last executing test programs: 8.981526039s ago: executing program 0 (id=1936): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r0, &(0x7f0000000600), 0x0, 0xc0) 8.833641048s ago: executing program 0 (id=1938): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f00000000c0), 0x10fd02, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\a\x00'/11, @ANYRES32, @ANYBLOB="aa422343048dd7ac99d1fb00000000000006012e9b32d630ad94bfc3f7f8069441ff304672c86a0000000000000026cc94db82fa74127d69f6c91097e7ac9d2a8c9f1fd9043177eeb241a1a738e59cc12f3f27d5120cd94479b6000000000000", @ANYRES64=0x0], 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) 6.957146828s ago: executing program 0 (id=1946): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff034}, {0x28, 0x80, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r2, 0x0, 0x0, 0x40840) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) 5.884121994s ago: executing program 2 (id=1948): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r0, &(0x7f0000000600), 0x0, 0xc0) 5.757700313s ago: executing program 0 (id=1949): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x18, 0x3f}}], 0x1, 0xc0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0xe}, @private1, @dev={0xfe, 0x80, '\x00', 0x24}, 0xb, 0x0, 0x0, 0x500, 0xff, 0x4d30356}) r5 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="4f5f072a0db0e67d613178efcfe3a6054a0ca7f8e4cef47737bbc530093b9307b2828900b1ed8131e71b43e3909b35fa0a1964d2e1739c46bbb5732e95ad8ae39b90c89cb5cf53c25512e3668ede45982f290503f507caad3499871769e7e2827220fa5158dc339619beea2c86a2a170d62d9f5820dcbf21cecf5e9a51ca518d13237fa5d734cd6e23dd8d7cdbf2477f8cb68f0fc0417a10d062b49bebb3a9bf0293987ba25e78a53eb71c450e7dd594ae8635a37ffd177a864bcf517989c49ea7e621e4c67099b64f91a475dcc1de7aae52dfaf5a", 0xd5}], 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) 5.66729044s ago: executing program 2 (id=1950): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022050000008348b603de8a9b97bdcc64a1bf9986018ad5722926fb1f24f6bbfdf0b82e4f421aa839b060a49d5e4a4b8d11cdabd9d6443e257864096f72e9c9247f35e10338ed7605d8c3766f8c7d7c19bdb42bc84bbc36698dbd42a4a03388d8159f0b4196a098bc2e58a3443c3c038a895ac69f1f6478440b631e4f055eb561f99c4981d060cc9878db2bda9cc2f78edc294e98e8d55f3d14638f6f12508815fc7dda32f86044cc1f5c662d44a0d24d3b97d0f4ef28480750e91cf8068d55a0ba4bd0c895ccc6a310"], 0x0}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x2, 0x1, 0x8, 0x3, 0xc}, 0x20) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xe, 0x800000000004, @tid=r2}, &(0x7f0000000000)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r2, 0x12) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000000)=0x573b, 0x4) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000046c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0}}], 0x2, 0x40480c0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340), 0x111, 0xa}}, 0x20) writev(r3, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)}], 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f00000003c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x3, 0x0, 0xfbfbfbfb}) 5.570278526s ago: executing program 1 (id=1951): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0", 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0) connect(r1, &(0x7f0000000140)=@in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x80) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000008"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4) r5 = syz_io_uring_setup(0xd8, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x8, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x9901, 0x1, 0x3, 0x1}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0xfffc, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xf, 0x8, [@multicast2, @remote, @remote]}, @ssrr={0x89, 0xf, 0xd7, [@dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 5.547041126s ago: executing program 0 (id=1952): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x6, 0x8f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x8, 0x50, 0x42, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "3092bc6f8eb9"}, {0x5, 0x24, 0x0, 0x1a21}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x10, 0x84, 0x1b}, {0x6, 0x24, 0x1a, 0x7f, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0xe, 0x7f, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x800, 0xed}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xc1}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x7, 0x4, 0x24}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xff, 0x35, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0xc, 0x80}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xd, 0x4, 0xb3, 0x10, 0x9}, 0x88, &(0x7f0000000240)={0x5, 0xf, 0x88, 0x5, [@wireless={0xb, 0x10, 0x1, 0x0, 0x19, 0x67, 0x5, 0x542, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x7f, 0x7b, 0x6, 0x6}, @generic={0x4f, 0x10, 0xa, "79b67f86aab5b7dffb78b24cabf6b2d197eb2dd50a29af049d2e3972ccabea6dda26987214e55b057f8b708f8821c16d3360302cd5144f7a66f603eae31397c80ca1d0606b375a3e3c3e20f0"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x15, 0xc0, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d9fd3e0fb96e8895531dc9d4c51ede9b"}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x45dc19d9792aae6d}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2c01}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000140)={0x24, 0x5, 0xfffffff9}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000340)={0x10, &(0x7f0000000200)={0x0, 0x1, 0x1, "a3"}, 0x0, 0x0}) 4.922789452s ago: executing program 3 (id=1955): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="0f738a0b289ff28b4d63eb30ed4c05dbb4e5e801bf186542497715c2329c1283335dd90c90e7aeb32c86f77703febf38d357bbb8d2a1b3ff396b04f1098e230ce49905a694cd59f0d41457a595b7da79168dd0658959b1f93fecfcea3671e75c0d8d0689d0b7b4b324e963", 0x6b}, {&(0x7f0000000300)="228803ed8f13ffa197af636ab94187cb0a0aa42fb8dc4a3a6c4031a0b2cc31ff1e6de01501cd127a0a535cd8811d9b6c5d9039240e242d031b1c762be12d236005c0979c363ad9caac68e5eb83ae1b9102e32988143ebcca47cdc74bbdc43dc5e64a540d6f848597050f90c3dbb0aeb462dccbc4c76ed791f3bdfeef87d71a72d1911ecd71c1d8bef03258a5307e8fd4947522ecc2a51ac205676b769a", 0x9d}, {&(0x7f00000004c0)="988002295229cee23df3a1edc0c8c3a081e9fd5424f61c9af385b9c12ff0f85a9a856c930bab2b18f66ad62b8a97621b10c001ac93a0bab6a32590b2e87d823413a1501fb1a46739cefaa2d07c2fd4187122465af40ec6350c910baba96cd1bb6772f9c7bc47521886b7351abb519c64359aa7149a9c2b6140ed4e7185cdc6d2c6779994338a5e28b93ff7834edbcb7546fb4b129b53bcb729eebbc117741110bb00cfdd2d2b51182b5ef7ca1a01d19bd1da511752f1c5009bf1c22e0cb3763534b8e23cd6da8fc86d4103a21fb908b9520a52ae4fa9646c4df2f3b9f3125c413627c987", 0xe4}, {&(0x7f0000000080)="e05a958f969ace36437f6690ac0048", 0xf}, {&(0x7f0000000680)="f48cfbae0c771673960bcb31fe98cc7b6bfe6620189ec4ea19f19d37528c7bbea8b0bb18b8e0c906277e21d923d7417717dbb5e5abd110b5f708361e8ee0fee79492a894d15ddfb4c26fbe912bc8e9d9a6355c3df53dfe9f2215db2bda445ac41c5e8d01697cd9f426072f5cb3262b785509206ddb09e33e9bcfd2d44d2e01cbb23d2d92be4f5c9c09f263cd6c3ddf60795952628e5ceadfab119f3ac858b8188d534e28e492a6ef5c881b7825ad6db168dab8ac4ee6f96dc98ed566fde205cb50485bbb999ff424d5c8e12a52935db0ff5c7b70", 0xd4}, {&(0x7f0000000400)}, {&(0x7f0000000780)="3264aceecd51451dd0fb3cdad57ea24c6705f9bc814d66091e56c50afdc3f17b2b26794e1ab0321738116636a469ab2eda7eff66256ba1dec7c4f4da5f1c9db686048723e105f02c42d0e5c36f8b30cbc344a20227b3bb5ecf7efdfc04c836b77c293f5ab9ffbc1384247d0a4e6b66914b1cb91568bc016a04ac58fdd58fcbea637e56b3d34bfe70e149366746f8d96d1b257849cd3b002230913ac6fe217246bca838194d5c7b6be3e9e89e3aba", 0xae}, {&(0x7f0000000840)="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", 0xfcc}], 0x8, &(0x7f0000000280)=[@timestamping={{0x10, 0x1, 0x25, 0x96}}, @txtime={{0x14, 0x1, 0x3d, 0xfff}}], 0x24}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001840)="c73e2d8ed1991543dbe37cc5d3358791c2f121249ab45f6ada03910a9d9ab6ca5a10bf17754133c5676da0495848b1ed5595f9d77550a0f7f45b5f030ddde47d2bbe72e594e16d32f3f984678bedcf912ab0cc5bb89281d6f36ed9ecd325951e73faef45b5d08909d97b83cfafb2dde99b0a53d8bd9485a486a26656e3fffaab1e0eaa2a033b96b9bca174ae93fc8b562cfc360992b22ad1e31554d2413e6947c73726aeb6a2b8dac300007f4b1fed7ca6af29396f4569dbec1356e2c91fe915cb7d14c8c72a9add34e16bef", 0xcc}, {&(0x7f00000005c0)="2c30733b97", 0x5}, {&(0x7f0000001940)}, {&(0x7f0000000600)="86e0ce259590b1a3b7f199f1562a3d5b14169461", 0x14}, {&(0x7f0000001a40)="274880f359e39efc29010e41bfa54de983a158b4811d26c077cae4ce7edda358feb7912cea99f20ca6cffd0ff87adbf9d4186a9e56bf95507b9a035c99ef06b7338c00c5e8446983375960c2b09c95caf2191b001f5526de579f9972ac", 0x5d}, {&(0x7f0000001ac0)="858405a21d25dd15362adac6758f15e97e2631f4965af7abe59fc6eeefe578f14b4fe74833422e37110583537c5ba624bf130323d6e324bd2bc73bf5f1d7a929f297f2eb7039c1b7e100d35a11f9fbf919957e4142edf6c6474a8a3fa75777ecd80bea0c89c7a17a133a82289d3d559fc4b6d84c923a211ba6a0fe47a2e515da5dd117e6a6b8d7351f9ab647fc162885cb2b0c26590946c79332f9dabe6b4b613aad916c1dc005dd1b44b021e83926e1e2ccce235aafc79df7d4201ceceaa8897f3c5efa2930b1234ccef6e104876f5683d09aa780bddb3075ed973435a7307eb2", 0xe1}, {&(0x7f0000001bc0)="9ed60ab53df841b286d35e4c200f78131cca0d896d4c25ded67864bf64d04efd6b0ec9cde384cf0cad44b3feb66618902c0dc03555ba20998b4ffd3d625b3fd94d277f3c3d5f3e32174085f7e4e3215a72b5293c63d822f6998f351f091549441acf8ff45150e3da9760ae", 0x6b}, {0x0}], 0x8, &(0x7f0000001d80)=[@txtime={{0x14, 0x1, 0x3d, 0x9c4}}], 0x14}}], 0x2, 0x0) shutdown(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000001f00)={0x7, 'batadv0\x00', {0x2}, 0x6}) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f00000003c0)='./bus\x00', 0x0) r4 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x58}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5e}}, 0x44) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e80)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in6=@loopback, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x20, 0x0, 0x7, 0x0, r5}, {0x0, 0x8, 0xc1, 0x5, 0x9, 0xff, 0x9, 0x2000000000000}, {0x401, 0xfff, 0x7d8, 0x6ef}, 0x4, 0x6e6bbc, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d3, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0xf50ac62d97a35048, 0x1, 0x40, 0x3, 0x200, 0x5}}, 0xe8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xaece, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffa}]}) close_range(r10, 0xffffffffffffffff, 0x0) 4.444721477s ago: executing program 3 (id=1956): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f00000000c0), 0x10fd02, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\a\x00'/11, @ANYRES32, @ANYBLOB="aa422343048dd7ac99d1fb00000000000006012e9b32d630ad94bfc3f7f8069441ff304672c86a0000000000000026cc94db82fa74127d69f6c91097e7ac9d2a8c9f1fd9043177eeb241a1a738e59cc12f3f27d5120cd94479b6000000000000", @ANYRES64=0x0], 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) 3.799112668s ago: executing program 4 (id=1957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0xfdef}], 0x1) 3.769301961s ago: executing program 4 (id=1958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000100001fffffff500000000000000000a94000000060a0b0400000000000000000200000068000480540001800a0001006d617463680000004400028008000240000000002c000300ebae5513823952fa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce23a8334e8278ad0a0001006c696d6974000000100001800b00010064796e73657400000900010073797a30000000000900020073797a32"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 3.750792775s ago: executing program 2 (id=1959): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff034}, {0x28, 0x80, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r2, 0x0, 0x0, 0x40840) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) 3.638977701s ago: executing program 4 (id=1960): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x18, 0x3f}}], 0x1, 0xc0) 3.629880021s ago: executing program 4 (id=1961): r0 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x1f, 0xcd, 0x1b, 0x8, 0x10cf, 0x5503, 0x75af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x9, 0x10, 0x3, [{{0x9, 0x4, 0x18, 0x2, 0x2, 0xb4, 0x1d, 0x3f, 0x1, [], [{{0x9, 0x5, 0xe, 0x3, 0x5ff, 0x2, 0x7, 0x1}}, {{0x9, 0x5, 0x85, 0x3, 0x20, 0xff, 0xa, 0x40}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0xfe, 0x6, &(0x7f0000000000)={0x18, "96ab8cb18a5722d2da3a03f39b5eaee25558f362e700"}}) r3 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x8b) fchdir(r5) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) ioctl$VIDIOC_G_EDID(r3, 0xc0245628, &(0x7f0000000100)={0x3, 0x0, 0x2, '\x00', &(0x7f0000001440)}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0xffee, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x64, 0x2, [@TCA_FW_ACT={0x60, 0x4, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb74}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1870, 0x7fff, 0x20000000, 0x58, 0x400}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x800) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 2.68987305s ago: executing program 2 (id=1962): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x18, 0x3f}}], 0x1, 0xc0) listen(r0, 0xfffffffd) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0xe}, @private1, @dev={0xfe, 0x80, '\x00', 0x24}, 0xb, 0x0, 0x0, 0x500, 0xff, 0x4d30356}) r5 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="4f5f072a0db0e67d613178efcfe3a6054a0ca7f8e4cef47737bbc530093b9307b2828900b1ed8131e71b43e3909b35fa0a1964d2e1739c46bbb5732e95ad8ae39b90c89cb5cf53c25512e3668ede45982f290503f507caad3499871769e7e2827220fa5158dc339619beea2c86a2a170d62d9f5820dcbf21cecf5e9a51ca518d13237fa5d734cd6e23dd8d7cdbf2477f8cb68f0fc0417a10d062b49bebb3a9bf0293987ba25e78a53eb71c450e7dd594ae8635a37ffd177a864bcf517989c49ea7e621e4c67099b64f91a475dcc1de7aae52dfaf5a", 0xd5}], 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) 2.656987525s ago: executing program 3 (id=1963): r0 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200002}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0xe8030000}}) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x200000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)={0x60000005}) syz_usb_connect(0x5, 0x3f, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000300f3508da040d391a990102030109022d0001000000440904ef0003846a92000905021010000204070905640208000803080905030010"], 0x0) 2.514452533s ago: executing program 2 (id=1964): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x7ffffff, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 2.432795115s ago: executing program 2 (id=1965): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6a040000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005f3aeb66c8f25f55307fe0ef50ecc10c4e4f2b7bdd2a9dbb4883e681dd18c75d2577a82cb771bed59309009eedbfb0840248591116f0c358b72a25745b52c2432c964b6f5527301b40f6215d4ac6ab59cba788dfc875329b8b32c997d78b555dd36ce4fcdc4acfba"], 0x20}}, 0x30000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r4 = epoll_create(0x50000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x80000000}) ioctl$TCXONC(r3, 0x540a, 0x2) syz_open_dev$dri(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x8000002) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x7, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000180)=""/133) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x7, &(0x7f0000000480)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r7, 0x80045400, &(0x7f00000000c0)) 2.367972549s ago: executing program 1 (id=1966): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="0f738a0b289ff28b4d63eb30ed4c05dbb4e5e801bf186542497715c2329c1283335dd90c90e7aeb32c86f77703febf38d357bbb8d2a1b3ff396b04f1098e230ce49905a694cd59f0d41457a595b7da79168dd0658959b1f93fecfcea3671e75c0d8d0689d0b7b4b324e963", 0x6b}, {&(0x7f0000000300)="228803ed8f13ffa197af636ab94187cb0a0aa42fb8dc4a3a6c4031a0b2cc31ff1e6de01501cd127a0a535cd8811d9b6c5d9039240e242d031b1c762be12d236005c0979c363ad9caac68e5eb83ae1b9102e32988143ebcca47cdc74bbdc43dc5e64a540d6f848597050f90c3dbb0aeb462dccbc4c76ed791f3bdfeef87d71a72d1911ecd71c1d8bef03258a5307e8fd4947522ecc2a51ac205676b769a", 0x9d}, {&(0x7f00000004c0)="988002295229cee23df3a1edc0c8c3a081e9fd5424f61c9af385b9c12ff0f85a9a856c930bab2b18f66ad62b8a97621b10c001ac93a0bab6a32590b2e87d823413a1501fb1a46739cefaa2d07c2fd4187122465af40ec6350c910baba96cd1bb6772f9c7bc47521886b7351abb519c64359aa7149a9c2b6140ed4e7185cdc6d2c6779994338a5e28b93ff7834edbcb7546fb4b129b53bcb729eebbc117741110bb00cfdd2d2b51182b5ef7ca1a01d19bd1da511752f1c5009bf1c22e0cb3763534b8e23cd6da8fc86d4103a21fb908b9520a52ae4fa9646c4df2f3b9f3125c413627c987", 0xe4}, {&(0x7f0000000080)="e05a958f969ace36437f6690ac0048", 0xf}, {&(0x7f0000000680)="f48cfbae0c771673960bcb31fe98cc7b6bfe6620189ec4ea19f19d37528c7bbea8b0bb18b8e0c906277e21d923d7417717dbb5e5abd110b5f708361e8ee0fee79492a894d15ddfb4c26fbe912bc8e9d9a6355c3df53dfe9f2215db2bda445ac41c5e8d01697cd9f426072f5cb3262b785509206ddb09e33e9bcfd2d44d2e01cbb23d2d92be4f5c9c09f263cd6c3ddf60795952628e5ceadfab119f3ac858b8188d534e28e492a6ef5c881b7825ad6db168dab8ac4ee6f96dc98ed566fde205cb50485bbb999ff424d5c8e12a52935db0ff5c7b70", 0xd4}, {&(0x7f0000000400)}, {&(0x7f0000000780)="3264aceecd51451dd0fb3cdad57ea24c6705f9bc814d66091e56c50afdc3f17b2b26794e1ab0321738116636a469ab2eda7eff66256ba1dec7c4f4da5f1c9db686048723e105f02c42d0e5c36f8b30cbc344a20227b3bb5ecf7efdfc04c836b77c293f5ab9ffbc1384247d0a4e6b66914b1cb91568bc016a04ac58fdd58fcbea637e56b3d34bfe70e149366746f8d96d1b257849cd3b002230913ac6fe217246bca838194d5c7b6be3e9e89e3aba", 0xae}, {&(0x7f0000000840)="03fdb46c8af49cdb7396590017562e55b8acdaae1e43e9ebc41ffed131dcdaf5fa9ab736219ee5d5753217318f62ee750a862937847e085f9ec808a46a6f595a829f910f608e0ca131c3439d093280c5c2780f21c4be3be7cf9d391a8960a3e031fc79693850ab3de89901c4ee6f4083ba91757b2afd2122d7368e10244212544ffdbac6318ce7fce4e276eb9b71e14d695ffe4eb9fd4a729922d48f228c5c47b1cc71fc883a4d69380de46392a00bf79d88fcc64311486039fad6f02acf651330506ad30f08dd81602e6148e93b3965994abae11bf92efcc2fbb49ade812fb7cfbc36134ca551d370a52147f10978a8e37d31615b8f4f4b1424e1b65ba98ebee155a6cab636331731cfe10b044876b377e60280bcd34f5874128a7dd5df3859a84b0a8bae7abe598043a03eab1977f3160f95c0d4035454272e593e64b0b76ad72ef5e9e14ff3dfed1c81da13b64805f6c3cb8ee12100d05f60ff47b40cf8669fd5a68fdba4cee5b06c1633b7a881adcffadb13abee0cd59ac71e110415d06340a42200c996898ee9447934e20f88a20504c8b93c38ef75fb018518bf5febda44b52f2f8ef2c0709640142966d1bec0f4a099c242a50a48a612e36305df0811f05a0a492d4c309f2643f79ae2a5fb8b8c7f6a1b052741efe796d2caf41716b864ff6f2682f9c1f3f19d5bd1379507333ff39d3b0478e722b93315ac77bdccbd4be5a5e41cba5fcd481128aaec1226b7fe3c0fa587cabb58953b1e4c729594926d8d4ebe8126d7fbb072e71949bf43b6af5b1e558a1f5b0890e789991719349c6c5fddd1c1f733e58eee2d7ab0aa6c5fa3f07c51654d32ddc78c573b7b61304b02aa2f56827dfc7366b861179ee262b1137a83c4d3c5909305af3e480f919e7b488630fdb190c48108b2f8ae73f28adae969dba67fd2f52756f2e8e4a43c690a429714284749da20383e9e8f4a3f24ad5353d6f4edc9d98f0ecf5a9d8a0ab1efbc6d09d112ede3f3e2a8d7d2d34563c2a266d534474f6e07d6b4541bdcf5fa4a8946459ca8ed2325d25e826e3cd6647f17634d2924cd6c5a15c52c7d5d94ddb9ffb0ef267551e21f309e96a84d83b46a4547ace8f6651a98c81f01527a52255608680f1fad654b1b86f6840788acfa2edd286e69b8af239af7650cc69b78771373e56f6bfbdbf3cbaeb12e7ba290c1181a9ec138601042480970a488243f694eb449bb3288986564ada8985b84f114a731042aeb29d1d57186f13536f7d63b0afc1d05323e911e10d7a6eeea628685b58bdd46050006e4ebb061f05c5f2a5c6208de53bdf673b1e244d7cdfc9bec415fcd0d25f549481a39813886539b43a6c483f9e3b298bcae89fc240211460cb780e99881b5c01ec37dba01b9dbe7a3a8a366c5679fcbd0dd584b50e9372b6497004e51ff82d497621f26587641ce27b0a9344793db1be43d029a2aef924e1b55d159987232cc809a893113019b875694a5c55091d935260441dcbfb9e3f875deb1d672841546ee5432b259c0791f9e645f2e4d4ef16379a314375236445ba3abb706102173e4e2fdacffc45ea6396f4d0cfdc082ddf3bfde8a59321a909a4af6678ac4ee43fc43f0faa0cbf50bf01984823480c3ac1200cd86e46d0b7ef63a8deb661b738f519a9aaff8613f05039623f21568af07fc33ec73d9dddca106cc8900528530b80a2951786f9b13485dcc38440afd63a87245bb81f1e24f2535fef4b93e07bdb678294fb4393b6d12a3e48700061a95334684a0cc30b3b02dcd727d920d426ce671c0f7334a33348e73946fda97627947ccafb89b5ec5e7c180f3d503fc0b3b80a5f4744bd1f5c77a9c000b123e636a851faf747d3109e6d4e1ea18360b9b85d828a32ddaf530da95d9f2c067f81c0e2c036a14269034c7fc4f841d7bc27b7672becfd4b8da63d094d9385caa67f63796c5c6022d4a956cac29edda9354a9a879430e58a6a95a8594e2c0a1fed09ae49ca8485f77f025d37db7eb4761aaa3ea7c5c369bc4ebf134a6f66e4d00d1d5866e6b4465486027dce296c4ae3e90d6a00f183e7bf6e37e6600e06f1a3e490eb8b8516f8dfe2007f7983a72746a4835e98d7947b74172271946fc7108f1d74339fc489739275a2725cf98299a12de4d1f95392b70502d200f0f5729d4867161ff625a22a33b0b1730d07ab4f43de8bd57c38fe6e839d4e418830527b758fcdfbed43d547e7170d4070e865481f5abc0182aa3e32d2e7eebe4ce788a8e7ffb723a50a805fc782adf6805f971f20eb9f79ee3c3668a3a7e07759524002d52c255579157fbd16fe2c9f61fb02f0ab643da2803175f5034414c31f402bd939fe3e583dd9f484f3566633e7d09c071777154b02a8bfd7b11d0b19ef21b1b4a75aff8944ef6ff4ad21722369049a2255311f2486b5169f1650cbecd1651e3d1acfe13b494cff7c8d428fd0e014bd7d7a5033851b5fc426a2eca1512e8b1bff4a8eb0ce1fc8e46cd9baf7ea51081895d6e0d4bd38b96e2463288992d2866bc1baf7a8d551bc9259e4a2d0ac216dbe12a270ba219098bab9b13d71f608d9cb3f9fe3a4c65ca084b68da1b24094e81fae1f55fba9536fd8d08b8addee7aaf30e55871040f35faf43b05de12f18b140f51d9cc16759ac11a03946ac5f6ddb9a694b8a71323f6b927b02e80066c9f688f904295efed6fd86cb47a364aa449320bc41481aad5f48b38bdd823d282113df1bf49e3a69beab81cc23456541f8186fc92869937f81b3959f240c4598aeee7638970df1256b521dcab72536e8b70fc9a64c8d4949890e3253973cfa796af6042b772656a78cf8a2289e722fad91f1c1ecd6a73fe7d5fafd5cb95b539d92cad3f9219e4cd5893d32290bb98ce4249c7ece8a2e4494ba3ed0fc2ba659657bc4ed15fbac861b9d6e59451b82c8930ba386f6207335c45b6b7919aabb1bcfb79bff101e413423d9de11c08ddb01356a05c08aebb93999b6ddcd37b462e0d2ae80d48d2033d52fd62c8a2093de7ef13e70db157c8ffdc0cab3cfb5dc445edd30e8908ea63347c9f5cf517bb5d6cc19eace1d3f5201081dd31351053db8786bb8cae8a1b2ec0833d8032ce0ba5b6e21f6999e6e9af01175ba67b17d454e24cd47f28962d8e1613262451a1fdaa313ba2dd2efa38b5a6349b7c24eef3a9aef2c08673ed35d9067724da16d8288d8892c6d6db497ca5a0cd9842b40f15d04d56e2a9bb2336447fbef1261f8786d8a0cf28fade51e6ed097e0237f3d7dfb23dcc2746e3ea4229c218dff0ba7c1613765267bcda7bfc1f9bf3ab06c65221a4380d795567a5d9b24ac877957ade34774d02db7695af4b9094e151f6725df5b3d59a745ec8f1df9f9040c244dbf14693cfc0dfb143cf03c9bc02a4aa052296ac1e840071a52053c883117ca555f6ac8b463be6acd9b898de080ac94fe1bba55d1fad6686bc8fe35b2bb9e54d0a15abdea965f16abd83d29c22dfc928846dc3e9c8b86d3378ebb0a5c586a21cb07eac4f2ad92a9e15bd4ec4a14a19df5c11c08db0adcb1b6ccf3cce9583a463e8e96939f4433bf2823801c773ec7ba002c4b04c501aa3f4c88a83605c4ca8406f86337c345ce869a65db9df8c77ca3a8011c84b223bbe105e67c2c60f603334149f5a2310b93d23e148b316be5aa9b315f3efe5bb0d01d7ff81fe517a04b32529404944af111c856435104da0b828276b3673e9b1163f78b627b9305dfd75352903199e8217d43c4ba194c3d8dbf4af449ebbbc3a177d1e929379cc2b75d99a3e56dab3255f3e38d107379724c8d82446e0a25e3831b596adeb9cbc104598aa6bea895570665dc28f6b4b76e4b727b220855bd9dbc44dfeb38f970fef104281da8dababc8dc9f7ae4c0b4b071d221ef180e42e22cfde7a3970020833140970ef7076f2d5f4f4abcef61ff4d5062b4e9844cb4e0b0bfdfea8cad56d25ab16cbe6e1e7a772e7f743ddba2298477a7e3235833eb15b908cc10ffd3ebcfe2a2ac2bdc8dbbf986d508dd1a971d790a9aec58231848f915e14fa1111711b99dd324b09b3e81787881e3dd116c37af2f125777344f1086ab91cad7b89a899ffca1de37aef21f24b8ea011ddaad14b2be6035790cf8c5475aa96eb8168ddb66dca8dcaf2b6aa2220e91c4479a8eb315bfd67caffc600b12b09ea4a5eeaab9726fac5e43027b57ef6113b84b35f97c31ad723c1b0851ae6eefe4c516b46efadbc7a6fbf3b367191b9abb8591cdb759530293ba47b46129ba2fd95e44ab489937d1fe7777e5b499891e03aab16c2fde288dfa8088ca9c647edab5d5f73cd2bd1b0735afceff202b5e56b21a9d6e5f3979a213d9e11c21f8332f9ba2ed199c57ef1b29c493a1f47315fed3a6e1de4e988d0a0c81f83d9d0b7c9751e065ac5765b30caf0ec5418c423d4c51e3d1e912de9596198337854b8ad1831c76bc57a4dc83ebd752b70d67bb44e3940b6135626a0617c6dc5e49673d4150670a6f75ad632422e1a44a18571be60097dd4000c9a489b1866be2a30b406d3f1079c3d988e03d2a72fba5f035b4aa33dd2418db0ee86a3a87c3c989766518f5a09c6e72ff29da2f22a7551e21e02086c41100c85922d3b7bc5640826f13533317da1835477384c8ec2df8ae8f245f196e122f4be2dfcdf0aa12ce688812c1cad3aa589d08ebfe6e16a4ec7353f1d4e528785552885991c22ef7c0445af9f722a4b0de2d055f2889e4a5a46ec7cdb11fcf1697adce4cc9b13d08dca1e4e69013d6773de1fec1d9dda11b890f9cca5acbe20edfd79b94b615b1989301f67d02ed2c3c607f4fe5294702c7e145ffb2b950f74a526e8129443bcefabafaf88d645dafb4fb3511225cb8b3e2b8ec0560c416694414f693167dcf0f49c762515031d75048ee672273326ce646f7212483c8ef22fd8b2011281f4f71fa3fe500cc603bfeb4dcb3549ee50c08bf72bb98ab1df306be670b87b1e84a549bb45de3794ad9e58c379e93b00f8c846b71ab349121e5075f64a6e85d335b458c2a58a9a1d4edce03f0da05553f7a5efd2549c06783d5731ee042193a8960aa21bd3e11b2d1c9aa4f3cc45d641148ce12bb376d7694b2b8367e85765861bc443c5a159881fd8a6e03c1e047062ec838b4fe913b7e04a3be97e36dc0275fd45e39d625741b951091d94bb284a6abfbc58087c33d54c3c507b9aacfb8b9974d20e3e4134e32d25503e463eeb670347df0629cbf6e0e7c4804819349ddae3c593abc1055e772081606dee06c5c46132cddd48b43a48eac83bb22220135c8195bf02dcc32bc0616e565df552ffca503e6a238f7979055aff4375fea4f2d5aa6bbe866f8e9f8d9fb84fd7624147ebbd4c9eeaea41b69d979d2a7358cf1332d7185e8670e8cfb91c0426ecb38fd972577a656eb7c500d53d5b201d6df0fc26f8fb73e18769baed96d3461d181df7bf359ac180f4fef2e323995eaab0785e7211bcdaf0ea51a4ab0a9ac8cc07bb5f90b215dea4cdae939e79b5b9c9d5fa4c004f6c8daf71d76b3fd38d84e1724ec59be8566893aad2a1758f0cd98e73bc40c2668cae395d4d2bd34877875d5d6a02ed1438be2d552abe10f42917bab92323b80217176cd0471a60e2252cf4273921bb77bed74c3cbbd10423dea14e6a68c01126bd4b560e681c0b77bc8c02ba161f66f1f1c13e173cbf575671e2fb83de65940d0d2d16d23f01504b34fb93294f", 0xfcc}], 0x8, &(0x7f0000000280)=[@timestamping={{0x10, 0x1, 0x25, 0x96}}, @txtime={{0x14, 0x1, 0x3d, 0xfff}}], 0x24}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001840)="c73e2d8ed1991543dbe37cc5d3358791c2f121249ab45f6ada03910a9d9ab6ca5a10bf17754133c5676da0495848b1ed5595f9d77550a0f7f45b5f030ddde47d2bbe72e594e16d32f3f984678bedcf912ab0cc5bb89281d6f36ed9ecd325951e73faef45b5d08909d97b83cfafb2dde99b0a53d8bd9485a486a26656e3fffaab1e0eaa2a033b96b9bca174ae93fc8b562cfc360992b22ad1e31554d2413e6947c73726aeb6a2b8dac300007f4b1fed7ca6af29396f4569dbec1356e2c91fe915cb7d14c8c72a9add34e16bef", 0xcc}, {&(0x7f00000005c0)="2c30733b97", 0x5}, {&(0x7f0000001940)}, {&(0x7f0000000600)="86e0ce259590b1a3b7f199f1562a3d5b14169461", 0x14}, {&(0x7f0000001a40)="274880f359e39efc29010e41bfa54de983a158b4811d26c077cae4ce7edda358feb7912cea99f20ca6cffd0ff87adbf9d4186a9e56bf95507b9a035c99ef06b7338c00c5e8446983375960c2b09c95caf2191b001f5526de579f9972ac", 0x5d}, {&(0x7f0000001ac0)="858405a21d25dd15362adac6758f15e97e2631f4965af7abe59fc6eeefe578f14b4fe74833422e37110583537c5ba624bf130323d6e324bd2bc73bf5f1d7a929f297f2eb7039c1b7e100d35a11f9fbf919957e4142edf6c6474a8a3fa75777ecd80bea0c89c7a17a133a82289d3d559fc4b6d84c923a211ba6a0fe47a2e515da5dd117e6a6b8d7351f9ab647fc162885cb2b0c26590946c79332f9dabe6b4b613aad916c1dc005dd1b44b021e83926e1e2ccce235aafc79df7d4201ceceaa8897f3c5efa2930b1234ccef6e104876f5683d09aa780bddb3075ed973435a7307eb2", 0xe1}, {&(0x7f0000001bc0)="9ed60ab53df841b286d35e4c200f78131cca0d896d4c25ded67864bf64d04efd6b0ec9cde384cf0cad44b3feb66618902c0dc03555ba20998b4ffd3d625b3fd94d277f3c3d5f3e32174085f7e4e3215a72b5293c63d822f6998f351f091549441acf8ff45150e3da9760ae", 0x6b}, {0x0}], 0x8, &(0x7f0000001d80)=[@txtime={{0x14, 0x1, 0x3d, 0x9c4}}], 0x14}}], 0x2, 0x0) shutdown(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000001f00)={0x7, 'batadv0\x00', {0x2}, 0x6}) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f00000003c0)='./bus\x00', 0x0) r4 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x58}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5e}}, 0x44) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e80)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in6=@loopback, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x20, 0x0, 0x7, 0x0, r5}, {0x0, 0x8, 0xc1, 0x5, 0x9, 0xff, 0x9, 0x2000000000000}, {0x401, 0xfff, 0x7d8, 0x6ef}, 0x4, 0x6e6bbc, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d3, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0xf50ac62d97a35048, 0x1, 0x40, 0x3, 0x200, 0x5}}, 0xe8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xaece, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffa}]}) close_range(r10, 0xffffffffffffffff, 0x0) 2.203132642s ago: executing program 1 (id=1967): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9800000000010104000072000000000000003c0001802c000180141fb1be8242b1f9e030eddc7bd0db22b945f79ecf"], 0x98}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) 2.12336493s ago: executing program 1 (id=1968): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x60b5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x10, 0x7, {0x7, 0xa, "a18265cc32"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001400)={@local, 0x0, 0x0, 0x1, 0x1, 0xfff, 0x7}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000200)={0x1, 0x31, "f1c6be1f429d096b945511bce9c1875cd819da32dc7bfc7d12c815e8d63436cdf1843f7130388004c3fd6b7a5c46bff8b8"}) close(r5) vmsplice(r4, &(0x7f0000000280)=[{&(0x7f00000001c0)='P', 0x1}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r6) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='./file0\x00', 0x80000006) splice(r3, 0x0, r5, 0x0, 0x7151, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x0, 0x33) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) pread64(r1, &(0x7f00000000c0)=""/58, 0x3a, 0x9) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0xc, 0xff9, &(0x7f0000001840)=""/4089, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.122840664s ago: executing program 4 (id=1969): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="1e", 0x1}], 0x1}, 0x4000001) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\v', @ANYRESDEC=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4000010) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = syz_usb_connect(0x3, 0x8d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xff, 0xec, 0x20, 0x789, 0x160, 0x2cd1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x2, 0xe6, 0xfb, 0x6a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x18}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000030000000000f28c060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee688b5c6", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0x5, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004045}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe0, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r12}, 0x10) 1.30975524s ago: executing program 0 (id=1970): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022050000008348b603de8a9b97bdcc64a1bf9986018ad5722926fb1f24f6bbfdf0b82e4f421aa839b060a49d5e4a4b8d11cdabd9d6443e257864096f72e9c9247f35e10338ed7605d8c3766f8c7d7c19bdb42bc84bbc36698dbd42a4a03388d8159f0b4196a098bc2e58a3443c3c038a895ac69f1f6478440b631e4f055eb561f99c4981d060cc9878db2bda9cc2f78edc294e98e8d55f3d14638f6f12508815fc7dda32f86044cc1f5c662d44a0d24d3b97d0f4ef28480750e91cf8068d55a0ba4bd0c895ccc6a310"], 0x0}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x2, 0x1, 0x8, 0x3, 0xc}, 0x20) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xe, 0x800000000004, @tid=r2}, &(0x7f0000000000)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r2, 0x12) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000000)=0x573b, 0x4) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000046c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0}}], 0x2, 0x40480c0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340), 0x111, 0xa}}, 0x20) writev(r3, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f00000003c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x3, 0x0, 0xfbfbfbfb}) 1.149930176s ago: executing program 3 (id=1971): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x18, 0x3f}}], 0x1, 0xc0) 1.076366214s ago: executing program 3 (id=1972): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff034}, {0x28, 0x80, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r2, 0x0, 0x0, 0x40840) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) 206.637191ms ago: executing program 4 (id=1973): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f00000000c0), 0x10fd02, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="aa422343048dd7ac99d1fb00000000000006012e9b32d630ad94bfc3f7f8069441ff304672c86a0000000000000026cc94db82fa74127d69f6c91097e7ac9d2a8c9f1fd9043177eeb241a1a738e59cc12f3f27d5120cd94479b6000000000000", @ANYRES64=0x0], 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) 206.145061ms ago: executing program 1 (id=1974): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x18, 0x3f}}], 0x1, 0xc0) listen(r0, 0xfffffffd) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0xe}, @private1, @dev={0xfe, 0x80, '\x00', 0x24}, 0xb, 0x0, 0x0, 0x500, 0xff, 0x4d30356}) r5 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="4f5f072a0db0e67d613178efcfe3a6054a0ca7f8e4cef47737bbc530093b9307b2828900b1ed8131e71b43e3909b35fa0a1964d2e1739c46bbb5732e95ad8ae39b90c89cb5cf53c25512e3668ede45982f290503f507caad3499871769e7e2827220fa5158dc339619beea2c86a2a170d62d9f5820dcbf21cecf5e9a51ca518d13237fa5d734cd6e23dd8d7cdbf2477f8cb68f0fc0417a10d062b49bebb3a9bf0293987ba25e78a53eb71c450e7dd594ae8635a37ffd177a864bcf517989c49ea7e621e4c67099b64f91a475dcc1de7aae52dfaf5a", 0xd5}], 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) 45.505108ms ago: executing program 3 (id=1975): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x7ffffff, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 0s ago: executing program 1 (id=1976): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) kernel console output (not intermixed with test programs): 90 90 [ 483.849812][T11538] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 483.849830][T11538] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 483.849841][T11538] RDX: 0000000020008060 RSI: 0000000000000000 RDI: 0000000000000000 [ 483.849852][T11538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 483.849861][T11538] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 483.849870][T11538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 483.849893][T11538] [ 484.379955][ T5981] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 484.388582][ T5981] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 484.397731][ T5981] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 484.408296][ T5981] usb 1-1: config 220 has no interface number 2 [ 484.414601][ T5981] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 484.427917][ T5981] usb 1-1: config 220 interface 0 has no altsetting 0 [ 484.434946][ T5981] usb 1-1: config 220 interface 76 has no altsetting 0 [ 484.441808][ T5981] usb 1-1: config 220 interface 1 has no altsetting 0 [ 484.510563][ T5981] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 484.519894][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.530262][ T5981] usb 1-1: Product: syz [ 484.534726][ T5981] usb 1-1: Manufacturer: syz [ 484.539298][ T5981] usb 1-1: SerialNumber: syz [ 484.752065][ T5981] usb 1-1: selecting invalid altsetting 0 [ 484.758494][ T5981] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 484.779562][ T5981] uvcvideo 1-1:220.0: No valid video chain found. [ 484.820331][ T5981] usb 1-1: selecting invalid altsetting 0 [ 484.834423][ T5981] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 484.863077][ T5981] usb 1-1: USB disconnect, device number 91 [ 485.167862][ T5836] Bluetooth: hci1: Unknown advertising packet type: 0x31 [ 485.167901][ T5836] Bluetooth: hci1: Malformed LE Event: 0x0d [ 485.438506][T11562] fuse: Unknown parameter '' [ 485.510929][ T1208] usb 3-1: USB disconnect, device number 104 [ 485.553876][ T9] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 485.554615][T11560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1640'. [ 485.788580][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 485.815076][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 485.860673][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 485.889855][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.922122][ T9] usb 5-1: Product: syz [ 485.930021][ T9] usb 5-1: Manufacturer: syz [ 485.936455][ T9] usb 5-1: SerialNumber: syz [ 485.973158][ T9] usb 5-1: config 0 descriptor?? [ 486.222171][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 486.222188][ T30] audit: type=1326 audit(1766303132.058:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11575 comm="syz.3.1647" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ed539 code=0x0 [ 486.246514][T11558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.264524][T11580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1649'. [ 486.279966][T11558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.314780][ T5915] usb 5-1: USB disconnect, device number 93 [ 486.379346][T11588] binder: 11579:11588 ioctl 89f1 80000100 returned -22 [ 486.517009][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 486.550305][T11580] binder_alloc: 11579: pid 11579 spamming oneway? 1 buffers allocated for a total size of 4096 [ 486.599426][T11580] binder_alloc: 11579: binder_alloc_buf size 64768 failed, no address space [ 486.627215][T11580] binder_alloc: allocated: 5120 (num: 2 largest: 4096), free: 7168 (num: 1 largest: 7168) [ 486.814428][ T5981] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 486.843179][ T5836] Bluetooth: hci0: Unknown advertising packet type: 0x31 [ 486.843204][ T5836] Bluetooth: hci0: Malformed LE Event: 0x0d [ 486.974650][ T5981] usb 4-1: Using ep0 maxpacket: 32 [ 486.989741][ T5981] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 487.012161][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.028196][T11598] fuse: Unknown parameter '' [ 487.049781][ T5981] usb 4-1: Product: syz [ 487.065361][ T5981] usb 4-1: Manufacturer: syz [ 487.094850][ T5981] usb 4-1: SerialNumber: syz [ 487.125826][ T5981] usb 4-1: config 0 descriptor?? [ 487.158256][ T5981] usb 4-1: selecting invalid altsetting 3 [ 487.164692][ T5981] comedi comedi5: could not set alternate setting 3 in high speed [ 487.178154][ T5981] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 487.192947][ T5981] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 487.537205][ T30] audit: type=1326 audit(1766303133.378:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.1.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 487.573830][ T30] audit: type=1326 audit(1766303133.378:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.1.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 487.598699][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 487.607675][ T30] audit: type=1326 audit(1766303133.378:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.1.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 487.634122][ T30] audit: type=1326 audit(1766303133.408:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.1.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 487.656680][ T30] audit: type=1326 audit(1766303133.408:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.1.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 487.679953][ T30] audit: type=1326 audit(1766303133.408:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.1.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 487.706515][ T30] audit: type=1326 audit(1766303133.408:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.1.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 487.730086][ T30] audit: type=1326 audit(1766303133.438:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.1.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 487.754320][ T30] audit: type=1326 audit(1766303133.438:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11616 comm="syz.1.1659" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 487.776490][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 487.781783][ T1208] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 487.790534][ T9] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 487.800650][ T9] usb 3-1: config index 0 descriptor too short (expected 20177, got 27) [ 487.809163][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 100 [ 487.818059][ T9] usb 3-1: can't read configurations, error -22 [ 487.886547][ T5981] usb 4-1: USB disconnect, device number 106 [ 487.956736][ T1208] usb 1-1: Using ep0 maxpacket: 16 [ 487.964556][ T1208] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.975075][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 487.982915][ T1208] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.999834][ T1208] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 488.012682][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.041438][ T1208] usb 1-1: Product: syz [ 488.045844][ T1208] usb 1-1: Manufacturer: syz [ 488.050433][ T1208] usb 1-1: SerialNumber: syz [ 488.143819][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 488.152400][ T9] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 488.184136][ T9] usb 3-1: config index 0 descriptor too short (expected 20177, got 27) [ 488.198236][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 100 [ 488.214054][T11629] netlink: 'syz.3.1664': attribute type 2 has an invalid length. [ 488.233273][T11623] fuse: Unknown parameter 't0' [ 488.237425][ T9] usb 3-1: can't read configurations, error -22 [ 488.249574][ T9] usb usb3-port1: attempt power cycle [ 488.273405][ T1208] usb 1-1: 0:2 : does not exist [ 488.299367][ T1208] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 488.338811][ T5836] Bluetooth: hci1: Unknown advertising packet type: 0x31 [ 488.338849][ T5836] Bluetooth: hci1: Malformed LE Event: 0x0d [ 488.392567][ T1208] usb 1-1: USB disconnect, device number 92 [ 488.448310][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.507083][T11636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.663913][ T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 488.694420][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 488.705665][ T9] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 488.721489][ T9] usb 3-1: config index 0 descriptor too short (expected 20177, got 27) [ 488.730360][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 100 [ 488.739380][ T5887] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 488.758365][ T9] usb 3-1: can't read configurations, error -22 [ 488.913881][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 488.921062][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 488.938450][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 488.975394][ T5887] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 488.986013][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 489.008202][ T9] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 489.022787][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.044271][ T9] usb 3-1: config index 0 descriptor too short (expected 20177, got 27) [ 489.059522][ T5887] usb 4-1: Product: syz [ 489.076097][ T5887] usb 4-1: Manufacturer: syz [ 489.083122][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 100 [ 489.105473][ T5887] usb 4-1: SerialNumber: syz [ 489.118994][ T9] usb 3-1: can't read configurations, error -22 [ 489.125430][ T5915] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 489.142611][ T5887] usb 4-1: config 0 descriptor?? [ 489.162081][ T9] usb usb3-port1: unable to enumerate USB device [ 489.304279][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 489.319472][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.346466][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.372478][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 489.408855][ T5915] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 489.427442][T11635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.446725][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.466677][T11635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.495977][ T5915] usb 1-1: config 0 descriptor?? [ 489.518599][ T9] usb 4-1: USB disconnect, device number 107 [ 489.953590][T11649] random: crng reseeded on system resumption [ 489.989519][ T5915] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 489.999356][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 490.051158][ T5915] shield 0003:0955:7214.0020: Registered Thunderstrike controller [ 490.067024][ T5915] shield 0003:0955:7214.0020: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 490.224391][ T5918] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 490.224682][ T5887] usb 1-1: USB disconnect, device number 93 [ 490.237105][ T5918] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 490.267182][ T5918] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 490.273959][ T9] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 490.294755][ T5918] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 490.494634][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 490.548426][ T9] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 490.597544][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.618217][ T9] usb 5-1: Product: syz [ 490.636084][ T9] usb 5-1: Manufacturer: syz [ 490.640723][ T9] usb 5-1: SerialNumber: syz [ 490.665879][ T5836] Bluetooth: hci4: Unknown advertising packet type: 0x31 [ 490.665921][ T5836] Bluetooth: hci4: Malformed LE Event: 0x0d [ 490.684576][ T9] usb 5-1: config 0 descriptor?? [ 490.735227][ T9] usb 5-1: selecting invalid altsetting 3 [ 490.761890][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 490.792099][ T9] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 490.825745][ T9] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 491.228036][T11673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.229675][T11673] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1678'. [ 491.304363][ T5918] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 491.453803][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 491.462020][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.480387][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.493063][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 491.506889][ T5918] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 491.511298][ T9] usb 5-1: USB disconnect, device number 94 [ 491.517150][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.579247][ T5918] usb 1-1: config 0 descriptor?? [ 491.794474][ T5915] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 492.012849][T11670] random: crng reseeded on system resumption [ 492.054430][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 492.096866][ T5915] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 492.145841][ T5918] input: HID 0955:7214 Haptics as /devices/virtual/input/input31 [ 492.176792][ T5915] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 492.247720][ T5915] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.307183][ T5918] shield 0003:0955:7214.0021: Registered Thunderstrike controller [ 492.325041][ T5915] usb 3-1: config 1 interface 0 has no altsetting 0 [ 492.352948][ T5918] shield 0003:0955:7214.0021: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 492.379354][ T5915] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 492.456510][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.515005][ T5901] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 492.536080][ T5918] usb 1-1: USB disconnect, device number 94 [ 492.542074][ T5915] usb 3-1: Product: syz [ 492.597124][ T5915] usb 3-1: Manufacturer: syz [ 492.601784][ T5915] usb 3-1: SerialNumber: syz [ 492.620251][ T5901] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 492.734096][ T5901] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 492.818508][ T5901] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 492.913038][ T5915] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 109 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 492.985028][ T5836] Bluetooth: hci2: Unknown advertising packet type: 0x31 [ 492.985069][ T5836] Bluetooth: hci2: Malformed LE Event: 0x0d [ 493.424657][ T5915] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 493.596553][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 493.616375][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.660353][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.681052][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'. [ 493.705495][ T5915] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 493.735245][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.771035][ T5915] usb 1-1: config 0 descriptor?? [ 493.801971][ T5915] hub 1-1:0.0: USB hub found [ 493.943870][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 493.989861][ T5915] hub 1-1:0.0: 1 port detected [ 493.993821][ T1208] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 494.093893][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 494.103964][ T9] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 494.113443][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.121728][ T9] usb 4-1: Product: syz [ 494.126378][ T9] usb 4-1: Manufacturer: syz [ 494.131023][ T9] usb 4-1: SerialNumber: syz [ 494.138798][ T9] usb 4-1: config 0 descriptor?? [ 494.150375][ T1208] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 494.161274][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.170680][ T9] usb 4-1: selecting invalid altsetting 3 [ 494.176905][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 494.185043][ T1208] usb 5-1: Product: syz [ 494.189378][ T9] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 494.197576][ T1208] usb 5-1: Manufacturer: syz [ 494.202367][ T1208] usb 5-1: SerialNumber: syz [ 494.210791][ T9] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 494.224279][ T1208] usb 5-1: config 0 descriptor?? [ 494.479995][ T1208] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 494.613513][T11705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.623029][T11705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.882981][ T5918] usb 4-1: USB disconnect, device number 108 [ 494.914581][ T5901] usb 1-1: USB disconnect, device number 95 [ 494.979975][T11715] FAULT_INJECTION: forcing a failure. [ 494.979975][T11715] name failslab, interval 1, probability 0, space 0, times 0 [ 494.994238][T11715] CPU: 0 UID: 0 PID: 11715 Comm: syz.3.1693 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.994266][T11715] Tainted: [L]=SOFTLOCKUP [ 494.994272][T11715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 494.994283][T11715] Call Trace: [ 494.994291][T11715] [ 494.994299][T11715] dump_stack_lvl+0x189/0x250 [ 494.994325][T11715] ? __pfx____ratelimit+0x10/0x10 [ 494.994346][T11715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.994367][T11715] ? __pfx__printk+0x10/0x10 [ 494.994407][T11715] should_fail_ex+0x414/0x560 [ 494.994438][T11715] should_failslab+0xa8/0x100 [ 494.994461][T11715] __kmalloc_cache_noprof+0x84/0x700 [ 494.994478][T11715] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 494.994503][T11715] ? sctp_add_bind_addr+0x8c/0x370 [ 494.994531][T11715] sctp_add_bind_addr+0x8c/0x370 [ 494.994559][T11715] sctp_copy_local_addr_list+0x30b/0x4e0 [ 494.994594][T11715] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 494.994617][T11715] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 494.994642][T11715] ? sctp_v6_is_any+0x64/0x80 [ 494.994667][T11715] ? sctp_copy_one_addr+0x93/0x360 [ 494.994694][T11715] sctp_bind_addr_copy+0xb3/0x3c0 [ 494.994718][T11715] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 494.994743][T11715] sctp_connect_new_asoc+0x2e0/0x690 [ 494.994765][T11715] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 494.994781][T11715] ? __local_bh_enable_ip+0x12d/0x1c0 [ 494.994807][T11715] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 494.994825][T11715] ? security_sctp_bind_connect+0x7e/0x2e0 [ 494.994847][T11715] sctp_sendmsg+0x155c/0x2840 [ 494.994878][T11715] ? __pfx_sctp_sendmsg+0x10/0x10 [ 494.994894][T11715] ? aa_sk_perm+0x15f/0x920 [ 494.994916][T11715] ? aa_sk_perm+0x7ee/0x920 [ 494.994941][T11715] ? __pfx_aa_sk_perm+0x10/0x10 [ 494.994965][T11715] ? sock_rps_record_flow+0x19/0x410 [ 494.994990][T11715] ? inet_sendmsg+0x2f4/0x370 [ 494.995015][T11715] __sock_sendmsg+0x19c/0x270 [ 494.995043][T11715] __sys_sendto+0x3bd/0x520 [ 494.995065][T11715] ? __pfx___sys_sendto+0x10/0x10 [ 494.995081][T11715] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 494.995113][T11715] ? __fget_files+0x3a0/0x420 [ 494.995145][T11715] ? ksys_write+0x22a/0x250 [ 494.995162][T11715] ? exc_page_fault+0x82/0x100 [ 494.995180][T11715] ? __pfx_ksys_write+0x10/0x10 [ 494.995202][T11715] __ia32_sys_sendto+0xdd/0x100 [ 494.995225][T11715] __do_fast_syscall_32+0x1f7/0x590 [ 494.995246][T11715] ? rcu_is_watching+0x15/0xb0 [ 494.995265][T11715] ? do_fast_syscall_32+0x34/0x80 [ 494.995289][T11715] do_fast_syscall_32+0x34/0x80 [ 494.995308][T11715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.995328][T11715] RIP: 0023:0xf70ed539 [ 494.995344][T11715] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 494.995359][T11715] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 494.995378][T11715] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 494.995391][T11715] RDX: 0000000000000001 RSI: 0000000000000051 RDI: 0000000080000080 [ 494.995403][T11715] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 494.995413][T11715] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 494.995424][T11715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 494.995454][T11715] [ 495.344772][ T5918] usb 3-1: USB disconnect, device number 109 [ 495.355656][ T5918] usblp0: removed [ 495.936389][ T1208] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 496.294441][ T5915] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 496.469111][ T5915] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 496.489686][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.519847][ T5915] usb 1-1: config 0 descriptor?? [ 496.737482][ T5915] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 497.321122][ T5915] [drm:udl_init] *ERROR* Selecting channel failed [ 497.420576][ T5915] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 497.455692][ T5915] [drm] Initialized udl on minor 2 [ 497.495494][ T5915] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 497.545813][ T5915] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 497.588905][ T5918] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 497.600878][ T5915] usb 1-1: USB disconnect, device number 96 [ 497.628388][ T5918] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 497.733947][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1703'. [ 498.014865][ T1208] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 498.194011][ T1208] usb 4-1: Using ep0 maxpacket: 32 [ 498.225266][ T1208] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 498.235376][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.243696][ T1208] usb 4-1: Product: syz [ 498.262677][ T1208] usb 4-1: Manufacturer: syz [ 498.268020][ T1208] usb 4-1: SerialNumber: syz [ 498.283530][ T1208] usb 4-1: config 0 descriptor?? [ 498.290199][ T5918] usb 5-1: USB disconnect, device number 95 [ 498.328165][ T1208] usb 4-1: selecting invalid altsetting 3 [ 498.361285][ T1208] comedi comedi5: could not set alternate setting 3 in high speed [ 498.385189][ T5887] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 498.392975][ T9] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 498.402985][ T1208] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 498.424919][ T1208] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 498.529078][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1708'. [ 498.539961][T11766] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1708'. [ 498.550030][T11766] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1708'. [ 498.564256][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 498.580244][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 498.593825][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 498.611750][ T9] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 498.630550][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 498.648250][ T9] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 498.679335][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 498.695960][ T9] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.724111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.732801][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.741258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.773968][ T5887] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 498.799033][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 498.872695][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.890093][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 498.906977][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1710'. [ 498.920897][ T5887] usb 1-1: config 0 descriptor?? [ 498.929495][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.955054][T11762] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 498.970155][ T9] usb 3-1: Product: syz [ 499.002015][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1712'. [ 499.028866][ T5887] hub 1-1:0.0: USB hub found [ 499.033657][ T9] usb 3-1: Manufacturer: syz [ 499.064178][ T9] usb 3-1: SerialNumber: syz [ 499.094953][ T1208] usb 4-1: USB disconnect, device number 109 [ 499.139935][T11774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1712'. [ 499.210832][T11778] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1713'. [ 499.236122][ T5887] hub 1-1:0.0: 1 port detected [ 499.254802][T11778] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1713'. [ 499.347249][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 110 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 499.433539][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 499.433551][ T30] audit: type=1326 audit(1766303145.268:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11780 comm="syz.3.1715" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x0 [ 500.296828][ T1208] usb 1-1: USB disconnect, device number 97 [ 500.567703][T11793] fuse: Bad value for 'fd' [ 500.684243][ T5918] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 500.870178][ T5918] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 500.905930][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.931431][ T5918] usb 4-1: config 0 descriptor?? [ 501.210986][ T5918] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 501.297549][T11810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 501.311272][T11810] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1723'. [ 501.447754][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.457857][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.514119][ T1208] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 501.568951][ T5915] usb 3-1: USB disconnect, device number 110 [ 501.579337][ T5915] usblp0: removed [ 501.613803][ T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 501.682854][ T1208] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 501.722810][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.758079][ T1208] usb 2-1: Product: syz [ 501.773806][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 501.780575][ T1208] usb 2-1: Manufacturer: syz [ 501.793854][ T9] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 501.803025][ T1208] usb 2-1: SerialNumber: syz [ 501.821815][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.831530][ T1208] usb 2-1: config 0 descriptor?? [ 501.852679][ T9] usb 5-1: Product: syz [ 501.866269][ T9] usb 5-1: Manufacturer: syz [ 501.880248][ T9] usb 5-1: SerialNumber: syz [ 501.906051][ T9] usb 5-1: config 0 descriptor?? [ 501.925778][T11818] netlink: 'syz.2.1725': attribute type 10 has an invalid length. [ 501.951312][ T9] usb 5-1: selecting invalid altsetting 3 [ 501.972199][T11818] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 501.998242][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 502.019656][ T9] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 502.063484][ T9] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 502.126861][ T1208] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 502.694929][ T5930] usb 5-1: USB disconnect, device number 96 [ 503.046454][ T5918] [drm:udl_init] *ERROR* Selecting channel failed [ 503.105776][ T5918] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 503.136146][ T5918] [drm] Initialized udl on minor 2 [ 503.163016][ T5918] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 503.196406][ T5918] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 503.227467][ T5915] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 503.242491][ T5918] usb 4-1: USB disconnect, device number 110 [ 503.261875][ T5915] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 503.404244][ T5901] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 503.584419][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 503.591423][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.630188][ T1208] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 503.674299][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.714033][ T5901] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 503.750710][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.805150][ T5901] usb 5-1: config 0 descriptor?? [ 503.840171][ T5901] hub 5-1:0.0: USB hub found [ 504.050363][ T5901] hub 5-1:0.0: 1 port detected [ 504.423131][T11847] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.678561][T11830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.709631][T11830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.805427][T11862] __nla_validate_parse: 1 callbacks suppressed [ 504.805440][T11862] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1737'. [ 504.894303][ T5918] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 505.029886][ T5930] usb 5-1: USB disconnect, device number 97 [ 505.094876][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 505.105062][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1738'. [ 505.118031][ T5918] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 505.159701][ T5918] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 505.188014][ T5918] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.229002][ T5918] usb 4-1: config 1 interface 0 has no altsetting 0 [ 505.309963][ T5918] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 505.349599][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.386210][ T5918] usb 4-1: Product: syz [ 505.403934][ T1208] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 505.421397][ T5918] usb 4-1: Manufacturer: syz [ 505.435885][ T5918] usb 4-1: SerialNumber: syz [ 505.506336][ T5901] usb 2-1: USB disconnect, device number 92 [ 505.604030][ T1208] usb 3-1: Using ep0 maxpacket: 32 [ 505.675365][ T1208] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 505.703749][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.745273][ T1208] usb 3-1: Product: syz [ 505.749472][ T1208] usb 3-1: Manufacturer: syz [ 505.784400][ T1208] usb 3-1: SerialNumber: syz [ 505.816802][ T1208] usb 3-1: config 0 descriptor?? [ 505.865783][ T1208] usb 3-1: selecting invalid altsetting 3 [ 505.902892][ T5918] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 111 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 505.922042][ T1208] comedi comedi5: could not set alternate setting 3 in high speed [ 505.969773][ T1208] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 506.021490][ T1208] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 506.124451][ T5918] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 506.296260][ T5918] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 506.309649][ T5918] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 506.322230][ T5918] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 506.333699][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.377691][T11877] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 506.395644][T11877] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 506.422680][ T5918] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 506.570483][ T1208] usb 3-1: USB disconnect, device number 111 [ 507.072210][ T5918] usb 5-1: USB disconnect, device number 98 [ 507.646870][T11895] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1744'. [ 507.669977][ T5930] usb 4-1: USB disconnect, device number 111 [ 507.688631][ T5930] usblp0: removed [ 507.865992][T11894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.199246][T11909] loop5: detected capacity change from 0 to 7 [ 508.268256][T11909] Dev loop5: unable to read RDB block 7 [ 508.276454][T11909] loop5: unable to read partition table [ 508.285466][T11909] loop5: partition table beyond EOD, truncated [ 508.291686][T11909] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 508.694207][ T5901] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 508.853927][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 508.862772][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.897356][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.929780][ T5901] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 508.939631][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.954423][ T5901] usb 2-1: config 0 descriptor?? [ 508.970904][ T5901] hub 2-1:0.0: USB hub found [ 509.083445][ T30] audit: type=1326 audit(1766303154.918:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11918 comm="syz.0.1751" exe="/root/syz-executor" sig=9 arch=40000003 syscall=172 compat=1 ip=0xf702d539 code=0x0 [ 509.172695][ T5901] hub 2-1:0.0: 1 port detected [ 509.787096][T11917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.798406][T11917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.839120][T11929] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1754'. [ 509.858703][T11929] bond_slave_0: entered promiscuous mode [ 509.864868][T11929] bond_slave_1: entered promiscuous mode [ 510.106838][ T5918] usb 2-1: USB disconnect, device number 93 [ 510.116496][T11935] ip6gre1: entered promiscuous mode [ 510.132038][T11935] ip6gre1: entered allmulticast mode [ 510.557079][ T5930] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 510.573907][ T1208] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 510.733939][ T1208] usb 1-1: Using ep0 maxpacket: 16 [ 510.743232][ T5930] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 510.760215][ T5930] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 510.770436][ T5930] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 510.805377][ T5930] usb 5-1: config 220 has no interface number 2 [ 510.831480][ T5930] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 510.868210][ T5930] usb 5-1: config 220 interface 0 has no altsetting 0 [ 510.902972][ T5930] usb 5-1: config 220 interface 76 has no altsetting 0 [ 510.920550][ T5930] usb 5-1: config 220 interface 1 has no altsetting 0 [ 510.972592][ T5930] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 511.005343][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.014803][ T5930] usb 5-1: Product: syz [ 511.019881][ T1208] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 511.031292][ T5930] usb 5-1: Manufacturer: syz [ 511.036719][ T5930] usb 5-1: SerialNumber: syz [ 511.042254][ T1208] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 511.098521][ T1208] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.182211][ T1208] usb 1-1: config 1 interface 0 has no altsetting 0 [ 511.261268][ T1208] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 511.319245][ T5930] usb 5-1: selecting invalid altsetting 0 [ 511.329476][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.385922][ T5930] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 511.399630][ T1208] usb 1-1: Product: syz [ 511.417478][ T1208] usb 1-1: Manufacturer: syz [ 511.422554][ T5930] uvcvideo 5-1:220.0: No valid video chain found. [ 511.443373][ T1208] usb 1-1: SerialNumber: syz [ 511.486306][ T5930] usb 5-1: selecting invalid altsetting 0 [ 511.511163][ T5930] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 511.581407][ T5930] usb 5-1: USB disconnect, device number 99 [ 512.057718][T11966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1763'. [ 512.166149][ T1208] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 98 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 512.584974][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1767'. [ 512.845058][ T9] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 513.016371][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 513.049738][ T9] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 513.061542][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.076874][ T9] usb 5-1: Product: syz [ 513.082491][ T9] usb 5-1: Manufacturer: syz [ 513.089743][ T9] usb 5-1: SerialNumber: syz [ 513.113030][ T9] usb 5-1: config 0 descriptor?? [ 513.141037][ T9] usb 5-1: selecting invalid altsetting 3 [ 513.147693][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 513.156014][ T9] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 513.177983][ T9] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 513.853340][ T5901] usb 1-1: USB disconnect, device number 98 [ 513.864790][ T5901] usblp0: removed [ 513.897404][ T9] usb 5-1: USB disconnect, device number 100 [ 514.108657][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1774'. [ 514.165505][ T9] hid_parser_main: 7 callbacks suppressed [ 514.165525][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x7 [ 514.233457][ T9] hid-generic 0000:0000:0000.0022: ignoring exceeding usage max [ 514.310309][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 514.357981][ T5918] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 514.479454][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x6 [ 514.518119][ T9] hid-generic 0000:0000:0000.0022: reserved main item tag 0xd [ 514.568787][T12006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.584353][ T5901] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 514.596870][ T9] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 514.608845][ T5918] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 514.619975][ T5918] usb 2-1: config 0 has no interface number 0 [ 514.634858][ T5918] usb 2-1: too many endpoints for config 0 interface 4 altsetting 73: 94, using maximum allowed: 30 [ 514.648862][ T5918] usb 2-1: config 0 interface 4 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 94 [ 514.665637][T12006] fuse: Unknown parameter '' [ 514.683682][ T5918] usb 2-1: config 0 interface 4 has no altsetting 0 [ 514.695804][ T5918] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 514.727213][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.744875][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 514.756122][T12007] fido_id[12007]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 514.772327][ T5901] usb 1-1: config index 0 descriptor too short (expected 19222, got 18) [ 514.782167][ T5918] usb 2-1: config 0 descriptor?? [ 514.789271][ T5901] usb 1-1: config 28 has too many interfaces: 241, using maximum allowed: 32 [ 514.814828][ T5901] usb 1-1: config 28 has 1 interface, different from the descriptor's value: 241 [ 514.836134][ T5901] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=62.0d [ 514.852284][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.873379][ T5901] usb 1-1: Product: syz [ 514.879366][ T5901] usb 1-1: Manufacturer: syz [ 514.885927][ T5901] usb 1-1: SerialNumber: syz [ 515.178427][ T9] usb 1-1: USB disconnect, device number 99 [ 515.344272][T12017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1778'. [ 515.883823][ T9] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 516.063781][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 516.072994][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.102377][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.135026][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 516.203561][ T9] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 516.245554][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.316499][ T9] usb 4-1: config 0 descriptor?? [ 516.784290][T12025] random: crng reseeded on system resumption [ 516.871800][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input32 [ 516.956925][T12043] syz_tun: entered allmulticast mode [ 517.081600][T12043] dvmrp6: entered allmulticast mode [ 517.092014][ T9] shield 0003:0955:7214.0023: Registered Thunderstrike controller [ 517.148115][ T9] shield 0003:0955:7214.0023: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 517.165012][ T5918] usb 2-1: string descriptor 0 read error: -71 [ 517.171795][ T5918] cp210x 2-1:0.4: cp210x converter detected [ 517.186583][ T5918] cp210x 2-1:0.4: failed to get vendor val 0x370b size 1: -71 [ 517.213318][ T5918] cp210x 2-1:0.4: querying part number failed [ 517.289055][ T5930] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 517.299455][ T9] usb 4-1: USB disconnect, device number 112 [ 517.318377][ T5918] usb 2-1: cp210x converter now attached to ttyUSB0 [ 517.326983][ T5918] usb 2-1: USB disconnect, device number 94 [ 517.341316][ T5930] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 517.361033][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 517.407502][ T5918] cp210x 2-1:0.4: device disconnected [ 517.465381][ T5930] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 517.521501][ T5930] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 517.590681][T12047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.660983][T12051] fuse: Unknown parameter '' [ 518.552558][T12060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1790'. [ 518.836548][T12068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1792'. [ 519.394761][ T9] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 519.465566][ T5918] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 519.523818][ T5901] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 519.557671][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 519.568035][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.576281][ T9] usb 2-1: Product: syz [ 519.580530][ T9] usb 2-1: Manufacturer: syz [ 519.585954][ T9] usb 2-1: SerialNumber: syz [ 519.592364][ T9] usb 2-1: config 0 descriptor?? [ 519.624354][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 519.642807][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.655257][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.666333][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 519.682643][ T5901] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 519.691557][ T5918] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 519.701206][ T5901] usb 4-1: config 0 has no interface number 0 [ 519.708097][ T5901] usb 4-1: too many endpoints for config 0 interface 4 altsetting 73: 94, using maximum allowed: 30 [ 519.719078][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.728065][ T5901] usb 4-1: config 0 interface 4 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 94 [ 519.742531][ T5918] usb 3-1: config 0 descriptor?? [ 519.748339][ T5901] usb 4-1: config 0 interface 4 has no altsetting 0 [ 519.757590][ T5901] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 519.771654][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.797606][ T5901] usb 4-1: config 0 descriptor?? [ 519.819818][ T5915] usb 2-1: USB disconnect, device number 95 [ 519.922273][T12086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.945261][T12086] fuse: Unknown parameter '' [ 520.198420][T12080] random: crng reseeded on system resumption [ 520.296773][ T5918] input: HID 0955:7214 Haptics as /devices/virtual/input/input33 [ 520.391646][ T5918] shield 0003:0955:7214.0024: Registered Thunderstrike controller [ 520.418007][ T5918] shield 0003:0955:7214.0024: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 520.515102][ T5981] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 520.527624][ T5918] usb 3-1: USB disconnect, device number 112 [ 520.582167][ T5981] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 520.649067][ T5981] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 520.695512][ T5981] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 521.339020][T12103] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1804'. [ 521.436415][T12108] netlink: 'syz.2.1805': attribute type 21 has an invalid length. [ 521.457371][T12108] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1805'. [ 521.482513][T12108] netlink: 'syz.2.1805': attribute type 4 has an invalid length. [ 521.500495][ T30] audit: type=1326 audit(1766303167.338:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12109 comm="syz.0.1806" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702d539 code=0x0 [ 521.512251][T12108] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1805'. [ 521.782881][ T5836] Bluetooth: hci2: unknown advertising packet type: 0x16 [ 521.782986][ T5836] Bluetooth: hci2: unknown advertising packet type: 0x6c [ 521.790394][ T5836] Bluetooth: hci2: unknown advertising packet type: 0x87 [ 521.797552][ T5836] Bluetooth: hci2: unknown advertising packet type: 0xd9 [ 521.804708][ T5836] Bluetooth: hci2: unknown advertising packet type: 0x97 [ 521.824659][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 521.934928][T12120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.957144][T12120] fuse: Unknown parameter '' [ 522.006623][ T9] usb 1-1: config index 0 descriptor too short (expected 1298, got 18) [ 522.023777][ T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 522.036658][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 522.046872][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 522.058075][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 522.111338][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 522.123639][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.182400][ T9] usb 1-1: Product: syz [ 522.199032][T12122] binder: 12121:12122 ioctl 4018620d 0 returned -22 [ 522.208856][ T9] usb 1-1: Manufacturer: syz [ 522.220057][ T9] usb 1-1: SerialNumber: syz [ 522.237543][ T9] usb 1-1: config 0 descriptor?? [ 522.330447][T12124] binder: 12123:12124 ioctl 4018620d 0 returned -22 [ 522.450017][ T5901] usb 4-1: string descriptor 0 read error: -71 [ 522.466299][ T5901] cp210x 4-1:0.4: cp210x converter detected [ 522.469741][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 522.496893][ T5901] cp210x 4-1:0.4: failed to get vendor val 0x370b size 1: -71 [ 522.529144][ T5901] cp210x 4-1:0.4: querying part number failed [ 522.559663][ T5901] usb 4-1: cp210x converter now attached to ttyUSB0 [ 522.599487][ T5901] usb 4-1: USB disconnect, device number 113 [ 522.635320][ T5901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 522.684934][ T5901] cp210x 4-1:0.4: device disconnected [ 523.004072][ T9] gspca_sunplus: reg_r err -110 [ 523.019114][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 523.330341][T12144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1817'. [ 523.797161][T12154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.849060][T12155] fuse: Unknown parameter '' [ 523.869769][T12158] netlink: 'syz.3.1820': attribute type 1 has an invalid length. [ 524.033439][T12162] fuse: Bad value for 'group_id' [ 524.039567][T12162] fuse: Bad value for 'group_id' [ 524.170549][T12166] binder: 12165:12166 ioctl 4018620d 0 returned -22 [ 524.328037][T12171] netlink: 'syz.1.1827': attribute type 1 has an invalid length. [ 524.401684][T12171] ip6gre2: entered promiscuous mode [ 524.424473][T12171] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 524.435968][T12171] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 524.468255][T12171] bond1: (slave ip6gre2): making interface the new active one [ 524.494196][ T5981] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 524.514870][T12171] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 524.531490][ T5930] usb 1-1: USB disconnect, device number 100 [ 524.694038][ T1208] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 524.696892][ T5981] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 524.755941][ T5981] usb 3-1: config 0 has no interface number 0 [ 524.768739][ T5981] usb 3-1: too many endpoints for config 0 interface 4 altsetting 73: 94, using maximum allowed: 30 [ 524.795439][ T5981] usb 3-1: config 0 interface 4 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 94 [ 524.847975][ T5981] usb 3-1: config 0 interface 4 has no altsetting 0 [ 524.874388][ T1208] usb 2-1: device descriptor read/64, error -71 [ 524.882845][ T5981] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 524.923005][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.961570][ T5981] usb 3-1: config 0 descriptor?? [ 525.004360][ T5930] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 525.166849][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.177882][ T1208] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 525.199542][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.212778][ T5930] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 525.224305][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.245614][ T5930] usb 1-1: config 0 descriptor?? [ 525.343886][ T1208] usb 2-1: device descriptor read/64, error -71 [ 525.476446][ T1208] usb usb2-port1: attempt power cycle [ 525.623360][T12189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1832'. [ 525.696528][T12180] bridge0: port 4(syz_tun) entered blocking state [ 525.725152][T12180] bridge0: port 4(syz_tun) entered disabled state [ 525.749500][T12180] syz_tun: entered promiscuous mode [ 525.767216][T12196] input: syz0 as /devices/virtual/input/input34 [ 525.776311][T12180] bridge0: port 4(syz_tun) entered blocking state [ 525.783332][T12180] bridge0: port 4(syz_tun) entered forwarding state [ 525.833888][ T1208] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 525.864692][ T1208] usb 2-1: device descriptor read/8, error -71 [ 526.049828][ T5930] usbhid 1-1:0.0: can't add hid device: -32 [ 526.056966][ T5930] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 526.076176][T12200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.077904][T12180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.103933][ T1208] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 526.139404][T12180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.140421][T12200] fuse: Unknown parameter '' [ 526.159946][ T1208] usb 2-1: device descriptor read/8, error -71 [ 526.226373][ T9] usb 1-1: USB disconnect, device number 101 [ 526.276889][ T1208] usb usb2-port1: unable to enumerate USB device [ 526.332189][T12202] FAULT_INJECTION: forcing a failure. [ 526.332189][T12202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.346312][T12202] CPU: 1 UID: 0 PID: 12202 Comm: syz.3.1835 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.346339][T12202] Tainted: [L]=SOFTLOCKUP [ 526.346346][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 526.346357][T12202] Call Trace: [ 526.346364][T12202] [ 526.346373][T12202] dump_stack_lvl+0x189/0x250 [ 526.346403][T12202] ? __pfx____ratelimit+0x10/0x10 [ 526.346420][T12202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.346440][T12202] ? __pfx__printk+0x10/0x10 [ 526.346461][T12202] should_fail_ex+0x414/0x560 [ 526.346479][T12202] _copy_to_user+0x31/0xb0 [ 526.346493][T12202] simple_read_from_buffer+0xe1/0x170 [ 526.346508][T12202] proc_fail_nth_read+0x1b3/0x220 [ 526.346521][T12202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 526.346532][T12202] ? rw_verify_area+0x2a6/0x4d0 [ 526.346542][T12202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 526.346552][T12202] vfs_read+0x200/0xa30 [ 526.346565][T12202] ? __pfx___might_resched+0x10/0x10 [ 526.346576][T12202] ? __pfx_vfs_read+0x10/0x10 [ 526.346587][T12202] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 526.346601][T12202] ? task_work_run+0x1d4/0x260 [ 526.346621][T12202] ksys_read+0x145/0x250 [ 526.346632][T12202] ? __pfx_ksys_read+0x10/0x10 [ 526.346643][T12202] ? __do_fast_syscall_32+0xbe/0x590 [ 526.346656][T12202] __do_fast_syscall_32+0x1f7/0x590 [ 526.346667][T12202] ? rcu_is_watching+0x15/0xb0 [ 526.346679][T12202] ? do_fast_syscall_32+0x34/0x80 [ 526.346692][T12202] do_fast_syscall_32+0x34/0x80 [ 526.346702][T12202] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 526.346716][T12202] RIP: 0023:0xf70ed539 [ 526.346725][T12202] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 526.346733][T12202] RSP: 002b:00000000f54dd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 526.346745][T12202] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54dd620 [ 526.346752][T12202] RDX: 000000000000000f RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 526.346759][T12202] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 526.346764][T12202] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 526.346770][T12202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 526.346785][T12202] [ 526.691995][T12204] binder: BINDER_SET_CONTEXT_MGR already set [ 526.698617][T12204] binder: 12203:12204 ioctl 4018620d 80000240 returned -16 [ 526.972727][T12212] FAULT_INJECTION: forcing a failure. [ 526.972727][T12212] name failslab, interval 1, probability 0, space 0, times 0 [ 526.989728][T12212] CPU: 0 UID: 0 PID: 12212 Comm: syz.0.1839 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.989765][T12212] Tainted: [L]=SOFTLOCKUP [ 526.989773][T12212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 526.989783][T12212] Call Trace: [ 526.989791][T12212] [ 526.989798][T12212] dump_stack_lvl+0x189/0x250 [ 526.989824][T12212] ? __pfx____ratelimit+0x10/0x10 [ 526.989843][T12212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.989863][T12212] ? __pfx__printk+0x10/0x10 [ 526.989887][T12212] ? __lock_acquire+0x6b6/0x2cf0 [ 526.989904][T12212] should_fail_ex+0x414/0x560 [ 526.989921][T12212] should_failslab+0xa8/0x100 [ 526.989935][T12212] kmem_cache_alloc_noprof+0x88/0x710 [ 526.989952][T12212] ? __netlink_lookup+0xbd/0x8a0 [ 526.989975][T12212] ? skb_clone+0x212/0x3a0 [ 526.990001][T12212] skb_clone+0x212/0x3a0 [ 526.990027][T12212] __netlink_deliver_tap+0x404/0x850 [ 526.990051][T12212] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.990063][T12212] netlink_deliver_tap+0x19c/0x1b0 [ 526.990076][T12212] netlink_unicast+0x7fa/0x9e0 [ 526.990091][T12212] ? __pfx_netlink_unicast+0x10/0x10 [ 526.990110][T12212] ? netlink_sendmsg+0x642/0xb30 [ 526.990130][T12212] ? skb_put+0x11b/0x210 [ 526.990159][T12212] netlink_sendmsg+0x805/0xb30 [ 526.990189][T12212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.990204][T12212] ? aa_sock_msg_perm+0xf1/0x1b0 [ 526.990218][T12212] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 526.990228][T12212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.990241][T12212] __sock_sendmsg+0x21c/0x270 [ 526.990267][T12212] sock_write_iter+0x279/0x360 [ 526.990294][T12212] ? __pfx_sock_write_iter+0x10/0x10 [ 526.990327][T12212] ? kstrtoull+0x12f/0x1d0 [ 526.990349][T12212] do_iter_readv_writev+0x623/0x8c0 [ 526.990363][T12212] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 526.990372][T12212] ? common_file_perm+0x1b5/0x220 [ 526.990388][T12212] ? bpf_lsm_file_permission+0x9/0x20 [ 526.990404][T12212] ? security_file_permission+0x75/0x290 [ 526.990423][T12212] ? rw_verify_area+0x255/0x4d0 [ 526.990445][T12212] vfs_writev+0x31a/0x960 [ 526.990466][T12212] ? vfs_write+0x956/0xb30 [ 526.990487][T12212] ? __pfx_vfs_writev+0x10/0x10 [ 526.990506][T12212] ? __fget_files+0x2a/0x420 [ 526.990520][T12212] ? __fget_files+0x3a0/0x420 [ 526.990531][T12212] ? __fget_files+0x2a/0x420 [ 526.990552][T12212] do_writev+0x14d/0x2d0 [ 526.990575][T12212] ? __pfx_do_writev+0x10/0x10 [ 526.990598][T12212] ? __do_fast_syscall_32+0xbe/0x590 [ 526.990620][T12212] __do_fast_syscall_32+0x1f7/0x590 [ 526.990639][T12212] ? rcu_is_watching+0x15/0xb0 [ 526.990658][T12212] ? do_fast_syscall_32+0x34/0x80 [ 526.990681][T12212] do_fast_syscall_32+0x34/0x80 [ 526.990700][T12212] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 526.990721][T12212] RIP: 0023:0xf702d539 [ 526.990736][T12212] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 526.990750][T12212] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 526.990769][T12212] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 526.990782][T12212] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 526.990793][T12212] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 526.990804][T12212] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 526.990815][T12212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 526.990836][T12212] [ 527.204800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.545502][ T5981] usb 3-1: string descriptor 0 read error: -71 [ 527.566194][ T5981] cp210x 3-1:0.4: cp210x converter detected [ 527.604930][ T5981] cp210x 3-1:0.4: failed to get vendor val 0x370b size 1: -71 [ 527.612539][ T5981] cp210x 3-1:0.4: querying part number failed [ 527.671121][ T5981] usb 3-1: cp210x converter now attached to ttyUSB0 [ 527.707131][ T5981] usb 3-1: USB disconnect, device number 113 [ 527.729417][ T5981] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 527.753457][T12218] netlink: 'syz.2.1842': attribute type 12 has an invalid length. [ 527.759460][ T5981] cp210x 3-1:0.4: device disconnected [ 528.081119][T12228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.114161][ T5981] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 528.132484][T12230] fuse: Unknown parameter '' [ 528.198216][T12231] fuse: Bad value for 'fd' [ 528.277706][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.290105][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.313533][ T5981] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 528.337457][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.363503][ T5981] usb 3-1: config 0 descriptor?? [ 528.788743][ T5981] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 528.814838][ T5981] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 528.826412][ T5981] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 528.854093][ T5981] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 528.862152][ T5981] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 528.880010][ T5981] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 528.897578][ T5981] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 528.925397][ T5981] pyra 0003:1E7D:2CF6.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 529.270810][T12240] binder: BINDER_SET_CONTEXT_MGR already set [ 529.279171][T12240] binder: 12239:12240 ioctl 4018620d 80000240 returned -16 [ 529.404036][T12218] fuse: Bad value for 'fd' [ 529.410790][ T5981] pyra 0003:1E7D:2CF6.0025: couldn't init struct pyra_device [ 529.424006][ T5981] pyra 0003:1E7D:2CF6.0025: couldn't install mouse [ 529.433659][ T5981] pyra 0003:1E7D:2CF6.0025: probe with driver pyra failed with error -71 [ 529.475672][ T5981] usb 3-1: USB disconnect, device number 114 [ 529.508691][ T5918] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 529.674344][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 529.681223][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.699229][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.709962][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 529.743015][ T5918] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 529.762929][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.782603][ T5918] usb 1-1: config 0 descriptor?? [ 529.789503][T12253] netlink: 'syz.1.1852': attribute type 1 has an invalid length. [ 529.854939][T12253] netlink: 'syz.1.1852': attribute type 1 has an invalid length. [ 529.865095][ T1208] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 529.877536][T12253] netlink: 'syz.1.1852': attribute type 1 has an invalid length. [ 530.034135][ T1208] usb 5-1: Using ep0 maxpacket: 16 [ 530.091777][ T1208] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 530.120147][ T1208] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 530.143839][ T1208] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.184577][ T1208] usb 5-1: config 1 interface 0 has no altsetting 0 [ 530.217700][ T1208] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 530.229100][T12238] random: crng reseeded on system resumption [ 530.253245][ T5918] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 530.282242][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.297321][ T1208] usb 5-1: Product: syz [ 530.311907][ T1208] usb 5-1: Manufacturer: syz [ 530.317062][ T1208] usb 5-1: SerialNumber: syz [ 530.349017][ T5918] shield 0003:0955:7214.0026: Registered Thunderstrike controller [ 530.375699][ T5918] shield 0003:0955:7214.0026: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 530.491213][ T5981] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 530.524644][ T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 530.533668][ T5918] usb 1-1: USB disconnect, device number 102 [ 530.560226][ T5981] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 530.609405][ T5981] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 530.639832][ T1208] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 101 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 530.645948][ T5981] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 530.723862][ T9] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 530.733238][ T9] usb 3-1: config 0 has no interface number 0 [ 530.742125][ T9] usb 3-1: too many endpoints for config 0 interface 4 altsetting 73: 94, using maximum allowed: 30 [ 530.763247][ T9] usb 3-1: config 0 interface 4 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 94 [ 530.786978][ T9] usb 3-1: config 0 interface 4 has no altsetting 0 [ 530.797083][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 530.810132][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.824916][ T9] usb 3-1: config 0 descriptor?? [ 530.925161][ T1208] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 530.996659][T12263] FAULT_INJECTION: forcing a failure. [ 530.996659][T12263] name failslab, interval 1, probability 0, space 0, times 0 [ 531.010835][T12263] CPU: 0 UID: 0 PID: 12263 Comm: syz.3.1856 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.010867][T12263] Tainted: [L]=SOFTLOCKUP [ 531.010874][T12263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 531.010884][T12263] Call Trace: [ 531.010893][T12263] [ 531.010901][T12263] dump_stack_lvl+0x189/0x250 [ 531.010926][T12263] ? __pfx____ratelimit+0x10/0x10 [ 531.010944][T12263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.010965][T12263] ? __pfx__printk+0x10/0x10 [ 531.010991][T12263] ? __pfx___might_resched+0x10/0x10 [ 531.011011][T12263] ? fs_reclaim_acquire+0x7d/0x100 [ 531.011036][T12263] should_fail_ex+0x414/0x560 [ 531.011072][T12263] should_failslab+0xa8/0x100 [ 531.011095][T12263] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 531.011122][T12263] ? __alloc_skb+0x255/0x430 [ 531.011139][T12263] ? napi_skb_cache_get+0x4a5/0x780 [ 531.011156][T12263] ? napi_skb_cache_get+0x151/0x780 [ 531.011178][T12263] __alloc_skb+0x255/0x430 [ 531.011198][T12263] ? __pfx___alloc_skb+0x10/0x10 [ 531.011216][T12263] ? get_page_from_freelist+0x2365/0x2440 [ 531.011236][T12263] alloc_skb_with_frags+0xca/0x890 [ 531.011248][T12263] ? __might_fault+0xb0/0x130 [ 531.011281][T12263] sock_alloc_send_pskb+0x84d/0x980 [ 531.011319][T12263] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 531.011347][T12263] ? __lock_acquire+0x6b6/0x2cf0 [ 531.011358][T12263] ? iov_iter_advance+0x8b/0x1c0 [ 531.011370][T12263] tun_get_user+0xa4e/0x3dc0 [ 531.011392][T12263] ? aa_file_perm+0x44c/0x1530 [ 531.011405][T12263] ? __pfx_tun_get_user+0x10/0x10 [ 531.011418][T12263] ? __lock_acquire+0x6b6/0x2cf0 [ 531.011428][T12263] ? kstrtoull+0x12f/0x1d0 [ 531.011446][T12263] ? ref_tracker_alloc+0x318/0x460 [ 531.011463][T12263] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 531.011486][T12263] ? tun_get+0x1c/0x2f0 [ 531.011511][T12263] ? tun_get+0x1c/0x2f0 [ 531.011524][T12263] ? tun_get+0x1c/0x2f0 [ 531.011537][T12263] tun_chr_write_iter+0x113/0x200 [ 531.011550][T12263] vfs_write+0x5c9/0xb30 [ 531.011562][T12263] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 531.011574][T12263] ? __pfx_vfs_write+0x10/0x10 [ 531.011588][T12263] ? __fget_files+0x2a/0x420 [ 531.011605][T12263] ksys_write+0x145/0x250 [ 531.011614][T12263] ? exc_page_fault+0x82/0x100 [ 531.011625][T12263] ? __pfx_ksys_write+0x10/0x10 [ 531.011636][T12263] ? __do_fast_syscall_32+0xbe/0x590 [ 531.011649][T12263] __do_fast_syscall_32+0x1f7/0x590 [ 531.011660][T12263] ? rcu_is_watching+0x15/0xb0 [ 531.011671][T12263] ? do_fast_syscall_32+0x34/0x80 [ 531.011684][T12263] do_fast_syscall_32+0x34/0x80 [ 531.011696][T12263] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.011708][T12263] RIP: 0023:0xf70ed539 [ 531.011718][T12263] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 531.011726][T12263] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 531.011738][T12263] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 531.011745][T12263] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.011751][T12263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.011757][T12263] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 531.011763][T12263] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.011778][T12263] [ 531.354989][ T1208] usb 2-1: device descriptor read/64, error -71 [ 531.409665][T12267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.426960][T12267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.503659][T12272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.526586][T12272] fuse: Unknown parameter '' [ 531.556519][T12274] binder: BINDER_SET_CONTEXT_MGR already set [ 531.564345][T12274] binder: 12273:12274 ioctl 4018620d 80000240 returned -16 [ 531.610864][ T1208] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 531.669618][T12278] syzkaller1: entered allmulticast mode [ 531.753888][ T1208] usb 2-1: device descriptor read/64, error -71 [ 531.874150][ T1208] usb usb2-port1: attempt power cycle [ 531.973870][ T5930] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 531.983858][ T5887] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 532.133905][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 532.139203][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 532.148469][ T5887] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 532.157293][ T5887] usb 1-1: can't read configurations, error -61 [ 532.168228][ T5930] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 532.177392][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.185542][ T5930] usb 4-1: Product: syz [ 532.189764][ T5930] usb 4-1: Manufacturer: syz [ 532.194500][ T5930] usb 4-1: SerialNumber: syz [ 532.202544][ T5930] usb 4-1: config 0 descriptor?? [ 532.210492][ T5930] xr_serial 4-1:0.0: skipping garbage [ 532.216115][ T1208] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 532.254809][ T1208] usb 2-1: device descriptor read/8, error -71 [ 532.303876][ T5887] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 532.419648][ T5918] usb 4-1: USB disconnect, device number 114 [ 532.454084][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 532.461697][ T5887] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 532.490636][ T5887] usb 1-1: can't read configurations, error -61 [ 532.502874][ T5930] usb 5-1: USB disconnect, device number 101 [ 532.508950][ T1208] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 532.519805][ T5887] usb usb1-port1: attempt power cycle [ 532.535607][ T5930] usblp0: removed [ 532.554564][ T1208] usb 2-1: device descriptor read/8, error -71 [ 532.674686][ T1208] usb usb2-port1: unable to enumerate USB device [ 532.895063][ T5887] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 532.914864][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 532.922099][ T5887] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 532.929798][ T5887] usb 1-1: can't read configurations, error -61 [ 532.943877][ T5930] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 533.064021][ T5887] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 533.084456][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 533.091666][ T5887] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 533.099483][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 533.104783][ T5887] usb 1-1: can't read configurations, error -61 [ 533.111875][ T5887] usb usb1-port1: unable to enumerate USB device [ 533.119083][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.131740][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 533.147586][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 533.156875][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.166626][ T9] usb 3-1: string descriptor 0 read error: -71 [ 533.176208][ T5930] usb 5-1: Product: syz [ 533.180460][ T5930] usb 5-1: Manufacturer: syz [ 533.186086][ T9] cp210x 3-1:0.4: cp210x converter detected [ 533.192230][ T5930] usb 5-1: SerialNumber: syz [ 533.197585][ T9] cp210x 3-1:0.4: failed to get vendor val 0x370b size 1: -71 [ 533.206429][ T9] cp210x 3-1:0.4: querying part number failed [ 533.220581][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 533.243835][ T9] usb 3-1: USB disconnect, device number 115 [ 533.263990][ T5887] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 533.275135][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 533.285922][ T9] cp210x 3-1:0.4: device disconnected [ 533.428016][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 533.456248][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 533.471660][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.498310][ T5930] usb 5-1: 0:2 : does not exist [ 533.503864][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.529579][ T5930] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 533.544130][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 533.578812][ T5930] usb 5-1: USB disconnect, device number 102 [ 533.586035][ T5887] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 533.602710][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.649808][ T5887] usb 4-1: config 0 descriptor?? [ 533.679427][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.080227][T12289] random: crng reseeded on system resumption [ 534.174859][ T5887] input: HID 0955:7214 Haptics as /devices/virtual/input/input36 [ 534.255953][ T5887] shield 0003:0955:7214.0027: Registered Thunderstrike controller [ 534.266322][ T5887] shield 0003:0955:7214.0027: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 534.356169][ T9] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 534.377582][ T5887] usb 4-1: USB disconnect, device number 115 [ 534.385160][ T5918] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 534.407017][ T9] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 534.426279][ T9] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 534.474796][ T9] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 534.544289][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 534.562183][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.569460][T12309] binder: 12308:12309 ioctl c0306201 0 returned -14 [ 534.589932][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.604386][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 534.620091][ T5918] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 534.634951][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.688840][ T5918] usb 5-1: config 0 descriptor?? [ 534.812321][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1873'. [ 535.084178][ T5981] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 535.114225][ T5915] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 535.135051][T12300] random: crng reseeded on system resumption [ 535.168220][ T5918] input: HID 0955:7214 Haptics as /devices/virtual/input/input37 [ 535.227645][ T5918] shield 0003:0955:7214.0028: Registered Thunderstrike controller [ 535.244113][ T5981] usb 1-1: Using ep0 maxpacket: 32 [ 535.271937][ T5918] shield 0003:0955:7214.0028: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 535.286334][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 535.297211][ T5981] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 535.313992][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.322015][ T5981] usb 1-1: Product: syz [ 535.350081][ T5981] usb 1-1: Manufacturer: syz [ 535.362095][ T5981] usb 1-1: SerialNumber: syz [ 535.379236][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 535.386953][ T5933] shield 0003:0955:7214.0028: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 535.408188][ T5933] shield 0003:0955:7214.0028: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 535.438022][ T5918] usb 5-1: USB disconnect, device number 103 [ 535.447945][ T5933] shield 0003:0955:7214.0028: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 535.459989][ T5981] usb 1-1: config 0 descriptor?? [ 535.516454][ T5981] usb 1-1: selecting invalid altsetting 3 [ 535.531247][ T5933] shield 0003:0955:7214.0028: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 535.547952][ T5981] comedi comedi5: could not set alternate setting 3 in high speed [ 535.570978][ T5915] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 535.583478][ T5981] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 535.613525][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 535.633308][ T5981] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 535.644540][ T5915] usb 2-1: Product: syz [ 535.648720][ T5915] usb 2-1: Manufacturer: syz [ 535.662666][ T5915] usb 2-1: SerialNumber: syz [ 535.683949][ T5887] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 535.703684][ T5915] usb 2-1: config 0 descriptor?? [ 535.873852][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 535.884395][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.898692][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.911589][ T5887] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 535.921705][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.944158][ T5887] usb 4-1: config 0 descriptor?? [ 535.956743][ T5887] hub 4-1:0.0: USB hub found [ 536.168118][ T5887] hub 4-1:0.0: 1 port detected [ 536.225635][ T5915] usb 1-1: USB disconnect, device number 107 [ 536.533897][ T9] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 536.604421][ T5915] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 536.697584][ T9] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 536.706085][ T9] usb 5-1: config 0 has no interface number 0 [ 536.712260][ T9] usb 5-1: too many endpoints for config 0 interface 4 altsetting 73: 94, using maximum allowed: 30 [ 536.723486][ T9] usb 5-1: config 0 interface 4 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 94 [ 536.736950][ T9] usb 5-1: config 0 interface 4 has no altsetting 0 [ 536.743623][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 536.752956][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.756777][ T5915] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 536.765332][ T9] usb 5-1: config 0 descriptor?? [ 536.779598][ T5915] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 536.782789][ T5887] hub 4-1:0.0: activate --> -90 [ 536.794476][ T5915] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 536.805965][ T5915] usb 1-1: config 220 has no interface number 2 [ 536.812809][ T5915] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 536.826888][ T5915] usb 1-1: config 220 interface 0 has no altsetting 0 [ 536.835381][ T5915] usb 1-1: config 220 interface 76 has no altsetting 0 [ 536.842290][ T5915] usb 1-1: config 220 interface 1 has no altsetting 0 [ 536.851810][ T5915] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 536.860928][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.869126][ T5915] usb 1-1: Product: syz [ 536.873496][ T5915] usb 1-1: Manufacturer: syz [ 536.878777][ T5915] usb 1-1: SerialNumber: syz [ 536.996931][T12320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.006379][T12320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.105898][ T5915] usb 1-1: selecting invalid altsetting 0 [ 537.120454][ T5915] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 537.129187][ T5915] uvcvideo 1-1:220.0: No valid video chain found. [ 537.148703][ T5915] usb 1-1: selecting invalid altsetting 0 [ 537.155468][ T5915] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 537.168801][ T5915] usb 1-1: USB disconnect, device number 108 [ 537.277835][ T5930] usb 4-1: USB disconnect, device number 116 [ 537.444652][T12332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1877'. [ 537.736678][ T5918] usb 2-1: USB disconnect, device number 104 [ 538.051072][T12344] binder: 12343:12344 ioctl c0306201 0 returned -14 [ 538.216772][T12347] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1884'. [ 538.246723][T12347] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1884'. [ 538.412511][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 538.544713][ T5918] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 538.664711][ T5915] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 538.705188][ T5918] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 538.727079][ T5918] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 538.738024][ T5918] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 538.750284][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 538.761571][ T5918] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 538.771099][ T5918] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 538.782096][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 538.789975][ T5918] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 538.799720][ T5918] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 538.811527][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 538.818658][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 538.828930][ T5918] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 538.838759][ T5918] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 538.850396][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 538.858256][ T5915] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 538.868065][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.877187][ T5915] usb 2-1: Product: syz [ 538.881616][ T5915] usb 2-1: Manufacturer: syz [ 538.887020][ T5981] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 538.895479][ T5918] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 538.905260][ T5915] usb 2-1: SerialNumber: syz [ 538.912239][ T5918] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 538.925449][ T5915] usb 2-1: config 0 descriptor?? [ 538.944374][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 538.951893][ T5915] usb 2-1: selecting invalid altsetting 3 [ 538.958036][ T5915] comedi comedi5: could not set alternate setting 3 in high speed [ 538.966207][ T5915] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 538.975248][ T5918] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 538.987272][ T5918] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 538.999869][ T5915] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 539.015070][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 539.031778][ T5918] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.052163][ T5918] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.065683][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 539.073687][ T5918] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 539.083151][ T5918] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 539.095262][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.109290][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.119786][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 539.127127][ T5981] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 539.139314][ T5918] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 539.155230][ T5918] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 539.171278][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.185439][ T5918] usb 1-1: Product: syz [ 539.194511][ T5918] usb 1-1: Manufacturer: syz [ 539.200163][ T5981] usb 3-1: config 0 descriptor?? [ 539.211830][ T5918] usb 1-1: SerialNumber: syz [ 539.231973][ T5918] usb 1-1: config 0 descriptor?? [ 539.234181][ T9] usb 5-1: string descriptor 0 read error: -71 [ 539.262745][ T5918] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 539.267982][ T9] cp210x 5-1:0.4: cp210x converter detected [ 539.295201][ T9] cp210x 5-1:0.4: failed to get vendor val 0x370b size 1: -71 [ 539.324742][ T9] cp210x 5-1:0.4: querying part number failed [ 539.363974][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 539.382095][ T9] usb 5-1: USB disconnect, device number 104 [ 539.393464][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 539.405266][ T9] cp210x 5-1:0.4: device disconnected [ 539.524197][ T5918] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 539.636962][T12357] bridge0: port 3(syz_tun) entered blocking state [ 539.644847][T12357] bridge0: port 3(syz_tun) entered disabled state [ 539.655398][T12357] syz_tun: entered allmulticast mode [ 539.673011][ T5930] usb 2-1: USB disconnect, device number 105 [ 539.676770][T12357] syz_tun: entered promiscuous mode [ 539.684947][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 539.723570][T12378] input: syz0 as /devices/virtual/input/input38 [ 539.731383][T12357] bridge0: port 3(syz_tun) entered blocking state [ 539.737956][T12357] bridge0: port 3(syz_tun) entered forwarding state [ 539.777876][ T5918] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 539.805182][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 539.827154][ T5918] usb 4-1: Product: syz [ 539.831369][ T5918] usb 4-1: Manufacturer: syz [ 539.845302][ T9] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 539.863278][ T5918] usb 4-1: SerialNumber: syz [ 539.890243][ T5918] usb 4-1: config 0 descriptor?? [ 540.026076][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 540.027598][ T5918] usb 1-1: USB disconnect, device number 109 [ 540.040456][ T9] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 540.047606][ T5918] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 540.054659][ T9] usb 5-1: config 0 has no interface number 0 [ 540.061055][ T9] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 540.075677][ T9] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 540.096661][ T5981] usbhid 3-1:0.0: can't add hid device: -32 [ 540.096725][ T9] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 540.106127][T12357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.116921][ T9] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 540.121260][ T5981] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 540.156229][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 540.158061][T12357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.176686][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.187683][ T9] usb 5-1: Product: syz [ 540.191868][ T9] usb 5-1: Manufacturer: syz [ 540.196582][ T5930] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 540.206582][ T9] usb 5-1: SerialNumber: syz [ 540.224550][ T9] usb 5-1: config 0 descriptor?? [ 540.232107][T12376] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 540.250024][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input39 [ 540.298985][ T5981] usb 3-1: USB disconnect, device number 116 [ 540.354717][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 540.363165][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.381706][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.392124][ T5930] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 540.401405][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.417384][ T5930] usb 2-1: config 0 descriptor?? [ 540.431352][ T5930] hub 2-1:0.0: USB hub found [ 540.462516][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1893'. [ 540.478301][T12375] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.515781][T12376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.527441][T12376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.531141][T12375] bridge_slave_0 (unregistering): left allmulticast mode [ 540.543579][T12375] bridge_slave_0 (unregistering): left promiscuous mode [ 540.551181][T12375] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.644125][ T5930] hub 2-1:0.0: 1 port detected [ 540.660958][ T9] usb 5-1: USB disconnect, device number 105 [ 540.705619][T12382] binder: 12381:12382 ioctl c0306201 0 returned -14 [ 540.828165][T12385] fuse: Unknown parameter 'E 9 ' [ 540.846712][T12385] netlink: 'syz.0.1896': attribute type 21 has an invalid length. [ 540.873823][T12385] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1896'. [ 540.896703][T12385] netlink: 'syz.0.1896': attribute type 5 has an invalid length. [ 540.910760][T12385] netlink: 'syz.0.1896': attribute type 6 has an invalid length. [ 540.921537][T12385] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1896'. [ 541.176274][ T5918] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 541.279015][ T5930] hub 2-1:0.0: activate --> -90 [ 541.356809][ T5918] usb 1-1: not running at top speed; connect to a high speed hub [ 541.367113][ T5918] usb 1-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 541.378106][ T5918] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.387689][ T5918] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 541.403572][ T5918] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.413357][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.421952][ T5918] usb 1-1: Product: syz [ 541.426671][ T5918] usb 1-1: Manufacturer: syz [ 541.431292][ T5918] usb 1-1: SerialNumber: syz [ 541.485697][T12380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.498407][T12380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.772933][ T9] usb 2-1: USB disconnect, device number 106 [ 542.038472][ T9] usb 4-1: USB disconnect, device number 117 [ 542.389891][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1904'. [ 542.564393][ T5981] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 542.644450][ T5933] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 542.726688][ T5981] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 542.739297][ T5981] usb 3-1: config 0 has no interface number 0 [ 542.750516][ T5981] usb 3-1: too many endpoints for config 0 interface 4 altsetting 73: 94, using maximum allowed: 30 [ 542.764169][ T5981] usb 3-1: config 0 interface 4 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 94 [ 542.780996][ T5981] usb 3-1: config 0 interface 4 has no altsetting 0 [ 542.788205][ T5981] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 542.798224][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.815274][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 542.822100][ T5981] usb 3-1: config 0 descriptor?? [ 542.835468][ T5933] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 542.846855][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.855475][ T5933] usb 2-1: Product: syz [ 542.859950][ T5933] usb 2-1: Manufacturer: syz [ 542.865322][ T5933] usb 2-1: SerialNumber: syz [ 542.873061][ T5933] usb 2-1: config 0 descriptor?? [ 542.889793][ T5933] usb 2-1: selecting invalid altsetting 3 [ 542.895831][ T5933] comedi comedi5: could not set alternate setting 3 in high speed [ 542.904391][ T5933] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 542.915715][ T5933] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 543.208350][T12421] @: renamed from vlan0 (while UP) [ 543.417274][T12430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 543.436296][T12430] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1907'. [ 543.594393][ T5915] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 543.619471][ T9] usb 2-1: USB disconnect, device number 107 [ 543.756023][ T5915] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 543.775428][ T5918] usb 1-1: 0:2 : does not exist [ 543.798639][ T5915] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 543.824860][ T5918] usb 1-1: USB disconnect, device number 110 [ 543.848004][ T5915] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 543.890818][ T5915] usb 4-1: config 220 has no interface number 2 [ 543.926243][ T5915] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 543.954664][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.977775][ T5915] usb 4-1: config 220 interface 0 has no altsetting 0 [ 544.002155][ T5915] usb 4-1: config 220 interface 76 has no altsetting 0 [ 544.024439][ T5915] usb 4-1: config 220 interface 1 has no altsetting 0 [ 544.033818][ T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 544.066167][ T5915] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 544.101264][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.128394][ T5915] usb 4-1: Product: syz [ 544.142527][ T5915] usb 4-1: Manufacturer: syz [ 544.162720][ T5915] usb 4-1: SerialNumber: syz [ 544.203874][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 544.220732][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.244503][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.269089][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 544.303527][ T9] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 544.340750][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.375354][ T9] usb 2-1: config 0 descriptor?? [ 544.454892][ T5915] usb 4-1: selecting invalid altsetting 0 [ 544.494618][ T5915] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 544.523139][ T5915] uvcvideo 4-1:220.0: No valid video chain found. [ 544.571473][ T5915] usb 4-1: selecting invalid altsetting 0 [ 544.585566][ T5915] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 544.639805][ T5915] usb 4-1: USB disconnect, device number 118 [ 544.831663][T12433] random: crng reseeded on system resumption [ 544.926863][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input40 [ 545.007594][ T9] shield 0003:0955:7214.0029: Registered Thunderstrike controller [ 545.024035][ T9] shield 0003:0955:7214.0029: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 545.137100][ T5887] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 545.161338][ T9] usb 2-1: USB disconnect, device number 108 [ 545.185536][ T5887] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 545.229575][ T5887] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 545.291632][ T5887] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 545.320472][ T5981] usb 3-1: string descriptor 0 read error: -71 [ 545.332013][ T5981] cp210x 3-1:0.4: cp210x converter detected [ 545.342682][ T5981] cp210x 3-1:0.4: failed to get vendor val 0x370b size 1: -71 [ 545.356657][ T5981] cp210x 3-1:0.4: querying part number failed [ 545.380222][ T5981] usb 3-1: cp210x converter now attached to ttyUSB0 [ 545.401693][ T5981] usb 3-1: USB disconnect, device number 117 [ 545.418232][ T5981] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 545.437288][ T5981] cp210x 3-1:0.4: device disconnected [ 545.472828][T12442] ip6gre1: entered promiscuous mode [ 545.491024][T12442] ip6gre1: entered allmulticast mode [ 545.858305][T12458] netlink: 'syz.0.1918': attribute type 10 has an invalid length. [ 545.881095][T12458] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 545.913266][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 545.948355][T12462] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1920'. [ 546.183854][ T9] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 546.213806][ T5887] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 546.344025][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 546.354460][ T9] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 546.364017][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.372169][ T9] usb 4-1: Product: syz [ 546.376615][ T9] usb 4-1: Manufacturer: syz [ 546.381209][ T9] usb 4-1: SerialNumber: syz [ 546.387958][ T5887] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 546.396548][ T9] usb 4-1: config 0 descriptor?? [ 546.405744][ T5887] usb 3-1: config 0 has no interface number 0 [ 546.418346][ T5887] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 546.428531][ T9] usb 4-1: selecting invalid altsetting 3 [ 546.434833][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 546.442716][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.451665][ T9] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 546.459886][ T5887] usb 3-1: Product: syz [ 546.465589][ T5887] usb 3-1: Manufacturer: syz [ 546.471726][ T9] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 546.479964][ T5887] usb 3-1: SerialNumber: syz [ 546.486332][ T5887] usb 3-1: config 0 descriptor?? [ 546.720948][T12462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.731101][T12462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.776479][ T5887] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 546.798664][ T5887] usb 3-1: USB disconnect, device number 118 [ 546.814919][ T5981] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 546.996524][ T5981] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 547.005652][ T5981] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 547.015266][ T5981] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 547.029718][ T5981] usb 5-1: config 220 has no interface number 2 [ 547.039237][ T5981] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 547.053102][ T5981] usb 5-1: config 220 interface 0 has no altsetting 0 [ 547.060771][ T5981] usb 5-1: config 220 interface 76 has no altsetting 0 [ 547.068322][ T5981] usb 5-1: config 220 interface 1 has no altsetting 0 [ 547.077353][ T5981] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 547.087264][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.095614][ T5981] usb 5-1: Product: syz [ 547.099844][ T5981] usb 5-1: Manufacturer: syz [ 547.104949][ T5981] usb 5-1: SerialNumber: syz [ 547.153562][ T5887] usb 4-1: USB disconnect, device number 119 [ 547.326724][ T5981] usb 5-1: selecting invalid altsetting 0 [ 547.338140][ T5981] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 547.354562][ T5981] uvcvideo 5-1:220.0: No valid video chain found. [ 547.376514][ T5981] usb 5-1: selecting invalid altsetting 0 [ 547.382295][ T5981] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 547.420530][ T5981] usb 5-1: USB disconnect, device number 106 [ 547.513835][ T5887] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 547.656082][T12501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 547.657498][T12501] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1933'. [ 547.693815][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 547.700682][ T5887] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 547.714378][ T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 547.722765][ T5887] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 547.750926][ T5887] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 547.776940][ T5887] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 547.811904][ T5887] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 547.821725][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.864937][ T5887] usb 2-1: Product: syz [ 547.875359][ T5887] usb 2-1: Manufacturer: syz [ 547.880096][ T5887] usb 2-1: SerialNumber: syz [ 547.894340][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 547.915728][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 547.928773][ T5887] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input41 [ 547.950624][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 547.970728][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.994926][ T9] usb 4-1: Product: syz [ 548.007700][ T9] usb 4-1: Manufacturer: syz [ 548.018988][ T9] usb 4-1: SerialNumber: syz [ 548.033259][ T9] usb 4-1: config 0 descriptor?? [ 548.042274][ T9] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 548.123881][ T5887] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 548.144232][ T5981] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 548.155902][ T5887] (id 0x00) [ 548.234936][ T5887] rc_core: IR keymap rc-imon-pad not found [ 548.246093][ T5887] Registered IR keymap rc-empty [ 548.262037][ T5887] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 548.276967][ T5887] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 548.306462][ T5981] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 548.336838][ T5887] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 548.346976][ T5981] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 548.347005][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=31, SerialNumber=3 [ 548.347024][ T5981] usb 5-1: Product: syz [ 548.347037][ T5981] usb 5-1: Manufacturer: syz [ 548.347051][ T5981] usb 5-1: SerialNumber: syz [ 548.426175][ T5981] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 548.444323][ T5981] dvb-usb: bulk message failed: -22 (3/0) [ 548.477266][ T5981] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 548.503902][ T5887] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input42 [ 548.540791][ T5981] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 548.551653][ T5981] dvb_usb_umt_010 5-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 548.576684][ T5887] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:109> initialized [ 548.590767][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 548.652748][ T5887] usb 2-1: USB disconnect, device number 109 [ 548.715045][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 549.176292][T12518] fuse: Invalid rootmode [ 549.848583][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 550.054324][ T5981] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 550.114687][ T5887] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 550.214201][ T5981] usb 2-1: Using ep0 maxpacket: 16 [ 550.228068][ T5981] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 550.256770][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 550.292835][ T5981] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 550.303819][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 550.322891][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.343331][ T5981] usb 2-1: Product: syz [ 550.343782][ T5887] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 550.356892][ T5981] usb 2-1: Manufacturer: syz [ 550.357459][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.370467][ T5887] usb 1-1: Product: syz [ 550.374984][ T5981] usb 2-1: SerialNumber: syz [ 550.375154][ T5887] usb 1-1: Manufacturer: syz [ 550.384948][ T5887] usb 1-1: SerialNumber: syz [ 550.392695][ T5981] usb 2-1: config 0 descriptor?? [ 550.440982][ T5887] usb 1-1: config 0 descriptor?? [ 550.443686][ T5981] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 550.469625][ T5981] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 550.499267][ T5887] usb 1-1: selecting invalid altsetting 3 [ 550.507931][ T5887] comedi comedi5: could not set alternate setting 3 in high speed [ 550.516964][ T5887] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 550.566044][ T5887] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 550.771326][ T9] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 550.781492][ T9] visor 4-1:0.0: probe with driver visor failed with error -71 [ 550.794982][ T9] usb 4-1: USB disconnect, device number 120 [ 550.950958][ T5918] usb 5-1: USB disconnect, device number 107 [ 551.086295][ T5981] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 551.100313][ T5981] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 551.312501][ T9] usb 1-1: USB disconnect, device number 111 [ 551.455755][T12544] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 551.455755][T12544] program syz.4.1944 not setting count and/or reply_len properly [ 551.719736][ T5981] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 551.960734][ T5981] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 551.978437][ T5981] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 552.014430][ T5981] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 552.041517][ T5981] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 552.080961][ T5981] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 552.121250][ T5981] usb 2-1: USB disconnect, device number 110 [ 552.923872][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 553.103778][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 553.126631][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.145677][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.163832][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 553.178604][ T9] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 553.192691][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.243028][ T9] usb 3-1: config 0 descriptor?? [ 553.334774][ T5981] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 553.413080][T12578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 553.502903][ T5981] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 553.521996][T12571] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1951'. [ 553.531215][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.542643][ T5981] usb 1-1: Product: syz [ 553.561456][ T5981] usb 1-1: Manufacturer: syz [ 553.577723][ T5981] usb 1-1: SerialNumber: syz [ 553.596756][ T5981] usb 1-1: config 0 descriptor?? [ 553.661404][T12564] random: crng reseeded on system resumption [ 553.718281][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input44 [ 553.783001][ T9] shield 0003:0955:7214.002A: Registered Thunderstrike controller [ 553.813485][ T9] shield 0003:0955:7214.002A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 553.932874][ T5930] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 553.933293][ T5915] usb 3-1: USB disconnect, device number 119 [ 553.988530][ T5930] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 554.021844][ T5981] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 554.031664][ T5930] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 554.063445][ T5930] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 554.187857][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1956'. [ 554.504231][ T5930] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 554.568878][T12587] xt_limit: Overflow, try lower: 324382443/4199692674 [ 554.663802][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 554.684239][ T5930] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 554.706658][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.733870][ T5930] usb 4-1: Product: syz [ 554.746016][ T5930] usb 4-1: Manufacturer: syz [ 554.746038][ T5930] usb 4-1: SerialNumber: syz [ 554.756192][ T5930] usb 4-1: config 0 descriptor?? [ 554.774862][ T5930] usb 4-1: selecting invalid altsetting 3 [ 554.774900][ T5930] comedi comedi5: could not set alternate setting 3 in high speed [ 554.774917][ T5930] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 554.777916][ T5930] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 555.043937][ T5930] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 555.207882][ T5930] usb 5-1: unable to get BOS descriptor or descriptor too short [ 555.216074][ T5930] usb 5-1: not running at top speed; connect to a high speed hub [ 555.225600][ T5930] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 555.233794][ T5930] usb 5-1: config 8 has no interface number 0 [ 555.240145][ T5930] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64 [ 555.251124][ T5930] usb 5-1: config 8 interface 24 has no altsetting 0 [ 555.260192][ T5930] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 555.271110][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.280292][ T5930] usb 5-1: Product: syz [ 555.288204][ T5930] usb 5-1: Manufacturer: syz [ 555.292858][ T5930] usb 5-1: SerialNumber: syz [ 555.303418][T12596] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 555.445513][ T5981] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 555.581746][ T5887] usb 4-1: USB disconnect, device number 121 [ 555.637215][ T5930] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 555.651704][ T5930] usb 5-1: USB disconnect, device number 108 [ 556.093838][ T5930] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 556.197737][T12625] syzkaller0: entered promiscuous mode [ 556.203215][T12625] syzkaller0: entered allmulticast mode [ 556.253815][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 556.260176][ T5930] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 556.268940][ T5930] usb 4-1: config 0 has no interface number 0 [ 556.275127][ T5930] usb 4-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 556.284381][ T5981] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 556.286860][ T5930] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 556.307549][ T5930] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 556.316984][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.327035][ T5930] usb 4-1: Product: syz [ 556.331196][ T5930] usb 4-1: Manufacturer: syz [ 556.335837][ T5930] usb 4-1: SerialNumber: syz [ 556.342295][ T5930] usb 4-1: config 0 descriptor?? [ 556.348628][T12608] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 556.404587][ T5915] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 556.444023][ T5918] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 556.453802][ T5981] usb 3-1: Using ep0 maxpacket: 16 [ 556.462694][ T5981] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 556.472143][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 556.480760][ T5981] usb 3-1: Product: syz [ 556.489532][ T5981] usb 3-1: Manufacturer: syz [ 556.495559][ T5981] usb 3-1: SerialNumber: syz [ 556.502518][ T5981] usb 3-1: config 0 descriptor?? [ 556.559292][ T5930] ath6kl: Failed to submit usb control message: -71 [ 556.565089][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 556.571443][ T5930] ath6kl: unable to send the bmi data to the device: -71 [ 556.581336][ T5930] ath6kl: Unable to send get target info: -71 [ 556.582361][ T5915] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 556.590421][ T5930] ath6kl: Failed to init ath6kl core: -71 [ 556.601014][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 556.611189][ T5930] ath6kl_usb 4-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 556.636045][ T5930] usb 4-1: USB disconnect, device number 122 [ 556.638305][ T5915] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.666791][ T5918] usb 5-1: config 0 has an invalid interface number: 191 but max is 0 [ 556.675736][ T5918] usb 5-1: config 0 has no interface number 0 [ 556.682321][ T5918] usb 5-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 556.693148][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 556.700398][ T5915] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 556.710146][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.720495][ T5918] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 556.731968][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.745409][ T5915] usb 2-1: config 0 descriptor?? [ 556.751531][ T5918] usb 5-1: Product: syz [ 556.757944][ T5918] usb 5-1: Manufacturer: syz [ 556.762540][ T5918] usb 5-1: SerialNumber: syz [ 556.782971][ T5918] usb 5-1: config 0 descriptor?? [ 556.791670][T12625] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 556.966685][ T5930] usb 1-1: USB disconnect, device number 112 [ 557.003535][T12625] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 557.177469][ T5915] lenovo 0003:17EF:60B5.002B: hidraw0: USB HID v0.09 Device [HID 17ef:60b5] on usb-dummy_hcd.1-1/input0 [ 557.221549][ T5918] asix 5-1:0.191 (unnamed net_device) (uninitialized): invalid hw address, using random [ 557.323895][ T5930] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 557.484590][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 557.512542][ T5887] usb 2-1: USB disconnect, device number 111 [ 557.520781][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.549691][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.567136][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 557.589977][ T5930] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 557.602613][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.630098][ T5930] usb 1-1: config 0 descriptor?? [ 557.931550][ T5918] asix 5-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 557.945881][ T5918] asix 5-1:0.191 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 557.972614][ T5918] asix 5-1:0.191: probe with driver asix failed with error -71 [ 557.997171][ T5918] usb 5-1: USB disconnect, device number 109 [ 558.065166][T12628] random: crng reseeded on system resumption [ 558.099420][ T5930] input: HID 0955:7214 Haptics as /devices/virtual/input/input45 [ 558.131687][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1973'. [ 558.176992][ T5930] shield 0003:0955:7214.002C: Registered Thunderstrike controller [ 558.194465][ T5930] shield 0003:0955:7214.002C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 558.337962][T12627] PM: hibernation: Basic memory bitmaps freed [ 558.338658][ T5887] usb 1-1: USB disconnect, device number 113 [ 558.341676][ T9] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 558.341717][ T9] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 558.341755][ T9] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 558.341787][ T9] shield 0003:0955:7214.002C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 558.347981][ T5887] ------------[ cut here ]------------ [ 558.347996][ T5887] workqueue: work disable count underflowed [ 558.348007][ T5887] WARNING: kernel/workqueue.c:4359 at enable_work+0x273/0x2b0, CPU#0: kworker/0:4/5887 [ 558.348034][ T5887] Modules linked in: [ 558.348071][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.348086][ T5887] Tainted: [L]=SOFTLOCKUP [ 558.348091][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.348099][ T5887] Workqueue: usb_hub_wq hub_event [ 558.348113][ T5887] RIP: 0010:enable_work+0x273/0x2b0 [ 558.348126][ T5887] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 22 9e 36 00 90 0f 0b 90 e9 54 fe ff ff e8 14 9e 36 00 48 8d 3d 7d f6 f9 0d <67> 48 0f b9 3a 45 31 e4 e9 67 fe ff ff e8 fb 9d 36 00 90 0f 0b 90 [ 558.348136][ T5887] RSP: 0018:ffffc9000426f020 EFLAGS: 00010083 [ 558.348146][ T5887] RAX: ffffffff818b143c RBX: dffffc0000000000 RCX: 0000000000100000 [ 558.348154][ T5887] RDX: ffffc9001af77000 RSI: 00000000000056c1 RDI: ffffffff8f850ac0 [ 558.348162][ T5887] RBP: ffffc9000426f0d8 R08: ffff88802f93473f R09: 1ffff11005f268e7 [ 558.348170][ T5887] R10: dffffc0000000000 R11: ffffed1005f268e8 R12: 0000000000000000 [ 558.348177][ T5887] R13: 1ffff11005f268e7 R14: ffff88802f934738 R15: 001fffffffc00001 [ 558.348185][ T5887] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 558.348193][ T5887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.348201][ T5887] CR2: 0000000030b1aff8 CR3: 000000007ded0000 CR4: 00000000003526f0 [ 558.348211][ T5887] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 558.348218][ T5887] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 558.348225][ T5887] Call Trace: [ 558.348230][ T5887] [ 558.348239][ T5887] ? __pfx_enable_work+0x10/0x10 [ 558.348252][ T5887] ? __thermal_zone_cdev_unbind+0x485/0x4c0 [ 558.348269][ T5887] ? __cancel_work_sync+0x5c/0x110 [ 558.348283][ T5887] __cancel_work_sync+0xf7/0x110 [ 558.348297][ T5887] thermal_zone_device_unregister+0x23e/0x3f0 [ 558.348315][ T5887] power_supply_unregister+0xf9/0x140 [ 558.348330][ T5887] ? __pfx_shield_remove+0x10/0x10 [ 558.348343][ T5887] shield_remove+0x72/0x120 [ 558.348357][ T5887] hid_device_remove+0x228/0x370 [ 558.348372][ T5887] ? __pfx_hid_device_remove+0x10/0x10 [ 558.348386][ T5887] device_release_driver_internal+0x46f/0x800 [ 558.348402][ T5887] bus_remove_device+0x34d/0x440 [ 558.348419][ T5887] device_del+0x511/0x8e0 [ 558.348435][ T5887] ? __pfx_device_del+0x10/0x10 [ 558.348450][ T5887] hid_destroy_device+0x6b/0x1b0 [ 558.348466][ T5887] usbhid_disconnect+0x9f/0xc0 [ 558.348477][ T5887] usb_unbind_interface+0x26e/0x910 [ 558.348495][ T5887] ? __pfx_usb_unbind_interface+0x10/0x10 [ 558.348509][ T5887] device_release_driver_internal+0x4d9/0x800 [ 558.348524][ T5887] bus_remove_device+0x34d/0x440 [ 558.348541][ T5887] device_del+0x511/0x8e0 [ 558.348555][ T5887] ? __pfx_device_del+0x10/0x10 [ 558.348565][ T5887] ? kobject_put+0x531/0x570 [ 558.348582][ T5887] usb_disable_device+0x3d4/0x8e0 [ 558.348599][ T5887] usb_disconnect+0x32f/0x990 [ 558.348615][ T5887] hub_event+0x1ca9/0x4ef0 [ 558.348643][ T5887] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 558.348666][ T5887] ? __pfx_hub_event+0x10/0x10 [ 558.348678][ T5887] ? process_scheduled_works+0x9ef/0x1770 [ 558.348693][ T5887] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.348708][ T5887] ? process_scheduled_works+0x9ef/0x1770 [ 558.348717][ T5887] ? process_scheduled_works+0x9ef/0x1770 [ 558.348729][ T5887] process_scheduled_works+0xad1/0x1770 [ 558.348754][ T5887] ? __pfx_process_scheduled_works+0x10/0x10 [ 558.348774][ T5887] worker_thread+0x8a0/0xda0 [ 558.348792][ T5887] ? __kthread_parkme+0x7b/0x200 [ 558.348808][ T5887] kthread+0x711/0x8a0 [ 558.348823][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 558.348833][ T5887] ? __pfx_kthread+0x10/0x10 [ 558.348847][ T5887] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.348861][ T5887] ? lockdep_hardirqs_on+0x98/0x140 [ 558.348871][ T5887] ? __pfx_kthread+0x10/0x10 [ 558.348884][ T5887] ret_from_fork+0x599/0xb30 [ 558.348896][ T5887] ? __pfx_ret_from_fork+0x10/0x10 [ 558.348912][ T5887] ? __switch_to_asm+0x39/0x70 [ 558.348924][ T5887] ? __switch_to_asm+0x33/0x70 [ 558.348936][ T5887] ? __pfx_kthread+0x10/0x10 [ 558.348949][ T5887] ret_from_fork_asm+0x1a/0x30 [ 558.348971][ T5887] [ 558.348982][ T5887] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 558.348991][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.349005][ T5887] Tainted: [L]=SOFTLOCKUP [ 558.349009][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.349016][ T5887] Workqueue: usb_hub_wq hub_event [ 558.349028][ T5887] Call Trace: [ 558.349033][ T5887] [ 558.349038][ T5887] dump_stack_lvl+0x99/0x250 [ 558.349055][ T5887] ? __asan_memcpy+0x40/0x70 [ 558.349066][ T5887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.349079][ T5887] ? __pfx__printk+0x10/0x10 [ 558.349102][ T5887] vpanic+0x237/0x6d0 [ 558.349114][ T5887] ? __pfx_vpanic+0x10/0x10 [ 558.349125][ T5887] ? is_bpf_text_address+0x292/0x2b0 [ 558.349141][ T5887] ? is_bpf_text_address+0x26/0x2b0 [ 558.349161][ T5887] panic+0xb9/0xc0 [ 558.349173][ T5887] ? __pfx_panic+0x10/0x10 [ 558.349190][ T5887] ? ret_from_fork_asm+0x1a/0x30 [ 558.349206][ T5887] __warn+0x317/0x4b0 [ 558.349218][ T5887] ? enable_work+0x273/0x2b0 [ 558.349231][ T5887] ? enable_work+0x273/0x2b0 [ 558.349242][ T5887] __report_bug+0x288/0x500 [ 558.349253][ T5887] ? enable_work+0x273/0x2b0 [ 558.349275][ T5887] ? __pfx___report_bug+0x10/0x10 [ 558.349284][ T5887] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 558.349307][ T5887] ? rcu_is_watching+0x15/0xb0 [ 558.349322][ T5887] report_bug_entry+0x19a/0x290 [ 558.349333][ T5887] ? enable_work+0x273/0x2b0 [ 558.349344][ T5887] ? enable_work+0x278/0x2b0 [ 558.349356][ T5887] handle_bug+0xca/0x200 [ 558.349369][ T5887] exc_invalid_op+0x1a/0x50 [ 558.349381][ T5887] asm_exc_invalid_op+0x1a/0x20 [ 558.349391][ T5887] RIP: 0010:enable_work+0x273/0x2b0 [ 558.349403][ T5887] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 22 9e 36 00 90 0f 0b 90 e9 54 fe ff ff e8 14 9e 36 00 48 8d 3d 7d f6 f9 0d <67> 48 0f b9 3a 45 31 e4 e9 67 fe ff ff e8 fb 9d 36 00 90 0f 0b 90 [ 558.349412][ T5887] RSP: 0018:ffffc9000426f020 EFLAGS: 00010083 [ 558.349421][ T5887] RAX: ffffffff818b143c RBX: dffffc0000000000 RCX: 0000000000100000 [ 558.349428][ T5887] RDX: ffffc9001af77000 RSI: 00000000000056c1 RDI: ffffffff8f850ac0 [ 558.349435][ T5887] RBP: ffffc9000426f0d8 R08: ffff88802f93473f R09: 1ffff11005f268e7 [ 558.349443][ T5887] R10: dffffc0000000000 R11: ffffed1005f268e8 R12: 0000000000000000 [ 558.349458][ T5887] R13: 1ffff11005f268e7 R14: ffff88802f934738 R15: 001fffffffc00001 [ 558.349470][ T5887] ? enable_work+0x26c/0x2b0 [ 558.349489][ T5887] ? __pfx_enable_work+0x10/0x10 [ 558.349501][ T5887] ? __thermal_zone_cdev_unbind+0x485/0x4c0 [ 558.349519][ T5887] ? __cancel_work_sync+0x5c/0x110 [ 558.349533][ T5887] __cancel_work_sync+0xf7/0x110 [ 558.349547][ T5887] thermal_zone_device_unregister+0x23e/0x3f0 [ 558.349565][ T5887] power_supply_unregister+0xf9/0x140 [ 558.349580][ T5887] ? __pfx_shield_remove+0x10/0x10 [ 558.349592][ T5887] shield_remove+0x72/0x120 [ 558.349607][ T5887] hid_device_remove+0x228/0x370 [ 558.349621][ T5887] ? __pfx_hid_device_remove+0x10/0x10 [ 558.349635][ T5887] device_release_driver_internal+0x46f/0x800 [ 558.349650][ T5887] bus_remove_device+0x34d/0x440 [ 558.349667][ T5887] device_del+0x511/0x8e0 [ 558.349682][ T5887] ? __pfx_device_del+0x10/0x10 [ 558.349697][ T5887] hid_destroy_device+0x6b/0x1b0 [ 558.349712][ T5887] usbhid_disconnect+0x9f/0xc0 [ 558.349724][ T5887] usb_unbind_interface+0x26e/0x910 [ 558.349741][ T5887] ? __pfx_usb_unbind_interface+0x10/0x10 [ 558.349755][ T5887] device_release_driver_internal+0x4d9/0x800 [ 558.349770][ T5887] bus_remove_device+0x34d/0x440 [ 558.349787][ T5887] device_del+0x511/0x8e0 [ 558.349801][ T5887] ? __pfx_device_del+0x10/0x10 [ 558.349811][ T5887] ? kobject_put+0x531/0x570 [ 558.349827][ T5887] usb_disable_device+0x3d4/0x8e0 [ 558.349844][ T5887] usb_disconnect+0x32f/0x990 [ 558.349859][ T5887] hub_event+0x1ca9/0x4ef0 [ 558.349887][ T5887] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 558.349909][ T5887] ? __pfx_hub_event+0x10/0x10 [ 558.349921][ T5887] ? process_scheduled_works+0x9ef/0x1770 [ 558.349935][ T5887] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.349948][ T5887] ? process_scheduled_works+0x9ef/0x1770 [ 558.349958][ T5887] ? process_scheduled_works+0x9ef/0x1770 [ 558.349969][ T5887] process_scheduled_works+0xad1/0x1770 [ 558.349995][ T5887] ? __pfx_process_scheduled_works+0x10/0x10 [ 558.350014][ T5887] worker_thread+0x8a0/0xda0 [ 558.350032][ T5887] ? __kthread_parkme+0x7b/0x200 [ 558.350054][ T5887] kthread+0x711/0x8a0 [ 558.350069][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 558.350080][ T5887] ? __pfx_kthread+0x10/0x10 [ 558.350094][ T5887] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.350108][ T5887] ? lockdep_hardirqs_on+0x98/0x140 [ 558.350118][ T5887] ? __pfx_kthread+0x10/0x10 [ 558.350132][ T5887] ret_from_fork+0x599/0xb30 [ 558.350144][ T5887] ? __pfx_ret_from_fork+0x10/0x10 [ 558.350160][ T5887] ? __switch_to_asm+0x39/0x70 [ 558.350172][ T5887] ? __switch_to_asm+0x33/0x70 [ 558.350184][ T5887] ? __pfx_kthread+0x10/0x10 [ 558.350197][ T5887] ret_from_fork_asm+0x1a/0x30 [ 558.350218][ T5887] [ 558.350579][ T5887] Kernel Offset: disabled