063f66c7a28524cd8fa358e8ed4f90d65724fb9e1613337b01"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0xde, 0x3, 0x5, [@generic={0x7a, 0xe, "2abec200c56069421f20f3d9847ad81d22d5976e786f9b05bb603e69d4f926c7135434fde412cf03d0ca274a36252b976d0d1a2f51320870bce2ed7ee5cb11442e835f86d916efdc8cccb0192b4d231e4b622b9edf3233e5f3665ab4aa49170581f2999add68dff29902db73be86516bf3b615ecaa19e4b2"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x1, 0x7, 0x9}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0xff, 0x7, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x8}]}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x80, 0x6, 0xd}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x3, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6c, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8c, 0x9}]}}, {{0x9, 0x5, 0x8a, 0x2, 0x40, 0x7, 0x7f, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5f, 0xcca}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x5, 0x6, 0xff, [@generic={0xc4, 0xa, "80956d4e21a5adb0b7bdbe595a069af44023f87ec51a9edca8ef2286d72964729cd3f68d36ddfb999ad2201560c459e47addff1fc2f711a07a9d757081beba564c35d82001ee19d445fcc6bed28d12c968079d58cf38a990de11539cdcd82ffd3eb4b2f293bfc3ce49e8c91dd0c4a76436137bb2ede9f85d4667be769b4a053f64baefa7b5806f59c02c041464b7c1ec05d0875491f2ad0d7310b3c820afe46b912622c582e6b3175901d15cebc8e48eaf7533b1d2a10e30fee4de9058e3ad4a0516"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x5, 0x8, 0x5, [@generic={0x94, 0xc, "a9c3d1d4bdfb97787927425201edc70762f63215aca6f4323646939931ccc2fb9289062a310e23927cc802ecdcba8c740a30ff854b7633ca29cc0d6de802c744a4d0b8eaf49191a6e3b1d8a107f95f374c5ad099229e6acf27cc09692797aa647030e88005c974895783af449f1c17fced42d6b2e54729804c9901e832e4ddda52c4e4ac6b29337700fb1923b50a2431610b"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x9}]}}, {{0x9, 0x5, 0x4, 0x1, 0x400, 0x7, 0x3, 0x7, [@generic={0x24, 0x30, "49f5b716352d6c8cfb8c3bd01eee429ace9ebffa0efb2cff179fca83b05ff42097b0"}]}}, {{0x9, 0x5, 0xd, 0x5e687eb87b3a9963, 0x0, 0xf1, 0x6, 0x9}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x81, 0x3, 0x8, [@generic={0xa8, 0xc, "f1deac0ff713dae94d0a91325b44acc86613518a46cff4c8ed0013741b9212d6d3e2f37671c94c06b8f9483cef0fbc2c761897119321225e906b2a498567913b4f431eaf85cb54efbafbd0f72bf9dd7f0a25b37a2c4716dc094a3a115820e5c19ccc8423d2706e1fd91197567aae49511b8a67c3cd49211079e70fef9f0f612a6b923f1909ec4d8d3d741b571a6aad0d3f845c15e13fce74ad2e7bc6e7bc13203d564ec4cd67"}, @generic={0xa1, 0x9, "743bddb57be57e1635aacc51e2355501be4dbc87b7575463eb76b2e9cfc2151ae4c84d30f696fba8e0cc0fe68c09a0bccf72e6022045070fc0a73b8ac83ae872f11426d668fbdb23bbfe72ac80310aded269f02938481d93ddf581b15b4e815e3532775d5877c6dcd60893bd536a671d68b1594fa52ec50d8a98859a140f8e14f43a9e9a1820f087e79215faf31fe6b3e091ea71b0108abb63745f7d3231ac"}]}}]}}, {{0x9, 0x4, 0xe1, 0x5, 0x0, 0xf2, 0x69, 0xf8, 0x2, [@generic={0x6, 0xe, "4945f6f5"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d7ae"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xcb, 0x800, 0xe}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x7ff, 0xeb1, 0x14, 0x2, 0xf, 0x88}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x3, 0x7}]}]}}, {{0x9, 0x4, 0x8f, 0x2, 0x4, 0x93, 0x5c, 0x65, 0x0, [@generic={0x7e, 0x4, "48c587038085f199fc30bce6cb3d0b9668681e473a42cb6e74a5ad7029ea3834751daa7cc00462bb43a1f5e6b8b498d3547e8705d3af573eb28572772491e3a53ba428647c55f061deddb8e4ef811c390b930ecb2eb9555cbf9ed068bb02905e0eefe4312264f97adfdd7c8b8594062f64bfb6acf8b2b91910367c66"}], [{{0x9, 0x5, 0x9, 0x4, 0x200, 0xf8, 0x30, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x2, 0x3, 0x5, [@generic={0x19, 0x21, "ca5c53c682262d8342f85c4edb9e9899ec2e928aa8533f"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x400, 0x1, 0xeb, 0x9}}, {{0x9, 0x5, 0x0, 0x1, 0x0, 0x6, 0x69, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x250, 0x0, 0x0, 0xfb, 0x40}, 0x1a, &(0x7f0000000f00)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0xe, 0xffff}, @wireless={0xb, 0x10, 0x1, 0xc, 0xf88552dd6276853e, 0x9, 0x6, 0x4, 0x92}]}, 0x4, [{0xfc, &(0x7f0000000f40)=@string={0xfc, 0x3, "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"}}, {0x6d, &(0x7f0000001040)=@string={0x6d, 0x3, "8acfa6a9f00c6698666b0ec604ff98c27abba3c019597fab9d2d0e08cb5b7585252e9d4d340464df5bfb384ec361a129db5246c4d3f8b12ba4215e06e57c98f18b628c7adfc97c182d2163dab08ac8f5263d2686ac51faca05f19098f332dd35f3eb4034d663def1764a3b"}}, {0x39, &(0x7f00000010c0)=@string={0x39, 0x3, "5364cf42313044d76ea626ba98e738fd7ded77e91cc6e822207b95565fdd88d495c22164bfea1b95177470aa882ed3a38bfd48ba0f3d20"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x403}}]}) 1.641602005s ago: executing program 2 (id=474): timer_create(0x0, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f00000000c0), 0x20000000000000b5, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x10, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_delete(0x0) 1.310813127s ago: executing program 0 (id=475): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1fd}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000700), &(0x7f0000000380)=0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000300)={0xffffffffffffffff, 0x8, 0x1, 0x1, @vifc_lcl_ifindex=r3, @loopback}, 0x10) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x600) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000004c0)={'\x00', 0x200, 0x6, 0x1, 0x4, 0x0, "000000000000000000002ff6b03900", "000200", "000000f3", "dd00", ["95ec1df3a4a032c2ffffffff", "ffee4df1aa8d37a76e00", "070500110800c1024b00", "38a70ed483c99b9f1600d333"]}) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x10001, 0x4, 0x5, 0x82, 0x8, 0xfa, 0x40, 0x8, 0x5, [0x1000006, 0xfffffbff, 0x5, 0x8, 0x0, 0x8a6d, 0xf7ffffff, 0x2], [0xffffffff]}}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[], 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002f0009002abd70000000001a040000000900118031f9e15e2f000000"], 0x20}, 0x1, 0x0, 0x0, 0x2004b884}, 0x84) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40) readv(r9, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/207, 0xcf}, {0x0}], 0x2) open(&(0x7f0000000040)='./file0\x00', 0x840, 0xc0) 1.203354555s ago: executing program 3 (id=476): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=477): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x16, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000001c0)=0x2) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0xe) kernel console output (not intermixed with test programs): socket [ 141.289212][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 141.291955][ T49] vhci_hcd vhci_hcd.2: stop threads [ 141.291980][ T49] vhci_hcd vhci_hcd.2: release socket [ 141.297815][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 141.310306][ T49] vhci_hcd vhci_hcd.2: stop threads [ 141.310378][ T49] vhci_hcd vhci_hcd.2: release socket [ 141.310536][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 141.359399][ T6496] loop4: detected capacity change from 0 to 7 [ 141.362888][ T10] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 1: 0 (exp. 1). [ 141.391064][ T6496] Dev loop4: unable to read RDB block 7 [ 141.391120][ T6496] loop4: unable to read partition table [ 141.391347][ T6496] loop4: partition table beyond EOD, truncated [ 141.391368][ T6496] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 141.425305][ T5729] usb 1-1: USB disconnect, device number 24 [ 141.572090][ T10] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 141.572200][ T10] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 141.604765][ T10] usb 5-1: USB disconnect, device number 18 [ 142.783333][ T5697] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 142.935023][ T5697] usb 5-1: Using ep0 maxpacket: 8 [ 142.937459][ T5697] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 142.938628][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 142.938657][ T5697] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 142.938683][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 142.981161][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.981192][ T5697] usb 5-1: Product: syz [ 142.981209][ T5697] usb 5-1: Manufacturer: syz [ 142.981225][ T5697] usb 5-1: SerialNumber: syz [ 143.021845][ T5697] usb 5-1: config 0 descriptor?? [ 143.036459][ T5697] radioshark2 5-1:0.0: Invalid radioSHARK2 device [ 143.036511][ T5697] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22 [ 143.037602][ T5697] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 143.073911][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 143.170821][ T6536] netlink: 'syz.0.198': attribute type 1 has an invalid length. [ 143.170846][ T6536] netlink: 'syz.0.198': attribute type 2 has an invalid length. [ 143.203328][ T10] usb 2-1: device descriptor read/64, error -71 [ 143.233107][ T1071] usb 5-1: USB disconnect, device number 19 [ 143.387229][ T6541] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 143.453776][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 143.481745][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 143.593358][ T10] usb 2-1: device descriptor read/64, error -71 [ 143.674349][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.703675][ T10] usb usb2-port1: attempt power cycle [ 143.803418][ T25] usb 3-1: device descriptor read/64, error -71 [ 143.873485][ T1071] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 143.973343][ T5626] Bluetooth: hci0: command tx timeout [ 144.025648][ T1071] usb 4-1: Using ep0 maxpacket: 16 [ 144.030916][ T1071] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 144.045065][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 144.048776][ T1071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.048839][ T1071] usb 4-1: Product: syz [ 144.048874][ T1071] usb 4-1: Manufacturer: syz [ 144.048914][ T1071] usb 4-1: SerialNumber: syz [ 144.055697][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 144.077849][ T1071] usb 4-1: config 0 descriptor?? [ 144.091651][ T10] usb 2-1: device descriptor read/8, error -71 [ 144.185118][ T25] usb 3-1: device descriptor read/64, error -71 [ 144.300384][ T25] usb usb3-port1: attempt power cycle [ 144.337893][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 144.354470][ T10] usb 2-1: device descriptor read/8, error -71 [ 144.392753][ T31] audit: type=1326 audit(1791872525.854:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.0.205" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35e59e1d9 code=0x7ffc0000 [ 144.392808][ T31] audit: type=1326 audit(1791872525.854:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.0.205" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35e59e1d9 code=0x7ffc0000 [ 144.395582][ T31] audit: type=1326 audit(1791872525.854:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.0.205" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fe35e59e1d9 code=0x7ffc0000 [ 144.396596][ T31] audit: type=1326 audit(1791872525.864:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.0.205" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35e59e1d9 code=0x7ffc0000 [ 144.398140][ T31] audit: type=1326 audit(1791872525.864:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.0.205" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35e59e1d9 code=0x7ffc0000 [ 144.466783][ T10] usb usb2-port1: unable to enumerate USB device [ 144.525461][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.528254][ T6561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.529714][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.548574][ T6561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.570903][ T6561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.571774][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.597526][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.598044][ T6561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.618182][ T1071] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 144.638319][ T1071] usb 4-1: USB disconnect, device number 16 [ 144.650181][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 144.667764][ T25] usb 3-1: device descriptor read/8, error -71 [ 144.903363][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 144.929590][ T25] usb 3-1: device descriptor read/8, error -71 [ 144.989868][ T6564] binder: 6563:6564 ioctl 5000940f 2000000000c0 returned -22 [ 145.033704][ T25] usb usb3-port1: unable to enumerate USB device [ 145.065341][ T6566] netlink: 'syz.4.207': attribute type 4 has an invalid length. [ 145.065358][ T6566] netlink: 17 bytes leftover after parsing attributes in process `syz.4.207'. [ 145.186172][ T6570] nvme_fabrics: found same hostid e35f6a9f-0759-4751-98a9-427698679386 but different hostnqn n [ 145.256171][ T6574] FAULT_INJECTION: forcing a failure. [ 145.256171][ T6574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.256229][ T6574] CPU: 0 UID: 0 PID: 6574 Comm: syz.0.210 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.256260][ T6574] Tainted: [L]=SOFTLOCKUP [ 145.256268][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.256281][ T6574] Call Trace: [ 145.256290][ T6574] [ 145.256300][ T6574] dump_stack_lvl+0xe8/0x150 [ 145.256352][ T6574] should_fail_ex+0x410/0x560 [ 145.256390][ T6574] _copy_from_user+0x2d/0xb0 [ 145.256418][ T6574] ___sys_sendmsg+0x1c6/0x360 [ 145.256442][ T6574] ? __lock_acquire+0x747/0x2de0 [ 145.256472][ T6574] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.256532][ T6574] ? __fget_files+0x2a/0x420 [ 145.256552][ T6574] ? __fget_files+0x3a2/0x420 [ 145.256584][ T6574] __x64_sys_sendmsg+0x1b1/0x290 [ 145.256612][ T6574] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.256660][ T6574] do_syscall_64+0x166/0x520 [ 145.256692][ T6574] ? trace_irq_disable+0x3b/0x140 [ 145.256717][ T6574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.256740][ T6574] ? clear_bhb_loop+0x70/0xc0 [ 145.256768][ T6574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.256790][ T6574] RIP: 0033:0x7fe35e59e1d9 [ 145.256816][ T6574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.256835][ T6574] RSP: 002b:00007fe35f446028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.256859][ T6574] RAX: ffffffffffffffda RBX: 00007fe35e825fa0 RCX: 00007fe35e59e1d9 [ 145.256876][ T6574] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 145.256890][ T6574] RBP: 00007fe35f446090 R08: 0000000000000000 R09: 0000000000000000 [ 145.256905][ T6574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.256918][ T6574] R13: 00007fe35e826038 R14: 00007fe35e825fa0 R15: 00007fe35e94fa48 [ 145.256953][ T6574] [ 145.781665][ T6585] loop4: detected capacity change from 0 to 7 [ 145.792034][ T6585] Dev loop4: unable to read RDB block 7 [ 145.792078][ T6585] loop4: unable to read partition table [ 145.792304][ T6585] loop4: partition table beyond EOD, truncated [ 145.792339][ T6585] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 145.884732][ T5349] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 145.903492][ T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 146.053721][ T5626] Bluetooth: hci0: command tx timeout [ 146.054624][ T10] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 146.055848][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.055872][ T10] usb 1-1: config 0 has no interface number 0 [ 146.055912][ T10] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.055941][ T10] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.055965][ T10] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.055992][ T10] usb 1-1: config 0 interface 1 has no altsetting 0 [ 146.056025][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.058742][ T10] usb 1-1: config 0 descriptor?? [ 146.223431][ T5683] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 146.263450][ T5697] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 146.388894][ T5683] usb 2-1: No LPM exit latency info found, disabling LPM. [ 146.388938][ T5683] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.390680][ T5683] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 146.390742][ T5683] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 146.444245][ T5697] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.445685][ T5697] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 146.445737][ T5697] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 146.445762][ T5697] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.449105][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.449189][ T5697] usb 4-1: Product: syz [ 146.449207][ T5697] usb 4-1: Manufacturer: syz [ 146.449223][ T5697] usb 4-1: SerialNumber: syz [ 146.515441][ T5697] usb 4-1: config 0 descriptor?? [ 146.534984][ T5697] hub 4-1:0.0: bad descriptor, ignoring hub [ 146.535013][ T5697] hub 4-1:0.0: probe with driver hub failed with error -5 [ 146.561614][ T5697] usb 4-1: selecting invalid altsetting 0 [ 146.710460][ T10] uclogic 0003:145F:0212.0005: pen parameters not found [ 146.710498][ T10] uclogic 0003:145F:0212.0005: interface is invalid, ignoring [ 146.923173][ T1071] usb 1-1: USB disconnect, device number 25 [ 147.022758][ T6605] bridge0: port 3(syz_tun) entered blocking state [ 147.022908][ T6605] bridge0: port 3(syz_tun) entered disabled state [ 147.023113][ T6605] syz_tun: entered allmulticast mode [ 147.048567][ T6605] syz_tun: entered promiscuous mode [ 147.050465][ T6605] bridge0: port 3(syz_tun) entered blocking state [ 147.050596][ T6605] bridge0: port 3(syz_tun) entered listening state [ 147.103653][ C0] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 147.104202][ C0] bridge0: topology change detected, propagating [ 147.154883][ T5676] usb usb38-port8: attempt power cycle [ 147.277515][ T31] audit: type=1326 audit(1791872528.744:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.3.216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f310cf9e1d9 code=0x0 [ 147.283400][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 147.463425][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 147.464406][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 147.467024][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.467079][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.467112][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 147.467138][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 147.467165][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.470001][ T25] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 147.470033][ T25] usb 5-1: Manufacturer: syz [ 147.491423][ T1071] usb 4-1: USB disconnect, device number 17 [ 147.499117][ T25] usb 5-1: config 0 descriptor?? [ 147.703057][ T6614] FAULT_INJECTION: forcing a failure. [ 147.703057][ T6614] name failslab, interval 1, probability 0, space 0, times 1 [ 147.703100][ T6614] CPU: 0 UID: 0 PID: 6614 Comm: syz.0.221 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.703130][ T6614] Tainted: [L]=SOFTLOCKUP [ 147.703137][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.703149][ T6614] Call Trace: [ 147.703158][ T6614] [ 147.703168][ T6614] dump_stack_lvl+0xe8/0x150 [ 147.703208][ T6614] should_fail_ex+0x410/0x560 [ 147.703242][ T6614] ? __alloc_skb+0x1db/0x7a0 [ 147.703276][ T6614] should_failslab+0xa8/0x100 [ 147.703307][ T6614] ? __alloc_skb+0x1db/0x7a0 [ 147.703339][ T6614] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 147.703365][ T6614] ? __alloc_skb+0x18d/0x7a0 [ 147.703399][ T6614] ? __alloc_skb+0x1db/0x7a0 [ 147.703439][ T6614] __alloc_skb+0x1db/0x7a0 [ 147.703476][ T6614] netlink_sendmsg+0x5d4/0xb40 [ 147.703516][ T6614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.703565][ T6614] ? apparmor_socket_sendmsg+0x98/0x360 [ 147.703598][ T6614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.703625][ T6614] sock_sendmsg_nosec+0x13a/0x180 [ 147.703660][ T6614] ____sys_sendmsg+0x54e/0x850 [ 147.703690][ T6614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.703724][ T6614] ? import_iovec+0x73/0xa0 [ 147.703760][ T6614] ___sys_sendmsg+0x2a5/0x360 [ 147.703784][ T6614] ? __lock_acquire+0x747/0x2de0 [ 147.703814][ T6614] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.703876][ T6614] ? __fget_files+0x2a/0x420 [ 147.703896][ T6614] ? __fget_files+0x3a2/0x420 [ 147.703928][ T6614] __x64_sys_sendmsg+0x1b1/0x290 [ 147.703957][ T6614] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.704014][ T6614] do_syscall_64+0x166/0x520 [ 147.704039][ T6614] ? trace_irq_disable+0x3b/0x140 [ 147.704065][ T6614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.704089][ T6614] ? clear_bhb_loop+0x70/0xc0 [ 147.704116][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.704138][ T6614] RIP: 0033:0x7fe35e59e1d9 [ 147.704159][ T6614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.704178][ T6614] RSP: 002b:00007fe35f446028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.704202][ T6614] RAX: ffffffffffffffda RBX: 00007fe35e825fa0 RCX: 00007fe35e59e1d9 [ 147.704219][ T6614] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 147.704234][ T6614] RBP: 00007fe35f446090 R08: 0000000000000000 R09: 0000000000000000 [ 147.704248][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.704262][ T6614] R13: 00007fe35e826038 R14: 00007fe35e825fa0 R15: 00007fe35e94fa48 [ 147.704295][ T6614] [ 147.876232][ T5676] usb usb38-port8: unable to enumerate USB device [ 148.134269][ T5626] Bluetooth: hci0: command tx timeout [ 148.148740][ T25] rc_core: IR keymap rc-hauppauge not found [ 148.148784][ T25] Registered IR keymap rc-empty [ 148.151193][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 148.167133][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 148.187435][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 148.208601][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 148.229825][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 148.244160][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 148.265196][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 148.286879][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 148.304957][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 148.324020][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 148.325819][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 148.326546][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 148.328025][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 148.346202][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 148.363856][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 148.383424][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 148.403528][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 148.405510][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 148.415114][ T1071] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 148.449641][ T25] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 148.449671][ T25] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 148.574148][ T1071] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 148.579002][ T1071] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 148.579050][ T1071] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.581859][ T1071] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 148.581877][ T1071] usb 1-1: Manufacturer: syz [ 148.669904][ T1071] usb 1-1: config 0 descriptor?? [ 148.694115][ T1071] igorplugusb 1-1:0.0: incorrect number of endpoints [ 148.906740][ T25] usb 1-1: USB disconnect, device number 26 [ 149.061219][ T5683] usb 2-1: string descriptor 0 read error: -71 [ 149.061367][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.089951][ T5683] usb 2-1: can't set config #1, error -71 [ 149.099688][ T5683] usb 2-1: USB disconnect, device number 15 [ 149.434791][ T6634] loop4: detected capacity change from 0 to 7 [ 149.437703][ T6634] Dev loop4: unable to read RDB block 7 [ 149.437752][ T6634] loop4: unable to read partition table [ 149.438993][ T6634] loop4: partition table beyond EOD, truncated [ 149.439110][ T6634] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 149.618610][ T6631] veth0_to_hsr: mtu greater than device maximum [ 150.003363][ T5676] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 150.013452][ T1071] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 150.073203][ T5683] usb 5-1: USB disconnect, device number 20 [ 150.156003][ T5676] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 150.157575][ T5676] usb 4-1: config 0 has no interfaces? [ 150.159870][ T5676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.159896][ T5676] usb 4-1: Product: syz [ 150.159912][ T5676] usb 4-1: Manufacturer: syz [ 150.159928][ T5676] usb 4-1: SerialNumber: syz [ 150.165879][ T1071] usb 1-1: Using ep0 maxpacket: 8 [ 150.170306][ T1071] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 150.183852][ T1071] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 150.183932][ T1071] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.183983][ T1071] usb 1-1: config 0 has no interface number 0 [ 150.184087][ T1071] usb 1-1: config 0 interface 122 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 150.214880][ T1071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.214953][ T1071] usb 1-1: Product: syz [ 150.214995][ T1071] usb 1-1: Manufacturer: syz [ 150.215036][ T1071] usb 1-1: SerialNumber: syz [ 150.224452][ T5626] Bluetooth: hci0: command tx timeout [ 150.257046][ T1071] usb 1-1: config 0 descriptor?? [ 150.290541][ T5676] usb 4-1: config 0 descriptor?? [ 150.389662][ T6652] vivid-002: disconnect [ 150.390626][ T6651] vivid-002: reconnect [ 150.468274][ T6655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.233'. [ 150.496594][ T6656] netlink: 'syz.1.234': attribute type 39 has an invalid length. [ 150.535519][ T6637] ip_tables: iptables: counters copy to user failed while replacing table [ 150.541461][ T6639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.542067][ T6639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.542532][ T25] usb 4-1: USB disconnect, device number 18 [ 150.634471][ T1071] usb 1-1: NFC: intf ffff88802c21b000 id ffffffff9085d3c0 [ 150.655728][ T1071] usb 1-1: USB disconnect, device number 27 [ 150.791849][ T6659] tipc: Started in network mode [ 150.791878][ T6659] tipc: Node identity 7f000001, cluster identity 4711 [ 150.805432][ T6659] tipc: Enabling of bearer rejected, failed to enable media [ 150.911134][ T6661] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 150.911162][ T6661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.161830][ T6668] fuse: root generation should be zero [ 151.483329][ T5683] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 151.633322][ T5683] usb 4-1: Using ep0 maxpacket: 8 [ 151.634065][ T5683] usb 4-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 151.635131][ T5683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.635159][ T5683] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.635189][ T5683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.638710][ T5683] usb 4-1: config 0 descriptor?? [ 151.863478][ T1071] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 151.907790][ T6670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.013311][ T1071] usb 5-1: Using ep0 maxpacket: 16 [ 152.014107][ T1071] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.018932][ T1071] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.018989][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.019019][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.019034][ T1071] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 152.019071][ T1071] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.022675][ T1071] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.022703][ T1071] usb 5-1: Manufacturer: syz [ 152.095444][ T1071] usb 5-1: config 0 descriptor?? [ 152.164685][ T5683] appleir 0003:05AC:8240.0006: collection stack underflow [ 152.165930][ T5683] appleir 0003:05AC:8240.0006: item 0 4 0 12 parsing failed [ 152.168233][ T5683] appleir 0003:05AC:8240.0006: parse failed [ 152.168344][ T5683] appleir 0003:05AC:8240.0006: probe with driver appleir failed with error -22 [ 152.312268][ T5626] Bluetooth: hci0: command tx timeout [ 152.374795][ T5683] usb 4-1: USB disconnect, device number 19 [ 152.516897][ T1071] rc_core: IR keymap rc-hauppauge not found [ 152.516912][ T1071] Registered IR keymap rc-empty [ 152.517013][ T1071] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.543544][ T1071] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.564744][ T1071] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 152.586109][ T1071] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 152.592846][ T1071] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.617818][ T1071] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.643899][ T1071] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.663602][ T1071] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.684718][ T1071] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.703526][ T1071] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.724808][ T1071] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.744743][ T1071] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.763500][ T1071] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.783565][ T1071] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 152.809288][ T1071] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 152.809307][ T1071] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 152.862766][ T1071] usb 5-1: USB disconnect, device number 21 [ 153.714119][ T5349] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 153.846241][ T5349] usb 4-1: device descriptor read/64, error -71 [ 153.907557][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 153.924670][ T6719] Cannot find del_set index 2 as target [ 154.056417][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.057898][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.057928][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.057948][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.057995][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.060312][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.060430][ T10] usb 5-1: Product: syz [ 154.060449][ T10] usb 5-1: Manufacturer: syz [ 154.084501][ T5349] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 154.158522][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 154.158545][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 154.178520][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 154.178562][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 154.196681][ T5683] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 154.256016][ T5349] usb 4-1: device descriptor read/64, error -71 [ 154.282496][ T6724] vlan3: entered promiscuous mode [ 154.282513][ T6724] geneve0: entered promiscuous mode [ 154.282647][ T6724] vlan3: entered allmulticast mode [ 154.282657][ T6724] geneve0: entered allmulticast mode [ 154.344699][ T5683] usb 2-1: Using ep0 maxpacket: 16 [ 154.347118][ T5683] usb 2-1: unable to get BOS descriptor or descriptor too short [ 154.347165][ T5683] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 154.348643][ T5683] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.348711][ T5683] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 154.348741][ T5683] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 154.348773][ T5683] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 154.348800][ T5683] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 154.368803][ T5349] usb usb4-port1: attempt power cycle [ 154.374278][ T5626] Bluetooth: hci0: command tx timeout [ 154.425979][ T1071] usb 5-1: USB disconnect, device number 22 [ 154.723366][ T5349] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 154.723810][ T5729] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 154.750093][ T5349] usb 4-1: device descriptor read/8, error -71 [ 154.874255][ T5729] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 154.874850][ T5729] usb 1-1: config 0 has no interfaces? [ 154.877402][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.877431][ T5729] usb 1-1: Product: syz [ 154.877448][ T5729] usb 1-1: Manufacturer: syz [ 154.877464][ T5729] usb 1-1: SerialNumber: syz [ 154.880821][ T5729] usb 1-1: config 0 descriptor?? [ 154.983909][ T5349] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 154.984157][ T1071] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 155.009872][ T5349] usb 4-1: device descriptor read/8, error -71 [ 155.099519][ T6726] ip_tables: iptables: counters copy to user failed while replacing table [ 155.102081][ T5697] usb 1-1: USB disconnect, device number 28 [ 155.121347][ T5349] usb usb4-port1: unable to enumerate USB device [ 155.134099][ T1071] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 155.135454][ T1071] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.138884][ T1071] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.138909][ T1071] usb 5-1: Product: syz [ 155.138925][ T1071] usb 5-1: Manufacturer: syz [ 155.138941][ T1071] usb 5-1: SerialNumber: syz [ 155.182109][ T1071] usb 5-1: config 0 descriptor?? [ 155.224735][ T1071] mvusb_mdio 5-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 155.567017][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.254'. [ 155.736881][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 155.736917][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.255'. [ 155.915047][ T1071] usb 5-1: USB disconnect, device number 23 [ 156.379237][ T6744] netlink: 596 bytes leftover after parsing attributes in process `syz.0.257'. [ 156.454934][ T5626] Bluetooth: hci0: command tx timeout [ 156.593362][ T1071] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 156.744876][ T1071] usb 5-1: Using ep0 maxpacket: 32 [ 156.748363][ T1071] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 156.750952][ T1071] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 156.750994][ T1071] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 156.751019][ T1071] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.751046][ T1071] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 156.764633][ T1071] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.764709][ T1071] usb 5-1: Product: syz [ 156.764750][ T1071] usb 5-1: Manufacturer: syz [ 156.764790][ T1071] usb 5-1: SerialNumber: syz [ 156.868167][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 156.893168][ T1071] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input14 [ 156.962920][ T5683] usb 2-1: string descriptor 0 read error: -71 [ 156.963056][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.988893][ T5683] usb 2-1: can't set config #1, error -71 [ 157.007009][ T5683] usb 2-1: USB disconnect, device number 16 [ 157.073579][ T1071] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 157.073603][ T1071] (id 0x00) [ 157.153757][ T5676] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 157.194648][ T1071] rc_core: IR keymap rc-imon-pad not found [ 157.194669][ T1071] Registered IR keymap rc-empty [ 157.194747][ T1071] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 157.194768][ T1071] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 157.275890][ T1071] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 157.279900][ T1071] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input15 [ 157.311432][ T1071] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:24> initialized [ 157.324136][ T5676] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 157.325150][ T5676] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 157.325179][ T5676] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 157.328247][ T5676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.328275][ T5676] usb 4-1: Product: syz [ 157.328291][ T5676] usb 4-1: Manufacturer: syz [ 157.328307][ T5676] usb 4-1: SerialNumber: syz [ 157.682405][ T31] audit: type=1326 audit(1791872539.154:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.1.269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 157.707682][ T31] audit: type=1326 audit(1791872539.154:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.1.269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 157.737660][ T31] audit: type=1326 audit(1791872539.184:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.1.269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 157.737747][ T31] audit: type=1326 audit(1791872539.184:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.1.269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 157.737796][ T31] audit: type=1326 audit(1791872539.184:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.1.269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 157.737869][ T31] audit: type=1326 audit(1791872539.184:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.1.269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 157.743760][ T31] audit: type=1326 audit(1791872539.184:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.1.269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 157.743929][ T31] audit: type=1326 audit(1791872539.214:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.1.269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 157.759289][ T31] audit: type=1326 audit(1791872539.214:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.1.269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 157.759432][ T31] audit: type=1326 audit(1791872539.214:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.1.269" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 158.372433][ T6807] netlink: 'syz.3.264': attribute type 2 has an invalid length. [ 158.372477][ T6807] netlink: 'syz.3.264': attribute type 2 has an invalid length. [ 158.533923][ T5626] Bluetooth: hci0: command tx timeout [ 158.593642][ T5676] usb 4-1: failed to execute ARPC: -110 [ 158.593671][ T5676] usb 4-1: failed to set connected state for cport 0: -110 [ 158.593692][ T5676] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 158.878407][ T25] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 158.953307][ T5349] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 159.026141][ T25] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 159.030519][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.030547][ T25] usb 1-1: Product: syz [ 159.030564][ T25] usb 1-1: Manufacturer: syz [ 159.030595][ T25] usb 1-1: SerialNumber: syz [ 159.073004][ T25] usb 1-1: config 0 descriptor?? [ 159.105255][ T5349] usb 3-1: Using ep0 maxpacket: 32 [ 159.107293][ T5349] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 159.109415][ T5676] usb 4-1: failed to send ARPC request 3: -110 [ 159.109627][ T5676] usb 4-1: failed to execute ARPC: -110 [ 159.109674][ T5676] usb 4-1: failed to clear cport 0: -110 [ 159.109694][ T5676] greybus greybus1: 0/0:0: failed to clear host cport: -110 [ 159.170539][ T5676] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 159.188524][ T5349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.188556][ T5349] usb 3-1: Product: syz [ 159.188573][ T5349] usb 3-1: Manufacturer: syz [ 159.188590][ T5349] usb 3-1: SerialNumber: syz [ 159.217172][ T5349] usb 3-1: config 0 descriptor?? [ 159.420018][ T5349] airspy 3-1:0.0: Board ID: 00 [ 159.420045][ T5349] airspy 3-1:0.0: Firmware version: [ 159.637692][ T5349] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 159.657150][ T5349] airspy 3-1:0.0: Registered as swradio24 [ 159.657178][ T5349] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 159.681187][ T5349] usb 3-1: USB disconnect, device number 14 [ 159.715431][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.715917][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.862828][ T25] usb 1-1: USB disconnect, device number 29 [ 159.930283][ T10] usb 4-1: USB disconnect, device number 24 [ 159.990430][ T6831] ip6tnl1: entered promiscuous mode [ 160.473588][ T10] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 160.596893][ T5676] usb 5-1: USB disconnect, device number 24 [ 160.621188][ T5626] Bluetooth: hci0: command tx timeout [ 160.687110][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 160.687150][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 160.717247][ T10] usb 4-1: config 2 has an invalid interface number: 8 but max is 0 [ 160.717285][ T10] usb 4-1: config 2 has no interface number 0 [ 160.717315][ T10] usb 4-1: config 2 interface 8 has no altsetting 0 [ 160.759091][ T10] usb 4-1: string descriptor 0 read error: -22 [ 160.759186][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.843946][ T10] usbtest 4-1:2.8: Linux user mode ISO test driver [ 160.843965][ T10] usbtest 4-1:2.8: low-speed {control} tests [ 161.456158][ T6856] netlink: 'syz.2.285': attribute type 1 has an invalid length. [ 161.456178][ T6856] netlink: 'syz.2.285': attribute type 2 has an invalid length. [ 161.744117][ T5676] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 161.893600][ T5676] usb 1-1: Using ep0 maxpacket: 8 [ 161.896946][ T5676] usb 1-1: unable to get BOS descriptor or descriptor too short [ 161.897003][ T5676] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89 [ 161.898004][ T5676] usb 1-1: config 127 has an invalid interface number: 1 but max is 0 [ 161.898031][ T5676] usb 1-1: config 127 has an invalid descriptor of length 1, skipping remainder of the config [ 161.898053][ T5676] usb 1-1: config 127 has no interface number 0 [ 161.898097][ T5676] usb 1-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 161.898124][ T5676] usb 1-1: config 127 interface 1 altsetting 2 endpoint 0x9 has an invalid bInterval 29, changing to 8 [ 161.898152][ T5676] usb 1-1: config 127 interface 1 altsetting 2 endpoint 0x9 has invalid maxpacket 58463, setting to 1024 [ 161.898180][ T5676] usb 1-1: config 127 interface 1 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.898208][ T5676] usb 1-1: config 127 interface 1 has no altsetting 0 [ 161.901637][ T5676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.901662][ T5676] usb 1-1: Product: syz [ 161.901685][ T5676] usb 1-1: Manufacturer: syz [ 161.901706][ T5676] usb 1-1: SerialNumber: syz [ 162.000754][ T6858] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.021603][ T6858] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.249095][ T5676] redrat3 1-1:127.1: Couldn't find all endpoints [ 162.271988][ T5676] usb 1-1: USB disconnect, device number 30 [ 162.534830][ C0] bridge0: port 3(syz_tun) entered learning state [ 162.693936][ T5626] Bluetooth: hci0: command tx timeout [ 163.519581][ T5683] usb 4-1: USB disconnect, device number 25 [ 164.354043][ T25] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 164.486907][ T5676] hid_parser_main: 5 callbacks suppressed [ 164.486932][ T5676] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 164.510054][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 164.521795][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.521834][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.523203][ T25] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1023 [ 164.523399][ T25] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 32 [ 164.523438][ T25] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.523467][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 164.533673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0e!!! [ 164.606815][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.606847][ T25] usb 5-1: Product: syz [ 164.606864][ T25] usb 5-1: Manufacturer: syz [ 164.606880][ T25] usb 5-1: SerialNumber: syz [ 164.644725][ T6912] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 164.644852][ T6912] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 164.651127][ T5676] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.773433][ T5626] Bluetooth: hci0: command tx timeout [ 164.878858][ T6912] netlink: 'syz.4.297': attribute type 1 has an invalid length. [ 165.066637][ T6912] bond2: option mode: invalid value (7) [ 165.119779][ T6912] bond2 (unregistering): Released all slaves [ 165.232104][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.289989][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.680700][ T6929] syz.1.302 (6929): drop_caches: 2 [ 166.204230][ T5676] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 166.375639][ T5676] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.375687][ T5676] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 166.381765][ T5676] usb 2-1: config 2 has an invalid interface number: 8 but max is 0 [ 166.381813][ T5676] usb 2-1: config 2 has no interface number 0 [ 166.381846][ T5676] usb 2-1: config 2 interface 8 has no altsetting 0 [ 166.431482][ T5676] usb 2-1: string descriptor 0 read error: -22 [ 166.431624][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.491914][ T5676] usbtest 2-1:2.8: Linux user mode ISO test driver [ 166.491939][ T5676] usbtest 2-1:2.8: low-speed {control} tests [ 166.514996][ T5683] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 166.663309][ T5683] usb 3-1: Using ep0 maxpacket: 32 [ 166.664194][ T5683] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 166.666448][ T5683] usb 3-1: config index 0 descriptor too short (expected 27632, got 27) [ 166.666474][ T5683] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 166.666518][ T5683] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 166.666543][ T5683] usb 3-1: config 1 has no interface number 0 [ 166.666584][ T5683] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.666614][ T5683] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 166.666644][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.668469][ T6955] lo: entered allmulticast mode [ 166.759466][ T6955] lo: left allmulticast mode [ 166.769334][ T5683] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 166.853397][ T5626] Bluetooth: hci0: command tx timeout [ 166.919383][ T5683] snd_usb_pod 3-1:1.1: invalid control EP [ 166.919409][ T5683] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 166.919623][ T5683] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 166.920188][ T5683] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 167.120182][ T1071] usb 3-1: USB disconnect, device number 15 [ 167.231665][ T25] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 167.258655][ T25] usb 5-1: USB disconnect, device number 25 [ 167.647027][ T6972] netlink: 88 bytes leftover after parsing attributes in process `syz.4.313'. [ 167.649187][ T6972] netlink: 'syz.4.313': attribute type 3 has an invalid length. [ 167.649222][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 167.753389][ T1071] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 167.920034][ T1071] usb 1-1: not running at top speed; connect to a high speed hub [ 167.920074][ T1071] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 167.943665][ T1071] usb 1-1: config index 0 descriptor too short (expected 55336, got 33) [ 167.943698][ T1071] usb 1-1: config 191 has too many interfaces: 212, using maximum allowed: 32 [ 167.943720][ T1071] usb 1-1: config 191 has an invalid descriptor of length 215, skipping remainder of the config [ 167.943743][ T1071] usb 1-1: config 191 has 0 interfaces, different from the descriptor's value: 212 [ 167.962964][ T1071] usb 1-1: string descriptor 0 read error: -22 [ 167.963059][ T1071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.047758][ T6986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.150673][ T6993] bridge0: port 1(syz_tun) entered blocking state [ 168.150753][ T6993] bridge0: port 1(syz_tun) entered disabled state [ 168.150883][ T6993] syz_tun: entered allmulticast mode [ 168.173996][ T6993] syz_tun: entered promiscuous mode [ 168.184987][ T6993] bridge0: port 1(syz_tun) entered blocking state [ 168.185068][ T6993] bridge0: port 1(syz_tun) entered listening state [ 168.193457][ C0] bridge0: port 1(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 168.193588][ C0] bridge0: topology change detected, propagating [ 168.236913][ T10] usb 1-1: USB disconnect, device number 31 [ 168.647451][ T25] usb 2-1: USB disconnect, device number 17 [ 168.921927][ T7006] loop4: detected capacity change from 0 to 7 [ 168.943609][ T5626] Bluetooth: hci0: command tx timeout [ 168.951105][ T7006] Dev loop4: unable to read RDB block 7 [ 168.951150][ T7006] loop4: unable to read partition table [ 168.956935][ T7006] loop4: partition table beyond EOD, truncated [ 168.957047][ T7006] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 169.195898][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 169.195913][ T31] audit: type=1326 audit(1791872550.654:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 169.201472][ T31] audit: type=1326 audit(1791872550.664:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 169.215049][ T31] audit: type=1326 audit(1791872550.684:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 169.293852][ T31] audit: type=1326 audit(1791872550.744:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 169.293896][ T31] audit: type=1326 audit(1791872550.764:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 169.294306][ T31] audit: type=1326 audit(1791872550.764:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 169.294576][ T31] audit: type=1326 audit(1791872550.764:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 169.295058][ T31] audit: type=1326 audit(1791872550.764:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 169.297366][ T31] audit: type=1326 audit(1791872550.764:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 169.298908][ T31] audit: type=1326 audit(1791872550.764:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.1.322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 169.672577][ T7013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.063195][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 170.262173][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 170.281729][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 170.281775][ T10] usb 2-1: New USB device found, idVendor=1430, idProduct=474a, bcdDevice= 0.40 [ 170.287156][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 170.287262][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.317784][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.317848][ T10] usb 2-1: Product: syz [ 170.317891][ T10] usb 2-1: Manufacturer: syz [ 170.317931][ T10] usb 2-1: SerialNumber: syz [ 170.387770][ T7016] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.513328][ T5683] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 170.685392][ T5683] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 170.687176][ T5683] usb 5-1: config 34 has an invalid interface number: 116 but max is 0 [ 170.687237][ T5683] usb 5-1: config 34 has no interface number 0 [ 170.687269][ T5683] usb 5-1: config 34 interface 116 has no altsetting 0 [ 170.706401][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 170.706483][ T5683] usb 5-1: Product: syz [ 170.706588][ T5683] usb 5-1: SerialNumber: syz [ 171.013588][ T5626] Bluetooth: hci0: command tx timeout [ 171.177424][ T5683] comedi comedi5: could not set alternate setting 3 in high speed [ 171.180297][ T5683] usbdux 5-1:34.116: driver 'usbdux' failed to auto-configure device. [ 171.246986][ T5683] usbdux 5-1:34.116: probe with driver usbdux failed with error -71 [ 171.276472][ T5683] usb 5-1: USB disconnect, device number 26 [ 171.466569][ T5729] hid-generic 0000:0000:30303000.0008: unknown main item tag 0x3 [ 171.473155][ T5729] hid-generic 0000:0000:30303000.0008: unknown main item tag 0x0 [ 171.491716][ T5729] hid-generic 0000:0000:30303000.0008: unknown main item tag 0x0 [ 171.491751][ T5729] hid-generic 0000:0000:30303000.0008: unknown main item tag 0x0 [ 171.491778][ T5729] hid-generic 0000:0000:30303000.0008: unknown main item tag 0x0 [ 171.491806][ T5729] hid-generic 0000:0000:30303000.0008: unknown main item tag 0x0 [ 171.491834][ T5729] hid-generic 0000:0000:30303000.0008: unknown main item tag 0x0 [ 171.491863][ T5729] hid-generic 0000:0000:30303000.0008: unknown main item tag 0x0 [ 171.491891][ T5729] hid-generic 0000:0000:30303000.0008: unknown main item tag 0x0 [ 171.491918][ T5729] hid-generic 0000:0000:30303000.0008: unknown main item tag 0x0 [ 171.623388][ T5729] hid-generic 0000:0000:30303000.0008: hidraw0: HID v303030.30 Device [syz1] on syz0 [ 172.263554][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.263594][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 172.681568][ T10] usb 2-1: USB disconnect, device number 18 [ 172.848775][ T7037] bridge0: port 1(syz_tun) entered blocking state [ 172.848902][ T7037] bridge0: port 1(syz_tun) entered disabled state [ 172.849079][ T7037] syz_tun: entered allmulticast mode [ 172.901682][ T7037] syz_tun: entered promiscuous mode [ 172.912233][ T7037] bridge0: port 1(syz_tun) entered blocking state [ 172.912358][ T7037] bridge0: port 1(syz_tun) entered listening state [ 173.027849][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.093935][ T5626] Bluetooth: hci0: command tx timeout [ 174.094694][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 174.096359][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 174.096381][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'. [ 174.096407][ T7053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'. [ 174.203874][ T25] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 174.354841][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 174.355747][ T25] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 174.359682][ T25] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 174.359735][ T25] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 174.359764][ T25] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.359793][ T25] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 174.437588][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.437622][ T25] usb 1-1: Product: syz [ 174.437639][ T25] usb 1-1: Manufacturer: syz [ 174.437656][ T25] usb 1-1: SerialNumber: syz [ 174.474177][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 174.507435][ T25] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input16 [ 174.723359][ T25] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 174.723384][ T25] (id 0x00) [ 174.923319][ T25] rc_core: IR keymap rc-imon-pad not found [ 174.923341][ T25] Registered IR keymap rc-empty [ 174.923422][ T25] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 174.923442][ T25] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 174.966111][ T25] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 174.994846][ T25] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input17 [ 175.034233][ T25] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:32> initialized [ 175.173475][ T5626] Bluetooth: hci0: command tx timeout [ 175.573883][ T31] kauditd_printk_skb: 561 callbacks suppressed [ 175.573905][ T31] audit: type=1326 audit(1791872557.044:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927499e1d9 code=0x7ffc0000 [ 175.574030][ T31] audit: type=1326 audit(1791872557.044:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927499e1d9 code=0x7ffc0000 [ 175.582839][ T31] audit: type=1326 audit(1791872557.044:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f927499e1d9 code=0x7ffc0000 [ 175.582962][ T31] audit: type=1326 audit(1791872557.044:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927499e1d9 code=0x7ffc0000 [ 175.583125][ T31] audit: type=1326 audit(1791872557.044:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927499e1d9 code=0x7ffc0000 [ 175.614178][ T31] audit: type=1326 audit(1791872557.054:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f927499e1d9 code=0x7ffc0000 [ 175.614266][ T31] audit: type=1326 audit(1791872557.054:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927499e1d9 code=0x7ffc0000 [ 175.614313][ T31] audit: type=1326 audit(1791872557.054:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927499e1d9 code=0x7ffc0000 [ 175.614360][ T31] audit: type=1326 audit(1791872557.054:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f927499e1d9 code=0x7ffc0000 [ 175.614407][ T31] audit: type=1326 audit(1791872557.054:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.2.337" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927499e1d9 code=0x7ffc0000 [ 175.903343][ T25] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 176.033371][ T25] usb 2-1: device descriptor read/64, error -71 [ 176.223496][ T5349] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 176.284774][ T25] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 176.373525][ T5349] usb 5-1: Using ep0 maxpacket: 16 [ 176.376334][ T5349] usb 5-1: unable to get BOS descriptor or descriptor too short [ 176.376419][ T5349] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 176.377885][ T5349] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.377997][ T5349] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.380978][ T5349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.381007][ T5349] usb 5-1: Product: syz [ 176.381037][ T5349] usb 5-1: Manufacturer: syz [ 176.381048][ T5349] usb 5-1: SerialNumber: syz [ 176.418492][ T25] usb 2-1: device descriptor read/64, error -71 [ 176.523736][ T25] usb usb2-port1: attempt power cycle [ 176.853143][ T7083] erspan0: entered promiscuous mode [ 176.853192][ T7083] erspan0: entered allmulticast mode [ 176.875955][ T25] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 176.904798][ T25] usb 2-1: device descriptor read/8, error -71 [ 177.043976][ T987] usb 1-1: USB disconnect, device number 32 [ 177.136477][ T5349] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 177.150170][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 177.158561][ T5349] usb 5-1: unit 1 not found! [ 177.167636][ T25] usb 2-1: device descriptor read/8, error -71 [ 177.260410][ T5349] usb 5-1: USB disconnect, device number 27 [ 177.271923][ T5626] Bluetooth: hci0: command tx timeout [ 177.277816][ T25] usb usb2-port1: unable to enumerate USB device [ 177.453518][ T6599] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 177.515106][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.614437][ T6599] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 177.651050][ T6599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.651073][ T6599] usb 4-1: Product: syz [ 177.651084][ T6599] usb 4-1: Manufacturer: syz [ 177.651095][ T6599] usb 4-1: SerialNumber: syz [ 177.680748][ T6599] usb 4-1: config 0 descriptor?? [ 177.866182][ T7098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.342'. [ 177.893439][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 177.893464][ C0] bridge0: topology change detected, propagating [ 177.956609][ T7098] raw_sendmsg: syz.0.342 forgot to set AF_INET. Fix it! [ 179.333318][ T5626] Bluetooth: hci0: command tx timeout [ 179.448618][ T7119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.475422][ T7119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.810048][ T7122] capability: warning: `syz.1.349' uses 32-bit capabilities (legacy support in use) [ 179.927515][ T5349] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 179.993772][ T6595] usb 4-1: USB disconnect, device number 26 [ 180.113551][ T5349] usb 1-1: Using ep0 maxpacket: 8 [ 180.114414][ T5349] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 180.116108][ T5349] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 180.116136][ T5349] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 180.116158][ T5349] usb 1-1: config 0 has no interface number 0 [ 180.116227][ T5349] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.116256][ T5349] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.116285][ T5349] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 180.119750][ T5349] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 180.119778][ T5349] usb 1-1: Product: syz [ 180.215471][ T5349] usb 1-1: config 0 descriptor?? [ 180.422661][ T7124] netlink: 'syz.0.348': attribute type 4 has an invalid length. [ 180.776817][ T7143] syzkaller0: entered promiscuous mode [ 180.776836][ T7143] syzkaller0: entered allmulticast mode [ 180.783335][ T6599] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 180.851366][ T5349] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input18 [ 180.889271][ T5349] input: failed to attach handler kbd to device input18, error: -5 [ 180.953365][ T6599] usb 2-1: Using ep0 maxpacket: 32 [ 180.968285][ T6599] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 180.972150][ T6599] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 180.972293][ T6599] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 180.972372][ T6599] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.972467][ T6599] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 181.034760][ T6599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.034793][ T6599] usb 2-1: Product: syz [ 181.034808][ T6599] usb 2-1: Manufacturer: syz [ 181.034824][ T6599] usb 2-1: SerialNumber: syz [ 181.130372][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 181.154040][ T6599] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input19 [ 181.333587][ T6599] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 181.333626][ T6599] (id 0x00) [ 181.413363][ T5626] Bluetooth: hci0: command tx timeout [ 181.548509][ T6599] rc_core: IR keymap rc-imon-pad not found [ 181.548536][ T6599] Registered IR keymap rc-empty [ 181.548627][ T6599] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 181.548652][ T6599] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 181.592063][ T6599] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 181.647495][ T6599] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input20 [ 181.702111][ T6599] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:23> initialized [ 182.686166][ T5349] usb 1-1: USB disconnect, device number 33 [ 183.493502][ T5626] Bluetooth: hci0: command tx timeout [ 183.567609][ T5349] usb 2-1: USB disconnect, device number 23 [ 183.663374][ C0] bridge0: port 1(syz_tun) entered learning state [ 185.573516][ T4933] Bluetooth: hci0: command tx timeout [ 187.653406][ T5626] Bluetooth: hci0: command tx timeout [ 188.134278][ C1] bridge0: port 1(syz_tun) entered learning state [ 189.733502][ T5626] Bluetooth: hci0: command tx timeout [ 191.813940][ T5626] Bluetooth: hci0: command tx timeout [ 193.893446][ T5626] Bluetooth: hci0: command tx timeout [ 194.539910][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.539966][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.973424][ T5626] Bluetooth: hci0: command tx timeout [ 198.053597][ T5626] Bluetooth: hci0: command tx timeout [ 199.023460][ C0] bridge0: port 1(syz_tun) entered forwarding state [ 199.023495][ C0] bridge0: topology change detected, propagating [ 200.133507][ T5626] Bluetooth: hci0: command tx timeout [ 202.213428][ T5626] Bluetooth: hci0: command tx timeout [ 203.493351][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 203.493372][ C1] bridge0: topology change detected, propagating [ 204.303389][ T5626] Bluetooth: hci0: command tx timeout [ 205.042245][ T7186] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5631] was attempted by ""[7186] [ 205.042437][ T7186] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5631] was attempted by ""[7186] [ 205.047015][ T7186] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5631] was attempted by ""[7186] [ 205.047530][ T7186] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5631] was attempted by ""[7186] [ 205.048007][ T7186] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5631] was attempted by ""[7186] [ 205.052130][ T7186] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5631] was attempted by ""[7186] [ 205.052627][ T7186] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5631] was attempted by ""[7186] [ 205.053073][ T7186] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5631] was attempted by ""[7186] [ 205.064161][ T7186] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5631] was attempted by ""[7186] [ 205.064708][ T7186] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5631] was attempted by ""[7186] [ 205.277864][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 205.292583][ T7187] team0 (unregistering): Port device team_slave_0 removed [ 205.320200][ T7187] team0 (unregistering): Port device team_slave_1 removed [ 205.347563][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 205.378835][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 205.392325][ T5676] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 205.403989][ T6534] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.404039][ T6534] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.404077][ T6534] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.404115][ T6534] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.535711][ T7199] netlink: 'syz.2.362': attribute type 11 has an invalid length. [ 205.552235][ T5676] usb 4-1: Using ep0 maxpacket: 16 [ 205.558228][ T5676] usb 4-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 205.559543][ T5676] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 205.559585][ T5676] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 205.559641][ T5676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.562889][ T5676] usb 4-1: config 0 descriptor?? [ 205.573784][ T5729] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 205.748217][ T5729] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 205.760732][ T5729] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.760945][ T5729] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 205.771655][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.772622][ T5729] usb 1-1: Product: syz [ 205.772673][ T5729] usb 1-1: Manufacturer: syz [ 205.772728][ T5729] usb 1-1: SerialNumber: syz [ 205.822645][ T5729] usb-storage 1-1:1.0: USB Mass Storage device detected [ 205.841219][ T5676] hid_parser_main: 759 callbacks suppressed [ 205.841246][ T5676] apple 0003:05AC:027C.0009: unknown main item tag 0x3 [ 205.841363][ T5676] apple 0003:05AC:027C.0009: unknown main item tag 0x4 [ 205.841636][ T5676] apple 0003:05AC:027C.0009: reserved main item tag 0xd [ 205.875470][ T5676] apple 0003:05AC:027C.0009: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.3-1/input0 [ 205.934984][ T5729] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 205.947346][ T5729] scsi host1: usb-storage 1-1:1.0 [ 206.122461][ T7210] SET target dimension over the limit! [ 206.129785][ T7210] netlink: 9 bytes leftover after parsing attributes in process `syz.1.363'. [ 206.380452][ T5626] Bluetooth: hci0: command tx timeout [ 208.072366][ T5729] usb 1-1: USB disconnect, device number 34 [ 208.160464][ T1071] usb 4-1: USB disconnect, device number 27 [ 208.273693][ T7210] 0: renamed from hsr0 (while UP) [ 208.322126][ T7210] 0: entered allmulticast mode [ 208.322147][ T7210] hsr_slave_0: entered allmulticast mode [ 208.322160][ T7210] hsr_slave_1: entered allmulticast mode [ 208.322647][ T7210] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 208.453956][ T5626] Bluetooth: hci0: command tx timeout [ 208.565137][ T7224] netlink: 212 bytes leftover after parsing attributes in process `syz.0.368'. [ 208.623424][ T1071] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 208.784307][ T1071] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 208.790237][ T1071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.790267][ T1071] usb 4-1: Product: syz [ 208.790283][ T1071] usb 4-1: Manufacturer: syz [ 208.790299][ T1071] usb 4-1: SerialNumber: syz [ 208.829662][ T1071] usb 4-1: config 0 descriptor?? [ 208.850906][ T7237] team_slave_0: entered allmulticast mode [ 209.061747][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'. [ 209.783467][ T7234] team_slave_0: left allmulticast mode [ 209.921339][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.932964][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.534688][ T5624] Bluetooth: hci0: command tx timeout [ 210.633851][ T5729] usb 4-1: USB disconnect, device number 28 [ 211.554930][ T5713] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 211.573040][ T7276] openvswitch: netlink: Tunnel attr 262 out of range max 16 [ 211.704459][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 211.723577][ T5713] usb 1-1: unable to get BOS descriptor or descriptor too short [ 211.723628][ T5713] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 211.730505][ T5713] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 211.730528][ T5713] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 211.730543][ T5713] usb 1-1: config 14 has no interface number 0 [ 211.730556][ T5713] usb 1-1: config 14 has no interface number 1 [ 211.730599][ T5713] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 211.730616][ T5713] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 211.730635][ T5713] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 211.730654][ T5713] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 211.730675][ T5713] usb 1-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 211.730720][ T5713] usb 1-1: config 14 interface 57 has no altsetting 0 [ 211.730742][ T5713] usb 1-1: config 14 interface 228 has no altsetting 0 [ 211.884260][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.884291][ T5713] usb 1-1: Product: syz [ 211.884303][ T5713] usb 1-1: Manufacturer: syz [ 211.884313][ T5713] usb 1-1: SerialNumber: syz [ 211.980268][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 211.980334][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 211.980356][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 212.617293][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 213.219591][ T5713] legousbtower 1-1:14.57: interrupt endpoints not found [ 213.247135][ T5713] legousbtower 1-1:14.228: interrupt endpoints not found [ 213.273166][ T5713] usb 1-1: USB disconnect, device number 35 [ 213.954619][ T7300] bond2: option arp_validate: invalid value (9764865) [ 213.957562][ T7306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.957862][ T7306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.993139][ T7300] bond2 (unregistering): Released all slaves [ 214.043369][ T5683] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 214.184689][ T10] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 214.194216][ T5683] usb 2-1: Using ep0 maxpacket: 32 [ 214.209625][ T5683] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 214.210746][ T5683] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 33, using maximum allowed: 30 [ 214.210777][ T5683] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.210794][ T5683] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 214.210814][ T5683] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.210837][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.269155][ T5683] usb 2-1: config 0 descriptor?? [ 214.310265][ T5683] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 214.366600][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.367285][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 214.367320][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 214.368871][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 214.371351][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.371376][ T10] usb 4-1: Product: syz [ 214.371392][ T10] usb 4-1: Manufacturer: syz [ 214.371405][ T10] usb 4-1: SerialNumber: syz [ 214.526368][ T5729] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 214.693903][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 214.694055][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 214.697135][ T10] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 214.697166][ T10] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 214.727740][ T10] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 214.728217][ T5697] usb 2-1: USB disconnect, device number 24 [ 214.759638][ T4968] bcm5974 2-1:0.0: could not read from device [ 214.783469][ T5729] usb 3-1: unable to get BOS descriptor or descriptor too short [ 214.783522][ T5729] usb 3-1: New USB device found, idVendor=2001, idProduct=f115, bcdDevice=39.76 [ 214.792512][ T5729] usb 3-1: config 39 has an invalid interface number: 180 but max is 0 [ 214.792544][ T5729] usb 3-1: config 39 has an invalid descriptor of length 0, skipping remainder of the config [ 214.792566][ T5729] usb 3-1: config 39 has no interface number 0 [ 214.792839][ T5729] usb 3-1: config 39 interface 180 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 214.792862][ T5729] usb 3-1: config 39 interface 180 has no altsetting 0 [ 214.852303][ T5683] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 214.871690][ T4968] bcm5974 2-1:0.0: could not read from device [ 214.890946][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.890986][ T5729] usb 3-1: Product: syz [ 214.891002][ T5729] usb 3-1: Manufacturer: syz [ 214.891019][ T5729] usb 3-1: SerialNumber: syz [ 214.939193][ T10] usb 4-1: USB disconnect, device number 29 [ 214.953879][ T7319] bcm5974 2-1:0.0: could not read from device [ 215.018198][ T5683] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 215.021536][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.021563][ T5683] usb 1-1: Product: syz [ 215.021578][ T5683] usb 1-1: Manufacturer: syz [ 215.021594][ T5683] usb 1-1: SerialNumber: syz [ 215.059840][ T5683] usb 1-1: config 0 descriptor?? [ 215.128352][ T7319] udevd[7319]: Error opening device "/dev/input/event4": No such file or directory [ 215.128504][ T7319] udevd[7319]: Unable to EVIOCGABS device "/dev/input/event4" [ 215.128644][ T7319] udevd[7319]: Unable to EVIOCGABS device "/dev/input/event4" [ 215.136864][ T7319] udevd[7319]: Unable to EVIOCGABS device "/dev/input/event4" [ 215.137455][ T7319] udevd[7319]: Unable to EVIOCGABS device "/dev/input/event4" [ 215.305784][ T7320] udevd[7320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.406760][ T5713] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 215.557587][ T5713] usb 5-1: New USB device found, idVendor=125f, idProduct=a94a, bcdDevice= 1.60 [ 215.576821][ T5713] usb 5-1: config 7 has an invalid interface number: 139 but max is 3 [ 215.576855][ T5713] usb 5-1: config 7 has an invalid interface number: 177 but max is 3 [ 215.576879][ T5713] usb 5-1: config 7 has an invalid interface number: 31 but max is 3 [ 215.576901][ T5713] usb 5-1: config 7 has an invalid interface number: 45 but max is 3 [ 215.576952][ T5713] usb 5-1: config 7 has an invalid interface number: 89 but max is 3 [ 215.576977][ T5713] usb 5-1: config 7 has 5 interfaces, different from the descriptor's value: 4 [ 215.576997][ T5713] usb 5-1: config 7 has no interface number 0 [ 215.577013][ T5713] usb 5-1: config 7 has no interface number 1 [ 215.577029][ T5713] usb 5-1: config 7 has no interface number 2 [ 215.577046][ T5713] usb 5-1: config 7 has no interface number 3 [ 215.577061][ T5713] usb 5-1: config 7 has no interface number 4 [ 215.584129][ T5713] usb 5-1: config 7 interface 139 altsetting 184 has an invalid descriptor for endpoint zero, skipping [ 215.584279][ T5713] usb 5-1: config 7 interface 139 altsetting 184 has an invalid descriptor for endpoint zero, skipping [ 215.584352][ T5713] usb 5-1: config 7 interface 139 altsetting 184 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 215.584485][ T5713] usb 5-1: config 7 interface 139 altsetting 184 bulk endpoint 0x3 has invalid maxpacket 64 [ 215.584564][ T5713] usb 5-1: config 7 interface 139 altsetting 184 has a duplicate endpoint with address 0x7, skipping [ 215.612319][ T5713] usb 5-1: config 7 interface 139 altsetting 184 endpoint 0x2 has an invalid bInterval 49, changing to 7 [ 215.612483][ T5713] usb 5-1: config 7 interface 139 altsetting 184 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 215.612565][ T5713] usb 5-1: config 7 interface 139 altsetting 184 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 215.637071][ T5713] usb 5-1: config 7 interface 177 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 215.637106][ T5713] usb 5-1: config 7 interface 177 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 215.637134][ T5713] usb 5-1: config 7 interface 177 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 215.637278][ T5713] usb 5-1: config 7 interface 177 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 215.641743][ T5713] usb 5-1: config 7 interface 177 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 215.641880][ T5713] usb 5-1: config 7 interface 177 altsetting 2 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 215.642050][ T5713] usb 5-1: config 7 interface 177 altsetting 2 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 215.642124][ T5713] usb 5-1: config 7 interface 177 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 215.642267][ T5713] usb 5-1: config 7 interface 177 altsetting 2 has 8 endpoint descriptors, different from the interface descriptor's value: 15 [ 215.642353][ T5713] usb 5-1: too many endpoints for config 7 interface 31 altsetting 197: 163, using maximum allowed: 30 [ 215.642519][ T5713] usb 5-1: config 7 interface 31 altsetting 197 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 215.642646][ T5713] usb 5-1: config 7 interface 31 altsetting 197 has a duplicate endpoint with address 0x8, skipping [ 215.642710][ T5713] usb 5-1: config 7 interface 31 altsetting 197 has a duplicate endpoint with address 0x2, skipping [ 215.642845][ T5713] usb 5-1: config 7 interface 31 altsetting 197 has a duplicate endpoint with address 0x3, skipping [ 215.642909][ T5713] usb 5-1: config 7 interface 31 altsetting 197 has a duplicate endpoint with address 0x4, skipping [ 215.643015][ T5713] usb 5-1: config 7 interface 31 altsetting 197 has a duplicate endpoint with address 0x4, skipping [ 215.643079][ T5713] usb 5-1: config 7 interface 31 altsetting 197 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 215.685623][ T5713] usb 5-1: config 7 interface 31 altsetting 197 has 7 endpoint descriptors, different from the interface descriptor's value: 163 [ 215.685860][ T5713] usb 5-1: config 7 interface 45 altsetting 200 has a duplicate endpoint with address 0x8, skipping [ 215.685991][ T5713] usb 5-1: config 7 interface 45 altsetting 200 has an invalid descriptor for endpoint zero, skipping [ 215.686055][ T5713] usb 5-1: config 7 interface 45 altsetting 200 has a duplicate endpoint with address 0x4, skipping [ 215.686169][ T5713] usb 5-1: config 7 interface 45 altsetting 200 has a duplicate endpoint with address 0x6, skipping [ 215.686334][ T5713] usb 5-1: config 7 interface 45 altsetting 200 has a duplicate endpoint with address 0x6, skipping [ 215.686530][ T5713] usb 5-1: config 7 interface 45 altsetting 200 has a duplicate endpoint with address 0x6, skipping [ 215.686689][ T5713] usb 5-1: config 7 interface 89 altsetting 11 has a duplicate endpoint with address 0x4, skipping [ 215.686754][ T5713] usb 5-1: config 7 interface 89 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 215.686865][ T5713] usb 5-1: config 7 interface 89 altsetting 11 has a duplicate endpoint with address 0x4, skipping [ 215.686929][ T5713] usb 5-1: config 7 interface 89 altsetting 11 has a duplicate endpoint with address 0xE, skipping [ 215.687075][ T5713] usb 5-1: config 7 interface 89 altsetting 11 has a duplicate endpoint with address 0x84, skipping [ 215.687143][ T5713] usb 5-1: config 7 interface 89 altsetting 11 has a duplicate endpoint with address 0x7, skipping [ 215.687277][ T5713] usb 5-1: config 7 interface 89 altsetting 11 has a duplicate endpoint with address 0xB, skipping [ 215.687348][ T5713] usb 5-1: config 7 interface 89 altsetting 11 has a duplicate endpoint with address 0x7, skipping [ 215.687464][ T5713] usb 5-1: config 7 interface 89 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 215.687535][ T5713] usb 5-1: config 7 interface 89 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 215.717898][ T5713] usb 5-1: config 7 interface 89 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 215.718030][ T5713] usb 5-1: config 7 interface 89 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 215.718097][ T5713] usb 5-1: config 7 interface 139 has no altsetting 0 [ 215.718257][ T5713] usb 5-1: config 7 interface 177 has no altsetting 0 [ 215.718320][ T5713] usb 5-1: config 7 interface 31 has no altsetting 0 [ 215.718426][ T5713] usb 5-1: config 7 interface 45 has no altsetting 0 [ 215.718471][ T5713] usb 5-1: config 7 interface 89 has no altsetting 0 [ 215.825991][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.826409][ T5713] usb 5-1: Product: ᐄ [ 215.826513][ T5713] usb 5-1: Manufacturer: ࡡ [ 215.826554][ T5713] usb 5-1: SerialNumber: ᨿ趋坚ꐝ⏖ⷀ㐹ウ훺瘳癈ꔲ⛻醊뫌ꂳ℡ᬚ谦뭞⃸଺ొ㜸ꇏ慵ꗆ懛엨餕면ᡝ倵꥜觚慔噺큘툞﫵檬ꥣ﻾ዘᆄ┘㑵삒檑鞴픴襗㚙禊悲弤ꢀꐒ콸렿衆堣䒷具쩿ኣ濝ꀍ⹤촩풚恏韁藍뚡炆ꗿ⨾刜䴾臣骫詷ᰢ㪚땸ఽꉃ瞋㾥ꀒꑞ烳ᵄ蠆꯿쀟키朗뎶ﵶ盞蹈쓿泸⫴줷줃㣆凊䙳 [ 216.184686][ T5713] usb 5-1: Interface #139 referenced by multiple IADs [ 216.185520][ T5713] usb 5-1: Interface #89 referenced by multiple IADs [ 216.277322][ T7322] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 216.727413][ T7331] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.727520][ T7331] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 216.773834][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 217.079536][ T7331] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 217.079651][ T7331] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 217.259038][ T5729] gspca_main: pac207-2.14.0 probing 2001:f115 [ 217.295094][ T5729] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 217.300914][ T7331] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 217.301300][ T7331] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 217.337144][ T5729] usb 3-1: USB disconnect, device number 16 [ 217.477808][ T7331] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 217.478128][ T7331] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 217.554403][ T7322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.554882][ T7322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.584620][ T5713] usb-storage 5-1:7.139: USB Mass Storage device detected [ 217.599402][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.625482][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.664943][ T5713] usb-storage 5-1:7.139: Quirks match for vid 125f pid a94a: 2000000 [ 217.685420][ T7346] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 217.781855][ T5713] usb-storage 5-1:7.177: USB Mass Storage device detected [ 217.783065][ T7350] ip_tables: iptables: counters copy to user failed while replacing table [ 217.833994][ T7350] ip_tables: iptables: counters copy to user failed while replacing table [ 217.837856][ T5713] usb-storage 5-1:7.177: Quirks match for vid 125f pid a94a: 2000000 [ 217.985384][ T5713] usb-storage 5-1:7.31: USB Mass Storage device detected [ 218.003302][ T7346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.011260][ T5713] usb-storage 5-1:7.31: Quirks match for vid 125f pid a94a: 2000000 [ 218.069249][ T1071] usb 1-1: USB disconnect, device number 36 [ 218.178099][ T5713] usb-storage 5-1:7.45: USB Mass Storage device detected [ 218.209092][ T5713] usb-storage 5-1:7.45: Quirks match for vid 125f pid a94a: 2000000 [ 218.343362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 218.402786][ T5713] usb-storage 5-1:7.89: USB Mass Storage device detected [ 218.425727][ T5713] usb-storage 5-1:7.89: Quirks match for vid 125f pid a94a: 2000000 [ 218.534755][ T5713] usb 5-1: USB disconnect, device number 28 [ 218.776918][ T4933] Bluetooth: hci1: command 0x0406 tx timeout [ 219.173768][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 219.256082][ T4933] Bluetooth: hci2: command 0x0406 tx timeout [ 219.342257][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 219.495287][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 219.525180][ T10] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 219.528785][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.528811][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.528841][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.533433][ T5697] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 219.593889][ T10] usb 4-1: config 0 descriptor?? [ 219.766125][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 219.766164][ T5697] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 219.803284][ T5697] usb 3-1: config 2 has an invalid interface number: 8 but max is 0 [ 219.803337][ T5697] usb 3-1: config 2 has no interface number 0 [ 219.803359][ T5697] usb 3-1: config 2 interface 8 has no altsetting 0 [ 219.856296][ T5697] usb 3-1: string descriptor 0 read error: -22 [ 219.856397][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.919989][ T5697] usbtest 3-1:2.8: Linux user mode ISO test driver [ 219.920009][ T5697] usbtest 3-1:2.8: low-speed {control} tests [ 220.083068][ T10] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 220.116382][ T10] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 220.195185][ T10] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 220.195473][ T10] hid-steam 0003:28DE:1142.000A: No HID_FEATURE_REPORT present for ID 0 [ 220.195493][ T10] hid-steam 0003:28DE:1142.000A: steam_probe:steam_get_conn_status failed with error -22 [ 220.311754][ T10] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 220.386099][ T10] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 220.660000][ T10] usb 4-1: USB disconnect, device number 30 [ 220.845750][ T10] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 220.856790][ T4933] Bluetooth: hci1: command 0x0406 tx timeout [ 220.978090][ T7388] fuse: Unknown parameter 'f0x0000000000000005' [ 221.254686][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 221.333330][ T4933] Bluetooth: hci2: command 0x0406 tx timeout [ 221.484759][ T5729] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 221.573408][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 221.653572][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 221.654164][ T5729] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=ff.fd [ 221.654232][ T5729] usb 1-1: no configurations [ 221.654243][ T5729] usb 1-1: can't read configurations, error -22 [ 221.783717][ T5729] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 221.933338][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 221.934805][ T5729] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=ff.fd [ 221.934849][ T5729] usb 1-1: no configurations [ 221.934864][ T5729] usb 1-1: can't read configurations, error -22 [ 221.935258][ T5729] usb usb1-port1: attempt power cycle [ 222.277008][ T5729] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 222.303986][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 222.304713][ T5729] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=ff.fd [ 222.304759][ T5729] usb 1-1: no configurations [ 222.304770][ T5729] usb 1-1: can't read configurations, error -22 [ 222.433626][ T5729] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 222.465526][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 222.467495][ T5729] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=ff.fd [ 222.467528][ T5729] usb 1-1: no configurations [ 222.467537][ T5729] usb 1-1: can't read configurations, error -22 [ 222.467756][ T5729] usb usb1-port1: unable to enumerate USB device [ 222.704440][ T7412] __report_access: 55 callbacks suppressed [ 222.704470][ T7412] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5633] was attempted by "\x0a  \x09 syzkaller0 q /dev/net/tun /dev/net/tun  \x07 /dev/net/tun [ 223.254890][ T6599] usb 3-1: USB disconnect, device number 17 [ 223.334651][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 223.913592][ T5729] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 224.090481][ T5729] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 224.091749][ T5729] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.116302][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 224.116337][ T5729] usb 4-1: Product: syz [ 224.116354][ T5729] usb 4-1: Manufacturer: syz [ 224.223341][ T5729] usb 4-1: selecting invalid altsetting 1 [ 224.278592][ T5729] dvb_ttusb_budget: ttusb_init_controller: error [ 224.278776][ T5729] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 224.419626][ T5729] DVB: Unable to find symbol cx22700_attach() [ 224.496117][ T5729] DVB: Unable to find symbol tda10046_attach() [ 224.496135][ T5729] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 224.664809][ T7430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.677575][ T7430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.849996][ T7433] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 225.416984][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 226.324122][ T10] usb 4-1: USB disconnect, device number 31 [ 226.823391][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 226.974953][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 226.977457][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0202, bcdDevice=4e.d1 [ 226.979319][ T10] usb 4-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 226.979347][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 226.981713][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.981740][ T10] usb 4-1: Product: syz [ 226.981757][ T10] usb 4-1: Manufacturer: syz [ 226.981773][ T10] usb 4-1: SerialNumber: syz [ 226.991491][ T10] usb 4-1: config 0 descriptor?? [ 227.493354][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 228.828642][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 229.044754][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.419'. [ 229.068254][ T7456] syz.3.417 (7456): drop_caches: 2 [ 229.110267][ T7470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.419'. [ 229.209173][ T5729] usb 4-1: USB disconnect, device number 32 [ 229.232273][ T7473] fuse: Bad value for 'fd' [ 229.573700][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 229.855094][ T5729] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 229.963367][ T1071] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 230.003570][ T5729] usb 2-1: Using ep0 maxpacket: 8 [ 230.005011][ T5729] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 230.007686][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.007705][ T5729] usb 2-1: Product: syz [ 230.007716][ T5729] usb 2-1: Manufacturer: syz [ 230.007727][ T5729] usb 2-1: SerialNumber: syz [ 230.037061][ T5729] usb 2-1: config 0 descriptor?? [ 230.074701][ T5729] gspca_main: sq930x-2.14.0 probing 2770:930c [ 230.124521][ T1071] usb 3-1: Using ep0 maxpacket: 8 [ 230.125275][ T1071] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 230.129357][ T1071] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.129393][ T1071] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.129467][ T1071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.192784][ T1071] usb 3-1: config 0 descriptor?? [ 230.376784][ T7488] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5632] was attempted by " /dev/nullb0 8    \x09    "[7488] [ 230.692026][ T1071] ryos 0003:1E7D:3138.000C: unexpected long global item [ 230.703109][ T1071] ryos 0003:1E7D:3138.000C: parse failed [ 230.703334][ T1071] ryos 0003:1E7D:3138.000C: probe with driver ryos failed with error -22 [ 230.889385][ T7486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.894510][ T7486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.189767][ T7502] veth0: entered promiscuous mode [ 231.223302][ T5729] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 231.223423][ T5729] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 231.229519][ T5729] usb 2-1: USB disconnect, device number 25 [ 231.392719][ T7503] netlink: 'syz.0.427': attribute type 8 has an invalid length. [ 231.392746][ T7503] netlink: 636 bytes leftover after parsing attributes in process `syz.0.427'. [ 231.484920][ T7500] veth0: left promiscuous mode [ 231.653587][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 231.654679][ T1071] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 231.816084][ T1071] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 231.818023][ T1071] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.821062][ T1071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 231.821091][ T1071] usb 1-1: Product: syz [ 231.821107][ T1071] usb 1-1: Manufacturer: syz [ 231.894590][ T1071] usb 1-1: selecting invalid altsetting 1 [ 231.894716][ T1071] dvb_ttusb_budget: ttusb_init_controller: error [ 231.894727][ T1071] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 232.001123][ T1071] DVB: Unable to find symbol cx22700_attach() [ 232.006173][ T5676] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 232.079572][ T1071] DVB: Unable to find symbol tda10046_attach() [ 232.079592][ T1071] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 232.161149][ T7503] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 232.180321][ T5676] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.180851][ T5676] usb 2-1: not running at top speed; connect to a high speed hub [ 232.180884][ T5676] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 232.182187][ T5676] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.182212][ T5676] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.265016][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.265050][ T5676] usb 2-1: Product: syz [ 232.265067][ T5676] usb 2-1: Manufacturer: syz [ 232.265083][ T5676] usb 2-1: SerialNumber: syz [ 232.541298][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'. [ 232.597860][ T7515] pim6reg1: entered promiscuous mode [ 232.597883][ T7515] pim6reg1: entered allmulticast mode [ 232.651736][ T5676] usb 2-1: unit 0 not found! [ 232.764703][ T6599] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 232.890956][ T10] usb 3-1: USB disconnect, device number 18 [ 232.896555][ T6599] usb 5-1: device descriptor read/64, error -71 [ 233.055704][ T7528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.103052][ T5676] usb 2-1: USB disconnect, device number 26 [ 233.135171][ T6599] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 233.224954][ T7190] udevd[7190]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.273882][ T6599] usb 5-1: device descriptor read/64, error -71 [ 233.384872][ T6599] usb usb5-port1: attempt power cycle [ 233.692495][ T7544] ip_tables: iptables: counters copy to user failed while replacing table [ 233.713949][ T7539] tipc: Started in network mode [ 233.713984][ T7539] tipc: Node identity ac14142f, cluster identity 4711 [ 233.714863][ T7539] tipc: New replicast peer: 127.0.0.1 [ 233.724997][ T6599] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 233.733814][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 233.746725][ T6599] usb 5-1: device descriptor read/8, error -71 [ 233.763297][ T7539] tipc: Enabled bearer , priority 10 [ 233.766228][ T7541] tipc: New replicast peer: 172.20.20.11 [ 233.985607][ T6599] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 234.008723][ T6599] usb 5-1: device descriptor read/8, error -71 [ 234.114303][ T6599] usb usb5-port1: unable to enumerate USB device [ 234.500871][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 234.712303][ T7558] tipc: Started in network mode [ 234.712345][ T7558] tipc: Node identity 7f000001, cluster identity 4711 [ 234.738448][ T7558] tipc: Enabled bearer , priority 10 [ 234.740067][ T5729] tipc: Node number set to 2886997039 [ 234.874046][ T7562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.874595][ T7562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.115269][ T6599] usb 1-1: USB disconnect, device number 41 [ 235.152353][ T7566] netlink: 'syz.1.443': attribute type 2 has an invalid length. [ 235.813395][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 235.853869][ T5683] tipc: Node number set to 2130706433 [ 236.065446][ T6599] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 236.113472][ T5729] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 236.215100][ T6599] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 236.217801][ T6599] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 236.217842][ T6599] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.217862][ T6599] usb 2-1: config 2 interface 0 has no altsetting 0 [ 236.228703][ T6599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.228788][ T6599] usb 2-1: Product: syz [ 236.228831][ T6599] usb 2-1: Manufacturer: syz [ 236.228873][ T6599] usb 2-1: SerialNumber: syz [ 236.265249][ T5729] usb 5-1: Using ep0 maxpacket: 16 [ 236.278378][ T5729] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 236.288826][ T5729] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 236.288847][ T5729] usb 5-1: config 0 has no interface number 0 [ 236.288868][ T5729] usb 5-1: config 0 interface 255 has no altsetting 0 [ 236.328262][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.328294][ T5729] usb 5-1: Product: syz [ 236.328311][ T5729] usb 5-1: Manufacturer: syz [ 236.328327][ T5729] usb 5-1: SerialNumber: syz [ 236.363533][ T5729] usb 5-1: config 0 descriptor?? [ 236.382270][ T5729] ums-onetouch 5-1:0.255: USB Mass Storage device detected [ 236.438003][ T7576] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 236.449496][ T7576] block device autoloading is deprecated and will be removed. [ 236.634967][ T5676] usb 5-1: USB disconnect, device number 33 [ 236.694109][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 236.773510][ T6599] usb 2-1: USB disconnect, device number 27 [ 237.563307][ T6599] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 237.628350][ T31] kauditd_printk_skb: 67 callbacks suppressed [ 237.628372][ T31] audit: type=1326 audit(1791872619.094:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 237.631836][ T31] audit: type=1326 audit(1791872619.094:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 237.698649][ T31] audit: type=1326 audit(1791872619.164:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 237.714985][ T6599] usb 1-1: Using ep0 maxpacket: 32 [ 237.732949][ T31] audit: type=1326 audit(1791872619.194:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 237.733012][ T31] audit: type=1326 audit(1791872619.194:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 237.733165][ T6599] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 237.736266][ T6599] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 237.736285][ T6599] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.736300][ T6599] usb 1-1: config 0 has no interfaces? [ 237.754914][ T31] audit: type=1326 audit(1791872619.214:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 237.767950][ T31] audit: type=1326 audit(1791872619.234:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 237.768104][ T31] audit: type=1326 audit(1791872619.234:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 237.771743][ T6599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.771826][ T6599] usb 1-1: Product: syz [ 237.771916][ T6599] usb 1-1: Manufacturer: syz [ 237.771958][ T6599] usb 1-1: SerialNumber: syz [ 237.775357][ T31] audit: type=1326 audit(1791872619.234:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 237.784735][ T31] audit: type=1326 audit(1791872619.244:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.455" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1661f9e1d9 code=0x7ffc0000 [ 237.880583][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 237.880648][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 237.894850][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 237.897078][ T6599] usb 1-1: config 0 descriptor?? [ 238.081555][ T7620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.132946][ T7626] netlink: 48 bytes leftover after parsing attributes in process `syz.4.456'. [ 238.158361][ T7622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.191442][ T7622] bond1: (slave bond0): Enslaving as an active interface with a down link [ 238.456878][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 238.603343][ T5729] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 238.634010][ T10] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 238.652598][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.652628][ T10] usb 5-1: Product: syz [ 238.652644][ T10] usb 5-1: Manufacturer: syz [ 238.652660][ T10] usb 5-1: SerialNumber: syz [ 238.692376][ T10] ums-karma 5-1:1.0: USB Mass Storage device detected [ 238.736010][ T10] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 238.736010][ T10] Please send a copy of this message to and [ 238.739539][ T7597] cgroup: fork rejected by pids controller in /syz3 [ 238.771637][ T5729] usb 2-1: Using ep0 maxpacket: 16 [ 238.790118][ T5729] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 238.811068][ T5729] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 238.811101][ T5729] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.811122][ T5729] usb 2-1: config 0 has no interface number 0 [ 238.841986][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.842016][ T5729] usb 2-1: Product: syz [ 238.842032][ T5729] usb 2-1: Manufacturer: syz [ 238.842048][ T5729] usb 2-1: SerialNumber: syz [ 238.875113][ T5729] usb 2-1: config 0 descriptor?? [ 238.895573][ T5729] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 238.895610][ T5729] uvcvideo 2-1:0.105: No valid video chain found. [ 239.009148][ T10] ums-karma 5-1:1.0: probe with driver ums-karma failed with error -5 [ 239.072395][ T10] usb 5-1: USB disconnect, device number 34 [ 239.117320][ T5676] usb 2-1: USB disconnect, device number 28 [ 239.304804][ T7612] netlink: 40 bytes leftover after parsing attributes in process `syz.0.453'. [ 239.683595][ T5729] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 239.816529][ T5676] usb 1-1: USB disconnect, device number 42 [ 239.845167][ T5729] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 239.846398][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 239.846433][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.846474][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.904538][ T5729] usb 5-1: config 0 descriptor?? [ 239.973776][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 240.079800][ T7670] binder: 7669:7670 ioctl c0306201 200000000540 returned -22 [ 240.093380][ T1071] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 240.254785][ T1071] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 240.256339][ T1071] usb 2-1: config 0 has no interfaces? [ 240.261521][ T1071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.261551][ T1071] usb 2-1: Product: syz [ 240.261568][ T1071] usb 2-1: Manufacturer: syz [ 240.261584][ T1071] usb 2-1: SerialNumber: syz [ 240.312112][ T1071] usb 2-1: config 0 descriptor?? [ 240.370266][ T5729] isku 0003:1E7D:319C.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 240.505043][ T7680] qrtr: Invalid version 0 [ 240.552947][ T5729] isku 0003:1E7D:319C.000D: couldn't init struct isku_device [ 240.553007][ T5729] isku 0003:1E7D:319C.000D: couldn't install keyboard [ 240.562770][ T7666] ip_tables: iptables: counters copy to user failed while replacing table [ 240.587342][ T5676] usb 2-1: USB disconnect, device number 29 [ 240.593760][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 240.607827][ T5729] isku 0003:1E7D:319C.000D: probe with driver isku failed with error -32 [ 240.635629][ T5729] usb 5-1: USB disconnect, device number 35 [ 240.755178][ T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 240.763659][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.763690][ T10] usb 4-1: Product: syz [ 240.763706][ T10] usb 4-1: Manufacturer: syz [ 240.763723][ T10] usb 4-1: SerialNumber: syz [ 240.790401][ T10] usb 4-1: config 0 descriptor?? [ 241.311365][ T5729] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 241.324754][ T5729] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 241.713675][ T5676] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 241.857930][ T7696] kvm: user requested TSC rate below hardware speed [ 241.883455][ T5676] usb 1-1: Using ep0 maxpacket: 8 [ 241.885443][ T5676] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 241.886676][ T5676] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 241.886696][ T5676] usb 1-1: config 179 has no interface number 0 [ 241.886725][ T5676] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 241.886745][ T5676] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 241.886776][ T5676] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 241.886796][ T5676] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 241.886816][ T5676] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 241.886835][ T5676] usb 1-1: config 179 interface 65 has no altsetting 0 [ 241.886859][ T5676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.013897][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.014382][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.064050][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 242.112134][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 242.358621][ T5676] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input22 [ 242.464055][ T4968] input input22: unable to receive magic message: -71 [ 242.469765][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 242.471141][ T4968] input input22: unable to receive magic message: -71 [ 242.497470][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 242.598962][ T4968] input input22: unable to receive magic message: -71 [ 242.618809][ T5676] usb 1-1: USB disconnect, device number 43 [ 242.618864][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 242.619125][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 242.816394][ T5713] usb 4-1: USB disconnect, device number 33 [ 243.343304][ T5676] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 243.494673][ T5676] usb 5-1: Using ep0 maxpacket: 16 [ 243.498922][ T5676] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0036, bcdDevice=1e.46 [ 243.501535][ T5676] usb 5-1: config 49 has an invalid interface number: 155 but max is 3 [ 243.501566][ T5676] usb 5-1: config 49 contains an unexpected descriptor of type 0x1, skipping [ 243.501602][ T5676] usb 5-1: config 49 has an invalid interface number: 29 but max is 3 [ 243.501626][ T5676] usb 5-1: config 49 has an invalid interface number: 225 but max is 3 [ 243.501648][ T5676] usb 5-1: config 49 has an invalid interface number: 143 but max is 3 [ 243.501669][ T5676] usb 5-1: config 49 has an invalid interface number: 72 but max is 3 [ 243.501689][ T5676] usb 5-1: config 49 has 5 interfaces, different from the descriptor's value: 4 [ 243.501711][ T5676] usb 5-1: config 49 has no interface number 0 [ 243.501729][ T5676] usb 5-1: config 49 has no interface number 1 [ 243.501746][ T5676] usb 5-1: config 49 has no interface number 2 [ 243.501764][ T5676] usb 5-1: config 49 has no interface number 3 [ 243.501782][ T5676] usb 5-1: config 49 has no interface number 4 [ 243.501872][ T5676] usb 5-1: config 49 interface 155 altsetting 12 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 243.501903][ T5676] usb 5-1: config 49 interface 155 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 243.501926][ T5676] usb 5-1: config 49 interface 155 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 243.501950][ T5676] usb 5-1: config 49 interface 155 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 243.501975][ T5676] usb 5-1: config 49 interface 155 altsetting 12 endpoint 0xC has invalid maxpacket 1096, setting to 64 [ 243.502003][ T5676] usb 5-1: config 49 interface 155 altsetting 12 has an endpoint descriptor with address 0x53, changing to 0x3 [ 243.502030][ T5676] usb 5-1: config 49 interface 155 altsetting 12 has a duplicate endpoint with address 0x3, skipping [ 243.502056][ T5676] usb 5-1: config 49 interface 155 altsetting 12 has a duplicate endpoint with address 0x2, skipping [ 243.502080][ T5676] usb 5-1: config 49 interface 155 altsetting 12 has a duplicate endpoint with address 0x4, skipping [ 243.502107][ T5676] usb 5-1: config 49 interface 155 altsetting 12 has a duplicate endpoint with address 0x4, skipping [ 243.502136][ T5676] usb 5-1: config 49 interface 29 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 32 [ 243.502154][ T5676] usb 5-1: config 49 interface 29 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 243.502170][ T5676] usb 5-1: config 49 interface 29 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 243.502217][ T5676] usb 5-1: config 49 interface 29 altsetting 0 endpoint 0x6 has an invalid bInterval 128, changing to 11 [ 243.502251][ T5676] usb 5-1: config 49 interface 29 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.502267][ T5676] usb 5-1: config 49 interface 29 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 64 [ 243.502284][ T5676] usb 5-1: config 49 interface 29 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 243.502303][ T5676] usb 5-1: config 49 interface 29 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 243.502319][ T5676] usb 5-1: config 49 interface 29 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 243.502336][ T5676] usb 5-1: config 49 interface 29 altsetting 0 endpoint 0xD has an invalid bInterval 241, changing to 11 [ 243.502354][ T5676] usb 5-1: config 49 interface 29 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 243.502370][ T5676] usb 5-1: config 49 interface 29 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 243.502394][ T5676] usb 5-1: config 49 interface 143 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 243.502414][ T5676] usb 5-1: too many endpoints for config 49 interface 72 altsetting 197: 135, using maximum allowed: 30 [ 243.502439][ T5676] usb 5-1: config 49 interface 72 altsetting 197 has a duplicate endpoint with address 0x9, skipping [ 243.502456][ T5676] usb 5-1: config 49 interface 72 altsetting 197 has a duplicate endpoint with address 0x6, skipping [ 243.502472][ T5676] usb 5-1: config 49 interface 72 altsetting 197 has a duplicate endpoint with address 0x8, skipping [ 243.502488][ T5676] usb 5-1: config 49 interface 72 altsetting 197 has an invalid descriptor for endpoint zero, skipping [ 243.502503][ T5676] usb 5-1: config 49 interface 72 altsetting 197 has 4 endpoint descriptors, different from the interface descriptor's value: 135 [ 243.502522][ T5676] usb 5-1: config 49 interface 155 has no altsetting 0 [ 243.502535][ T5676] usb 5-1: config 49 interface 225 has no altsetting 0 [ 243.502548][ T5676] usb 5-1: config 49 interface 143 has no altsetting 0 [ 243.502561][ T5676] usb 5-1: config 49 interface 72 has no altsetting 0 [ 243.540122][ T5676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.540198][ T5676] usb 5-1: Product: 摓䋏〱흄ꙮ먦ﴸ옜⋨笠嚕품슕搡锛琗ꩰ⺈ꏓﶋ멈㴏 [ 243.540251][ T5676] usb 5-1: Manufacturer: 쾊ꦦ೰顦武옎＄슘뭺삣夙ꭿ⶝ࠎ寋蕵⸥䶝дﭛ丸懃⦡勛쑆⮱↤ٞ糥抋窌짟᡼ℭ誰㴦蘦冬쫺颐㋳㗝㑀揖䩶 [ 243.540328][ T5676] usb 5-1: SerialNumber: Ѓ [ 244.066998][ T5676] em28xx 5-1:49.29: New device 쾊ꦦ೰顦武옎＄슘뭺삣夙ꭿ⶝ࠎ寋蕵⸥䶝дﭛ丸懃⦡勛쑆⮱↤ٞ糥抋窌짟᡼ℭ誰㴦蘦冬쫺颐㋳㗝㑀揖䩶 摓䋏〱흄ꙮ먦ﴸ옜⋨笠嚕품슕搡锛琗ꩰ⺈ꏓﶋ멈㴏 @ 480 Mbps (0ccd:0036, interface 29, class 29) [ 244.067038][ T5676] em28xx 5-1:49.29: Video interface 29 found: bulk [ 244.067051][ T5676] em28xx 5-1:49.29: DVB interface 29 found: [ 244.126075][ T5676] em28xx 5-1:49.29: unknown em28xx chip ID (0) [ 244.134278][ T4933] Bluetooth: hci0: command 0x2021 tx timeout [ 244.217592][ T5676] em28xx 5-1:49.29: reading from i2c device at 0xa0 failed (error=-5) [ 244.217667][ T5676] em28xx 5-1:49.29: board has no eeprom [ 244.274233][ T5676] em28xx 5-1:49.29: Identified as Terratec Cinergy 250 USB (card=2) [ 244.274267][ T5676] em28xx 5-1:49.29: analog set to bulk mode. [ 244.274278][ T5676] em28xx 5-1:49.29: dvb set to bulk mode. [ 244.274500][ T6599] em28xx 5-1:49.29: Registering V4L2 extension [ 244.447364][ T5676] usbhid 5-1:49.72: couldn't find an input interrupt endpoint [ 244.478727][ T5676] usb 5-1: USB disconnect, device number 36 [ 244.504624][ T6599] em28xx 5-1:49.29: reading from i2c device at 0x4a failed (error=-5) [ 244.504735][ T6599] em28xx 5-1:49.29: reading from i2c device at 0x48 failed (error=-19) [ 244.504804][ T6599] em28xx 5-1:49.29: reading from i2c device at 0x42 failed (error=-19) [ 244.504871][ T6599] em28xx 5-1:49.29: reading from i2c device at 0x40 failed (error=-19) [ 244.566156][ T5676] em28xx 5-1:49.29: Disconnecting em28xx [ 244.672899][ T6599] em28xx 5-1:49.29: Config register raw data: 0xffffffed [ 244.672921][ T6599] em28xx 5-1:49.29: AC97 chip type couldn't be determined [ 244.672931][ T6599] em28xx 5-1:49.29: No AC97 audio processor [ 244.770768][ T6599] usb 5-1: Decoder not found [ 244.770793][ T6599] em28xx 5-1:49.29: failed to create media graph [ 244.770828][ T6599] em28xx 5-1:49.29: V4L2 device video103 deregistered [ 244.836070][ T6599] INFO: trying to register non-static key. [ 244.841954][ T6599] The code is fine but needs lockdep annotation, or maybe [ 244.849076][ T6599] you didn't initialize this object before use? [ 244.855335][ T6599] turning off the locking correctness validator. [ 244.861672][ T6599] CPU: 0 UID: 0 PID: 6599 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.872618][ T6599] Tainted: [L]=SOFTLOCKUP [ 244.876944][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.887006][ T6599] Workqueue: events request_module_async [ 244.892692][ T6599] Call Trace: [ 244.896009][ T6599] [ 244.898969][ T6599] dump_stack_lvl+0xe8/0x150 [ 244.903583][ T6599] assign_lock_key+0x133/0x150 [ 244.908368][ T6599] register_lock_class+0xcc/0x2e0 [ 244.913419][ T6599] __lock_acquire+0x10c/0x2de0 [ 244.918200][ T6599] ? irqentry_exit+0x218/0x920 [ 244.923015][ T6599] ? __mutex_trylock_common+0x15f/0x270 [ 244.928690][ T6599] ? preempt_schedule_thunk+0x16/0x40 [ 244.934259][ T6599] lock_acquire+0x115/0x350 [ 244.938796][ T6599] ? __wake_up_common_lock+0x30/0x1f0 [ 244.944243][ T6599] ? rcu_is_watching+0x16/0xb0 [ 244.949036][ T6599] _raw_spin_lock_irqsave+0x40/0x60 [ 244.954278][ T6599] ? __wake_up_common_lock+0x30/0x1f0 [ 244.959689][ T6599] __wake_up_common_lock+0x30/0x1f0 [ 244.964928][ T6599] ? __pfx___mutex_lock+0x10/0x10 [ 244.969987][ T6599] __vb2_queue_cancel+0x2de/0xde0 [ 244.975046][ T6599] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 244.980444][ T6599] vb2_core_queue_release+0x2f/0x150 [ 244.985750][ T6599] vb2_video_unregister_device+0x15b/0x200 [ 244.991577][ T6599] em28xx_v4l2_init+0x1c89/0x3150 [ 244.996639][ T6599] em28xx_init_extension+0x120/0x1d0 [ 245.001974][ T6599] ? process_scheduled_works+0x97a/0x1630 [ 245.007748][ T6599] process_scheduled_works+0xc3d/0x1630 [ 245.013367][ T6599] ? __pfx_process_scheduled_works+0x10/0x10 [ 245.022148][ T6599] ? assign_work+0x3cf/0x5d0 [ 245.026796][ T6599] worker_thread+0xa47/0xfb0 [ 245.031462][ T6599] ? __kthread_parkme+0x71/0x1f0 [ 245.036486][ T6599] kthread+0x38b/0x480 [ 245.040613][ T6599] ? __pfx_worker_thread+0x10/0x10 [ 245.045953][ T6599] ? __pfx_kthread+0x10/0x10 [ 245.050586][ T6599] ret_from_fork+0x514/0xb70 [ 245.055208][ T6599] ? __pfx_ret_from_fork+0x10/0x10 [ 245.060344][ T6599] ? __switch_to+0xc89/0x1420 [ 245.065055][ T6599] ? __pfx_kthread+0x10/0x10 [ 245.069686][ T6599] ret_from_fork_asm+0x1a/0x30 [ 245.074490][ T6599] [ 245.077618][ T6599] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 245.089540][ T6599] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 245.097998][ T6599] CPU: 0 UID: 0 PID: 6599 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.108981][ T6599] Tainted: [L]=SOFTLOCKUP [ 245.113329][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.123431][ T6599] Workqueue: events request_module_async [ 245.129107][ T6599] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 245.135159][ T6599] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 dc 89 98 00 48 ba 00 00 00 00 00 fc [ 245.154802][ T6599] RSP: 0018:ffffc900073c7880 EFLAGS: 00010046 [ 245.160917][ T6599] RAX: 0000000000000000 RBX: ffff88803a719740 RCX: 0000000000000001 [ 245.168930][ T6599] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900073c77e0 [ 245.176944][ T6599] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 245.184938][ T6599] R10: dffffc0000000000 R11: fffff52000e78efc R12: 0000000000000000 [ 245.192938][ T6599] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88803a7197d0 [ 245.200940][ T6599] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 245.209908][ T6599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.216529][ T6599] CR2: 00007f5bf035da08 CR3: 0000000037074000 CR4: 00000000003526f0 [ 245.224537][ T6599] Call Trace: [ 245.227928][ T6599] [ 245.230885][ T6599] __vb2_queue_cancel+0x2de/0xde0 [ 245.235944][ T6599] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 245.241361][ T6599] vb2_core_queue_release+0x2f/0x150 [ 245.246689][ T6599] vb2_video_unregister_device+0x15b/0x200 [ 245.252551][ T6599] em28xx_v4l2_init+0x1c89/0x3150 [ 245.257618][ T6599] em28xx_init_extension+0x120/0x1d0 [ 245.262951][ T6599] ? process_scheduled_works+0x97a/0x1630 [ 245.268715][ T6599] process_scheduled_works+0xc3d/0x1630 [ 245.274310][ T6599] ? __pfx_process_scheduled_works+0x10/0x10 [ 245.280340][ T6599] ? assign_work+0x3cf/0x5d0 [ 245.284963][ T6599] worker_thread+0xa47/0xfb0 [ 245.289612][ T6599] ? __kthread_parkme+0x71/0x1f0 [ 245.294599][ T6599] kthread+0x38b/0x480 [ 245.298701][ T6599] ? __pfx_worker_thread+0x10/0x10 [ 245.303860][ T6599] ? __pfx_kthread+0x10/0x10 [ 245.308487][ T6599] ret_from_fork+0x514/0xb70 [ 245.313114][ T6599] ? __pfx_ret_from_fork+0x10/0x10 [ 245.318269][ T6599] ? __switch_to+0xc89/0x1420 [ 245.322998][ T6599] ? __pfx_kthread+0x10/0x10 [ 245.327626][ T6599] ret_from_fork_asm+0x1a/0x30 [ 245.332438][ T6599] [ 245.335484][ T6599] Modules linked in: [ 245.339436][ T6599] ---[ end trace 0000000000000000 ]--- [ 245.344927][ T6599] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 245.344970][ T6599] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 dc 89 98 00 48 ba 00 00 00 00 00 fc [ 245.344990][ T6599] RSP: 0018:ffffc900073c7880 EFLAGS: 00010046 [ 245.345011][ T6599] RAX: 0000000000000000 RBX: ffff88803a719740 RCX: 0000000000000001 [ 245.345026][ T6599] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900073c77e0 [ 245.345041][ T6599] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 245.345054][ T6599] R10: dffffc0000000000 R11: fffff52000e78efc R12: 0000000000000000 [ 245.345070][ T6599] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88803a7197d0 [ 245.345086][ T6599] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 245.345104][ T6599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.345120][ T6599] CR2: 00007f5bf035da08 CR3: 0000000037074000 CR4: 00000000003526f0 [ 245.345149][ T6599] Kernel panic - not syncing: Fatal exception [ 245.448933][ T6599] Kernel Offset: disabled [ 245.453277][ T6599] Rebooting in 86400 seconds..