last executing test programs: 11.969329186s ago: executing program 0 (id=195): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000780)={&(0x7f0000000600)=[0x0], &(0x7f0000000640)=[{}, {}], &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x1, 0x0, r3}) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) unshare(0x2040600) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000800)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], r5, 0x0, '\x00', 0x4, 0x7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x5, r4, r3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r7, 0x1, 0x0, 0x1000000000000}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffebd}}, 0x4060010) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000001c0)={r7, 0x7ff, 0x7, 0xbbc2, 0x1, [], [0x10001, 0x8, 0xcbb8, 0x9], [0x7, 0xa, 0x5, 0x47dc], [0x3ff, 0x7, 0x1b419b88, 0x1]}) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/ipc\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)={0x1c, 0x2d, 0xb, 0x0, 0x0, {0x8}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="c24f7fef"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240040c1}, 0x8000) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000100)) quotactl_fd$Q_QUOTAOFF(r9, 0xffffffff80000300, r11, 0x0) setns(r9, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902240001010000000904000002030102000921000500012200000905", @ANYRESOCT], 0x0) 10.998653135s ago: executing program 1 (id=199): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000140)=0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000100)='y\x105\xfa\xf7u\x96\xa8/\xc2\xe08!W\x96%M\xd4).9\x90\xbeP\xe6\x1fW\x80\xb5:r\xc3\xb9x\xa4q\xc1\x04\x00\x00\x00\x00\x00\x00\x00\xc9\x88c$\xd7G\xd3', 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x1}}, 0xffffffffffffff36) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x76d800, 0x3, 0x81, 0xffffffff, 0x5}) r5 = syz_open_dev$loop(&(0x7f0000000040), 0xe59, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="57259b0060c9d03cfba8d0130527fba2a7f3d02fd9599ca96df8d88ab1d2fd85835ff12ba0986e4e5a1cbd5eecba588c85b5b1a03718cb49b2f4310cc3280fa1405b40c3397ae7036023f50f51dd421c003a5ffcc89d03bbfab934166c0e03aa0c127d52929efcb6e58529a9"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0xa, 0x4e20, 0x7, @remote}, r4, 0xffffffff}}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x4, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r8, &(0x7f0000002340)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) close(0xffffffffffffffff) 10.104567942s ago: executing program 0 (id=200): ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x15, 0xff, 0x4, 0x7, 0x2, 0x1, 0x1, 0x53, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x5, 0x45, [0x3]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents(r2, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0xc4, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x8c, 0x8, "ae348f27d88bc05fd7d45281300ad7e3e3d7275e5d11b59400901aeff7d23d06efccd4b535c943a82b7d93e4e26a87662988c30e5a7fb3ecffff97193427932345f7e4654a6635e2646b43b359581ff4513a2c1868411e42c8d960d77be124a6e9675133dc391d249e3afc3d69f8b17368d872bba374bf573f6d2eefe6346fe0b7e1fa17cb1c3ece"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x12c}}, 0x0) 9.697209616s ago: executing program 0 (id=201): r0 = socket(0x15, 0x5, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000700)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="35bac0a1c37f306c18f83dba31b83ecfb34f5ad472f13f511847880fe3ae914afbe5527939bed7f70e34dcb2a8442b4e5ac1af0600da4123bf49431687d68b3a6b245c4e824cf78c55c899fbfee087c3a3b06b49d11fe2a99454d56231b281322efd17c07586a5535489d3f28a10b01baf1728d04a7a18377804feb5dc227dcfeed8ae33f735a1cda280921596133224b07f3a5a4943cfc71a38f0005f802bc3108c393d0d264e4d5586330fbaadd4a5324ecd1a80926f704944fe0c8604d329c8b822dee7054f8dbbd7ad13bc89e8cc0c6153d97552fa2ecec8c623ae801258921605f1678d7932896d6ad7450c6d91bbec55343ea81980", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x5b4, @mcast1, 0x10009}, 0x72) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0xce6f, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01ce7e000000000000d5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011109a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000210a4800000f060a0b160000000000000000020000081c00048018000180080001006c6f67000c00028008000540000000000900010073797ab2421ad83657738d1d67fdcc58a52330000000000900020073797a3200000000140000091100010000000000000000000000000ad921b1732cbb4c27c793c17fc8e73849fe58606b25de4d9f7477ab8aafd02fa6a88e48b63fc62d955aba0731f44afb97d089c7931ef1c414b3c39108aab66699bedc6041dba4066cef10a88f"], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000040)=0x100) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffc, 0x86}, &(0x7f0000000040)=0x90) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = fsopen(&(0x7f0000000040)='ubifs\x00', 0x1) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f00000003c0)={r10, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r10, 0x1, 0x3}, &(0x7f00000001c0)=0x8) fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f00000000c0)='@:\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c010069", @ANYRES16=r5, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x0) socket(0x10, 0x3, 0x0) unshare(0x26020480) socket(0x10, 0x803, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40102, 0x0) 7.461404857s ago: executing program 1 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x1000, 0x1000, &(0x7f0000b07000/0x1000)=nil}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f00000002c0)) 7.063285858s ago: executing program 1 (id=206): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r0, 0x1, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xba}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x8090) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000000)={0x3, 0x0, [{0x40000001, 0x1, 0x0, 0x8, 0x9, 0x5, 0x25b6}, {0xc0000000, 0xfffffffd, 0x3, 0x4, 0x5, 0xfffffff7, 0x5}, {0xd, 0x20000, 0x5, 0x8, 0x1, 0x5}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3c0200001900010000000000ffdbdf2500000000000000000000ffffac1414bbfe8800000000000000000000000000014e20000bf7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000090000000000000080000000000000000000000000000000fcffffff00000000000000000000000084010500fc000000000000000000000000000004000000003c00000000000000000000000000000000000000000000000235000000020000000000000000000000000000fe8000000000000000000000000000bb000000003c0000000a000000ffffffff000000000000000000000000fbffffff04"], 0x23c}, 0x1, 0x0, 0x0, 0x20006854}, 0x4000880) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4d9e89d913dea251}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000240)="a43b2eaab40000000000800065", 0xd}, {&(0x7f0000000080)="f9ae9189eb51dca432", 0x9}], 0x4) syz_open_dev$dmmidi(&(0x7f0000000140), 0x2a41, 0x440) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, &(0x7f0000000040)) 6.337461266s ago: executing program 0 (id=210): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000880), 0x101000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_usb_connect(0x1, 0x73, &(0x7f0000000740)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r3, 0x0, 0x61000006, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcb9}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) 6.261980474s ago: executing program 1 (id=211): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b010203010902120001000000000904"], 0x0) sendto$inet(r1, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7fffffff, 0x6) recvmsg(r0, &(0x7f0000009d40)={0x0, 0x0, 0x0}, 0x40000121) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8936, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="67503bc40700000000000000fd17ffffffffffff", @ANYRES32=r7, @ANYRESDEC=r4], 0x4c}}, 0x0) 5.435418995s ago: executing program 2 (id=214): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xfffffffa, @remote, 0x6}]}, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f00000000c0)=0x400) (fail_nth: 3) 4.969865236s ago: executing program 2 (id=215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x20050800) 4.723992755s ago: executing program 2 (id=217): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = dup(0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a28000000000a0101000000005e1affd5020000000900010073797a30000004c5029b626b0bdeb49d0f00032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x8a4) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9c000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000068000480640001800b0001007470726f78790000540002800800014000000001080001400000000108000340000000000800024000000009080003400000000d0800"], 0xc4}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='lpol=prefer:,\x00']) (async) write$UHID_INPUT(r0, &(0x7f00000026c0)={0x7, {"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", 0x1000}}, 0x1006) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000140)=[@nested_amd_set_intercept={0x181, 0x30, {0x0, 0x9, 0x8}}, @rdmsr={0x66, 0x18, {0xbd1}}, @nested_create_vm={0x12d, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x2, 0x6}}, @wr_crn={0x67, 0x20, {0x8}}, @uexit={0x0, 0x18, 0x83}, @code={0xa, 0x77, {"c4417d29160f793af3430fc77406a2b9ba0b0000b800900000ba000000000f30b983040000b8d98affceba000000000f3066640f32c4020da87bc648b800000000000000800f23d00f21f8353000000f0f23f8c461b77db4fb0008000067260f78a58a720000"}}, @cpuid={0x64, 0x18, {0xffff, 0x3}}, @wrmsr={0x65, 0x20, {0xafaf3a8134a72dce, 0x8}}], 0x167}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, 0x140000, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000300)) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x5f97, 0x4, [0xfff7, 0xf, 0x3, 0x1ff]}, &(0x7f0000000040)=0x10) (rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r3, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x9, 0x401}, 0x90) 4.435425017s ago: executing program 2 (id=218): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x129202, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000300f3508da040d391a990102030109022d0001000000440904ef0003846a9200090502101000020407090564020800"], 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r0, &(0x7f0000000180)=""/67, 0x43) 4.22329212s ago: executing program 3 (id=219): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10, 0x110, 0x2}}], 0x10}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)) (async) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000180)={0x0, r3}) 4.090681907s ago: executing program 0 (id=220): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000000, 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x13, r0, 0xf6833000) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0xc, 0x45, {0x45, 0x5, "df3412e5f0d13db38c6ef8b883f6def35ddd04390ec6744c1f481b7533aeec37f56330272237bcc9b1a948fc31bd39a06af4a3d7dd1b9272be7babbd010bd54961b898"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000340)={0x34, &(0x7f0000000380)={0x40, 0xe, 0x26, "32d0d299d43314eaa2e1d671155fa1eb99f6e899f1ae70ace49530ebca6ec9c4cf80cf381e8c"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000240)={0x20, 0x0, 0x48, {0x46, "3f7bffae1be2a901ceec325f29ee3cf5639599cd46140a14becb98b65e33293ec3be14418b3a2eb8485af30408a734f8a9781e61913dfe90c1516eac3859e998721a7b962079"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x8}}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x5) fchdir(r4) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000400)={0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file3\x00') ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x480, 0xbbba, 0x0, 0x18, 0x0, {0x6, 0x0, 0x10000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000, 0x1}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x100}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000380)=0x17) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000003c0)={0x2, {0x2, 0xca8, 0x7, 0x101, 0x5, 0xe}}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect(0x6, 0xb20, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0xc2, 0x9c, 0x45, 0x20, 0x11ff, 0x1e29, 0x233a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0e, 0x2, 0x0, 0x1, 0x80, 0x0, "", [{{0x9, 0x4, 0xd1, 0x3, 0xe, 0xff, 0x5d, 0x1, 0x80, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "5b8b"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x8, 0x6}, [@country_functional={0x10, 0x24, 0x7, 0x9, 0x7, [0x4, 0x0, 0x8, 0x9, 0x400]}]}, @generic={0x19, 0x30, "9e966eb34664e2833046f4e61ed4fb3fdbf8cb05212b82"}], [{{0x9, 0x5, 0xb, 0x10, 0x200, 0xf4, 0xd5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x749400fe9db52810, 0x1, 0x9}, @generic={0x9, 0x6, "2081bd6741b0df"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x5, 0x7, 0x0, [@generic={0xa1, 0x1, "6731298c0c04bb8b39328eb26bcd623e062881ca73bd1faff8572073e9ec42a7a559526065f342ecb6fc3b1923a5593b45a97fdb56bb131c7110b872d6cb5a1e72dbb380b73bdb7915e58b1b50a9f8988852ad17edbe07e729e70b65170ee5166dbc7457b3fdf17296898d4c718b11ca0e1dd2f1dd01017bfae959f0ab6aa760196ba537033ab0d3c7ce43b71f985d3d9375ec29d0f46f2f6d48df6ae5049d"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x80, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x80, 0x6, 0x3, [@generic={0xc3, 0x6, "45a70c8415a026e420dcd863b3b4b0cb6e47a1de015edf10c4f731a91e63a97affe787bf36437e494d7319ec9a85ab98f92c8a71a8b5c92817b8b1b1e77d03f914058aba4e8cb50731935b9217004b91c162ac333de354e95d42592f4535c9f36e8a57b3e427756fa75f69c86b5832a4324d0bd65358dbfe63bfe5b99ed39bec2d7df82bb5ed3077108781bae6380b38e996c4a9efa12d47b5567b893eeff4057e5781a088bc282f122fc6f9fbcbfc4ec1abbcf47f4ffa015b0651b5e2d6b0ccda"}, @generic={0xcd, 0x22, "c167d3395ce98b2531edbd8ab8a50d721cc9682b95c06211f15153b9570a5596b199584336c70793a577101a87bc6bde8f28931510da8b3bd5d2d4f31c8747ff3976723b5d47af2d5adf28fad3cdfb4d42915abb2fc8f419b86cf43a8389b9c6eca54412d9e94d7812ca0ca2f7afb494eacfd76873aa9ac9723afda250d64ae57ef96190cd421d3f71b23ca1b7ace3c3b29d0e75f63b3309b22714afb80d7fd5f256a81af39cfa1dfa965b6e6f60a7fd5acb362baa5e5b26fcc1c8f60351321fd7a8d2fb4579f53f8de2ec"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x3, 0x9, 0x5, [@generic={0x77, 0x3, "7f6ff193534ffcd9987afb6678e10dc11e5f9bf8446c41319a6ba22ba5e39b2e32f3e5046a065d170fefbe05b38e6762c7330f8caf2c0849f58c038d1fd8984dd132b680ca3df4bd756b7f4af5044b49742c3098feff7507980c3b6119deeb8741a37307778b6d271d2952a70dc250ec006a8d7c42"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x6, 0x9, 0x8}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x1, 0x5, 0xad, [@generic={0x6a, 0x30, "c2aa7baa9029738ec9d177079b750cc36e9ce2a5b9cc9fedb9ad1b174665bcd6435887b06e6a7ebf2b68ebd088904ffe3e8dfbca48317823a9d5c10ebcc2275fb4401764f8296311f570805957727dac51d05a10b3f3e4f0717a6d24f5ebc72438869c07b0ecd3d6"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xe0f}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x5, 0x9, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x0, 0x3, 0x9a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x9, 0x7, 0x6}}, {{0x9, 0x5, 0x80, 0x0, 0x210, 0xb, 0x5, 0x9, [@generic={0x20, 0xe, "5cc44ea24e97eaefaed866710ccac1ad10ba540a10e6e432195d921b7dff"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x5, 0xc, 0x5, [@generic={0x2, 0x6}, @generic={0xbe, 0xf, "49c67501ac2d24ffcd26cbf1fd0055df1443fb3baaa6f41989a27d0ba32a4d90122ace6386d54a2d924765801b39785e88ce39605101cb65822bad5c335c591329fc9a50474ea50b804e597cc1770b29d246417e6963f0b5cc4aa3ae95861be2a64d65b8af79e69dacaf8730915c55bdd132bded3eff5abcfbea662c13ea2e8f8feb87ca6b5aaffd062cd8c04d0e250c85b9117a75ef3862ffcdc697a86c13d70fbb844dc452ec0c4d021831854baf3ee85b460cb9d619bd7543dad4"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x4, 0x0, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x28, 0x3}, @generic={0x46, 0x24, "8a1484be0b0f1cf2b3871b9e16f7d97d070ff1c84e661b8df4543bd91674403a28ef48fe9eee9bd3c1649bd66b5befeabe5811b3068f0114aaa7e784a77bb4562f5ae085"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x1b, 0xe2, 0x10, [@generic={0xf0, 0x10, "ccdb90fbfd6bfeceac71694addfc70872af8b3edc265b4049e3070bccae80b6ef1a5e17865f6cb8ee6ee692e444192b558486d2f49ae786800b86e0d12ad9447a7afbe4c284b2d2c3bbcd12c1809108ff1739ceef54bb04555cf0872b75c98a45661c0b772f3f869e6b3cb96896de073920d863bc4a3bfda9281b3ffa6fb843de50f8e747101170070316d715770f6064d15e97d3c00261ead9c0546bc6437c5e1825ab26b8a9e76c9767d69e647c9bd0183a2712c73d9875437a88fbe3ad6f631e8c3f5085b2081cd8fcfedadddfdd1b9967721cc7782a959ebc123232121c602e971ed616adff67509bbdef85a"}]}}]}}, {{0x9, 0x4, 0x62, 0x81, 0x9, 0xa7, 0x36, 0xc4, 0x0, [], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x5, 0x1, 0x5, [@generic={0xae, 0x1, "b8ecaa14ed6621ed823eff8172872f6a361b4dd93dd2781fc7293636b7d44fc2e10fd509e53b7281bfaa7e22d2fec77adfea554445680bf17a92f36b4b13b6b6bf172205f943b21de303430e08cc7458830b8275abe60283e3f1b01e264587740c4b525b9460d12979ec0cf6a23809fa52047db8fa874811d384bef5bf5e63bef81e7f9b342d7ae98165b955db6079d97ba0b5af33eb7d3ee5e7260a7d28bc7ca31403c3011b68925dd688a2"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0xff}]}}, {{0x9, 0x5, 0x6, 0x18, 0x8, 0xe, 0x8, 0x2, [@generic={0x61, 0x30, "9bfe202977281627490104a4215d78eed9f2cdd76817089708e83dbc83d89365ef7502cf19c44d6eefeb15e4429caa94027661189c9858105a45d936a00fe83a200505f6fb6ceff0b4b792893cf580c763846e31dd39e0d2123d46ba7b5042"}, @generic={0x4f, 0x5, "48843de1b8ca10c75ef7b7bc1374ffd8f1d8e24929ecfbdaa1b29169d25adf6367d83ccd54b882a443d83a29325b1a0950cc50a202c2c9e145b5754c8f56ea0ec96ef3b06cba6d9080ddc03e51"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0xfa, 0xfd, 0x64, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xff, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf6, 0x7}, @generic={0xa1, 0x15, "a2d333a4a50be899ceed913ce86f90b5eefe562ffd1473f9ec6ad47a90b30dfd01385a2e56ab813309edd2fac6a9f5bbeb552e696ad7bdce92964fb6e9b75dc8311d3a3599d02e8f76aee33ad254d73c2a8cccb776e94c7af5bb94e687085c0efe960229ce52c179bba00911b4b329ba4ca25e9ebe16c497e4a8542d19d0caab3bf7470731ec36300740fba1fec5802e0ad271b3b1439ec0c4825f76f88190"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x2, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x8}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0xff, 0x0, 0x4, [@generic={0x1d, 0x1, "8252d945fb979116edce4481b7525cae08ea20156f880104bad0e6"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x8, 0x7f, 0x0, [@generic={0xb2, 0xc, "584ef1a09b84b5f6cd9b8945305f8f7231a9c140ec216c28774b785fad929154ecf7e24d35459ea6eb64ee58c670b70cf901696bbc438897de65219b32c9c1e235002b0e1066b64889b898c6d41c037e44ea820261e7d4e33812a8fa5ad338813768d063d9a616ae2cad06b6149a31b41b40db582d6a33e5b0717894f7868b4cde7c8ca259488c5cf5a9939e1535ec13075a63b9bc56f49ba75c77bbe2229008cfd22f15e63dfea9338794d452bdf832"}, @generic={0xc1, 0x21, "953a8952dc98826442516c3495a4846c3ad5a6893ae38e7acbd045f5f3763efe95a81f01a42310312be4d01d9cd2b4c775a91045e9e49230188e105e4b1c82b759310e14fdfa2f88fc392050dde6c823187b679f89e84c51723ee3cb426fb85a9bd88322131ef0cc5ba039772eeb789c268cbf724b18670ce59f05df4f6e9fcdfc97e62161b343b1d3a2f724561272f101b523ef2dc81978cbed5df4402ea0ece259e6283d82ff3e5198c1be2dedb48c5a225e23f016671f0940c4df6270a8"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x3, 0x3, 0x1, [@generic={0x3c, 0x24, "8ee1e0c3a555318e11ccda92c38fc7a84cebfb377f648107015162ac3f99900bfd58325cab2874d135ad551e306e0fa22eef08de820d6eae2494"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x94, 0xa, 0x3, [@generic={0x57, 0x7, "5fe39b309e8b62389b29176668e9c80ed9f4c3ff6bba696bf240e6f6904a485d6d51cfa44c84df63d385a629e05a3b7570cdf9b77bb5a9ff30ef326d0c26b079a566746d7e9ed8ce7221ab7fee41887fe2c92cd4e3"}, @generic={0x34, 0x10, "7fae95287671c6bd8df879f5256e876b9f1787cdf530e712d8aee099162bd8d3810bb6826b5416eb8efa24001693a46bd735"}]}}]}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x300, 0x5, 0x8, 0x3, 0xff}, 0x13a, &(0x7f0000001240)={0x5, 0xf, 0x13a, 0x4, [@generic={0x100, 0x10, 0xa, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x2, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x7, 0xf, 0x3, [0x0, 0xffc03f, 0x30, 0x30, 0xff3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xd2, 0x2, 0x7, 0x4a}]}, 0x4, [{0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0xecc0}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x421}}, {0x2e, &(0x7f0000001440)=@string={0x2e, 0x3, "a1a1460423027150cc86cb8a38898ba249de48be728a91fcce93f499508a704d016c130c1bb360af798b2e79"}}]}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000680)={0x0, 0x5, 0x1, "10"}, 0x0, 0x0, 0x0, 0x0}) 3.854787286s ago: executing program 3 (id=221): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x8043, 0x7, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0) 3.600436355s ago: executing program 3 (id=222): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="1400000013000100000007000000000006"], 0x14}], 0x1, 0x0, 0x0, 0x88}, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000091401"], 0x18}}, 0x0) 3.432683064s ago: executing program 3 (id=223): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000030c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x61, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9d2050744d45be81f49a0fa06ee6d97eb1fcd4bb7391bf432ec3b851f9ede9c3b7d9deba726f8bea4e3c1ae84590d04e52b25dd097e755f75a5b3a82996770501ba3f61be6a8fa87"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x600, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x1574, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x358, 0x3, 0x0, 0x1, [{0x354, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x2f8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x35, 0x1, "8e292ec425b239909bdd75b7f4458c2b1334e9902bcd65d2618efc5c5bff18f94e9b9cddfc7d90da941bf01cd99caa02df"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "b7959c41db5b87b23791b23872b1c385b142c6c5e3d10fff46baf3812d5182211702c463b6859a582fcdc6b275e0f4e56f222a4ab639627d9d9d0e68bf4c379d762df155db36281c6447099a772006bb2aaa54c71a5e60725950d551db06efe970fefaffeae540b823f524d116fc01e9061914ffc70f1abbddc6ef818a9a1785613a97c5a724115a1d22236cd472c4daced5365aa2a0655035897cf7729630d7fd1289810e26e3e51dd136e1bb389459724ec9726d9649d68416c2b3831f3babc53f7b8b6717e4af6974fedfc1362fbec9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "17338e37172f23b8abdecf834e3ca7a74c73037d3a4f99f66fa7d23d2ddff74921d0e28074286563701d2ba1036b5d3e09f0f634ffde7a4c9e9f2e50ba9e3ae79ecd281b90179e7b47d6f02874fda0b230acb2353cf7f7e9ea18afc2dee45978bf550138e09bd44fdca2faf5ee449c15d92a2c1eb546ad557863695114461d0c2fdb0837bbdb3acffa28fa39455554f7379554bfe80c6480c552d5f70ebf279cc34b4c2193b64ae5aa5de36c0134c610f3e5b32c2e83e6a1dcf81a218edcc6db05f9221fff9f05420a014598538054eb9923536c0ef5b6e0ae790aa814a793f85a5b"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1110, 0x3, 0x0, 0x1, [{0x350, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x25, 0x1, "71c92cae9b3b550cf7b1f9336a9fa5d3db035a6d869a1a339af600b45413106708"}]}, @NFTA_SET_ELEM_KEY_END={0xfc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "879dc3147ec50cdf35ce64bbdd210bdf57178c35b26f2aad3137d5d6ed5b9bac7c2581da20e387f8e6d231d54cc24293d57633a5d12a1472f53085cac17815df0124aaa05146144f7b8037b6390e5fa43bd03990d561f61438f58b90485b5eb8eeb54a40fbfb314ce8cb71e45a0c8b7aa2658940815cd0877682b6fa6cc311111566e08023effefc0845911d44f0ab5684b3b47e2ba3e38f7613efd1e715659f5dc734b730c9e0c07c6e0b3dc9a9d13b898a8d813c3b4e402a"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "58c28461e2a7e19df7d349ab92ce4980dcf7cabde264a466a52921bfef9c1d7a90d69d4030211c6794bb210e7846b730d7718c0ccffd49cab9a286fe2d2bca29261f31d97c5a7dd02ab65032df3348a4f990c770252920df219c7550e21d536d7815510d8c481dc40232b01c413e788caf68757d253588ff0b5c2493f286e4a0ee"}, @NFTA_DATA_VALUE={0x9d, 0x1, "0d889b1e8988ffd6d89e4da17f0ff2842cf49e4af1be7946f1bf8f129381c022f56cdd5538b4ebf696914dbf1e41e60e72735fec07fba6c23f9a1d830a30387a22c869ae16fd02735df900f575012cef3536b7eef55d6181e84c309b4db6984465b8f824a8d4112b37f7f862b565d282c9bbbb49ff6aa8023569059bef91de9718a83d19a7c7138ecc4e47069fb86e2c0971afd7a97796ebff"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xd, 0x2, 0x1, 0x0, '/dev/sg#\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x800}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x310, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "400d5a5a6c82b528db"}, @NFTA_DATA_VALUE={0x9, 0x1, "1dcd5394ba"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "f59066141f597fd4bb55dd7d5988367486998faf204c7076044da57d580e99e374fa1d74c7ede4870f5d89fd6d4e609479ebb5072ebe57f08351540e585f86767e57b6ff6b0d3ab0e35b3b90b07255d8acea9d2c5352a580793e144b4a165781253187e83904fb9d6bf0968643a9df84b67d7b38b662ffc9f85aa7303a20930d7bd5beb8427f4395b4a8c08feede45f1046120b58e5510d6328c05f672f9eda95ec040cf06a3f4f22227559780"}, @NFTA_DATA_VALUE={0xa1, 0x1, "5a4d1622c3809ebd03a708e39c3baf1b05626d61c0c6fdfc49328fb1148c575f66069e07ee4e8838041b80a34605a75e97e359435a54757da4b2ca89a4357c500e8bcddbabe844b2107b3c2f28742ef8ba57e1d9f32d06775275960402da730b607a7a7d94779adc9367ac00bb5819cf636e7978aa9e7d4d839a0f632f532cb5e241e89046d62e099b162cbd516eff52662b01ae884c07bb14ec480120"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x220, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "9c668180943534491d385454d80479ce52db48be9f33af5f941fceff58619993d3831cd7b8809da1ad9fd8907dfdb68f51a009314ec4d036bbfd448cddc51bc6cdb6e5fef18cdb3471a7945083f237b9038df5464ab82510979db946e95c9338ce64cbbd0d80bccf467d64344b89bb792f4dad33a0b24a36aefc6e3c61b131a890adb1a518c3f99115b94ec91f44d18c29098f109124cf0de61657d50d970158751e8cf6bc63bcfd28bb610e6f1e68059a"}, @NFTA_DATA_VALUE={0xda, 0x1, "9fd9840f2eee05f7c79090178ef651719692618d1e954c4cb06e4dcabbff2415243092cb8dd87b1a3fe640cddc3de5a8493a3841d77d2e1e13e0ffbb8f4c9414988c65cd575407ce8bbf53efb54e8bb9b470567d27aa618ece22b9f0fb3156c29701fd608225a5490d0b04c8017bcde20bd55f5febe467a370210b8e0d2fcfc6586fed3fb2a3840b388ae57d88cbb431fc86a226c4abdc9667cef0f0b9d332523862aec7407d15b29804b90b1df31a12a959fe49bfc033fb51ceba007333e9f91e6315aa63583381769cd8e5780cdc751f1449154271"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "935a6908a7c66a3ca70dc3778a2f6851e62a7823a1d43c0bc1ae10c53bbc82aed9d8ab9847f841bd2f11fc938ce9d5a01b267ea38af2aad637c010685a"}]}, @NFTA_SET_ELEM_KEY={0x180, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "cb6a172b62d997201d09ec637d0a515ff782f4c1c38c9eae15cdd58a5e668da3662cd96be4c74cc39051b8eab525c74b7c4083fed66fe62be69dc18b8d32cd4f7085ee077b6f70b7029f45f6e404734c77ab50a27aa6c928fda1215ac6cfd4eb91b8f4d18ba7be3ca627610fc3d217a509333ddc12311d59d5f2078d595900ac2ad60b866b2683e15fecae9b4531821f5c7984365fd3997f3f3dbc6443e1f97a1f"}, @NFTA_DATA_VALUE={0xc5, 0x1, "6c80eda3273c221e91844d6ffa0071d2bb7cf40b9bb037731be2c0d1bc09a0e9b61a056e49afcbdecc1b53d3e0d321d3d983e66facf1bd16cdb3eb74b990b5a536ae8a44e6a924ae7181cac1e80733d233d2406f73f31738351db91314a65dd4d421e8b11e4864b8bc5dca8e2c50936c63adf68506a2644b1e3b35679d0bfdc5e08692fbf39d3f654833b3c0ee04712d191be45987757578b700cbcc3cb347c5645291fe505aafecbe4ba2dcb19f7d6dd13928458e04f0093c4df27833ad4f0528"}]}]}, {0x3b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x240, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4d, 0x1, "ac6d474db7942dd5e86ed999d3431e80cf9df42749f065fd095dbeced54a22dc02613349eb8d3c4f9497dfb9d1e23f0070b8b6119cf9ed5391045425ac6ed0d820249ed8fa030a902a"}, @NFTA_DATA_VALUE={0xf1, 0x1, "8797e47763589a8df8869756af52727e919d3ed9e00d982ca20fdb991b263955f18240a01fb1582cddc500990147501b4e37b78d745c2f319484be5474658d3c4817395d54e043e0319d430eaebbff9a0c53f3856f796b6e90c9e9d241453c588fcdfee3217a2f38c8f487e09ee007043586e647169c09431b1a3c28157e83960fdf2f93043b78a3da97affa4a19c92429f4bb4b51b72862cd3f8a379d8bdb258bc399554f00be42b33bc04cfe1af6e96b672c578b418ed22c6c8275be2450a73562920f9834d5b0d4beddbfc5b9e0df0c5cd0c277ba76530584cd2f85d7e967d3e666a69662388df10e3da8e2"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x95, 0x1, "efa3011438f72b5455339097519ee3878ade055d6beb08e4cb092190be018db8b4ca1d5bc59003c8ca9919f354bfeb2dbcde7b3ee29216bd7a207359d719cec5d7abb151a5579bf6f6079e001b53a61549f6bbe23da7ee7b4c73e8b251ef1fa6f4440aaf9b735049a2acb9f1b362d8b05c87e74535214747d137446eb2a8a57716c7eece421128fd0738a573f21ad6df35"}, @NFTA_DATA_VALUE={0x6, 0x1, "d64a"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x372}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x150, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x22, 0x1, "0351404261ef5db9c202bc5768b454e39c244f08c0a28334c2961bcba411"}, @NFTA_DATA_VALUE={0xd5, 0x1, "1fcddbb133607a982b87a38def087a4bb5bf60c018bfdaaf03b95af1b6e210269eb1c699c9f6de4b766b1d314331d812f33adc030724c49600774f618bf530045eb076f40988a07e62a61423efa47b03c0cd3cfd0cedee6fa4fba66d12570af79f1c92ecb0de9b6b4e5744e9f579e2c784eb41ba1e013492f61c5e2359acb95f78abf5b93e0bf6e4c525547d414cfeddd94170c495a874f0d52954f62bbe65e43d30dcfc3c7ae267592eb798a543cc6c70b9f5667a72a8df0486689a20fba4ee31f75fd3f8764740827f854f990c781d4a"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000005}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x30c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY_END={0x15c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8e46493c5c3bd32a}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x11, 0x1, "52fb905e7348db874093bcb40d"}, @NFTA_DATA_VALUE={0x89, 0x1, "2bb1eb2d0aa7fb27713ae6900c35befd0112784f813bc1466068ca22fcd30905af3ecadb3debc28593f891e74e522b2f124f6ad6eb24a08287fb369cf485fe3a76af431217d26eb894f0b9798b067468358f12ab8101899787096d314087a97c0b127e138b47b260ddbcd66403776a5d5928375dd7ec459c555440aacaf5d74d3a1771421d"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x49, 0x1, "48a3eeec8d13ec7a1fcb10d9bd5edbc6922b6282895315100ec04b20fa8f5fa919f8aef563d23582c347e64793da6c297416d2def67d76d8ddb9e61acb9a856c016792513c"}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "0117441eac5bf63a713d876bd7ae9e2aa5ab0c5b7aeeb2da52ee01f9cd22c92977076f6112504879f0e2e9a6adfd20cf9faef9b7eb972d90686a4d985f6fd15d129a1dbf11c7587fb3fc052b3268a17fe38e92a1b2"}, @NFTA_SET_ELEM_USERDATA={0x5d, 0x6, 0x1, 0x0, "d5510775ae1b7e730779aa2791452089999b3ce61e74b53d518f175dc662cefef921a4f087123d282d0cee3b34ebcbe448b68f0ab6663547e00aa1c51478202dcd638b6fbe4eda2542c11b8dccffd8a6e5b1daeb38fde3d4ea"}, @NFTA_SET_ELEM_DATA={0x90, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "f82179b8388e017f37957662cd3059523a01c346662d98cb4c43b9dab355ca35ca1a7aa7d0227fa407ff2c2d271ca05c9014a57f899851dfd81c6594d12f123e134726009c03ce9c481804d7e598f2c301163dd7600e341ea28a03abe52978b626ae5f0be3858741ad6ab06149d555625ce52b15715e180f6f011b94d4d4b7a41c"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc8, 0x3, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "08348c570d3ad3b51f1f32c18353f69523aafaf1753d1a8cf19d8fc3aa6f9396dec2baa42e61d4a3e96610c52f6883c18f3458b45fc4e3ccc4322eef63df9fdca2b0fd8691a5c1e7f793d52d3265f2624c456514eb37dd7a6e6f2419c02f546b3af1f3c655ca4a3c8d3637d885d1da9336c594b85fd7d3eca49e4a84e36aa39a7ec7b7b5c57ada5f0fc9ff43884091f9ef8588fe8052c95aa776975bdab87363c89430aed5c532f7d77c584e479e7442b07afdef12dfa01e92"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x179c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000000880)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32343b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b310d326d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841b9b114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14aec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6057080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2ddb57ed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f498707400000000000cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd09bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e500000000183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c0b0000000000000013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752042126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5e3236dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f136174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be530d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7c85d94ffb07d9be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510bd400", 0x1027}}, 0x1006) write$tun(r3, &(0x7f0000000180)={@void, @void, @x25={0x0, 0x1, 0x0, "5c5663edce9f9c5e7d1357abcd674965702e0af37307f1b825388e0e632be96d163243d02a709f2ea59f6d48e498e67506ddee521f7f519e6a789d3908e5a20c79da40c02573df7838d72f6eb6279e7056051391eadf579dbd6daede7c3d5a2dbc63ab9e1448dd9ef60e7f2b7f14f7d2ba082b880891cc0ac5323d29141e38c33d6467a72e18104a35ed2b"}}, 0x8e) 3.241179586s ago: executing program 3 (id=224): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="0201dc05012918000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 2.98135548s ago: executing program 3 (id=225): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x2000010, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x20004050) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x80000) madvise(&(0x7f00003a0000/0x4000)=nil, 0x4000, 0x4) r3 = syz_open_dev$evdev(0x0, 0x8001, 0x12000) ioctl$EVIOCGID(r3, 0x80084502, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x26d01, 0x0) llistxattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, 0x0) syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e04003040000102030109028e00030101d0c3080b00020106201209040000000101200009240105000715002b0c2403010304960404296348090401000001022000090401010101022000092402020900020007102401010a03011000000200000000100905010900020707"], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r5) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, 0x0) r8 = userfaultfd(0x1) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r5, 0x40026f34, &(0x7f00000000c0)=0x8a77) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000001440)="e403402e6d61aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) ioctl$UFFDIO_WAKE(r8, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) socket$kcm(0xa, 0x2, 0x0) 2.789148265s ago: executing program 1 (id=226): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xdd, 0x480, 0xbbba, 0x0, 0x18, 0x0, {0x6, 0x0, 0x10000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000, 0x1}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 2.516756333s ago: executing program 1 (id=227): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 929.542517ms ago: executing program 0 (id=228): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000880), 0x101000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_usb_connect(0x1, 0x73, &(0x7f0000000740)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcb9}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) 750.373457ms ago: executing program 2 (id=229): r0 = socket(0x10, 0x6, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x60ff) (async) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x60ff) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c270000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x44, 0x621, 0xfff7fffe, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x4, 0x10}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc840) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x44, 0x621, 0xfff7fffe, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x4, 0x10}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc840) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x6, 0x8001, 0x8000, 0xf44c, 0x8, 0x80, 0xff, 0x2, 0x0}, &(0x7f0000000040)=0x20) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x58, 0x4855}, 0x24000052) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={r4, 0xbe, 0x6}, 0x8) 0s ago: executing program 2 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400ffe4", @ANYRES16=r1, @ANYBLOB="1709feffffffe4ffffff0100000008000a000400000008001900e0000002060002000100000008001800980000020500070000000700080009"], 0x44}}, 0x4000) kernel console output (not intermixed with test programs): 4 [ 92.876784][ T4922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.855585][ T5607] Bluetooth: hci0: command tx timeout [ 94.855595][ T4922] Bluetooth: hci2: command tx timeout [ 94.855744][ T5607] Bluetooth: hci1: command tx timeout [ 94.931588][ T5617] Bluetooth: hci3: command tx timeout [ 95.107160][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.108057][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.108547][ T5606] bridge_slave_0: entered allmulticast mode [ 95.111135][ T5606] bridge_slave_0: entered promiscuous mode [ 95.195278][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.195610][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.195906][ T5606] bridge_slave_1: entered allmulticast mode [ 95.198485][ T5606] bridge_slave_1: entered promiscuous mode [ 95.199846][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.200165][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.200594][ T5611] bridge_slave_0: entered allmulticast mode [ 95.209684][ T5611] bridge_slave_0: entered promiscuous mode [ 95.319284][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.319574][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.319778][ T5611] bridge_slave_1: entered allmulticast mode [ 95.324326][ T5611] bridge_slave_1: entered promiscuous mode [ 95.421022][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.421301][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.421678][ T5610] bridge_slave_0: entered allmulticast mode [ 95.433178][ T5610] bridge_slave_0: entered promiscuous mode [ 95.446690][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.455955][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.456406][ T5609] bridge_slave_0: entered allmulticast mode [ 95.458952][ T5609] bridge_slave_0: entered promiscuous mode [ 95.483668][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.507955][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.508306][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.508594][ T5610] bridge_slave_1: entered allmulticast mode [ 95.511229][ T5610] bridge_slave_1: entered promiscuous mode [ 95.538102][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.538414][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.538625][ T5609] bridge_slave_1: entered allmulticast mode [ 95.548475][ T5609] bridge_slave_1: entered promiscuous mode [ 95.570207][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.629005][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.695753][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.794633][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.800382][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.817144][ T5606] team0: Port device team_slave_0 added [ 95.848209][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.861596][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.865936][ T5606] team0: Port device team_slave_1 added [ 95.869509][ T5611] team0: Port device team_slave_0 added [ 95.953921][ T5611] team0: Port device team_slave_1 added [ 96.032419][ T5610] team0: Port device team_slave_0 added [ 96.036245][ T5609] team0: Port device team_slave_0 added [ 96.038576][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.038587][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.038606][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.105720][ T5610] team0: Port device team_slave_1 added [ 96.109169][ T5609] team0: Port device team_slave_1 added [ 96.110851][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.110861][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.110881][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.132419][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.132450][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.132527][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.239232][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.239244][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.239264][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.327461][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.327475][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.327494][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.329842][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.329853][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.329873][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.356689][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.356726][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.356839][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.369821][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.369877][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.370076][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.575157][ T5606] hsr_slave_0: entered promiscuous mode [ 96.577301][ T5606] hsr_slave_1: entered promiscuous mode [ 96.619737][ T5611] hsr_slave_0: entered promiscuous mode [ 96.623571][ T5611] hsr_slave_1: entered promiscuous mode [ 96.629077][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 96.629365][ T5611] Cannot create hsr debugfs directory [ 96.931697][ T5617] Bluetooth: hci1: command tx timeout [ 96.931734][ T5617] Bluetooth: hci2: command tx timeout [ 96.931758][ T5617] Bluetooth: hci0: command tx timeout [ 97.011562][ T5607] Bluetooth: hci3: command tx timeout [ 97.059994][ T5610] hsr_slave_0: entered promiscuous mode [ 97.064645][ T5610] hsr_slave_1: entered promiscuous mode [ 97.070034][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 97.070113][ T5610] Cannot create hsr debugfs directory [ 97.093396][ T5609] hsr_slave_0: entered promiscuous mode [ 97.095794][ T5609] hsr_slave_1: entered promiscuous mode [ 97.097210][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 97.097235][ T5609] Cannot create hsr debugfs directory [ 97.925776][ T5606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.976999][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.980642][ T5606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.018353][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.027519][ T5606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.066690][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.092550][ T5606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.130562][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.297129][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.326637][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.342721][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.393398][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.411358][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.458471][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.487516][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.516519][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.678427][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.718634][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.736155][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.767845][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.787079][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.815371][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.854779][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.888771][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.011668][ T5617] Bluetooth: hci2: command tx timeout [ 99.011700][ T5617] Bluetooth: hci1: command tx timeout [ 99.011826][ T5607] Bluetooth: hci0: command tx timeout [ 99.055872][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.087009][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.093662][ T4922] Bluetooth: hci3: command tx timeout [ 99.108116][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.135912][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.156505][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.186850][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.191286][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.232074][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.304387][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.439843][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.502818][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.503309][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.559923][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.578675][ T4133] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.578804][ T4133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.703781][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.777759][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.777929][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.805804][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.860699][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.860868][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.010824][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.055808][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.155618][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.155871][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.253860][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.254057][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.340285][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.400541][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.403420][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.478317][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.478501][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.093532][ T4922] Bluetooth: hci0: command tx timeout [ 101.093582][ T5617] Bluetooth: hci2: command tx timeout [ 101.093624][ T5607] Bluetooth: hci1: command tx timeout [ 101.173216][ T5607] Bluetooth: hci3: command tx timeout [ 101.280948][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.672699][ T5606] veth0_vlan: entered promiscuous mode [ 101.789930][ T5606] veth1_vlan: entered promiscuous mode [ 101.858767][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.066253][ T5606] veth0_macvtap: entered promiscuous mode [ 102.133613][ T5606] veth1_macvtap: entered promiscuous mode [ 102.162202][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.201216][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.206068][ T5611] veth0_vlan: entered promiscuous mode [ 102.266971][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.278680][ T5611] veth1_vlan: entered promiscuous mode [ 102.339275][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.407202][ T160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.432501][ T160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.440584][ T160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.479799][ T160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.608344][ T5610] veth0_vlan: entered promiscuous mode [ 102.794987][ T5611] veth0_macvtap: entered promiscuous mode [ 102.807931][ T5609] veth0_vlan: entered promiscuous mode [ 102.885089][ T5611] veth1_macvtap: entered promiscuous mode [ 102.914786][ T5610] veth1_vlan: entered promiscuous mode [ 102.983727][ T5609] veth1_vlan: entered promiscuous mode [ 103.070536][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.070563][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.105191][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.153559][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.246461][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.255542][ T4133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.255601][ T4133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.300556][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.320638][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.364604][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.366040][ T5610] veth0_macvtap: entered promiscuous mode [ 103.431063][ T5609] veth0_macvtap: entered promiscuous mode [ 103.493673][ T5610] veth1_macvtap: entered promiscuous mode [ 103.570956][ T5609] veth1_macvtap: entered promiscuous mode [ 103.917838][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.972723][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.010087][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.175798][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.186128][ T160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.206970][ T160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.208495][ T5759] sctp: [Deprecated]: syz.3.4 (pid 5759) Use of int in max_burst socket option. [ 104.208495][ T5759] Use struct sctp_assoc_value instead [ 104.228988][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.229036][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.252114][ T160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.308502][ T160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.335201][ T160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.352200][ T160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.375931][ T5758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.441597][ T160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.517123][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.709398][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.709416][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.385798][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.385819][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.530719][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.530740][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.108255][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.108277][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.290769][ T5714] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.399988][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.400011][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.609927][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.609962][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.609985][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.610033][ T5714] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.610057][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.745539][ T5714] usb 1-1: config 0 descriptor?? [ 107.397708][ T5713] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.514140][ T5714] usbhid 1-1:0.0: can't add hid device: -71 [ 107.514255][ T5714] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 107.590755][ T5714] usb 1-1: USB disconnect, device number 2 [ 107.633283][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 107.643983][ T5713] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 107.644047][ T5713] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 107.644072][ T5713] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 107.644099][ T5713] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 107.644123][ T5713] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 107.644154][ T5713] usb 4-1: config 1 interface 0 has no altsetting 0 [ 107.644189][ T5713] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 107.644214][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.825599][ T5773] process 'syz.2.3' launched './file1' with NULL argv: empty string added [ 107.970081][ T5713] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 107.993061][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 108.249705][ T5781] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 108.389312][ T5713] scsi host1: usb-storage 4-1:1.0 [ 108.536952][ T5769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.537584][ T5769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.768205][ T5769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.769448][ T5769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.913506][ T825] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.033754][ T32] usb 4-1: USB disconnect, device number 2 [ 109.051547][ T825] usb 1-1: device descriptor read/64, error -71 [ 109.311951][ T825] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.362300][ T37] audit: type=1326 audit(1780568600.140:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.1.10" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff31cb0ce59 code=0x0 [ 109.505987][ T825] usb 1-1: device descriptor read/64, error -71 [ 109.519978][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 109.640198][ T825] usb usb1-port1: attempt power cycle [ 109.687601][ T10] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 109.687660][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 109.687689][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 109.687727][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.687770][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.687794][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.853663][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 109.980007][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 109.980044][ T10] usbtmc 3-1:16.0: can't read capabilities [ 110.022259][ T825] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.045506][ T825] usb 1-1: device descriptor read/8, error -71 [ 110.212318][ T5713] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.269685][ T5788] lo speed is unknown, defaulting to 1000 [ 110.308514][ T825] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.323704][ T825] usb 1-1: device descriptor read/8, error -71 [ 110.365879][ T5788] lo speed is unknown, defaulting to 1000 [ 110.384227][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 110.392699][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 110.392734][ T5713] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.392759][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 110.392788][ T5713] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 110.392815][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.392839][ T5713] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 110.396869][ T5713] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 110.396895][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.396915][ T5713] usb 4-1: Product: syz [ 110.396930][ T5713] usb 4-1: Manufacturer: syz [ 110.396944][ T5713] usb 4-1: SerialNumber: syz [ 110.529616][ T5713] usb 4-1: config 0 descriptor?? [ 110.555592][ T825] usb usb1-port1: unable to enumerate USB device [ 110.581249][ T5795] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 110.726000][ T5713] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 110.726026][ T5713] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 110.899238][ T5788] lo speed is unknown, defaulting to 1000 [ 110.925460][ T5713] mcba_usb 4-1:0.0: probe with driver mcba_usb failed with error -90 [ 111.074655][ T5788] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 111.074693][ T5788] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 111.074734][ T5788] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 111.084030][ T5795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.138523][ T5795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.371728][ T5755] usb 4-1: USB disconnect, device number 3 [ 111.663087][ T5788] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.163365][ T5788] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 112.447512][ T5713] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.615699][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 112.629949][ T5713] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 112.629980][ T5713] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 112.630001][ T5713] usb 4-1: config 0 has no interface number 0 [ 112.630123][ T5713] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 112.630148][ T5713] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 112.695810][ T5713] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 112.695843][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.695865][ T5713] usb 4-1: Product: syz [ 112.695881][ T5713] usb 4-1: Manufacturer: syz [ 112.695897][ T5713] usb 4-1: SerialNumber: syz [ 112.760722][ T5713] usb 4-1: config 0 descriptor?? [ 112.773007][ T5799] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 112.781220][ T5799] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 112.863064][ T5714] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.899668][ T5788] lo speed is unknown, defaulting to 1000 [ 113.004637][ T5799] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.004870][ T5799] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.046667][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 113.058207][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.058236][ T5714] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.088447][ T5714] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.088477][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.088500][ T5714] usb 1-1: Product: syz [ 113.088515][ T5714] usb 1-1: Manufacturer: syz [ 113.088530][ T5714] usb 1-1: SerialNumber: syz [ 113.181603][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 113.181645][ T9] usb 2-1: can't read configurations, error -71 [ 113.243134][ T5788] lo speed is unknown, defaulting to 1000 [ 113.257043][ T5799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.311335][ T5799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.328476][ T5788] lo speed is unknown, defaulting to 1000 [ 113.359363][ T5788] lo speed is unknown, defaulting to 1000 [ 113.475558][ T5714] usb 1-1: 0:2 : does not exist [ 113.505650][ T5615] usb 3-1: USB disconnect, device number 2 [ 113.630858][ T5802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.674418][ T5802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.730271][ T5713] asix 4-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 153 [ 113.956912][ T10] usb 4-1: USB disconnect, device number 4 [ 114.000931][ T5615] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.051726][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 114.161864][ T5615] usb 3-1: Using ep0 maxpacket: 16 [ 114.167956][ T5615] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 114.167986][ T5615] usb 3-1: config 0 has no interface number 0 [ 114.168048][ T5615] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 114.168076][ T5615] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 114.171188][ T5615] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 114.171218][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.171241][ T5615] usb 3-1: Product: syz [ 114.171266][ T5615] usb 3-1: Manufacturer: syz [ 114.171283][ T5615] usb 3-1: SerialNumber: syz [ 114.189486][ T5615] usb 3-1: config 0 descriptor?? [ 114.254819][ T5808] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 114.256045][ T5808] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 114.259752][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.259776][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.299987][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.300019][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.300042][ T9] usb 2-1: Product: syz [ 114.300058][ T9] usb 2-1: Manufacturer: syz [ 114.300074][ T9] usb 2-1: SerialNumber: syz [ 114.569337][ T5808] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 114.569565][ T5808] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 114.778801][ T5808] netlink: 37 bytes leftover after parsing attributes in process `syz.2.15'. [ 114.922645][ T5806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.961100][ T5806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.268944][ T5615] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 115.268974][ T5615] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 115.269333][ T5615] asix 3-1:0.251: probe with driver asix failed with error -5 [ 115.356996][ T5615] usb 3-1: USB disconnect, device number 3 [ 115.435072][ T5714] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 115.619388][ T9] usb 2-1: 0:2 : does not exist [ 115.649246][ T5714] usb 1-1: USB disconnect, device number 7 [ 115.861148][ T9] usb 2-1: USB disconnect, device number 3 [ 116.031845][ T5819] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.047286][ T37] audit: type=1326 audit(1780568606.800:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.3.17" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7da085ce59 code=0x0 [ 116.589092][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 116.614257][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.228228][ T5825] lo speed is unknown, defaulting to 1000 [ 117.311593][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.401577][ T5786] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 117.472420][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 117.476272][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 117.476307][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.476331][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 117.476360][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 117.476387][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.476411][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 117.478894][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 117.478919][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.478937][ T9] usb 2-1: Product: syz [ 117.478952][ T9] usb 2-1: Manufacturer: syz [ 117.478966][ T9] usb 2-1: SerialNumber: syz [ 117.627467][ T5786] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 117.627524][ T5786] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 117.627554][ T5786] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 117.627583][ T5786] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.627627][ T5786] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.627652][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.639529][ T9] usb 2-1: config 0 descriptor?? [ 117.720478][ T5833] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.879431][ T9] mcba_usb 2-1:0.0 can0: couldn't setup read URBs [ 117.879452][ T9] mcba_usb 2-1:0.0 can0: couldn't start device: -90 [ 117.953973][ T5786] usb 4-1: GET_CAPABILITIES returned 0 [ 117.954017][ T5786] usbtmc 4-1:16.0: can't read capabilities [ 118.067886][ T37] audit: type=1326 audit(1780568608.840:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5824 comm="syz.2.20" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd05d35ce59 code=0x0 [ 118.163245][ T5837] siw: device registration error -23 [ 118.220822][ T5833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.274903][ T5833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.352219][ T9] mcba_usb 2-1:0.0: probe with driver mcba_usb failed with error -90 [ 118.401941][ T9] usb 2-1: USB disconnect, device number 4 [ 118.800290][ T824] usb 4-1: USB disconnect, device number 5 [ 119.037316][ T5855] Zero length message leads to an empty skb [ 119.155785][ T5714] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 119.380657][ T5714] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 119.380691][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.380711][ T5714] usb 1-1: Product: syz [ 119.380725][ T5714] usb 1-1: Manufacturer: syz [ 119.380740][ T5714] usb 1-1: SerialNumber: syz [ 119.415930][ T5714] usb 1-1: config 0 descriptor?? [ 119.480074][ T5714] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 120.073926][ T5714] gspca_sunplus: reg_w_riv err -71 [ 120.074058][ T5714] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 120.110235][ T5714] usb 1-1: USB disconnect, device number 8 [ 120.111573][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 120.285107][ T9] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 120.285138][ T9] usb 2-1: config 5 has no interface number 0 [ 120.285184][ T9] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 120.285204][ T9] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.285221][ T9] usb 2-1: config 5 interface 123 has no altsetting 0 [ 120.287732][ T9] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 120.287762][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.287783][ T9] usb 2-1: Product: syz [ 120.287798][ T9] usb 2-1: Manufacturer: syz [ 120.287824][ T9] usb 2-1: SerialNumber: syz [ 120.676369][ T5884] netlink: 32 bytes leftover after parsing attributes in process `syz.2.34'. [ 120.719335][ T9] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 120.720618][ T5884] netlink: 'syz.2.34': attribute type 10 has an invalid length. [ 120.720632][ T5884] netlink: 55 bytes leftover after parsing attributes in process `syz.2.34'. [ 120.796872][ T9] usb 2-1: USB disconnect, device number 5 [ 121.336135][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 121.532409][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 121.534878][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 121.534923][ T9] usb 1-1: config 0 has no interface number 0 [ 121.534968][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 121.534997][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 121.535016][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.535036][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.535077][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 121.535094][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.540792][ T9] usb 1-1: config 0 descriptor?? [ 121.590346][ T5714] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.617297][ T37] audit: type=1326 audit(1780568612.380:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5882 comm="syz.3.35" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7da085ce59 code=0x0 [ 121.697023][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 121.789799][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 121.789992][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 121.790037][ T5714] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 121.790190][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.926243][ T5714] usb 2-1: config 0 descriptor?? [ 122.140599][ T5714] ath6kl: Failed to submit usb control message: -71 [ 122.140987][ T5714] ath6kl: unable to send the bmi data to the device: -71 [ 122.141006][ T5714] ath6kl: Unable to send get target info: -71 [ 122.218624][ T5714] ath6kl: Failed to init ath6kl core: -71 [ 122.313589][ T5714] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 122.468446][ T5714] usb 2-1: USB disconnect, device number 6 [ 122.750258][ T5898] binder: 5897:5898 ioctl c00c620f 200000000040 returned -22 [ 123.410016][ T5907] netlink: 'syz.2.42': attribute type 10 has an invalid length. [ 123.665349][ T5907] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 123.812558][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.862350][ T825] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.975647][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 123.980144][ T9] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 123.980173][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 123.980195][ T9] usb 2-1: config 0 has no interface number 0 [ 123.980249][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 123.980277][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 124.040687][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 124.040720][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.040743][ T9] usb 2-1: Product: syz [ 124.040759][ T9] usb 2-1: Manufacturer: syz [ 124.040774][ T9] usb 2-1: SerialNumber: syz [ 124.101141][ T9] usb 2-1: config 0 descriptor?? [ 124.109135][ T5909] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 124.109526][ T5909] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 124.170226][ T825] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 124.170497][ T825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.170521][ T825] usb 4-1: Product: syz [ 124.170537][ T825] usb 4-1: Manufacturer: syz [ 124.170553][ T825] usb 4-1: SerialNumber: syz [ 124.219333][ T825] usb 4-1: config 0 descriptor?? [ 124.253884][ T825] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 124.288441][ T5713] usb 1-1: USB disconnect, device number 9 [ 124.341050][ T5713] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 124.355299][ T5909] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 124.355421][ T5909] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 124.575569][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.576225][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.801588][ T5713] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 124.862672][ T825] gspca_sunplus: reg_w_riv err -71 [ 124.862851][ T825] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 124.893492][ T825] usb 4-1: USB disconnect, device number 6 [ 124.973958][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.974005][ T5713] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 124.974028][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.994863][ T5713] usb 1-1: config 0 descriptor?? [ 125.019077][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 125.019108][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 125.019367][ T9] asix 2-1:0.251: probe with driver asix failed with error -71 [ 125.089179][ T9] usb 2-1: USB disconnect, device number 7 [ 125.319039][ T5713] usbhid 1-1:0.0: can't add hid device: -71 [ 125.319169][ T5713] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 125.340870][ T5713] usb 1-1: USB disconnect, device number 10 [ 125.483167][ T5924] netlink: 'syz.3.51': attribute type 7 has an invalid length. [ 125.484366][ T5925] netlink: 'syz.3.51': attribute type 7 has an invalid length. [ 125.721749][ T824] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.851685][ T5713] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 125.871525][ T824] usb 4-1: Using ep0 maxpacket: 32 [ 125.874681][ T824] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.874699][ T824] usb 4-1: config 0 has no interface number 0 [ 125.877264][ T824] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 125.877295][ T824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.877322][ T824] usb 4-1: Product: syz [ 125.877334][ T824] usb 4-1: Manufacturer: syz [ 125.877344][ T824] usb 4-1: SerialNumber: syz [ 125.896481][ T825] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.902271][ T824] usb 4-1: config 0 descriptor?? [ 125.950531][ T824] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 125.950561][ T824] usb 4-1: selecting invalid altsetting 1 [ 125.950575][ T824] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 126.014735][ T824] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 126.015163][ T824] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 126.015250][ T824] usb 4-1: media controller created [ 126.023301][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 126.061434][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.061485][ T5713] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 126.061509][ T825] usb 2-1: device descriptor read/64, error -71 [ 126.061510][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.096465][ T824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.122382][ T5713] usb 1-1: config 0 descriptor?? [ 126.139650][ T5713] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 126.180673][ T5713] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 126.301828][ T825] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 126.351655][ T9] usb 1-1: USB disconnect, device number 11 [ 126.360449][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 126.431719][ T825] usb 2-1: device descriptor read/64, error -71 [ 126.524433][ T5936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'. [ 126.541880][ T825] usb usb2-port1: attempt power cycle [ 126.549175][ T824] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 126.630999][ T824] usb 4-1: USB disconnect, device number 7 [ 126.823186][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.891824][ T825] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 126.913730][ T825] usb 2-1: device descriptor read/8, error -71 [ 126.962439][ T9] usb 3-1: device descriptor read/64, error -71 [ 127.020954][ T5942] nfsd: Unknown parameter '-' [ 127.152039][ T825] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 127.172670][ T825] usb 2-1: device descriptor read/8, error -71 [ 127.203440][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.290000][ T825] usb usb2-port1: unable to enumerate USB device [ 127.341694][ T9] usb 3-1: device descriptor read/64, error -71 [ 127.415461][ T5951] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 127.452267][ T9] usb usb3-port1: attempt power cycle [ 127.741563][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 127.791546][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.814510][ T9] usb 3-1: device descriptor read/8, error -71 [ 127.831562][ T825] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.899337][ T10] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 127.899368][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.899388][ T10] usb 1-1: Product: syz [ 127.899427][ T10] usb 1-1: Manufacturer: syz [ 127.899438][ T10] usb 1-1: SerialNumber: syz [ 127.933689][ T10] usb 1-1: config 0 descriptor?? [ 127.955109][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 128.012206][ T825] usb 4-1: Using ep0 maxpacket: 16 [ 128.024052][ T825] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 128.024072][ T825] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 128.024087][ T825] usb 4-1: config 0 has no interface number 0 [ 128.024119][ T825] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 128.024138][ T825] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 128.069787][ T825] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 128.069810][ T825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.069866][ T825] usb 4-1: Product: syz [ 128.069877][ T825] usb 4-1: Manufacturer: syz [ 128.069887][ T825] usb 4-1: SerialNumber: syz [ 128.071909][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.110376][ T9] usb 3-1: device descriptor read/8, error -71 [ 128.130880][ T825] usb 4-1: config 0 descriptor?? [ 128.137138][ T5955] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 128.137245][ T5955] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 128.173194][ T10] gspca_sunplus: reg_r err -32 [ 128.214722][ T9] usb usb3-port1: unable to enumerate USB device [ 128.352614][ T5955] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 128.352745][ T5955] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 128.555209][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.555819][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.761335][ T825] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 128.761557][ T825] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 128.762673][ T825] asix 4-1:0.251: probe with driver asix failed with error -71 [ 128.814764][ T825] usb 4-1: USB disconnect, device number 8 [ 128.991593][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 129.145606][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 129.150451][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.150483][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.177633][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 129.177655][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.177669][ T9] usb 2-1: Product: syz [ 129.177679][ T9] usb 2-1: Manufacturer: syz [ 129.177689][ T9] usb 2-1: SerialNumber: syz [ 129.216710][ T9] usb 2-1: config 0 descriptor?? [ 129.457194][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 129.489561][ T9] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 129.634993][ T5962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.63'. [ 129.647037][ T9] imon:send_packet: packet tx failed (-71) [ 129.665786][ T9] imon 2-1:0.0: panel buttons/knobs setup failed [ 129.772082][ T9] rc_core: IR keymap rc-imon-pad not found [ 129.772103][ T9] Registered IR keymap rc-empty [ 129.772203][ T9] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 129.772221][ T9] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 129.773175][ T9] imon:send_packet: packet tx failed (-71) [ 129.807272][ T9] imon 2-1:0.0: remote input dev register failed [ 129.807737][ T9] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 130.022559][ T5972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.66'. [ 130.075754][ T9] imon 2-1:0.0: unable to initialize intf0, err 0 [ 130.075769][ T9] imon:imon_probe: failed to initialize context! [ 130.075778][ T9] imon 2-1:0.0: unable to register, err -19 [ 130.084318][ T9] usb 2-1: USB disconnect, device number 12 [ 130.431592][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 130.530541][ T825] usb 1-1: USB disconnect, device number 12 [ 130.541540][ T5713] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 130.587990][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 130.588028][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 130.588058][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.603121][ T824] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.625423][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 130.625454][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.625475][ T9] usb 2-1: Product: syz [ 130.625491][ T9] usb 2-1: Manufacturer: syz [ 130.625506][ T9] usb 2-1: SerialNumber: syz [ 130.707178][ T9] usb 2-1: config 0 descriptor?? [ 130.724531][ T5958] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 130.751639][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 130.761702][ T5713] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 130.761735][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.761827][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8192, setting to 1024 [ 130.793025][ T5713] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 130.793069][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.793151][ T5713] usb 4-1: Product: syz [ 130.793168][ T5713] usb 4-1: Manufacturer: syz [ 130.793202][ T5713] usb 4-1: SerialNumber: syz [ 130.954202][ T5713] usb 4-1: config 0 descriptor?? [ 130.990409][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 130.999006][ T5713] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 130.999038][ T5713] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 131.071616][ T825] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 131.079581][ T9] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 131.221541][ T825] usb 1-1: Using ep0 maxpacket: 16 [ 131.223844][ T825] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 131.223871][ T825] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 131.223894][ T825] usb 1-1: config 0 has no interface number 0 [ 131.223941][ T825] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 131.223969][ T825] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 131.226929][ T825] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 131.226959][ T825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.226981][ T825] usb 1-1: Product: syz [ 131.226996][ T825] usb 1-1: Manufacturer: syz [ 131.227012][ T825] usb 1-1: SerialNumber: syz [ 131.358226][ T825] usb 1-1: config 0 descriptor?? [ 131.360845][ T5984] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.361055][ T5984] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.381826][ T9] rc_core: IR keymap rc-imon-pad not found [ 131.381845][ T9] Registered IR keymap rc-empty [ 131.381985][ T9] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 131.382005][ T9] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 131.480917][ T9] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 131.549709][ T9] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 131.568870][ T5713] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 131.577769][ T5713] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 131.601575][ T5984] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.613023][ T5984] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.627744][ T9] imon 2-1:0.0: iMON device (15c2:0045, intf0) on usb<2:13> initialized [ 131.821122][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.835523][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.870997][ T824] usb 3-1: device descriptor read/64, error -71 [ 132.018722][ T9] usb 2-1: USB disconnect, device number 13 [ 132.060419][ T825] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 132.060451][ T825] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 132.060758][ T825] asix 1-1:0.251: probe with driver asix failed with error -71 [ 132.111622][ T824] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 132.139463][ T825] usb 1-1: USB disconnect, device number 13 [ 132.276264][ T824] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.277706][ T824] usb 3-1: config 2 has an invalid interface number: 2 but max is 0 [ 132.277732][ T824] usb 3-1: config 2 has no interface number 0 [ 132.277763][ T824] usb 3-1: config 2 interface 2 has no altsetting 0 [ 132.280847][ T824] usb 3-1: New USB device found, idVendor=1608, idProduct=021e, bcdDevice=d6.6c [ 132.280926][ T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.280942][ T824] usb 3-1: Product: syz [ 132.280953][ T824] usb 3-1: Manufacturer: syz [ 132.280963][ T824] usb 3-1: SerialNumber: syz [ 132.604237][ T824] io_ti 3-1:2.2: required endpoints missing [ 132.662046][ T824] usb 3-1: USB disconnect, device number 9 [ 132.733301][ T5713] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 132.733769][ T5713] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 132.734384][ T5713] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 132.734850][ T5713] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 132.735281][ T5713] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 132.736115][ T5713] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 132.796742][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.797488][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.822919][ T5713] usb 4-1: USB disconnect, device number 9 [ 133.131582][ T9] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 133.300157][ T9] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 133.324708][ T9] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 133.324741][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.324764][ T9] usb 1-1: Product: syz [ 133.324780][ T9] usb 1-1: Manufacturer: syz [ 133.324796][ T9] usb 1-1: SerialNumber: syz [ 133.427572][ T9] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 133.605927][ T5993] netlink: 'syz.0.74': attribute type 4 has an invalid length. [ 133.605947][ T5993] netlink: 'syz.0.74': attribute type 64 has an invalid length. [ 133.605961][ T5993] netlink: 152 bytes leftover after parsing attributes in process `syz.0.74'. [ 133.822079][ T5615] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 134.031534][ T5615] usb 3-1: Using ep0 maxpacket: 32 [ 134.070867][ T5615] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.094810][ T5615] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 134.094834][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.094849][ T5615] usb 3-1: Product: syz [ 134.094860][ T5615] usb 3-1: Manufacturer: syz [ 134.094870][ T5615] usb 3-1: SerialNumber: syz [ 134.147440][ T9] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 134.214817][ T5615] usb 3-1: config 0 descriptor?? [ 134.220474][ T5615] cdc_ether 3-1:0.0: Descriptor too short [ 134.221327][ T5615] usb 3-1: unsupported MDLM descriptors [ 134.281328][ T9] usb 1-1: USB disconnect, device number 14 [ 134.292428][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 134.419781][ T5615] usb 3-1: USB disconnect, device number 10 [ 134.450770][ T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 134.450793][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.450808][ T10] usb 2-1: Product: syz [ 134.450819][ T10] usb 2-1: Manufacturer: syz [ 134.450829][ T10] usb 2-1: SerialNumber: syz [ 134.452009][ T5607] Bluetooth: hci0: command tx timeout [ 134.489608][ T10] usb 2-1: config 0 descriptor?? [ 134.510514][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 134.631821][ T825] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 134.716518][ T10] gspca_sunplus: reg_r err -32 [ 134.813503][ T825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.813550][ T825] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 134.813572][ T825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.825210][ T825] usb 4-1: config 0 descriptor?? [ 134.880570][ T825] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 134.880595][ T825] usbhid 4-1:0.0: can't add hid device: -22 [ 134.880716][ T825] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 136.297421][ T824] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 136.412553][ T825] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 136.451548][ T824] usb 1-1: Using ep0 maxpacket: 8 [ 136.454135][ T824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 136.455362][ T824] usb 1-1: config 3 has an invalid interface number: 171 but max is 0 [ 136.455388][ T824] usb 1-1: config 3 has no interface number 0 [ 136.457873][ T824] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 136.457902][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.457924][ T824] usb 1-1: Product: syz [ 136.457940][ T824] usb 1-1: Manufacturer: syz [ 136.457956][ T824] usb 1-1: SerialNumber: syz [ 136.561537][ T825] usb 3-1: Using ep0 maxpacket: 32 [ 136.564063][ T825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.564098][ T825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.564123][ T825] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 136.564165][ T825] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 136.564190][ T825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.576384][ T825] usb 3-1: config 0 descriptor?? [ 136.755921][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.789631][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.862487][ T824] (null): radio-mr800 - initialization failed [ 136.862748][ T824] radio-mr800 1-1:3.171: probe with driver radio-mr800 failed with error -22 [ 136.870524][ T824] usbhid 1-1:3.171: couldn't find an input interrupt endpoint [ 136.915663][ T824] usb 1-1: USB disconnect, device number 15 [ 136.961145][ T5714] usb 2-1: USB disconnect, device number 14 [ 137.489752][ T5714] usb 4-1: USB disconnect, device number 10 [ 137.495298][ T825] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input10 [ 137.697322][ T6041] vim2m vim2m.0: vidioc_s_fmt queue busy [ 137.899985][ T825] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input11 [ 138.082397][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 138.243117][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 138.262515][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 138.262574][ T9] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 138.262597][ T9] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 138.262622][ T9] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 138.262645][ T9] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 138.262669][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 138.262703][ T9] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 138.262726][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.512544][ T9] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 138.659659][ T825] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 138.799323][ T6062] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 138.799346][ T6062] netlink: 224 bytes leftover after parsing attributes in process `syz.2.97'. [ 138.929238][ T9] scsi host1: usb-storage 1-1:1.0 [ 139.021690][ T5714] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 139.060400][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.090471][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.203285][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 139.206941][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.206974][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.207014][ T5714] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 139.207051][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.259899][ T5714] usb 4-1: config 0 descriptor?? [ 139.275816][ T5714] hub 4-1:0.0: USB hub found [ 139.349688][ T10] usb 1-1: USB disconnect, device number 16 [ 139.451549][ T824] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 139.474664][ T5714] hub 4-1:0.0: 9 ports detected [ 139.475060][ T5714] hub 4-1:0.0: insufficient power available to use all downstream ports [ 139.598923][ T5786] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 139.636442][ T824] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 139.636471][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.636535][ T824] usb 2-1: Product: syz [ 139.636546][ T824] usb 2-1: Manufacturer: syz [ 139.636556][ T824] usb 2-1: SerialNumber: syz [ 139.675511][ T824] usb 2-1: config 0 descriptor?? [ 139.692977][ T6060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.715051][ T6060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.735318][ T824] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 139.782603][ T5786] usb 3-1: device firmware changed [ 139.842172][ T825] usb 3-1: USB disconnect, device number 11 [ 139.909454][ T824] gspca_sunplus: reg_r err -32 [ 140.118541][ T5714] usb 4-1: USB disconnect, device number 11 [ 140.299423][ T6072] netlink: 'syz.0.100': attribute type 12 has an invalid length. [ 140.518499][ T6075] FAULT_INJECTION: forcing a failure. [ 140.518499][ T6075] name failslab, interval 1, probability 0, space 0, times 1 [ 140.518539][ T6075] CPU: 1 UID: 0 PID: 6075 Comm: syz.3.101 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 140.518560][ T6075] Tainted: [L]=SOFTLOCKUP [ 140.518566][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 140.518581][ T6075] Call Trace: [ 140.518590][ T6075] [ 140.518596][ T6075] dump_stack_lvl+0xe8/0x150 [ 140.518619][ T6075] should_fail_ex+0x46b/0x600 [ 140.518647][ T6075] should_failslab+0xa8/0x100 [ 140.518670][ T6075] kmem_cache_alloc_noprof+0x87/0x680 [ 140.518725][ T6075] ? rcu_is_watching+0x15/0xb0 [ 140.518755][ T6075] ? security_file_alloc+0x34/0x310 [ 140.518792][ T6075] security_file_alloc+0x34/0x310 [ 140.518826][ T6075] init_file+0x96/0x2d0 [ 140.518852][ T6075] alloc_empty_file+0x74/0x1d0 [ 140.518879][ T6075] alloc_file_pseudo+0x155/0x240 [ 140.518899][ T6075] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 140.518926][ T6075] anon_inode_getfile+0xc5/0x1a0 [ 140.518961][ T6075] sync_file_ioctl+0xc78/0x1180 [ 140.518986][ T6075] ? __pfx_sync_file_ioctl+0x10/0x10 [ 140.519021][ T6075] ? __fget_files+0x2a/0x420 [ 140.519048][ T6075] ? bpf_lsm_file_ioctl+0x9/0x20 [ 140.519072][ T6075] ? __pfx_sync_file_ioctl+0x10/0x10 [ 140.519091][ T6075] __se_sys_ioctl+0xff/0x170 [ 140.519114][ T6075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.519131][ T6075] do_syscall_64+0x174/0x580 [ 140.519155][ T6075] ? trace_irq_disable+0x3b/0x140 [ 140.519173][ T6075] ? clear_bhb_loop+0x40/0x90 [ 140.519197][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.519213][ T6075] RIP: 0033:0x7f7da085ce59 [ 140.519234][ T6075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.519248][ T6075] RSP: 002b:00007f7d9eaae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.519268][ T6075] RAX: ffffffffffffffda RBX: 00007f7da0ad5fa0 RCX: 00007f7da085ce59 [ 140.519280][ T6075] RDX: 0000200000000300 RSI: 00000000c0303e03 RDI: 0000000000000007 [ 140.519292][ T6075] RBP: 00007f7d9eaae090 R08: 0000000000000000 R09: 0000000000000000 [ 140.519302][ T6075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.519311][ T6075] R13: 00007f7da0ad6038 R14: 00007f7da0ad5fa0 R15: 00007ffd141766f8 [ 140.519335][ T6075] [ 140.562233][ T825] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 140.741633][ T825] usb 3-1: Using ep0 maxpacket: 32 [ 140.757954][ T825] usb 3-1: unable to get BOS descriptor or descriptor too short [ 140.767376][ T825] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.807389][ T825] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.807424][ T825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.807446][ T825] usb 3-1: Product: syz [ 140.810899][ T825] usb 3-1: Manufacturer: syz [ 140.810951][ T825] usb 3-1: SerialNumber: syz [ 141.177770][ T825] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 141.571966][ T825] usb 3-1: USB disconnect, device number 12 [ 141.692525][ T824] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 141.841733][ T824] usb 4-1: Using ep0 maxpacket: 16 [ 141.845227][ T824] usb 4-1: config 0 has no interfaces? [ 141.845266][ T824] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 141.845293][ T824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.882782][ T824] usb 4-1: config 0 descriptor?? [ 142.091164][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.226899][ T824] usb 2-1: USB disconnect, device number 15 [ 142.414116][ T825] usb 4-1: USB disconnect, device number 12 [ 143.014207][ T824] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 143.181593][ T824] usb 2-1: Using ep0 maxpacket: 16 [ 143.199011][ T824] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 143.199086][ T824] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 143.199207][ T824] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 143.199235][ T824] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 143.199257][ T824] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 143.199282][ T824] usb 2-1: config 1 interface 0 has no altsetting 0 [ 143.199315][ T824] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 143.199340][ T824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.295538][ T824] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 143.527564][ T824] scsi host1: usb-storage 2-1:1.0 [ 143.702294][ T5714] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 143.731738][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.732583][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.861931][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 143.868065][ T5714] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 143.868096][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.868125][ T5714] usb 4-1: Product: syz [ 143.868138][ T5714] usb 4-1: Manufacturer: syz [ 143.868148][ T5714] usb 4-1: SerialNumber: syz [ 143.898922][ T5714] usb 4-1: config 0 descriptor?? [ 143.935721][ T5714] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 143.963400][ T10] usb 2-1: USB disconnect, device number 16 [ 144.125336][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.126285][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.130278][ T5714] gspca_ov534_9: reg_w failed -71 [ 144.285738][ T6123] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 144.561510][ T5714] gspca_ov534_9: Unknown sensor 0000 [ 144.561679][ T5714] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 144.570647][ T5714] usb 4-1: USB disconnect, device number 13 [ 145.160595][ T6148] IPVS: set_ctl: invalid protocol: 103 10.1.1.2:20001 [ 145.442597][ T6156] ======================================================= [ 145.442597][ T6156] WARNING: The mand mount option has been deprecated and [ 145.442597][ T6156] and is ignored by this kernel. Remove the mand [ 145.442597][ T6156] option from the mount to silence this warning. [ 145.442597][ T6156] ======================================================= [ 145.552415][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 145.572338][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 145.597202][ T6156] cgroup: subsys name conflicts with all [ 145.771614][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 145.774363][ T10] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 145.774392][ T10] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 145.774415][ T10] usb 1-1: config 0 has no interface number 0 [ 145.774471][ T10] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 145.774500][ T10] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 145.778715][ T10] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 145.778743][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.778763][ T10] usb 1-1: Product: syz [ 145.778778][ T10] usb 1-1: Manufacturer: syz [ 145.778793][ T10] usb 1-1: SerialNumber: syz [ 145.871543][ T10] usb 1-1: config 0 descriptor?? [ 145.872686][ T6151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.872896][ T6151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.095953][ T6151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.096233][ T6151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.261580][ T6160] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.323511][ T6160] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.519056][ T6160] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.519453][ T6160] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.696118][ T6160] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.782574][ T6160] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.782772][ T6160] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.005495][ T6160] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.083523][ T6160] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.084011][ T6160] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.172620][ T6160] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.290826][ T6156] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 147.303189][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.312537][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.552017][ T10] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 147.552054][ T10] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 147.552393][ T10] asix 1-1:0.251: probe with driver asix failed with error -71 [ 147.581514][ T825] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 147.630016][ T10] usb 1-1: USB disconnect, device number 17 [ 147.775455][ T825] usb 2-1: Using ep0 maxpacket: 32 [ 147.792612][ T825] usb 2-1: unable to get BOS descriptor or descriptor too short [ 147.797969][ T825] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 147.797999][ T825] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 147.798057][ T825] usb 2-1: config 14 has no interface number 0 [ 147.798105][ T825] usb 2-1: config 14 has no interface number 1 [ 147.798289][ T825] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 147.798367][ T825] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 147.798448][ T825] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 147.798511][ T825] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 147.798606][ T825] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 147.798682][ T825] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.798762][ T825] usb 2-1: config 14 interface 57 has no altsetting 0 [ 147.798821][ T825] usb 2-1: config 14 interface 228 has no altsetting 0 [ 147.811603][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.956061][ T825] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 147.956094][ T825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.956116][ T825] usb 2-1: Product: syz [ 147.956132][ T825] usb 2-1: Manufacturer: syz [ 147.956148][ T825] usb 2-1: SerialNumber: syz [ 148.505181][ T825] legousbtower 2-1:14.57: interrupt endpoints not found [ 148.531557][ T5607] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.586196][ T6186] gadgetfs: Unknown parameter '#Oy07Ξ}UaC{AR/H&p&ku9pU2%3C|ZzD{ZCáJ7' [ 148.674727][ T6187] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 148.852157][ T5607] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.912778][ T825] legousbtower 2-1:14.228: get version request failed: -32 [ 148.912980][ T825] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -32 [ 149.093042][ T5607] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.670654][ T6195] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 149.728685][ T6201] input: syz0 as /devices/virtual/input/input12 [ 150.118404][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.171634][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.176902][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.210968][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.228702][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.341721][ T825] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 150.446993][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.495432][ T825] usb 3-1: Using ep0 maxpacket: 8 [ 150.497635][ T825] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 150.497654][ T825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.497669][ T825] usb 3-1: config 0 has no interface number 0 [ 150.497700][ T825] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 150.497719][ T825] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 150.497735][ T825] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.497755][ T825] usb 3-1: config 0 interface 52 has no altsetting 0 [ 150.499479][ T825] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 150.499510][ T825] usb 3-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 150.499534][ T825] usb 3-1: Product: syz [ 150.499549][ T825] usb 3-1: SerialNumber: syz [ 150.616220][ T5607] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.617474][ T825] usb 3-1: config 0 descriptor?? [ 150.857251][ T825] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 150.857676][ T825] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -5 [ 150.935277][ T5607] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.171697][ T5607] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.203208][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.311614][ T5714] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 151.334806][ T824] usb 3-1: USB disconnect, device number 13 [ 151.360451][ T825] usb 2-1: USB disconnect, device number 17 [ 151.476626][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.477391][ T5714] usb 1-1: not running at top speed; connect to a high speed hub [ 151.498684][ T5714] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 151.498735][ T5714] usb 1-1: can't read configurations, error -61 [ 151.641540][ T5714] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 151.746640][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.801120][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.804766][ T5714] usb 1-1: not running at top speed; connect to a high speed hub [ 151.828276][ T5714] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 151.828312][ T5714] usb 1-1: can't read configurations, error -61 [ 151.851521][ T5714] usb usb1-port1: attempt power cycle [ 151.929039][ T6207] lo speed is unknown, defaulting to 1000 [ 151.949043][ T6226] binder: 6223:6226 ioctl 80047441 200000000000 returned -22 [ 151.949247][ T6226] binder: 6223:6226 ioctl 41045508 200000000380 returned -22 [ 152.159607][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.223175][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'. [ 152.248738][ T5714] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 152.288295][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.299732][ T5714] usb 1-1: not running at top speed; connect to a high speed hub [ 152.312270][ T5714] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 152.312315][ T5714] usb 1-1: can't read configurations, error -61 [ 152.453794][ T5607] Bluetooth: hci0: command tx timeout [ 152.484996][ T5714] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 152.528677][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 152.549649][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.560430][ T5714] usb 1-1: not running at top speed; connect to a high speed hub [ 152.588080][ T5714] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 152.588124][ T5714] usb 1-1: can't read configurations, error -61 [ 152.600241][ T5714] usb usb1-port1: unable to enumerate USB device [ 152.703630][ T5607] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.011573][ T5607] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.128245][ T6246] qnx6: unable to read the first superblock [ 153.266187][ T5607] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.448463][ T6251] FAULT_INJECTION: forcing a failure. [ 153.448463][ T6251] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 153.448532][ T6251] CPU: 1 UID: 0 PID: 6251 Comm: syz.1.155 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 153.448563][ T6251] Tainted: [L]=SOFTLOCKUP [ 153.448571][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.448584][ T6251] Call Trace: [ 153.448593][ T6251] [ 153.448602][ T6251] dump_stack_lvl+0xe8/0x150 [ 153.448635][ T6251] should_fail_ex+0x46b/0x600 [ 153.448674][ T6251] _copy_from_user+0x2d/0xb0 [ 153.448703][ T6251] fbcon_set_con2fb_map_ioctl+0x89/0x200 [ 153.448734][ T6251] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 153.448767][ T6251] ? tomoyo_path_number_perm+0x219/0x630 [ 153.448810][ T6251] do_fb_ioctl+0x422/0x750 [ 153.448857][ T6251] ? __pfx_do_fb_ioctl+0x10/0x10 [ 153.448915][ T6251] ? __fget_files+0x2a/0x420 [ 153.448946][ T6251] ? __fget_files+0x3a6/0x420 [ 153.448971][ T6251] ? __fget_files+0x2a/0x420 [ 153.449000][ T6251] ? bpf_lsm_file_ioctl+0x9/0x20 [ 153.449032][ T6251] ? __pfx_fb_ioctl+0x10/0x10 [ 153.449054][ T6251] __se_sys_ioctl+0xff/0x170 [ 153.449086][ T6251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.449111][ T6251] do_syscall_64+0x174/0x580 [ 153.449143][ T6251] ? trace_irq_disable+0x3b/0x140 [ 153.449167][ T6251] ? clear_bhb_loop+0x40/0x90 [ 153.449194][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.449217][ T6251] RIP: 0033:0x7ff31cb0ce59 [ 153.449236][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.449254][ T6251] RSP: 002b:00007ff31ad5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.449278][ T6251] RAX: ffffffffffffffda RBX: 00007ff31cd85fa0 RCX: 00007ff31cb0ce59 [ 153.449294][ T6251] RDX: 0000200000000080 RSI: 0000000000004610 RDI: 0000000000000003 [ 153.449308][ T6251] RBP: 00007ff31ad5e090 R08: 0000000000000000 R09: 0000000000000000 [ 153.449322][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.449335][ T6251] R13: 00007ff31cd86038 R14: 00007ff31cd85fa0 R15: 00007ffc88529738 [ 153.449367][ T6251] [ 153.550749][ T68] bridge_slave_1: left allmulticast mode [ 153.551157][ T68] bridge_slave_1: left promiscuous mode [ 153.716083][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.994812][ T68] bridge_slave_0: left allmulticast mode [ 153.995467][ T68] bridge_slave_0: left promiscuous mode [ 153.995744][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.224852][ T825] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 154.405391][ T825] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 154.405442][ T825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 154.405471][ T825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 154.405516][ T825] usb 1-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 154.405540][ T825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.449522][ T825] usb 1-1: config 0 descriptor?? [ 154.476466][ T6256] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.531640][ T5607] Bluetooth: hci0: command tx timeout [ 154.641564][ T32] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 154.771847][ T32] usb 3-1: device descriptor read/64, error -71 [ 155.031765][ T32] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 155.135306][ T825] chicony 0003:04F2:0418.0002: unknown main item tag 0x2 [ 155.135344][ T825] chicony 0003:04F2:0418.0002: unknown main item tag 0x0 [ 155.135371][ T825] chicony 0003:04F2:0418.0002: unknown main item tag 0x1 [ 155.135398][ T825] chicony 0003:04F2:0418.0002: unknown main item tag 0x0 [ 155.135423][ T825] chicony 0003:04F2:0418.0002: unknown main item tag 0x2 [ 155.135448][ T825] chicony 0003:04F2:0418.0002: unknown main item tag 0x0 [ 155.135471][ T825] chicony 0003:04F2:0418.0002: item fetching failed at offset 38/40 [ 155.136126][ T825] chicony 0003:04F2:0418.0002: Chicony hid parse failed: -22 [ 155.136198][ T825] chicony 0003:04F2:0418.0002: probe with driver chicony failed with error -22 [ 155.161959][ T32] usb 3-1: device descriptor read/64, error -71 [ 155.272683][ T32] usb usb3-port1: attempt power cycle [ 155.336028][ T824] usb 1-1: USB disconnect, device number 22 [ 155.364926][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.422203][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.464840][ T68] bond0 (unregistering): Released all slaves [ 155.532310][ T6253] netlink: 48 bytes leftover after parsing attributes in process `syz.1.156'. [ 155.633499][ T32] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 155.652977][ T32] usb 3-1: device descriptor read/8, error -71 [ 155.858725][ T6271] 9p: Bad value for 'rfdno' [ 155.922052][ T32] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 155.942368][ T32] usb 3-1: device descriptor read/8, error -71 [ 156.052053][ T32] usb usb3-port1: unable to enumerate USB device [ 156.488718][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.489227][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.489579][ T6207] bridge_slave_0: entered allmulticast mode [ 156.521320][ T6207] bridge_slave_0: entered promiscuous mode [ 156.609530][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 156.610829][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.611561][ T5607] Bluetooth: hci0: command tx timeout [ 156.631906][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.632291][ T6207] bridge_slave_1: entered allmulticast mode [ 156.636119][ T6207] bridge_slave_1: entered promiscuous mode [ 156.948948][ T6207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.985331][ T6207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.006674][ T6292] sit0: entered promiscuous mode [ 157.022953][ T6292] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 157.022971][ T6292] netlink: 1 bytes leftover after parsing attributes in process `syz.1.164'. [ 157.236385][ T6294] FAULT_INJECTION: forcing a failure. [ 157.236385][ T6294] name failslab, interval 1, probability 0, space 0, times 0 [ 157.236416][ T6294] CPU: 0 UID: 0 PID: 6294 Comm: syz.1.165 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 157.236445][ T6294] Tainted: [L]=SOFTLOCKUP [ 157.236451][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.236460][ T6294] Call Trace: [ 157.236466][ T6294] [ 157.236473][ T6294] dump_stack_lvl+0xe8/0x150 [ 157.236496][ T6294] should_fail_ex+0x46b/0x600 [ 157.236525][ T6294] should_failslab+0xa8/0x100 [ 157.236554][ T6294] kmem_cache_alloc_noprof+0x87/0x680 [ 157.236574][ T6294] ? anon_vma_fork+0x83/0x570 [ 157.236597][ T6294] anon_vma_fork+0x83/0x570 [ 157.236615][ T6294] ? dup_userfaultfd+0xaf/0x650 [ 157.236638][ T6294] ? __vm_enough_memory+0x11b/0x380 [ 157.236658][ T6294] dup_mmap+0x997/0x1d70 [ 157.236695][ T6294] ? __pfx_dup_mmap+0x10/0x10 [ 157.236715][ T6294] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 157.236743][ T6294] ? copy_mm+0x10f/0x480 [ 157.236769][ T6294] ? copy_mm+0x10f/0x480 [ 157.236803][ T6294] copy_mm+0x11a/0x480 [ 157.236829][ T6294] copy_process+0x1e30/0x43d0 [ 157.236859][ T6294] ? copy_process+0xd4e/0x43d0 [ 157.236897][ T6294] ? __pfx_copy_process+0x10/0x10 [ 157.236922][ T6294] ? get_pid_task+0x20/0x1f0 [ 157.236937][ T6294] ? get_pid_task+0x20/0x1f0 [ 157.236960][ T6294] kernel_clone+0x2d7/0x940 [ 157.236989][ T6294] ? __pfx_kernel_clone+0x10/0x10 [ 157.237013][ T6294] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.237043][ T6294] __x64_sys_clone+0x1b6/0x230 [ 157.237063][ T6294] ? __pfx___x64_sys_clone+0x10/0x10 [ 157.237096][ T6294] ? __pfx_ksys_write+0x10/0x10 [ 157.237125][ T6294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.237142][ T6294] do_syscall_64+0x174/0x580 [ 157.237166][ T6294] ? trace_irq_disable+0x3b/0x140 [ 157.237184][ T6294] ? clear_bhb_loop+0x40/0x90 [ 157.237203][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.237219][ T6294] RIP: 0033:0x7ff31cb0ce59 [ 157.237234][ T6294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.237247][ T6294] RSP: 002b:00007ff31ad5dfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 157.237263][ T6294] RAX: ffffffffffffffda RBX: 00007ff31cd85fa0 RCX: 00007ff31cb0ce59 [ 157.237274][ T6294] RDX: 0000000000000000 RSI: fffffffffffffd90 RDI: 0000000000000000 [ 157.237284][ T6294] RBP: 00007ff31ad5e090 R08: 0000000000000000 R09: 0000000000000000 [ 157.237295][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.237329][ T6294] R13: 00007ff31cd86038 R14: 00007ff31cd85fa0 R15: 00007ffc88529738 [ 157.237364][ T6294] [ 158.065762][ T6207] team0: Port device team_slave_0 added [ 158.071991][ T6207] team0: Port device team_slave_1 added [ 158.165999][ T32] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 158.182715][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.182728][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.182748][ T6207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.291584][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 158.331678][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 158.334166][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.337190][ T32] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 158.337217][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.337237][ T32] usb 1-1: Product: syz [ 158.337251][ T32] usb 1-1: Manufacturer: syz [ 158.337265][ T32] usb 1-1: SerialNumber: syz [ 158.359567][ T32] usb 1-1: config 0 descriptor?? [ 158.401135][ T32] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 158.456775][ T68] hsr_slave_0: left promiscuous mode [ 158.473508][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 158.475410][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 158.475464][ T9] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 158.475489][ T9] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 158.475515][ T9] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 158.475537][ T9] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 158.475562][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 158.475596][ T9] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 158.475620][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.505033][ T68] hsr_slave_1: left promiscuous mode [ 158.525341][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.558411][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.595785][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.595814][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.620162][ T9] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 158.669574][ T32] usb 1-1: USB disconnect, device number 23 [ 158.692213][ T5607] Bluetooth: hci0: command tx timeout [ 158.858066][ T9] scsi host1: usb-storage 2-1:1.0 [ 159.062284][ T6300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.062886][ T6300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.209454][ T68] veth1_macvtap: left promiscuous mode [ 159.209767][ T68] veth0_macvtap: left promiscuous mode [ 159.210108][ T68] veth1_vlan: left promiscuous mode [ 159.269136][ T68] veth0_vlan: left promiscuous mode [ 159.309397][ T6329] binder: 6327:6329 ioctl c0306201 200000000100 returned -14 [ 159.322213][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 159.322238][ T6329] nbd: illegal input index 15400960 [ 159.396518][ T5714] usb 2-1: USB disconnect, device number 18 [ 160.344203][ T6337] comedi comedi0: aio_aio12_8: I/O base address not correctly aligned [ 160.442350][ T68] team0 (unregistering): Port device team_slave_1 removed [ 160.502355][ T68] team0 (unregistering): Port device team_slave_0 removed [ 160.754877][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.754890][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.754911][ T6207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.848442][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 160.994742][ T6334] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.995019][ T6334] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.995272][ T6334] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.995526][ T6334] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 160.995619][ T6334] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.086192][ T6334] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.186351][ T5607] Bluetooth: hci1: ISO packet for unknown connection handle 576 [ 161.240945][ T6207] hsr_slave_0: entered promiscuous mode [ 161.247927][ T6207] hsr_slave_1: entered promiscuous mode [ 161.822634][ T5755] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 161.965058][ T5755] usb 2-1: device descriptor read/64, error -71 [ 162.197201][ T6372] misc userio: No port type given on /dev/userio [ 162.202211][ T5755] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 162.331558][ T5755] usb 2-1: device descriptor read/64, error -71 [ 162.442377][ T5755] usb usb2-port1: attempt power cycle [ 162.641537][ T5714] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 162.792863][ T32] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 162.814432][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 162.820510][ T5714] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 162.820570][ T5714] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 162.820587][ T5714] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 162.820605][ T5714] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 162.820620][ T5714] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 162.820638][ T5714] usb 3-1: config 1 interface 0 has no altsetting 0 [ 162.820662][ T5714] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 162.820678][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.841500][ T5755] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 162.925825][ T5755] usb 2-1: device descriptor read/8, error -71 [ 162.960861][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.960915][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.960957][ T32] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 162.960974][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.012398][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.012419][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.012452][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.012479][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.019108][ T32] usb 1-1: config 0 descriptor?? [ 163.036982][ T5714] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 163.164272][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 163.191796][ T5755] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 163.214725][ T5755] usb 2-1: device descriptor read/8, error -71 [ 163.256942][ T5714] scsi host1: usb-storage 3-1:1.0 [ 163.303414][ T6382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.322212][ T5755] usb usb2-port1: unable to enumerate USB device [ 163.352304][ T32] usbhid 1-1:0.0: can't add hid device: -71 [ 163.352401][ T32] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 163.426315][ T32] usb 1-1: USB disconnect, device number 24 [ 163.465139][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.483267][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.560515][ T6389] netlink: 408 bytes leftover after parsing attributes in process `syz.0.184'. [ 163.709875][ T5755] usb 3-1: USB disconnect, device number 18 [ 164.236036][ T6403] binder_alloc: 6402: binder_alloc_buf, no vma [ 164.643192][ T5786] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 164.802708][ T6415] netlink: 'syz.2.189': attribute type 4 has an invalid length. [ 164.802732][ T6415] netlink: 17 bytes leftover after parsing attributes in process `syz.2.189'. [ 164.837598][ T5786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.837673][ T5786] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.837704][ T5786] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.837729][ T5786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.837765][ T5786] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 164.837791][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.898550][ T5786] usb 1-1: config 0 descriptor?? [ 164.905482][ T5755] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 164.932448][ T5786] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 165.041966][ T5714] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 165.081605][ T5755] usb 2-1: Using ep0 maxpacket: 32 [ 165.091629][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.091934][ T5755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.092048][ T5755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.092084][ T5755] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 165.092103][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.169177][ T5755] usb 2-1: config 0 descriptor?? [ 165.215819][ T5755] hub 2-1:0.0: USB hub found [ 165.221639][ T5714] usb 3-1: Using ep0 maxpacket: 8 [ 165.235561][ T5714] usb 3-1: config 127 has an invalid interface number: 56 but max is 1 [ 165.235592][ T5714] usb 3-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 165.235612][ T5714] usb 3-1: config 127 has an invalid interface number: 18 but max is 1 [ 165.235637][ T5714] usb 3-1: config 127 has no interface number 0 [ 165.235654][ T5714] usb 3-1: config 127 has no interface number 1 [ 165.235710][ T5714] usb 3-1: config 127 interface 56 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 165.235740][ T5714] usb 3-1: config 127 interface 56 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 8 [ 165.235766][ T5714] usb 3-1: config 127 interface 56 altsetting 6 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 165.235807][ T5714] usb 3-1: config 127 interface 56 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 165.235834][ T5714] usb 3-1: config 127 interface 56 altsetting 6 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 165.235883][ T5714] usb 3-1: config 127 interface 56 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 165.235928][ T5714] usb 3-1: config 127 interface 56 altsetting 6 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 165.235965][ T5714] usb 3-1: config 127 interface 56 altsetting 6 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 165.236003][ T5714] usb 3-1: config 127 interface 56 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 165.236032][ T5714] usb 3-1: config 127 interface 56 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 165.236057][ T5714] usb 3-1: config 127 interface 56 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 165.236097][ T5714] usb 3-1: config 127 interface 18 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 165.236124][ T5714] usb 3-1: config 127 interface 18 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 165.236149][ T5714] usb 3-1: config 127 interface 18 altsetting 6 bulk endpoint 0x5 has invalid maxpacket 8 [ 165.236175][ T5714] usb 3-1: config 127 interface 18 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 165.236199][ T5714] usb 3-1: config 127 interface 18 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 165.236223][ T5714] usb 3-1: config 127 interface 18 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 165.236247][ T5714] usb 3-1: config 127 interface 18 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 165.236272][ T5714] usb 3-1: config 127 interface 18 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 165.236297][ T5714] usb 3-1: config 127 interface 18 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 165.236322][ T5714] usb 3-1: config 127 interface 18 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 165.236346][ T5714] usb 3-1: config 127 interface 18 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 165.236371][ T5714] usb 3-1: config 127 interface 18 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 165.236394][ T5714] usb 3-1: config 127 interface 18 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 165.236419][ T5714] usb 3-1: config 127 interface 56 has no altsetting 0 [ 165.236439][ T5714] usb 3-1: config 127 interface 18 has no altsetting 0 [ 165.243337][ T5714] usb 3-1: Dual-Role OTG device on HNP port [ 165.250234][ T5714] usb 3-1: New USB device found, idVendor=257a, idProduct=3607, bcdDevice=8e.3c [ 165.250265][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.250287][ T5714] usb 3-1: Product: syz [ 165.250304][ T5714] usb 3-1: Manufacturer: 옸㚧ꥐᱽ끞（볮厶㾦굗촔ᕾ﹔뉩넪犎腢㩺翱넥쌲渫ﲅᄔ唍ꜜꓥ黺䓬⫛鰢勜뉴댣ḻ줎첑綁蝭賂༮퇫ࣇ윗퓨솹汝ᬉ┘쳰 [ 165.250331][ T5714] usb 3-1: SerialNumber: syz [ 165.538859][ T5755] hub 2-1:0.0: 9 ports detected [ 165.554572][ T5755] hub 2-1:0.0: insufficient power available to use all downstream ports [ 165.750384][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.784494][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.787678][ T6415] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 165.788240][ T6415] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 165.794540][ T6415] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 165.860731][ T5786] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 165.860762][ T5786] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 165.860800][ T5786] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 165.860828][ T5786] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 165.860854][ T5786] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 165.860877][ T5786] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 165.860907][ T5786] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 165.860925][ T5786] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 165.860943][ T5786] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 165.860983][ T5786] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 166.110787][ T6426] batadv_slave_1: entered promiscuous mode [ 166.155335][ T6414] batadv_slave_1: left promiscuous mode [ 166.256520][ T5714] option 3-1:127.56: GSM modem (1-port) converter detected [ 166.325549][ T5714] option 3-1:127.18: GSM modem (1-port) converter detected [ 166.384892][ T5714] usb 3-1: USB disconnect, device number 19 [ 166.429495][ T5755] usb 2-1: USB disconnect, device number 23 [ 166.455870][ T5786] sony 0003:054C:0268.0003: hiddev0,hidraw0: USB HID v80.81 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0 [ 166.455909][ T5786] sony 0003:054C:0268.0003: failed to claim input [ 167.067426][ T6439] overlayfs: conflicting options: userxattr,redirect_dir=on [ 167.090802][ T5714] option 3-1:127.56: device disconnected [ 167.178056][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.215393][ T5786] usb 1-1: USB disconnect, device number 25 [ 167.317065][ T5714] option 3-1:127.18: device disconnected [ 167.924677][ T6207] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 167.963989][ T6207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.965587][ T6207] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.027407][ T6207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.030669][ T6207] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.097042][ T6207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 168.101528][ T6207] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.165549][ T6207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 168.255384][ T5755] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 168.420860][ T5755] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.420893][ T5755] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.424260][ T5755] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 168.424293][ T5755] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 168.424316][ T5755] usb 1-1: Product: syz [ 168.424332][ T5755] usb 1-1: Manufacturer: syz [ 168.424348][ T5755] usb 1-1: SerialNumber: syz [ 168.524518][ T5755] appletouch 1-1:1.0: Could not find int-in endpoint [ 168.524556][ T5755] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 168.530091][ T5755] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 168.872098][ T6207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.944665][ T6207] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.968125][ T4133] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.978854][ T4133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.009371][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.009561][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.057103][ T5714] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 169.142730][ T5713] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 169.239453][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 169.249545][ T5714] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 169.249613][ T5714] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 169.249638][ T5714] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 169.249662][ T5714] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 169.249684][ T5714] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 169.249707][ T5714] usb 3-1: config 1 interface 0 has no altsetting 0 [ 169.249741][ T5714] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 169.249765][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.285339][ T5713] usb 2-1: device descriptor read/64, error -71 [ 169.285532][ T5755] usb 1-1: USB disconnect, device number 26 [ 169.455640][ T5714] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 169.561413][ T5713] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 169.697129][ T5714] scsi host1: usb-storage 3-1:1.0 [ 169.705656][ T5713] usb 2-1: device descriptor read/64, error -71 [ 169.818364][ T5713] usb usb2-port1: attempt power cycle [ 169.911059][ T6461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.911602][ T6461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.192399][ T5713] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 170.220772][ T5713] usb 2-1: device descriptor read/8, error -71 [ 170.260201][ T5755] usb 3-1: USB disconnect, device number 20 [ 170.340402][ T32] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 170.376117][ T6207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.480181][ T5713] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 170.480337][ T32] usb 1-1: device descriptor read/64, error -71 [ 170.505011][ T5713] usb 2-1: device descriptor read/8, error -71 [ 170.529330][ T6207] veth0_vlan: entered promiscuous mode [ 170.559424][ T6207] veth1_vlan: entered promiscuous mode [ 170.620054][ T5713] usb usb2-port1: unable to enumerate USB device [ 170.651213][ T6207] veth0_macvtap: entered promiscuous mode [ 170.679579][ T6207] veth1_macvtap: entered promiscuous mode [ 170.747482][ T6207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.758036][ T32] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 170.893274][ T6207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.932829][ T4133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.936701][ T4133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.936957][ T4133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.937000][ T4133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.949127][ T32] usb 1-1: device descriptor read/64, error -71 [ 171.086746][ T32] usb usb1-port1: attempt power cycle [ 171.623731][ T32] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 171.660765][ T32] usb 1-1: device descriptor read/8, error -71 [ 171.801553][ T1418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.801576][ T1418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.984094][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.984115][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.996623][ T32] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 172.034181][ T32] usb 1-1: device descriptor read/8, error -71 [ 172.146502][ T32] usb usb1-port1: unable to enumerate USB device [ 172.331269][ T37] audit: type=1326 audit(1780568662.765:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.2.203" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05d35ce59 code=0x7fc00000 [ 172.716358][ T6534] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 173.703228][ T9] libceph: connect (1)[c::]:6789 error -101 [ 173.708865][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 173.734000][ T9] libceph: connect (1)[c::]:6789 error -101 [ 173.734168][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 173.746593][ T6552] ceph: No mds server is up or the cluster is laggy [ 173.753320][ T5786] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 173.781713][ T5615] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 173.949862][ T5615] usb 1-1: Using ep0 maxpacket: 16 [ 173.981353][ T5786] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 173.981385][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.981408][ T5786] usb 2-1: Product: syz [ 173.981424][ T5786] usb 2-1: Manufacturer: syz [ 173.981439][ T5786] usb 2-1: SerialNumber: syz [ 174.027157][ T5615] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 174.027212][ T5615] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 174.027228][ T5615] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 174.027246][ T5615] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 174.027262][ T5615] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 174.027279][ T5615] usb 1-1: config 1 interface 0 has no altsetting 0 [ 174.027303][ T5615] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 174.027339][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.121161][ T5786] usb 2-1: config 0 descriptor?? [ 174.151639][ T5615] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 174.332878][ T6561] FAULT_INJECTION: forcing a failure. [ 174.332878][ T6561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.332918][ T6561] CPU: 1 UID: 0 PID: 6561 Comm: syz.2.214 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 174.332951][ T6561] Tainted: [L]=SOFTLOCKUP [ 174.332957][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.332967][ T6561] Call Trace: [ 174.332975][ T6561] [ 174.332998][ T6561] dump_stack_lvl+0xe8/0x150 [ 174.333084][ T6561] should_fail_ex+0x46b/0x600 [ 174.333133][ T6561] _copy_from_user+0x2d/0xb0 [ 174.333153][ T6561] ctrl_cdev_ioctl+0xf3/0x480 [ 174.333197][ T6561] ? __fget_files+0x2a/0x420 [ 174.333227][ T6561] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 174.333249][ T6561] ? __fget_files+0x2a/0x420 [ 174.333274][ T6561] ? __fget_files+0x2a/0x420 [ 174.333306][ T6561] ? bpf_lsm_file_ioctl+0x9/0x20 [ 174.333329][ T6561] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 174.333364][ T6561] __se_sys_ioctl+0xff/0x170 [ 174.333399][ T6561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.333423][ T6561] do_syscall_64+0x174/0x580 [ 174.333454][ T6561] ? trace_irq_disable+0x3b/0x140 [ 174.333482][ T6561] ? clear_bhb_loop+0x40/0x90 [ 174.333501][ T6561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.333519][ T6561] RIP: 0033:0x7fd05d35ce59 [ 174.333552][ T6561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.333570][ T6561] RSP: 002b:00007fd05b5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.333595][ T6561] RAX: ffffffffffffffda RBX: 00007fd05d5d5fa0 RCX: 00007fd05d35ce59 [ 174.333611][ T6561] RDX: 00002000000000c0 RSI: 0000000040186f40 RDI: 0000000000000003 [ 174.333624][ T6561] RBP: 00007fd05b5b6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.333638][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.333652][ T6561] R13: 00007fd05d5d6038 R14: 00007fd05d5d5fa0 R15: 00007ffd01b68a98 [ 174.333681][ T6561] [ 174.556342][ T5615] scsi host1: usb-storage 1-1:1.0 [ 174.659830][ T6557] syz.3.213 (6557) used greatest stack depth: 18976 bytes left [ 174.778264][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.778898][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.850267][ T37] audit: type=1326 audit(1780568665.113:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.3.216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f7bd74bce59 code=0x0 [ 174.987347][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 175.058662][ T49] usb 1-1: USB disconnect, device number 31 [ 175.493398][ T5615] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 175.652373][ T5615] usb 3-1: Using ep0 maxpacket: 8 [ 175.656526][ T5615] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 175.656556][ T5615] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.656577][ T5615] usb 3-1: config 0 has no interface number 0 [ 175.656620][ T5615] usb 3-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 175.656655][ T5615] usb 3-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 175.656672][ T5615] usb 3-1: config 0 interface 239 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.659333][ T5615] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 175.659361][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.659384][ T5615] usb 3-1: Product: syz [ 175.659401][ T5615] usb 3-1: Manufacturer: syz [ 175.659412][ T5615] usb 3-1: SerialNumber: syz [ 175.773898][ T5615] usb 3-1: config 0 descriptor?? [ 175.778599][ T6579] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 175.914997][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 176.089172][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 176.122677][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 176.136428][ T9] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 176.136459][ T9] usb 1-1: config 0 has no interface number 0 [ 176.143149][ T9] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.143193][ T9] usb 1-1: config 0 interface 89 has no altsetting 0 [ 176.199440][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 176.199474][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.199495][ T9] usb 1-1: Product: syz [ 176.199750][ T9] usb 1-1: Manufacturer: syz [ 176.199767][ T9] usb 1-1: SerialNumber: syz [ 176.280505][ T9] usb 1-1: config 0 descriptor?? [ 176.301694][ T9] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 176.301792][ T9] em28xx 1-1:0.89: Video interface 89 found: [ 176.341048][ T6598] capability: warning: `syz.3.223' uses 32-bit capabilities (legacy support in use) [ 176.341453][ T6598] program syz.3.223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.694425][ T5756] usb 2-1: USB disconnect, device number 28 [ 176.925535][ T5615] ath6kl: Failed to submit usb control message: -110 [ 176.925572][ T5615] ath6kl: unable to send the bmi data to the device: -110 [ 176.925583][ T5615] ath6kl: Unable to send get target info: -110 [ 176.938299][ T9] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 176.953546][ T5615] ath6kl: Failed to init ath6kl core: -110 [ 176.973623][ T49] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 177.028888][ T5615] ath6kl_usb 3-1:0.239: probe with driver ath6kl_usb failed with error -110 [ 177.213161][ T49] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.213190][ T49] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 177.237244][ T49] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 177.237278][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.237301][ T49] usb 4-1: Product: syz [ 177.237317][ T49] usb 4-1: Manufacturer: syz [ 177.237334][ T49] usb 4-1: SerialNumber: syz [ 177.458779][ T5615] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 177.702124][ T9] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 177.702160][ T9] em28xx 1-1:0.89: board has no eeprom [ 177.815481][ T5615] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 177.815513][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.815594][ T5615] usb 2-1: Product: syz [ 177.815610][ T5615] usb 2-1: Manufacturer: syz [ 177.815765][ T5615] usb 2-1: SerialNumber: syz [ 177.854569][ T5615] usb 2-1: config 0 descriptor?? [ 177.887372][ T5615] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 178.068077][ T9] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 178.068122][ T9] em28xx 1-1:0.89: analog set to bulk mode. [ 178.077816][ T5786] em28xx 1-1:0.89: Registering V4L2 extension [ 178.383126][ T9] usb 1-1: USB disconnect, device number 32 [ 178.399057][ T5786] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 178.400995][ T5786] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-19) [ 178.402917][ T5786] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-19) [ 178.404724][ T5786] em28xx 1-1:0.89: reading from i2c device at 0x40 failed (error=-19) [ 178.438084][ T9] em28xx 1-1:0.89: Disconnecting em28xx [ 178.443470][ T5786] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 178.443531][ T5786] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 178.443637][ T5786] em28xx 1-1:0.89: No AC97 audio processor [ 178.610249][ T5756] usb 3-1: USB disconnect, device number 21 [ 178.930542][ T5786] usb 1-1: Decoder not found [ 178.930620][ T5786] em28xx 1-1:0.89: failed to create media graph [ 178.930695][ T5786] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 179.427125][ T5615] gspca_stk1135: reg_w 0xf err -71 [ 179.428201][ T5615] gspca_stk1135: serial bus timeout: status=0x00 [ 179.428215][ T5615] gspca_stk1135: Sensor write failed [ 179.428245][ T5615] gspca_stk1135: serial bus timeout: status=0x00 [ 179.428254][ T5615] gspca_stk1135: Sensor write failed [ 179.428287][ T5615] gspca_stk1135: serial bus timeout: status=0x00 [ 179.428297][ T5615] gspca_stk1135: Sensor read failed [ 179.428326][ T5615] gspca_stk1135: serial bus timeout: status=0x00 [ 179.428335][ T5615] gspca_stk1135: Sensor read failed [ 179.428343][ T5615] gspca_stk1135: Detected sensor type unknown (0x0) [ 179.428377][ T5615] gspca_stk1135: serial bus timeout: status=0x00 [ 179.428387][ T5615] gspca_stk1135: Sensor read failed [ 179.428417][ T5615] gspca_stk1135: serial bus timeout: status=0x00 [ 179.428428][ T5615] gspca_stk1135: Sensor read failed [ 179.428457][ T5615] gspca_stk1135: serial bus timeout: status=0x00 [ 179.428465][ T5615] gspca_stk1135: Sensor write failed [ 179.428493][ T5615] gspca_stk1135: serial bus timeout: status=0x00 [ 179.428504][ T5615] gspca_stk1135: Sensor write failed [ 179.428617][ T5615] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 179.557422][ T5615] usb 2-1: USB disconnect, device number 29 [ 179.635836][ T6611] ================================================================== [ 179.635855][ T6611] BUG: KASAN: use-after-free in v4l2_open+0x398/0x3a0 [ 179.635892][ T6611] Read of size 4 at addr ffff888033d389d0 by task v4l_id/6611 [ 179.635910][ T6611] [ 179.635926][ T6611] CPU: 1 UID: 0 PID: 6611 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 179.635957][ T6611] Tainted: [L]=SOFTLOCKUP [ 179.635965][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.635979][ T6611] Call Trace: [ 179.635987][ T6611] [ 179.635997][ T6611] dump_stack_lvl+0xe8/0x150 [ 179.636025][ T6611] print_address_description+0x55/0x1e0 [ 179.636055][ T6611] ? v4l2_open+0x398/0x3a0 [ 179.636080][ T6611] print_report+0x58/0x70 [ 179.636108][ T6611] kasan_report+0x117/0x150 [ 179.636138][ T6611] ? v4l2_open+0x398/0x3a0 [ 179.636168][ T6611] v4l2_open+0x398/0x3a0 [ 179.636198][ T6611] chrdev_open+0x4d0/0x5f0 [ 179.636219][ T6611] ? __pfx_chrdev_open+0x10/0x10 [ 179.636240][ T6611] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 179.636293][ T6611] ? __pfx_chrdev_open+0x10/0x10 [ 179.636314][ T6611] do_dentry_open+0x83d/0x13e0 [ 179.636344][ T6611] vfs_open+0x3b/0x350 [ 179.636366][ T6611] ? path_openat+0x2ed3/0x3960 [ 179.636398][ T6611] path_openat+0x2eea/0x3960 [ 179.636445][ T6611] ? __pfx_path_openat+0x10/0x10 [ 179.636480][ T6611] ? kasan_save_track+0x4f/0x80 [ 179.636503][ T6611] ? kasan_save_track+0x3e/0x80 [ 179.636528][ T6611] ? __kasan_slab_alloc+0x6c/0x80 [ 179.636567][ T6611] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.636593][ T6611] do_file_open+0x23e/0x4a0 [ 179.636624][ T6611] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 179.636662][ T6611] ? __pfx_do_file_open+0x10/0x10 [ 179.636692][ T6611] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 179.636736][ T6611] ? alloc_fd+0x679/0x6f0 [ 179.636766][ T6611] do_sys_openat2+0x115/0x200 [ 179.636793][ T6611] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.636819][ T6611] ? exc_page_fault+0x6a/0xc0 [ 179.636854][ T6611] ? do_user_addr_fault+0xc6f/0x1340 [ 179.636882][ T6611] __x64_sys_openat+0x138/0x170 [ 179.636909][ T6611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.636933][ T6611] do_syscall_64+0x174/0x580 [ 179.636965][ T6611] ? trace_irq_disable+0x3b/0x140 [ 179.636989][ T6611] ? clear_bhb_loop+0x40/0x90 [ 179.637014][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.637038][ T6611] RIP: 0033:0x7fcebb462407 [ 179.637058][ T6611] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 179.637078][ T6611] RSP: 002b:00007ffcce03ecd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 179.637102][ T6611] RAX: ffffffffffffffda RBX: 00007fcebb374880 RCX: 00007fcebb462407 [ 179.637119][ T6611] RDX: 0000000000000000 RSI: 00007ffcce040f1c RDI: ffffffffffffff9c [ 179.637135][ T6611] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 179.637149][ T6611] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 179.637163][ T6611] R13: 00007ffcce03ef20 R14: 00007fcebbbf8000 R15: 000055ab07b364d8 [ 179.637189][ T6611] [ 179.637197][ T6611] [ 179.637203][ T6611] The buggy address belongs to the physical page: [ 179.637226][ T6611] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033d3b0c0 pfn:0x33d38 [ 179.637248][ T6611] flags: 0x80000000000000(node=0|zone=1) [ 179.637280][ T6611] raw: 0080000000000000 ffffea0000e85408 ffff8880b8642dc0 0000000000000000 [ 179.637304][ T6611] raw: ffff888033d3b0c0 0000000000000000 00000000ffffffff 0000000000000000 [ 179.637317][ T6611] page dumped because: kasan: bad access detected [ 179.637332][ T6611] page_owner tracks the page as freed [ 179.637340][ T6611] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5786, tgid 5786 (kworker/0:7), ts 178114503169, free_ts 179630439165 [ 179.637374][ T6611] post_alloc_hook+0x1f9/0x250 [ 179.637398][ T6611] get_page_from_freelist+0x265c/0x26e0 [ 179.637427][ T6611] __alloc_frozen_pages_noprof+0x18d/0x380 [ 179.637456][ T6611] alloc_pages_mpol+0xd1/0x380 [ 179.637482][ T6611] ___kmalloc_large_node+0x4e/0x120 [ 179.637507][ T6611] __kmalloc_large_noprof+0x1a/0x90 [ 179.637531][ T6611] em28xx_v4l2_init+0xe0/0x3320 [ 179.637570][ T6611] em28xx_init_extension+0x120/0x1c0 [ 179.637597][ T6611] process_one_work+0x98b/0x1630 [ 179.637626][ T6611] worker_thread+0xb49/0x1140 [ 179.637656][ T6611] kthread+0x388/0x470 [ 179.637678][ T6611] ret_from_fork+0x514/0xb70 [ 179.637701][ T6611] ret_from_fork_asm+0x1a/0x30 [ 179.637728][ T6611] page last free pid 5786 tgid 5786 stack trace: [ 179.637741][ T6611] __free_frozen_pages+0x10af/0x1190 [ 179.637772][ T6611] em28xx_v4l2_init+0x18e9/0x3320 [ 179.637801][ T6611] em28xx_init_extension+0x120/0x1c0 [ 179.637826][ T6611] process_one_work+0x98b/0x1630 [ 179.637853][ T6611] worker_thread+0xb49/0x1140 [ 179.637887][ T6611] kthread+0x388/0x470 [ 179.637909][ T6611] ret_from_fork+0x514/0xb70 [ 179.637931][ T6611] ret_from_fork_asm+0x1a/0x30 [ 179.637957][ T6611] [ 179.637962][ T6611] Memory state around the buggy address: [ 179.637974][ T6611] ffff888033d38880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 179.637990][ T6611] ffff888033d38900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 179.638006][ T6611] >ffff888033d38980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 179.638018][ T6611] ^ [ 179.638031][ T6611] ffff888033d38a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 179.638046][ T6611] ffff888033d38a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 179.638058][ T6611] ================================================================== [ 179.638247][ T6611] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 179.638269][ T6611] CPU: 1 UID: 0 PID: 6611 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 179.638300][ T6611] Tainted: [L]=SOFTLOCKUP [ 179.638309][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.638324][ T6611] Call Trace: [ 179.638333][ T6611] [ 179.638342][ T6611] vpanic+0x56c/0xa60 [ 179.638378][ T6611] ? __pfx_vpanic+0x10/0x10 [ 179.638408][ T6611] ? __pfx___schedule+0x10/0x10 [ 179.638441][ T6611] panic+0xc5/0xd0 [ 179.638472][ T6611] ? __pfx_panic+0x10/0x10 [ 179.638514][ T6611] ? preempt_schedule_thunk+0x16/0x40 [ 179.638560][ T6611] ? v4l2_open+0x398/0x3a0 [ 179.638587][ T6611] check_panic_on_warn+0x89/0xb0 [ 179.638614][ T6611] ? v4l2_open+0x398/0x3a0 [ 179.638640][ T6611] end_report+0x73/0x170 [ 179.638668][ T6611] ? v4l2_open+0x398/0x3a0 [ 179.638694][ T6611] kasan_report+0x128/0x150 [ 179.638724][ T6611] ? v4l2_open+0x398/0x3a0 [ 179.638756][ T6611] v4l2_open+0x398/0x3a0 [ 179.638786][ T6611] chrdev_open+0x4d0/0x5f0 [ 179.638810][ T6611] ? __pfx_chrdev_open+0x10/0x10 [ 179.638831][ T6611] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 179.638867][ T6611] ? __pfx_chrdev_open+0x10/0x10 [ 179.638887][ T6611] do_dentry_open+0x83d/0x13e0 [ 179.638918][ T6611] vfs_open+0x3b/0x350 [ 179.638939][ T6611] ? path_openat+0x2ed3/0x3960 [ 179.638971][ T6611] path_openat+0x2eea/0x3960 [ 179.639018][ T6611] ? __pfx_path_openat+0x10/0x10 [ 179.639056][ T6611] ? kasan_save_track+0x4f/0x80 [ 179.639080][ T6611] ? kasan_save_track+0x3e/0x80 [ 179.639104][ T6611] ? __kasan_slab_alloc+0x6c/0x80 [ 179.639133][ T6611] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.639160][ T6611] do_file_open+0x23e/0x4a0 [ 179.639190][ T6611] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 179.639225][ T6611] ? __pfx_do_file_open+0x10/0x10 [ 179.639254][ T6611] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 179.639293][ T6611] ? alloc_fd+0x679/0x6f0 [ 179.639322][ T6611] do_sys_openat2+0x115/0x200 [ 179.639348][ T6611] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.639375][ T6611] ? exc_page_fault+0x6a/0xc0 [ 179.639413][ T6611] ? do_user_addr_fault+0xc6f/0x1340 [ 179.639440][ T6611] __x64_sys_openat+0x138/0x170 [ 179.639466][ T6611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.639488][ T6611] do_syscall_64+0x174/0x580 [ 179.639520][ T6611] ? trace_irq_disable+0x3b/0x140 [ 179.639552][ T6611] ? clear_bhb_loop+0x40/0x90 [ 179.639577][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.639600][ T6611] RIP: 0033:0x7fcebb462407 [ 179.639619][ T6611] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 179.639639][ T6611] RSP: 002b:00007ffcce03ecd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 179.639662][ T6611] RAX: ffffffffffffffda RBX: 00007fcebb374880 RCX: 00007fcebb462407 [ 179.639678][ T6611] RDX: 0000000000000000 RSI: 00007ffcce040f1c RDI: ffffffffffffff9c [ 179.639693][ T6611] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 179.639705][ T6611] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 179.639718][ T6611] R13: 00007ffcce03ef20 R14: 00007fcebbbf8000 R15: 000055ab07b364d8 [ 179.639743][ T6611] [ 179.640345][ T6611] Kernel Offset: disabled