last executing test programs: 22.943840077s ago: executing program 3 (id=750): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0xee, 0x100000000000023b) socket$nl_route(0x10, 0x3, 0x0) 19.328051422s ago: executing program 3 (id=758): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0xee, 0x100000000000023b) socket$nl_route(0x10, 0x3, 0x0) 19.036413789s ago: executing program 0 (id=760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0x7a, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000000)="208a94057a775c1b76f05504a09ee132c2595469b18f63ec54de9facecb972ea10", 0x21}], 0x1) dup3(r0, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 17.783230006s ago: executing program 0 (id=761): gettid() sync() unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) socket$key(0xf, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$dh_compute(0x17, &(0x7f0000000400), 0x0, 0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000280)="708803449262dd9da315bcc77984faa6f32831aa941ab5bda92158536f78c390609a10de442bc310c95d22f08c5945f8be8a2b852c85a693afd7d8e5ff1b3aebbd", 0x41}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 16.860022273s ago: executing program 3 (id=763): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) 16.739334598s ago: executing program 2 (id=764): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) 16.615957472s ago: executing program 2 (id=765): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0xee, 0x100000000000023b) socket$nl_route(0x10, 0x3, 0x0) 16.482238097s ago: executing program 1 (id=766): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0x7a, 0x840, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) 14.064898498s ago: executing program 2 (id=768): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) socket$unix(0x1, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 13.881217967s ago: executing program 1 (id=769): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) socket$unix(0x1, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 11.303444789s ago: executing program 4 (id=771): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}}}, 0x0, 0x0, 0x3, 0x0, "0c9e089c1b4a04000bde79f0613be7fa187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bb399ad5bd2ff21907c7988d1300000000000000000000000400"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) close(0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r7) 11.147426002s ago: executing program 4 (id=772): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r7) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r3], 0x0) 8.905259065s ago: executing program 3 (id=773): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff9) 8.800679303s ago: executing program 2 (id=774): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0x7a, 0x840, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f0000000000)="208a94057a775c1b76f05504a09ee132c2595469b18f63ec54de9facecb972ea10", 0x21}], 0x1) dup3(r2, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) 8.772462574s ago: executing program 1 (id=775): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0xee, 0x100000000000023b) socket$nl_route(0x10, 0x3, 0x0) 8.64554027s ago: executing program 0 (id=776): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0xee, 0x100000000000023b) socket$nl_route(0x10, 0x3, 0x0) 7.491884039s ago: executing program 4 (id=777): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f0000000000)="208a94057a775c1b76f05504a09ee132c2595469b18f63ec54de9facecb972ea10", 0x21}], 0x1) dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) 7.237812674s ago: executing program 0 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) r8 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x3, 0x1, 0x157, 0x26553de0, 0x4, 0x3ff, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x9, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x4, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x4, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x5, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x45c}}, 0x0) 5.269037599s ago: executing program 1 (id=779): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0xee, 0x100000000000023b) socket$nl_route(0x10, 0x3, 0x0) 5.203449332s ago: executing program 2 (id=780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) r8 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x3, 0x1, 0x157, 0x26553de0, 0x4, 0x3ff, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x9, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x4, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x4, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x5, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x45c}}, 0x0) 5.129540388s ago: executing program 3 (id=781): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rseq(0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0xee, 0x100000000000023b) socket$nl_route(0x10, 0x3, 0x0) 5.048934585s ago: executing program 0 (id=782): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff9) socket$inet(0x2, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r3, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30454070000000000010902"], 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x41, 0x3, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b0, 0x1f0, 0x1f0, 0x1b0, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xb8, 0xe0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@ttl={{0x28}}, @common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev, @multicast2, 0x0, 0x0, 'xfrm0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) 4.328992375s ago: executing program 4 (id=783): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0x7a, 0x840, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f0000000000)="208a94057a775c1b76f05504a09ee132c2595469b18f63ec54de9facecb972ea10", 0x21}], 0x1) dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) 2.864061525s ago: executing program 4 (id=784): socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}]}]}, 0x6c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x80000000004, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r4, 0xffff8000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff0205000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) 2.592179983s ago: executing program 1 (id=785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0x7a, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 2.271253971s ago: executing program 1 (id=786): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0xee, 0x100000000000023b) socket$nl_route(0x10, 0x3, 0x0) 1.771550146s ago: executing program 2 (id=787): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0xee, 0x100000000000023b) socket$nl_route(0x10, 0x3, 0x0) 1.400220666s ago: executing program 3 (id=788): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff9) socket$inet(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30454070000000000010902"], 0x0) write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d390887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b3366959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130d9b61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251a4523a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x5, 0x85, 0x2}) close_range(r3, 0xffffffffffffffff, 0x0) 51.089663ms ago: executing program 4 (id=789): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) close(0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r7) 0s ago: executing program 0 (id=790): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0x7a, 0x840, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f0000000000)="208a94057a775c1b76f05504a09ee132c2595469b18f63ec54de9facecb972ea10", 0x21}], 0x1) dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): 94.830501][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.867031][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.874138][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.900561][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.927186][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.934194][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.963241][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.992229][ T5864] hsr_slave_0: entered promiscuous mode [ 94.998897][ T5864] hsr_slave_1: entered promiscuous mode [ 95.005067][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.013564][ T5864] Cannot create hsr debugfs directory [ 95.020710][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.027838][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.054820][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.169854][ T5866] hsr_slave_0: entered promiscuous mode [ 95.178719][ T5866] hsr_slave_1: entered promiscuous mode [ 95.185018][ T5866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.192786][ T5866] Cannot create hsr debugfs directory [ 95.207547][ T5868] hsr_slave_0: entered promiscuous mode [ 95.214476][ T5868] hsr_slave_1: entered promiscuous mode [ 95.220809][ T5868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.228857][ T5868] Cannot create hsr debugfs directory [ 95.394005][ T5865] hsr_slave_0: entered promiscuous mode [ 95.401299][ T5865] hsr_slave_1: entered promiscuous mode [ 95.420518][ T5865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.431877][ T5865] Cannot create hsr debugfs directory [ 95.941890][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.965720][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.978774][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.000875][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.068822][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.092129][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.105960][ T5851] Bluetooth: hci2: command tx timeout [ 96.106222][ T5861] Bluetooth: hci0: command tx timeout [ 96.128419][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.140533][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.185761][ T5861] Bluetooth: hci4: command tx timeout [ 96.185982][ T5851] Bluetooth: hci1: command tx timeout [ 96.196201][ T5861] Bluetooth: hci3: command tx timeout [ 96.242874][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.260273][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.313861][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.342369][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.393188][ T5866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.413460][ T5866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.428148][ T5866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.463759][ T5866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.575384][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.634067][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.652558][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.697649][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.713546][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.737654][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.773887][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.781194][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.815133][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.834729][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.842033][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.892143][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.913077][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.920281][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.936838][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.968613][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.975868][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.048824][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.072375][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.079733][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.103385][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.164407][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.171776][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.192563][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.208259][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.215488][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.257332][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.264706][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.301844][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.394436][ T5868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.405436][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.503621][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.543079][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.591784][ T5863] veth0_vlan: entered promiscuous mode [ 97.608778][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.631331][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.652824][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.681963][ T5863] veth1_vlan: entered promiscuous mode [ 97.695775][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.703096][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.721345][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.728673][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.839805][ T5864] veth0_vlan: entered promiscuous mode [ 97.889452][ T5864] veth1_vlan: entered promiscuous mode [ 97.898099][ T5863] veth0_macvtap: entered promiscuous mode [ 97.910758][ T5868] veth0_vlan: entered promiscuous mode [ 97.951260][ T5863] veth1_macvtap: entered promiscuous mode [ 97.977073][ T5866] veth0_vlan: entered promiscuous mode [ 97.992180][ T5866] veth1_vlan: entered promiscuous mode [ 98.031564][ T5868] veth1_vlan: entered promiscuous mode [ 98.043245][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.081503][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.133736][ T5863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.147030][ T5863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.158634][ T5863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.168763][ T5863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.187192][ T5861] Bluetooth: hci0: command tx timeout [ 98.189501][ T5851] Bluetooth: hci2: command tx timeout [ 98.194917][ T5864] veth0_macvtap: entered promiscuous mode [ 98.219968][ T5868] veth0_macvtap: entered promiscuous mode [ 98.234059][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.247135][ T5866] veth0_macvtap: entered promiscuous mode [ 98.259298][ T5866] veth1_macvtap: entered promiscuous mode [ 98.266675][ T5851] Bluetooth: hci1: command tx timeout [ 98.274386][ T5864] veth1_macvtap: entered promiscuous mode [ 98.280649][ T5851] Bluetooth: hci3: command tx timeout [ 98.280961][ T5861] Bluetooth: hci4: command tx timeout [ 98.291267][ T5868] veth1_macvtap: entered promiscuous mode [ 98.347289][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.373160][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.389158][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.401926][ T5866] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.411712][ T5866] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.421312][ T5866] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.434934][ T5866] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.453021][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.493462][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.519156][ T5868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.529281][ T5868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.541032][ T5868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.552511][ T5868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.584903][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.643220][ T5864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.654169][ T5864] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.666829][ T5864] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.677243][ T5864] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.704253][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.717531][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.772745][ T5865] veth0_vlan: entered promiscuous mode [ 98.822983][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.842308][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.854241][ T5865] veth1_vlan: entered promiscuous mode [ 98.949862][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.953454][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.967097][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.050253][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.063752][ T5865] veth0_macvtap: entered promiscuous mode [ 99.096445][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.137190][ T5865] veth1_macvtap: entered promiscuous mode [ 99.181057][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.205068][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.251676][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.253468][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.274714][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.281173][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.316354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.324749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.333686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.418956][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.482786][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.492169][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.503685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.507606][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.556833][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.564825][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.581870][ T5949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.703793][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.759093][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.909563][ T5951] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.051292][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.109229][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.150808][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.160159][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.256194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.266359][ T5861] Bluetooth: hci2: command tx timeout [ 100.276232][ T5861] Bluetooth: hci0: command tx timeout [ 100.365811][ T5861] Bluetooth: hci3: command tx timeout [ 100.366030][ T5851] Bluetooth: hci1: command tx timeout [ 100.371275][ T5861] Bluetooth: hci4: command tx timeout [ 100.526140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.586554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.618781][ T5941] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.631158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.695702][ T5954] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.821620][ T5941] usb 3-1: config 0 has no interfaces? [ 100.951620][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 100.957519][ T5941] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 100.981942][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.027781][ T5941] usb 3-1: Product: syz [ 101.032251][ T5941] usb 3-1: Manufacturer: syz [ 101.040619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.056661][ T5954] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 101.066371][ T5941] usb 3-1: SerialNumber: syz [ 101.084544][ T5941] usb 3-1: config 0 descriptor?? [ 101.157990][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.325014][ T5954] usb 2-1: config 0 descriptor?? [ 101.515654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 101.653750][ T5959] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 101.673776][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.690199][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.128827][ T5943] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.487858][ T5943] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.570246][ T5943] usb 1-1: config 0 has no interfaces? [ 102.595345][ T5943] usb 1-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=43.58 [ 102.631576][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.674692][ T5943] usb 1-1: config 0 descriptor?? [ 103.724074][ T5954] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 103.827142][ T5954] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 103.876848][ T5954] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 104.243809][ T5940] usb 3-1: USB disconnect, device number 2 [ 104.277664][ T43] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 104.320589][ T43] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 104.335864][ T43] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 104.346135][ T43] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 104.353722][ T43] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 104.361602][ T43] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 104.369672][ T43] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 104.384094][ T43] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 104.440686][ T43] hid-generic 00A0:0008:0003.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 104.974951][ T30] audit: type=1326 audit(1752322165.488:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.3.6" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6df738e929 code=0x0 [ 105.132496][ T43] usb 1-1: USB disconnect, device number 2 [ 105.594559][ T5977] fuse: Unknown parameter 'user_i00000000000000000000' [ 111.206048][ T6024] QAT: Device 127 not found [ 111.785731][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.075724][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 112.116877][ T43] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 112.151503][ T43] usb 3-1: config 179 has no interface number 0 [ 112.178582][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 112.194902][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 112.212312][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 112.297131][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 112.324718][ T43] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 112.383565][ T43] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 112.467800][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.585891][ T6032] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.076652][ T5180] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 114.127573][ T6024] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.267622][ T6024] netlink: 'syz.4.16': attribute type 1 has an invalid length. [ 115.689325][ T5180] usb 3-1: USB disconnect, device number 3 [ 115.695407][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 115.695461][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 116.656092][ T5942] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.845802][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 116.864119][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.991842][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.084430][ T6075] usb usb8: usbfs: process 6075 (syz.0.26) did not claim interface 0 before use [ 117.374631][ T5942] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 117.549641][ T6078] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.566401][ T6078] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 117.566544][ T6080] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 117.606856][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.852650][ T5942] usb 3-1: config 0 descriptor?? [ 117.873228][ T5942] usbhid 3-1:0.0: can't add hid device: -22 [ 117.911962][ T5942] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 118.059153][ T6078] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.065312][ T6078] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 118.326871][ T6078] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.335146][ T6078] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 118.371218][ T6078] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.380189][ T6078] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 118.601771][ T6078] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 118.608526][ T6078] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 118.776970][ T5180] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.956646][ T5180] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 118.970984][ T5180] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.001901][ T5180] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 119.024359][ T5180] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 119.163091][ T5180] usb 5-1: Product: syz [ 119.207057][ T5180] usb 5-1: Manufacturer: syz [ 119.241980][ T5180] usb 5-1: SerialNumber: syz [ 119.274648][ T5180] usb 5-1: config 0 descriptor?? [ 119.419725][ T5180] usb 5-1: selecting invalid altsetting 0 [ 120.884003][ T5180] usb 5-1: USB disconnect, device number 2 [ 121.064392][ T977] usb 3-1: USB disconnect, device number 4 [ 124.877702][ T6129] mmap: syz.4.36 (6129) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.177087][ T6142] pim6reg: entered allmulticast mode [ 125.297690][ T6142] pim6reg: left allmulticast mode [ 127.685692][ T977] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.882130][ T977] usb 5-1: config 0 has no interfaces? [ 127.897129][ T977] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 127.906507][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.950372][ T977] usb 5-1: Product: syz [ 127.954647][ T977] usb 5-1: Manufacturer: syz [ 128.000728][ T977] usb 5-1: SerialNumber: syz [ 128.036786][ T977] usb 5-1: config 0 descriptor?? [ 130.007771][ T5943] usb 5-1: USB disconnect, device number 3 [ 133.326714][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.333526][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.152348][ T5943] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.720153][ T5943] usb 4-1: config 0 has no interfaces? [ 134.803430][ T5943] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 134.829243][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.891418][ T5943] usb 4-1: Product: syz [ 134.902088][ T5943] usb 4-1: Manufacturer: syz [ 134.922571][ T5943] usb 4-1: SerialNumber: syz [ 135.160816][ T5943] usb 4-1: config 0 descriptor?? [ 135.359501][ T6241] fuse: Bad value for 'group_id' [ 135.364505][ T6241] fuse: Bad value for 'group_id' [ 136.276616][ T6218] netlink: 'syz.3.53': attribute type 5 has an invalid length. [ 138.863369][ T6268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.997799][ T5927] usb 4-1: USB disconnect, device number 2 [ 139.129711][ T6269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.407990][ T6291] vti0: entered promiscuous mode [ 141.413083][ T6291] vti0: entered allmulticast mode [ 143.184825][ T6303] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.297338][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 144.711830][ T6309] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 145.175677][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.335773][ T977] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.375677][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 145.503870][ T977] usb 1-1: config 0 has no interfaces? [ 145.509779][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 145.524194][ T977] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 145.535342][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.571920][ T6294] delete_channel: no stack [ 145.591142][ T977] usb 1-1: Product: syz [ 145.608163][ T977] usb 1-1: Manufacturer: syz [ 145.612830][ T977] usb 1-1: SerialNumber: syz [ 145.650093][ T977] usb 1-1: config 0 descriptor?? [ 145.701919][ T24] usb 3-1: config 0 has no interface number 0 [ 145.783371][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 146.082246][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 146.135678][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.163649][ T24] usb 3-1: Product: syz [ 146.175772][ T24] usb 3-1: Manufacturer: syz [ 146.193981][ T24] usb 3-1: SerialNumber: syz [ 146.587839][ T24] usb 3-1: config 0 descriptor?? [ 146.641371][ T24] smsc75xx v1.0.0 [ 146.650082][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 147.140574][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 147.951045][ T6313] syz_tun: entered allmulticast mode [ 148.265515][ T6342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.183648][ T977] usb 1-1: USB disconnect, device number 3 [ 149.294518][ T6313] syz_tun: left allmulticast mode [ 149.708864][ T5927] usb 3-1: USB disconnect, device number 5 [ 150.818013][ T6357] netlink: 68 bytes leftover after parsing attributes in process `syz.2.78'. [ 152.661408][ T6370] netlink: 14 bytes leftover after parsing attributes in process `syz.1.80'. [ 153.251323][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 153.324342][ T6370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.337907][ T6370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.360937][ T6370] bond0 (unregistering): Released all slaves [ 153.576656][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.632394][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 153.685849][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.728135][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.837674][ T6374] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.849371][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.049477][ T6382] Zero length message leads to an empty skb [ 154.330953][ T6374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.342758][ T6374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.878049][ T24] usb 4-1: USB disconnect, device number 3 [ 155.907814][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.651038][ T24] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 156.660497][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.710072][ T24] usb 1-1: config 0 descriptor?? [ 156.736112][ T24] usb 1-1: selecting invalid altsetting 1 [ 156.857827][ T24] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 156.961629][ T6398] xt_NFQUEUE: number of total queues is 0 [ 157.117767][ T977] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.579473][ T977] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 157.591422][ T977] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.651854][ T977] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.750841][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.832305][ T977] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.308649][ T977] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 158.567869][ T977] usb 1-1: USB disconnect, device number 4 [ 159.311212][ T6430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.359765][ T5943] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 159.583178][ T5943] usb 1-1: config 0 has no interfaces? [ 159.677632][ T6434] loop7: detected capacity change from 0 to 16384 [ 159.705017][ T6436] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 159.843333][ T5943] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 159.872011][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.058020][ T5943] usb 1-1: Product: syz [ 160.059298][ T5927] usb 3-1: USB disconnect, device number 6 [ 160.185959][ T5943] usb 1-1: Manufacturer: syz [ 160.309715][ T6409] delete_channel: no stack [ 160.314895][ T5943] usb 1-1: SerialNumber: syz [ 160.346890][ T5943] usb 1-1: config 0 descriptor?? [ 161.441590][ T6444] capability: warning: `syz.2.94' uses 32-bit capabilities (legacy support in use) [ 162.945236][ T5180] usb 1-1: USB disconnect, device number 5 [ 163.045783][ T5940] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 163.237097][ T5940] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 163.263148][ T5940] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.285695][ T6463] netlink: 'syz.1.97': attribute type 6 has an invalid length. [ 163.294394][ T6463] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 163.303351][ T6463] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.97'. [ 163.320224][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 163.402934][ T5940] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.628599][ T5940] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.655738][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.705386][ T5940] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.773337][ T5940] usb 3-1: invalid MIDI out EP 0 [ 164.032435][ T5906] udevd[5906]: setting owner of /dev/snd/midiC3D0 to uid=0, gid=29 failed: No such file or directory [ 164.039514][ T5940] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 164.058556][ T6451] delete_channel: no stack [ 164.070925][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.139856][ T5940] usb 3-1: USB disconnect, device number 7 [ 167.037373][ T6485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.345814][ T5927] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 167.751157][ T5927] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 167.809130][ T6502] fuse: Bad value for 'rootmode' [ 168.234576][ T5927] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 168.567959][ T5927] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.723491][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.086433][ T5954] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 169.155978][ T5954] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 169.212717][ T5954] usb 2-1: USB disconnect, device number 2 [ 169.343216][ T6500] ptrace attach of "./syz-executor exec"[5868] was attempted by "./syz-executor exec"[6500] [ 169.383950][ T6500] netlink: 'syz.2.105': attribute type 41 has an invalid length. [ 169.653360][ T5927] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.685244][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.106'. [ 169.711052][ T6507] openvswitch: netlink: Flow key attr not present in new flow. [ 169.753179][ T6507] netlink: 132 bytes leftover after parsing attributes in process `syz.0.106'. [ 169.945770][ T5954] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 170.456847][ T5927] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 172.445864][ T5954] usb 2-1: device descriptor read/all, error -71 [ 172.453730][ T6496] delete_channel: no stack [ 172.605271][ T24] usb 4-1: USB disconnect, device number 4 [ 172.857527][ T6531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.109'. [ 173.618576][ T5954] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 173.826170][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 173.869676][ T5954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.911690][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.007333][ T5954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.092090][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.204911][ T5954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.396791][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.433915][ T5954] usb 2-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 174.445886][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.454226][ T5954] usb 2-1: Product: syz [ 174.464270][ T5954] usb 2-1: Manufacturer: syz [ 174.483157][ T5954] usb 2-1: SerialNumber: syz [ 174.530233][ T5954] usb 2-1: config 0 descriptor?? [ 174.653651][ T5954] usb 2-1: bad CDC descriptors [ 174.661791][ T5954] cdc_acm 2-1:0.0: Zero length descriptor references [ 174.675916][ T5954] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 175.758302][ T6555] fuse: Invalid rootmode [ 175.851081][ T6554] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 176.648044][ T6566] syz.2.116 uses obsolete (PF_INET,SOCK_PACKET) [ 177.171648][ T5954] usb 2-1: USB disconnect, device number 4 [ 178.300326][ T5954] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 179.000194][ T5954] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 179.049165][ T5954] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 179.077357][ T5954] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.093819][ T5954] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.120002][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.604175][ T5954] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.692079][ T5954] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 179.777514][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.984230][ T5943] usb 4-1: USB disconnect, device number 5 [ 182.024937][ T6584] delete_channel: no stack [ 182.075243][ T6609] process 'syz.0.123' launched './file1' with NULL argv: empty string added [ 182.579995][ T6622] fuse: Bad value for 'group_id' [ 182.585339][ T6622] fuse: Bad value for 'group_id' [ 182.816190][ T6609] sctp: failed to load transform for md5: -2 [ 185.338696][ T6649] vivid-007: ================= START STATUS ================= [ 185.349559][ T6649] vivid-007: Enable Output Cropping: true [ 185.356202][ T6649] vivid-007: Enable Output Composing: true [ 185.362292][ T6649] vivid-007: Enable Output Scaler: true [ 185.368153][ T6649] vivid-007: Tx RGB Quantization Range: Automatic [ 185.375767][ T6649] vivid-007: Transmit Mode: HDMI [ 185.380956][ T6649] vivid-007: Hotplug Present: 0x00000000 [ 185.387034][ T6649] vivid-007: RxSense Present: 0x00000000 [ 185.392816][ T6649] vivid-007: EDID Present: 0x00000000 [ 185.398424][ T6649] vivid-007: ================== END STATUS ================== [ 188.045931][ T5943] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 188.205905][ T5954] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 188.365347][ T5943] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 188.694650][ T5943] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 188.741766][ T5943] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.790149][ T5943] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.823774][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.936535][ T5954] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 188.948221][ T5954] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 189.054484][ T5943] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.096176][ T5954] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.175096][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.247730][ T5943] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 189.271722][ T5954] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.298873][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.426002][ T5954] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 189.529821][ T6676] delete_channel: no stack [ 189.548660][ T6676] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 189.587609][ T5954] usb 1-1: USB disconnect, device number 6 [ 189.756718][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.619303][ T5180] usb 3-1: USB disconnect, device number 8 [ 191.786786][ T6675] delete_channel: no stack [ 191.843446][ T6712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.002380][ T6717] xt_NFQUEUE: number of total queues is 0 [ 192.447801][ T6717] macvlan2: entered allmulticast mode [ 192.504582][ T6717] bond_slave_0: entered promiscuous mode [ 192.511354][ T6717] bond_slave_1: entered promiscuous mode [ 192.517840][ T6717] bond0: entered allmulticast mode [ 192.529349][ T6717] bond_slave_0: entered allmulticast mode [ 192.538989][ T6717] bond_slave_1: entered allmulticast mode [ 192.608755][ T6717] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.758335][ T6717] team0: Port device macvlan2 added [ 194.005972][ T6734] team0: Port device team_slave_0 removed [ 194.012130][ T6734] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 194.124867][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.148'. [ 194.693693][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.707102][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.096367][ T6748] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 197.589980][ T6773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.737301][ T6776] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 198.145744][ T977] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 198.435661][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 198.492797][ T977] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.574757][ T977] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 198.687267][ T5927] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 198.821277][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.844710][ T977] usb 1-1: Product: syz [ 198.867481][ T977] usb 1-1: Manufacturer: syz [ 198.928427][ T977] usb 1-1: SerialNumber: syz [ 198.965640][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 198.974305][ T977] usb 1-1: config 0 descriptor?? [ 199.007246][ T977] hub 1-1:0.0: bad descriptor, ignoring hub [ 199.045468][ T5927] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 199.094582][ T977] hub 1-1:0.0: probe with driver hub failed with error -5 [ 199.102266][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.203183][ T5927] usb 2-1: Product: syz [ 199.255613][ T5927] usb 2-1: Manufacturer: syz [ 199.283674][ T5927] usb 2-1: SerialNumber: syz [ 199.298879][ T5927] usb 2-1: config 0 descriptor?? [ 199.359431][ T5927] as10x_usb: device has been detected [ 199.411669][ T5927] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 199.589927][ T6781] random: crng reseeded on system resumption [ 199.670468][ T5927] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 199.811563][ T5927] as10x_usb: error during firmware upload part1 [ 199.854041][ T6786] program syz.4.153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.874711][ T6786] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 199.907561][ T5927] Registered device Sky IT Digital Key (green led) [ 200.666542][ T5927] usb 1-1: USB disconnect, device number 7 [ 200.809304][ T6793] sctp: [Deprecated]: syz.3.158 (pid 6793) Use of int in maxseg socket option. [ 200.809304][ T6793] Use struct sctp_assoc_value instead [ 200.849213][ T6793] netlink: 'syz.3.158': attribute type 10 has an invalid length. [ 200.911312][ T6793] veth0_vlan: left promiscuous mode [ 201.029018][ T6793] veth0_vlan: entered promiscuous mode [ 201.099743][ T6793] team0: Device veth0_vlan failed to register rx_handler [ 201.958310][ T5940] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 202.116916][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 202.141517][ T5940] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 202.151931][ T5940] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 202.172874][ T5927] usb 2-1: USB disconnect, device number 5 [ 202.204595][ T5940] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.238951][ T5940] usb 1-1: config 1 interface 0 has no altsetting 0 [ 202.344467][ T5940] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 202.354099][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.369572][ T5940] usb 1-1: Product: syz [ 202.379884][ T5940] usb 1-1: Manufacturer: syz [ 202.393386][ T5940] usb 1-1: SerialNumber: syz [ 202.399919][ T5927] Unregistered device Sky IT Digital Key (green led) [ 202.401871][ T5927] as10x_usb: device has been disconnected [ 203.116924][ T5940] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 203.151418][ T5940] usb 1-1: USB disconnect, device number 8 [ 203.308831][ T5940] usblp0: removed [ 203.658705][ T6793] syz.3.158 (6793) used greatest stack depth: 18968 bytes left [ 203.828127][ T6819] sctp: [Deprecated]: syz.4.165 (pid 6819) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.828127][ T6819] Use struct sctp_sack_info instead [ 203.997512][ T6819] netlink: 'syz.4.165': attribute type 75 has an invalid length. [ 204.925742][ T5180] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 205.155794][ T5180] usb 4-1: Using ep0 maxpacket: 16 [ 205.168188][ T5180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.205587][ T5180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.257426][ T5180] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 205.330610][ T5180] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 205.340510][ T5180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.366836][ T5180] usb 4-1: config 0 descriptor?? [ 205.597389][ T6837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.109614][ T6848] netlink: 'syz.0.174': attribute type 5 has an invalid length. [ 206.139166][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.174'. [ 206.194861][ T6848] ip6erspan0: entered promiscuous mode [ 206.924540][ T6849] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 208.575669][ T5940] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 208.955716][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 208.981505][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.995019][ T5940] usb 5-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 209.026341][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.083913][ T5940] usb 5-1: config 0 descriptor?? [ 210.809315][ T5180] usbhid 4-1:0.0: can't add hid device: -71 [ 210.856013][ T5180] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 210.969439][ T5180] usb 4-1: USB disconnect, device number 6 [ 212.431700][ T5940] usbhid 5-1:0.0: can't add hid device: -71 [ 212.447891][ T5940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 212.506391][ T5940] usb 5-1: USB disconnect, device number 4 [ 212.885620][ T977] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 213.219988][ T977] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.233404][ T977] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 213.243954][ T977] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.282396][ T6930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.383754][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.526173][ T6918] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 213.595950][ T5927] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 213.699493][ T977] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.876194][ T5927] usb 5-1: config 0 has no interfaces? [ 213.893827][ T5927] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 213.937604][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.955244][ T5927] usb 5-1: Product: syz [ 213.972703][ T5927] usb 5-1: Manufacturer: syz [ 213.990378][ T5927] usb 5-1: SerialNumber: syz [ 214.168361][ T5927] usb 5-1: config 0 descriptor?? [ 214.366130][ T24] usb 2-1: USB disconnect, device number 6 [ 214.646682][ T6932] program syz.4.196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.662096][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.673169][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.083337][ T6942] netlink: 'syz.3.199': attribute type 1 has an invalid length. [ 216.216756][ T6942] netlink: 'syz.3.199': attribute type 2 has an invalid length. [ 216.270236][ T6944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.066304][ T977] usb 5-1: USB disconnect, device number 5 [ 219.016862][ T6983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.213'. [ 219.826693][ T977] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 220.049865][ T977] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 220.161594][ T977] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 220.205666][ T5942] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 220.226415][ T977] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.312256][ T977] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 220.339224][ T977] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 220.352227][ T977] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 220.360488][ T977] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 220.409955][ T977] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.422475][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 220.444750][ T5942] usb 2-1: unable to get BOS descriptor or descriptor too short [ 220.457086][ T977] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 220.478232][ T5942] usb 2-1: config 4 interface 0 has no altsetting 0 [ 220.501072][ T977] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 220.530693][ T5942] usb 2-1: string descriptor 0 read error: -22 [ 220.548598][ T5942] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 220.761701][ T5942] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 220.775634][ T977] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 220.795975][ T977] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 220.814156][ T5942] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 220.876788][ T977] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.901146][ T5942] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 220.934628][ T977] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 220.955409][ T5942] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 220.982988][ T5942] usb 2-1: media controller created [ 220.988950][ T977] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 221.030846][ T977] usb 3-1: string descriptor 0 read error: -22 [ 221.053767][ T977] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 221.094199][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.113534][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.159905][ T977] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 221.403538][ T977] usb 3-1: USB disconnect, device number 9 [ 221.850074][ T30] audit: type=1326 audit(1752322282.368:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.3.234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6df738e929 code=0x0 [ 222.028107][ T5942] zl10353_read_register: readreg error (reg=127, ret==0) [ 222.209683][ T5942] usb 2-1: USB disconnect, device number 7 [ 222.241310][ T7041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.237'. [ 222.861624][ T7056] netlink: 60 bytes leftover after parsing attributes in process `syz.0.240'. [ 223.203703][ T5943] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 223.380956][ T7067] tipc: Started in network mode [ 223.400616][ T7067] tipc: Node identity 8, cluster identity 5 [ 223.442734][ T5943] usb 1-1: Using ep0 maxpacket: 8 [ 223.454460][ T5943] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.471474][ T7067] tipc: Node number set to 8 [ 223.484420][ T5943] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.522626][ T5943] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.536842][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.540060][ T7067] tipc: Cannot configure node identity twice [ 223.577084][ T5943] usb 1-1: Product: syz [ 223.585427][ T5943] usb 1-1: Manufacturer: syz [ 223.591696][ T5943] usb 1-1: SerialNumber: syz [ 224.595074][ T5954] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 224.950314][ T5954] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.004260][ T5954] usb 2-1: config 0 has no interface number 0 [ 225.080161][ T5954] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 225.155673][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.192982][ T5954] usb 2-1: config 0 descriptor?? [ 225.224147][ T5954] usb 2-1: selecting invalid altsetting 1 [ 225.258999][ T5954] dvb_ttusb_budget: ttusb_init_controller: error [ 225.278583][ T5954] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 225.460666][ T5954] DVB: Unable to find symbol cx22700_attach() [ 225.805659][ T5954] DVB: Unable to find symbol tda10046_attach() [ 225.815621][ T5954] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 225.855902][ T5942] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 225.862169][ T5954] usb 2-1: USB disconnect, device number 8 [ 226.076005][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 226.125680][ T5942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.148872][ T5942] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 226.158540][ T5942] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 226.244293][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.316715][ T5942] usb 4-1: config 0 descriptor?? [ 226.444467][ T5943] usb 1-1: 0:2 : does not exist [ 226.521021][ T5943] usb 1-1: USB disconnect, device number 9 [ 227.547464][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 227.983080][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.126128][ T5943] usb 4-1: USB disconnect, device number 7 [ 229.359184][ T7139] netlink: 104 bytes leftover after parsing attributes in process `syz.3.271'. [ 229.968150][ T7142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.850268][ T7142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.673322][ T7196] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 233.724127][ T7196] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 234.008459][ T7200] vxcan1: tx address claim with dest, not broadcast [ 234.977162][ T7217] use of bytesused == 0 is deprecated and will be removed in the future, [ 235.026182][ T7217] use the actual size instead. [ 235.170193][ T7226] netlink: 'syz.0.301': attribute type 2 has an invalid length. [ 236.019349][ T30] audit: type=1326 audit(1752322296.538:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7233 comm="syz.3.303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6df738e929 code=0x0 [ 236.845815][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 236.982981][ T7256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.034090][ T24] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 237.044204][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.057574][ T24] usb 3-1: Product: syz [ 237.062338][ T24] usb 3-1: Manufacturer: syz [ 237.067220][ T24] usb 3-1: SerialNumber: syz [ 237.079953][ T24] usb 3-1: config 0 descriptor?? [ 237.096616][ T24] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 010 [ 237.224285][ T7263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.524319][ T24] (null): failure reading functionality [ 237.540253][ T7266] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.550578][ T7266] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.559723][ T7266] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.568516][ T7266] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.587888][ T24] i2c i2c-1: connected i2c-tiny-usb device [ 237.781782][ T5942] usb 3-1: USB disconnect, device number 10 [ 238.155646][ T977] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 238.163548][ T7276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.318'. [ 238.381370][ T977] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 238.416063][ T977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.463176][ T977] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 238.510386][ T977] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.543059][ T977] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 238.584237][ T977] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 238.611911][ T977] usb 5-1: Product: syz [ 238.629995][ T977] usb 5-1: Manufacturer: syz [ 238.680329][ T977] cdc_wdm 5-1:1.0: skipping garbage [ 238.693205][ T977] cdc_wdm 5-1:1.0: skipping garbage [ 238.724161][ T977] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 238.739249][ T977] cdc_wdm 5-1:1.0: Unknown control protocol [ 239.202657][ T5927] usb 5-1: USB disconnect, device number 6 [ 239.763840][ T7304] loop7: detected capacity change from 0 to 16384 [ 240.625829][ T30] audit: type=1326 audit(1752322301.148:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df738e929 code=0x7ffc0000 [ 240.870187][ T30] audit: type=1326 audit(1752322301.148:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6df738e929 code=0x7ffc0000 [ 241.062464][ T30] audit: type=1326 audit(1752322301.148:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df738e929 code=0x7ffc0000 [ 241.206140][ T30] audit: type=1326 audit(1752322301.148:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df738e929 code=0x7ffc0000 [ 241.275601][ T30] audit: type=1326 audit(1752322301.188:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6df738e929 code=0x7ffc0000 [ 241.395740][ T30] audit: type=1326 audit(1752322301.188:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df738e929 code=0x7ffc0000 [ 241.565708][ T30] audit: type=1326 audit(1752322301.188:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df738e929 code=0x7ffc0000 [ 241.745747][ T30] audit: type=1326 audit(1752322301.188:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6df738e929 code=0x7ffc0000 [ 241.834221][ T30] audit: type=1326 audit(1752322301.188:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6df732ab19 code=0x7ffc0000 [ 242.001347][ T30] audit: type=1326 audit(1752322301.188:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6df732ab19 code=0x7ffc0000 [ 242.096374][ T30] audit: type=1326 audit(1752322301.188:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6df732ab19 code=0x7ffc0000 [ 242.223922][ T30] audit: type=1326 audit(1752322301.188:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6df732ab19 code=0x7ffc0000 [ 243.209724][ T5943] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 243.222006][ T7342] netlink: 'syz.2.339': attribute type 12 has an invalid length. [ 243.249330][ T7342] netlink: 'syz.2.339': attribute type 29 has an invalid length. [ 243.262095][ T7342] netlink: 148 bytes leftover after parsing attributes in process `syz.2.339'. [ 243.405640][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 243.416351][ T5943] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 243.426132][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.434192][ T5943] usb 4-1: Product: syz [ 243.515835][ T5943] usb 4-1: Manufacturer: syz [ 243.579025][ T5943] usb 4-1: SerialNumber: syz [ 243.618215][ T5943] usb 4-1: config 0 descriptor?? [ 243.628009][ T5943] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 244.441208][ T5943] gspca_ov534_9: reg_w failed -71 [ 244.482337][ T7364] netlink: 'syz.2.347': attribute type 12 has an invalid length. [ 244.525880][ T7364] netlink: 'syz.2.347': attribute type 9 has an invalid length. [ 244.535625][ T5927] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 244.563989][ T7364] netlink: 148 bytes leftover after parsing attributes in process `syz.2.347'. [ 244.697798][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.726958][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.775676][ T5927] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 244.792599][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.815648][ T5943] gspca_ov534_9: Unknown sensor 0000 [ 244.815759][ T5943] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 244.841299][ T5927] usb 2-1: config 0 descriptor?? [ 244.862905][ T5943] usb 4-1: USB disconnect, device number 8 [ 245.116378][ T5927] usbhid 2-1:0.0: can't add hid device: -71 [ 245.122592][ T5927] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 245.166001][ T5927] usb 2-1: USB disconnect, device number 9 [ 247.109935][ T7413] netlink: 40 bytes leftover after parsing attributes in process `syz.2.364'. [ 247.120355][ T7413] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.172936][ T7413] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.016803][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 250.533797][ T7477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.022469][ T7490] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 251.031078][ T7490] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 251.040565][ T7493] trusted_key: syz.0.394 sent an empty control message without MSG_MORE. [ 251.359603][ T7500] netlink: 'syz.2.397': attribute type 6 has an invalid length. [ 251.372879][ T7500] netlink: 32 bytes leftover after parsing attributes in process `syz.2.397'. [ 251.579927][ T7505] netlink: 'syz.2.398': attribute type 7 has an invalid length. [ 251.588427][ T7505] netlink: 32 bytes leftover after parsing attributes in process `syz.2.398'. [ 251.936028][ T5927] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 252.111331][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 252.137128][ T5927] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 252.147303][ T5927] usb 3-1: config 179 has no interface number 0 [ 252.160927][ T5927] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 252.241157][ T5927] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 252.260225][ T5927] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 252.272961][ T5927] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 252.301960][ T5927] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 252.338655][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.369795][ T7508] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 252.649240][ T5927] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7 [ 252.952008][ T24] usb 3-1: USB disconnect, device number 11 [ 252.952017][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 252.952069][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 254.395137][ T7542] netlink: 1328 bytes leftover after parsing attributes in process `syz.0.409'. [ 255.665702][ T5927] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 255.828286][ T5927] usb 1-1: config 0 has no interfaces? [ 255.845815][ T5927] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.865220][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.905835][ T5927] usb 1-1: Product: syz [ 255.910045][ T5927] usb 1-1: Manufacturer: syz [ 255.972426][ T5927] usb 1-1: SerialNumber: syz [ 255.999697][ T5927] usb 1-1: config 0 descriptor?? [ 256.112361][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.118909][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.280923][ T5927] usb 1-1: USB disconnect, device number 10 [ 257.188933][ T7602] syz_tun: entered allmulticast mode [ 257.207630][ T7599] syz_tun: left allmulticast mode [ 258.467734][ T7627] netlink: 'syz.4.434': attribute type 5 has an invalid length. [ 258.588457][ T7627] ip6erspan0: entered promiscuous mode [ 259.191743][ T7637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.437'. [ 259.289737][ T5942] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 259.475623][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 259.529867][ T5942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.587683][ T5942] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.698467][ T5942] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 259.728811][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.778861][ T5942] usb 4-1: config 0 descriptor?? [ 259.820184][ T5942] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 261.566099][ T977] usb 4-1: USB disconnect, device number 9 [ 262.432406][ T977] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 262.785687][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 262.834758][ T977] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 262.863832][ T977] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 262.923698][ T977] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 262.977334][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.028334][ T977] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 263.151029][ T977] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 263.251414][ T977] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 263.331816][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.371482][ T977] usb 1-1: config 0 descriptor?? [ 263.734687][ T977] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 263.881515][ T977] usb 1-1: USB disconnect, device number 11 [ 263.937987][ T977] usblp0: removed [ 264.278754][ T977] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 264.445720][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 264.459391][ T977] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 264.487774][ T977] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 264.515796][ T977] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 264.537255][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.577379][ T977] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 264.585721][ T5180] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 264.615577][ T977] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 264.645593][ T977] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 264.654922][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.706897][ T977] usb 1-1: config 0 descriptor?? [ 264.755727][ T5180] usb 5-1: Using ep0 maxpacket: 16 [ 264.773801][ T5180] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.786264][ T5180] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.804712][ T5180] usb 5-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 264.823476][ T5180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.905155][ T5180] usb 5-1: config 0 descriptor?? [ 264.934508][ T5180] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 264.967324][ T977] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 265.205685][ T5180] usb 1-1: USB disconnect, device number 12 [ 265.240659][ T5180] usblp0: removed [ 265.707787][ T7702] sg_write: data in/out 524252/126 bytes for SCSI command 0x0-- guessing data in; [ 265.707787][ T7702] program syz.3.458 not setting count and/or reply_len properly [ 266.670548][ T7712] netlink: 44 bytes leftover after parsing attributes in process `syz.3.460'. [ 266.798597][ T7712] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.807481][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.022980][ T5943] usb 5-1: USB disconnect, device number 7 [ 270.506452][ T977] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 270.647862][ T7766] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 270.686625][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 270.748285][ T7774] netlink: 80 bytes leftover after parsing attributes in process `syz.0.478'. [ 271.237844][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.248402][ T977] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.295027][ T977] usb 2-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 271.755633][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.886794][ T977] usb 2-1: config 0 descriptor?? [ 271.999352][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 272.023478][ T977] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 272.305632][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 272.530042][ T24] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 272.554071][ T24] usb 3-1: config 0 has no interface number 0 [ 272.568950][ T24] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 272.638003][ T24] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 272.711318][ T24] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.841281][ T24] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 273.063676][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.376678][ T24] usb 3-1: config 0 descriptor?? [ 273.430842][ T24] gspca_main: spca561-2.14.0 probing abcd:cdee [ 273.594735][ T24] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 273.609180][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.625320][ T24] usb 3-1: MIDIStreaming interface descriptor not found [ 273.757204][ T5180] usb 2-1: USB disconnect, device number 10 [ 273.889100][ T24] usb 3-1: USB disconnect, device number 12 [ 274.905301][ T7803] kvm: pic: non byte write [ 275.047097][ T7808] netlink: 'syz.1.487': attribute type 5 has an invalid length. [ 275.069952][ T7808] ip6erspan0: entered promiscuous mode [ 276.175039][ T7821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.326262][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 277.765798][ T5180] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 277.876042][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 278.061838][ T24] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 278.091108][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.195695][ T5954] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 278.238413][ T5180] usb 2-1: config 0 has no interfaces? [ 278.249954][ T5180] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 278.267883][ T5180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.286105][ T5180] usb 2-1: Product: syz [ 278.290383][ T5180] usb 2-1: Manufacturer: syz [ 278.335045][ T5180] usb 2-1: SerialNumber: syz [ 278.360634][ T5180] usb 2-1: config 0 descriptor?? [ 278.365806][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 278.372083][ T24] usb 1-1: config 0 descriptor?? [ 278.473064][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 278.504815][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.518862][ T5954] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 278.535830][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.563556][ T5954] usb 4-1: config 0 descriptor?? [ 278.705605][ T977] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 279.117972][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 279.129549][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 279.154934][ T977] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 279.192749][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.518250][ T977] usb 3-1: config 0 descriptor?? [ 279.740712][ T7851] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 279.756387][ T977] usb 3-1: string descriptor 0 read error: -71 [ 279.805160][ T977] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 279.850937][ T5202] bcm5974 3-1:0.0: could not read from device [ 279.895302][ T977] usb 3-1: USB disconnect, device number 13 [ 279.915379][ T5202] bcm5974 3-1:0.0: could not read from device [ 281.028823][ T5954] usbhid 4-1:0.0: can't add hid device: -71 [ 281.041548][ T5954] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 281.088675][ T5954] usb 4-1: USB disconnect, device number 10 [ 281.349447][ T24] gspca_vc032x: reg_r err -71 [ 281.354330][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.364180][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.384093][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.399503][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.410282][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.421762][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.431828][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.442917][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.451811][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.551944][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.568934][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.591719][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.604664][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.614684][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.637413][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.649583][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.661948][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 281.692043][ T24] gspca_vc032x: Unknown sensor... [ 281.730204][ T5942] usb 2-1: USB disconnect, device number 11 [ 281.796361][ T24] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 281.874892][ T24] usb 1-1: USB disconnect, device number 13 [ 282.695666][ T5954] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 282.877964][ T5954] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 282.905835][ T5954] usb 5-1: config 0 has no interface number 0 [ 282.930060][ T5954] usb 5-1: config 0 interface 230 has no altsetting 0 [ 282.968764][ T5954] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 283.004335][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.029423][ T5954] usb 5-1: Product: syz [ 283.054088][ T5954] usb 5-1: Manufacturer: syz [ 283.069722][ T5954] usb 5-1: SerialNumber: syz [ 283.088027][ T5954] usb 5-1: config 0 descriptor?? [ 283.133728][ T5954] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 283.206087][ T5954] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 283.313529][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.336329][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.439938][ T977] usb 5-1: USB disconnect, device number 8 [ 284.037120][ T5942] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 284.115697][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 284.320389][ T5942] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 284.332658][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.453804][ T5942] usb 2-1: Product: syz [ 284.468360][ T5942] usb 2-1: Manufacturer: syz [ 284.487456][ T5942] usb 2-1: SerialNumber: syz [ 284.519414][ T24] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 284.657196][ T5942] usb 2-1: config 0 descriptor?? [ 284.671935][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 284.750717][ T24] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.796130][ T977] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 284.811835][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 284.832456][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.937940][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 284.947199][ T5954] usb 2-1: USB disconnect, device number 12 [ 284.956353][ T24] usb 1-1: invalid MIDI out EP 0 [ 285.005658][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 285.049683][ T977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 285.132689][ T977] usb 5-1: config 4 interface 0 has no altsetting 0 [ 285.266011][ T977] usb 5-1: string descriptor 0 read error: -22 [ 285.278526][ T977] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 285.327063][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 285.354468][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.378909][ T977] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 285.397710][ T977] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 285.411359][ T977] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 285.421340][ T977] usb 5-1: media controller created [ 285.454841][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.517716][ T24] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 285.578682][ T7908] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 285.699959][ T7852] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 285.781457][ T7908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.829347][ T7908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.853385][ T7913] batadv0: entered promiscuous mode [ 285.901482][ T7913] vlan2: entered promiscuous mode [ 285.935707][ T7852] usb 3-1: Using ep0 maxpacket: 32 [ 285.956954][ T7852] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.968957][ T7852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 286.049150][ T7852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 286.061724][ T7852] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 286.071260][ T7852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.128196][ T7852] usb 3-1: config 0 descriptor?? [ 286.160118][ T7910] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 286.183759][ T7852] hub 3-1:0.0: USB hub found [ 286.393392][ T7852] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 286.702991][ T977] zl10353_read_register: readreg error (reg=127, ret==0) [ 286.884520][ T24] usb 1-1: USB disconnect, device number 14 [ 286.939723][ T7898] delete_channel: no stack [ 287.517020][ T7921] syz.3.521 (7921): drop_caches: 2 [ 288.795884][ T5907] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 288.995673][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 289.010561][ T7852] usbhid 3-1:0.0: can't add hid device: -71 [ 289.050061][ T5907] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 289.060027][ T7852] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 289.101989][ T5907] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.142695][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.145045][ T7852] usb 3-1: USB disconnect, device number 14 [ 290.615059][ T7975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.063891][ T7982] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 291.636800][ T5927] usb 2-1: USB disconnect, device number 13 [ 292.547208][ T7986] delete_channel: no stack [ 292.740402][ T8006] TCP: TCP_TX_DELAY enabled [ 293.237318][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 293.237335][ T30] audit: type=1326 audit(1752322353.748:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c18e929 code=0x7fc00000 [ 297.088375][ T8066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.105000][ T8051] futex_wake_op: syz.0.540 tries to shift op by -33; fix this program [ 298.368270][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 298.661349][ T8089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.683389][ T8089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.030807][ T8092] syzkaller1: entered promiscuous mode [ 299.047377][ T8092] syzkaller1: entered allmulticast mode [ 299.982420][ T8110] xt_bpf: check failed: parse error [ 301.765587][ T5907] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 301.915213][ T8134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.925374][ T8134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.086093][ T5907] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 302.260775][ T5907] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 302.344953][ T8140] tipc: New replicast peer: 255.255.255.255 [ 302.355601][ T5907] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 302.366195][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.377494][ T8140] tipc: Enabled bearer , priority 10 [ 302.566014][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.553'. [ 302.587788][ T8143] tipc: Disabling bearer [ 302.867758][ T5954] usb 3-1: USB disconnect, device number 15 [ 303.956128][ T8150] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.554'. [ 305.035622][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 305.249593][ T24] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 305.318551][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 305.365592][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.405707][ T24] usb 4-1: Product: syz [ 305.409920][ T24] usb 4-1: Manufacturer: syz [ 305.475540][ T24] usb 4-1: SerialNumber: syz [ 305.499850][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 305.661004][ T8162] netlink: 'syz.2.558': attribute type 13 has an invalid length. [ 305.725465][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 305.979892][ T8162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.017466][ T8153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.120899][ T8153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.297359][ T8153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.346512][ T8153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.688107][ T8177] No such timeout policy "syz0" [ 306.694244][ T8153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.800143][ T8153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.836126][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 306.844015][ T24] ath9k_htc: Failed to initialize the device [ 306.868950][ T5940] usb 4-1: USB disconnect, device number 11 [ 306.934843][ T5940] usb 4-1: ath9k_htc: USB layer deinitialized [ 307.175649][ T5954] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 307.409298][ T5927] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 307.489541][ T5954] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 307.500482][ T5940] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 307.506232][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 307.538388][ T5954] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 307.550388][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.571241][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.589083][ T5954] usb 3-1: config 0 descriptor?? [ 307.652758][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 307.715670][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 307.723918][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.880031][ T5940] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 307.888639][ T5954] usbhid 3-1:0.0: can't add hid device: -71 [ 307.900001][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 307.912128][ T5954] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 307.933349][ T5954] usb 3-1: USB disconnect, device number 16 [ 307.969944][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 308.204668][ T5940] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 308.219755][ T5927] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 308.229050][ T5927] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 308.258290][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.269552][ T5927] usb 2-1: Manufacturer: syz [ 308.293844][ T5927] usb 2-1: config 0 descriptor?? [ 308.301583][ T5940] usb 4-1: config 0 descriptor?? [ 308.336860][ T5940] usb 4-1: can't set config #0, error -71 [ 308.363547][ T5940] usb 4-1: USB disconnect, device number 12 [ 308.639883][ T8193] xt_bpf: check failed: parse error [ 308.659697][ T5927] rc_core: IR keymap rc-hauppauge not found [ 308.711272][ T5927] Registered IR keymap rc-empty [ 308.733601][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.742634][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.752477][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 308.815765][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 308.851589][ T5927] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 308.953901][ T5927] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 308.968825][ T8201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.564'. [ 309.016993][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.125773][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.135964][ T8206] netlink: 76 bytes leftover after parsing attributes in process `syz.4.566'. [ 309.147652][ T8206] misc userio: No port type given on /dev/userio [ 309.157254][ T8206] misc userio: The device must be registered before sending interrupts [ 309.169514][ T8206] netlink: 'syz.4.566': attribute type 1 has an invalid length. [ 309.282271][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.378522][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.406679][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.436999][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.465851][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.497206][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.517160][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.535877][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.568568][ T5927] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 309.590824][ T5927] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 309.620544][ T8206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.660266][ T8209] bond1: (slave geneve2): making interface the new active one [ 309.674202][ T8209] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 309.740678][ T5940] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 309.886148][ T5927] usb 2-1: USB disconnect, device number 14 [ 310.018339][ T8213] bond1: entered promiscuous mode [ 310.031382][ T8213] geneve2: entered promiscuous mode [ 310.097182][ T5940] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 310.170935][ T5940] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 310.341112][ T5940] usb 4-1: config 220 has no interface number 2 [ 310.491695][ T5940] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 310.504991][ T5940] usb 4-1: config 220 interface 0 has no altsetting 0 [ 310.512206][ T5940] usb 4-1: config 220 interface 76 has no altsetting 0 [ 310.519601][ T5940] usb 4-1: config 220 interface 1 has no altsetting 0 [ 310.541172][ T5940] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 310.550727][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.559485][ T5940] usb 4-1: Product: syz [ 310.564075][ T5940] usb 4-1: Manufacturer: syz [ 310.624346][ T5940] usb 4-1: SerialNumber: syz [ 310.754719][ T8222] ALSA: mixer_oss: invalid index 40000 [ 313.048529][ T5940] usb 4-1: selecting invalid altsetting 0 [ 313.078697][ T5940] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 313.096358][ T8214] delete_channel: no stack [ 313.102106][ T5940] usb 4-1: No valid video chain found. [ 313.180272][ T5940] usb 4-1: selecting invalid altsetting 0 [ 313.221944][ T5940] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 313.289434][ T5940] usb 4-1: USB disconnect, device number 13 [ 313.351734][ T8241] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 316.070274][ T5940] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 316.154437][ T8271] nvme_fabrics: missing parameter 'transport=%s' [ 316.161860][ T8271] nvme_fabrics: missing parameter 'nqn=%s' [ 317.563359][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.573297][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.686308][ T5180] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 319.112025][ T5940] usb 2-1: unable to get BOS descriptor or descriptor too short [ 319.218518][ T5940] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 319.233740][ T30] audit: type=1326 audit(1752322379.748:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.2.580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21d3f8e929 code=0x0 [ 319.255369][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.279620][ T5940] usb 2-1: can't read configurations, error -71 [ 319.314946][ T5180] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.373840][ T5180] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 319.545852][ T5180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.576026][ T5180] usb 1-1: Product: syz [ 319.604653][ T5180] usb 1-1: Manufacturer: syz [ 319.663199][ T5180] usb 1-1: SerialNumber: syz [ 319.810697][ T5180] usb 1-1: config 0 descriptor?? [ 320.463941][ T8293] xt_hashlimit: size too large, truncated to 1048576 [ 321.468382][ T7852] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 321.795593][ T7852] usb 3-1: Using ep0 maxpacket: 32 [ 321.883040][ T7852] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 321.975658][ T7852] usb 3-1: config 0 has no interface number 0 [ 321.995212][ T7852] usb 3-1: config 0 interface 184 has no altsetting 0 [ 322.030206][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.176201][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.285828][ T7852] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 322.299896][ T7852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.309579][ T7852] usb 3-1: Product: syz [ 322.314086][ T7852] usb 3-1: Manufacturer: syz [ 322.322540][ T7852] usb 3-1: SerialNumber: syz [ 322.340379][ T7852] usb 3-1: config 0 descriptor?? [ 322.375256][ T7852] smsc75xx v1.0.0 [ 322.384345][ T7852] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 322.446986][ T7852] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 323.431184][ T5954] usb 1-1: USB disconnect, device number 15 [ 324.351222][ T5954] usb 3-1: USB disconnect, device number 17 [ 324.435600][ T5940] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 324.870388][ T5940] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 324.983281][ T5940] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 325.014589][ T5940] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.135135][ T5940] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 325.244005][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.576668][ T5940] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.585382][ T5940] usb 1-1: invalid MIDI out EP 0 [ 325.933444][ T8355] delete_channel: no stack [ 326.154798][ T6466] udevd[6466]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.183279][ T5940] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 326.489988][ T5940] usb 1-1: USB disconnect, device number 16 [ 329.165654][ T5954] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 329.378235][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 329.411384][ T5954] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 329.425855][ T5954] usb 3-1: config 0 has no interface number 0 [ 329.497930][ T5954] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 329.507189][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.515197][ T5954] usb 3-1: Product: syz [ 329.588990][ T5954] usb 3-1: Manufacturer: syz [ 329.603927][ T5954] usb 3-1: SerialNumber: syz [ 329.624752][ T5954] usb 3-1: config 0 descriptor?? [ 329.650805][ T5954] hub 3-1:0.145: bad descriptor, ignoring hub [ 329.667575][ T5954] hub 3-1:0.145: probe with driver hub failed with error -5 [ 329.698276][ T5954] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input12 [ 329.815596][ T7852] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 330.055608][ T7852] usb 4-1: unable to get BOS descriptor or descriptor too short [ 330.078258][ T7852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.088934][ T7852] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.216501][ T7852] usb 4-1: string descriptor 0 read error: -22 [ 330.223062][ T7852] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.321147][ T7852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.906453][ T7852] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 331.066491][ T7852] usb 1-1: Using ep0 maxpacket: 32 [ 331.247159][ T7852] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 331.309541][ T7852] usb 1-1: config 0 has no interface number 0 [ 331.424620][ T7852] usb 1-1: config 0 interface 184 has no altsetting 0 [ 331.492417][ T7852] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 331.522480][ T7852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.573657][ T7852] usb 1-1: Product: syz [ 331.596092][ T7852] usb 1-1: Manufacturer: syz [ 331.661060][ T7852] usb 1-1: SerialNumber: syz [ 331.747547][ T7852] usb 1-1: config 0 descriptor?? [ 331.771097][ T7852] smsc75xx v1.0.0 [ 331.799925][ T7852] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 332.154302][ T7852] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 333.080490][ T7852] usb 4-1: USB disconnect, device number 14 [ 333.834783][ T5940] usb 3-1: USB disconnect, device number 18 [ 335.016916][ T8418] IPv6: sit1: Disabled Multicast RS [ 335.084361][ T5927] usb 1-1: USB disconnect, device number 17 [ 336.235655][ T7852] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 336.411699][ T7852] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 336.453175][ T7852] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 336.524997][ T7852] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.697110][ T7852] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 336.794796][ T8440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.885645][ T7852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.092625][ T7852] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.100678][ T7852] usb 1-1: invalid MIDI out EP 0 [ 337.229992][ T7852] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 337.336950][ T8428] delete_channel: no stack [ 337.521136][ T7852] usb 1-1: USB disconnect, device number 18 [ 337.552296][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.068422][ T8452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.077776][ T8452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.704910][ T7852] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 341.095888][ T7852] usb 1-1: Using ep0 maxpacket: 32 [ 341.159773][ T7852] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 341.221605][ T8473] fuse: Bad value for 'group_id' [ 341.226848][ T8473] fuse: Bad value for 'group_id' [ 341.300345][ T7852] usb 1-1: config 0 has no interface number 0 [ 341.600392][ T7852] usb 1-1: config 0 interface 184 has no altsetting 0 [ 341.690177][ T7852] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 341.707043][ T7852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.743842][ T7852] usb 1-1: Product: syz [ 341.748313][ T7852] usb 1-1: Manufacturer: syz [ 341.752955][ T7852] usb 1-1: SerialNumber: syz [ 341.778051][ T7852] usb 1-1: config 0 descriptor?? [ 341.906533][ T7852] smsc75xx v1.0.0 [ 341.995051][ T7852] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 342.126266][ T7852] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 342.231680][ T8487] sctp: [Deprecated]: syz.3.616 (pid 8487) Use of int in maxseg socket option. [ 342.231680][ T8487] Use struct sctp_assoc_value instead [ 342.270690][ T8487] netlink: 'syz.3.616': attribute type 10 has an invalid length. [ 343.285371][ T8487] veth0_vlan: left promiscuous mode [ 343.299802][ T8487] veth0_vlan: entered promiscuous mode [ 343.312264][ T8487] team0: Device veth0_vlan failed to register rx_handler [ 343.516877][ T5940] usb 1-1: USB disconnect, device number 19 [ 345.090368][ T5940] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 345.459494][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 345.521914][ T5940] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 345.534530][ T5940] usb 3-1: config 0 has no interface number 0 [ 345.568201][ T5940] usb 3-1: config 0 interface 184 has no altsetting 0 [ 345.752512][ T5940] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 345.767995][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.793141][ T5940] usb 3-1: Product: syz [ 345.805116][ T5940] usb 3-1: Manufacturer: syz [ 345.816850][ T5940] usb 3-1: SerialNumber: syz [ 345.833366][ T5940] usb 3-1: config 0 descriptor?? [ 346.149614][ T5940] smsc75xx v1.0.0 [ 346.153420][ T5940] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 346.183056][ T5940] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 346.656192][ T5940] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 346.965568][ T5927] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 346.988894][ T8521] netlink: 'syz.4.624': attribute type 1 has an invalid length. [ 347.035673][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 347.059379][ T8521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.077624][ T5940] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 347.090858][ T5940] usb 4-1: config 0 has no interface number 0 [ 347.105959][ T5940] usb 4-1: config 0 interface 184 has no altsetting 0 [ 347.118782][ T5940] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 347.128207][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.136265][ T5940] usb 4-1: Product: syz [ 347.141060][ T5940] usb 4-1: Manufacturer: syz [ 347.146160][ T5940] usb 4-1: SerialNumber: syz [ 347.152929][ T5940] usb 4-1: config 0 descriptor?? [ 347.160498][ T5940] smsc75xx v1.0.0 [ 347.164669][ T5940] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 347.175350][ T5940] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 347.264587][ T5927] usb 2-1: config 0 has no interfaces? [ 347.277496][ T5927] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 347.289323][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.301725][ T5927] usb 2-1: Product: syz [ 347.306947][ T8523] bond2: (slave veth3): Enslaving as an active interface with a down link [ 347.315924][ T5927] usb 2-1: Manufacturer: syz [ 347.315944][ T5927] usb 2-1: SerialNumber: syz [ 347.319181][ T5927] usb 2-1: config 0 descriptor?? [ 347.979164][ T8523] bond2: (slave veth0_to_bond): making interface the new active one [ 347.992500][ T8523] veth0_to_bond: entered promiscuous mode [ 348.000694][ T8523] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 348.498678][ T7852] usb 3-1: USB disconnect, device number 19 [ 350.880585][ T5954] usb 2-1: USB disconnect, device number 17 [ 350.963989][ T5942] usb 4-1: USB disconnect, device number 15 [ 351.745652][ T5942] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 352.341406][ T5942] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 352.355737][ T5942] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 352.597214][ T5942] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.671546][ T5942] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 352.861635][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.902127][ T5942] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 352.962923][ T5942] usb 4-1: invalid MIDI out EP 0 [ 353.263156][ T5942] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 353.389416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.380860][ T8581] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 354.440532][ T8581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.531581][ T8581] bond2: (slave veth0_to_bond): Releasing active interface [ 354.539610][ T8581] veth0_to_bond: left promiscuous mode [ 354.596238][ T8581] bond3: (slave veth0_to_bond): making interface the new active one [ 354.607127][ T8581] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 354.891473][ T5927] usb 4-1: USB disconnect, device number 16 [ 354.923559][ T8556] delete_channel: no stack [ 354.995647][ T7852] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 355.385744][ T7852] usb 1-1: Using ep0 maxpacket: 32 [ 355.446724][ T7852] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 355.465215][ T7852] usb 1-1: config 0 has no interface number 0 [ 355.482248][ T7852] usb 1-1: config 0 interface 184 has no altsetting 0 [ 355.541226][ T7852] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 355.551602][ T7852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.602010][ T7852] usb 1-1: Product: syz [ 355.634283][ T7852] usb 1-1: Manufacturer: syz [ 355.659812][ T7852] usb 1-1: SerialNumber: syz [ 355.733878][ T7852] usb 1-1: config 0 descriptor?? [ 355.763525][ T7852] smsc75xx v1.0.0 [ 355.767831][ T7852] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 355.860565][ T7852] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 358.004963][ T7852] usb 1-1: USB disconnect, device number 20 [ 359.636036][ T7852] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 359.657647][ T8632] netlink: 'syz.0.647': attribute type 5 has an invalid length. [ 359.840985][ T7852] usb 4-1: config 0 has no interfaces? [ 359.864979][ T7852] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 359.882077][ T7852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.892848][ T7852] usb 4-1: Product: syz [ 359.904822][ T7852] usb 4-1: Manufacturer: syz [ 360.043575][ T7852] usb 4-1: SerialNumber: syz [ 360.135724][ T7852] usb 4-1: config 0 descriptor?? [ 360.490020][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.555976][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.505702][ T5954] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 361.698754][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 361.719728][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.731857][ T5954] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 361.754592][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.973333][ T5954] usb 2-1: config 0 descriptor?? [ 362.429158][ T5954] hid (null): report_id 0 is invalid [ 362.441644][ T5954] aquacomputer_d5next 0003:0C70:F003.0002: report_id 0 is invalid [ 362.552687][ T5954] aquacomputer_d5next 0003:0C70:F003.0002: item 0 0 1 8 parsing failed [ 362.591849][ T5954] aquacomputer_d5next 0003:0C70:F003.0002: probe with driver aquacomputer_d5next failed with error -22 [ 363.187075][ T5927] usb 4-1: USB disconnect, device number 17 [ 365.220079][ T5954] usb 2-1: USB disconnect, device number 18 [ 365.962369][ T8685] binder: 8678:8685 ioctl c0306201 0 returned -14 [ 368.920881][ T8705] binder: 8700:8705 ioctl c0306201 0 returned -14 [ 369.085731][ T5954] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 369.555707][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 369.732418][ T5954] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 369.761123][ T5954] usb 2-1: config 0 has no interface number 0 [ 369.798132][ T5954] usb 2-1: config 0 interface 184 has no altsetting 0 [ 369.829314][ T5954] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 369.844488][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.881268][ T5954] usb 2-1: Product: syz [ 369.898109][ T5954] usb 2-1: Manufacturer: syz [ 369.915146][ T5954] usb 2-1: SerialNumber: syz [ 369.956482][ T5954] usb 2-1: config 0 descriptor?? [ 370.004068][ T5954] smsc75xx v1.0.0 [ 370.021376][ T5954] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 370.101393][ T5954] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 371.956919][ T5940] usb 2-1: USB disconnect, device number 19 [ 373.029371][ T8685] syz.0.660 (8685): drop_caches: 1 [ 373.655594][ T5940] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 374.206854][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 374.392816][ T5940] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 374.444066][ T5940] usb 4-1: config 0 has no interface number 0 [ 374.523587][ T5940] usb 4-1: config 0 interface 184 has no altsetting 0 [ 374.562727][ T5940] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 374.625712][ T5954] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 374.698929][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.749022][ T5940] usb 4-1: Product: syz [ 374.763616][ T5940] usb 4-1: Manufacturer: syz [ 374.773783][ T5940] usb 4-1: SerialNumber: syz [ 374.807262][ T8748] binder: 8744:8748 ioctl c0306201 0 returned -14 [ 374.832887][ T5940] usb 4-1: config 0 descriptor?? [ 374.892554][ T5940] smsc75xx v1.0.0 [ 374.906818][ T5940] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 374.962392][ T5940] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 375.028574][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 375.268480][ T5954] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 375.279525][ T5954] usb 1-1: config 0 has no interface number 0 [ 375.294084][ T5954] usb 1-1: config 0 interface 184 has no altsetting 0 [ 375.336689][ T5954] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 375.346424][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.549546][ T5954] usb 1-1: Product: syz [ 375.553803][ T5954] usb 1-1: Manufacturer: syz [ 375.618006][ T5954] usb 1-1: SerialNumber: syz [ 375.654622][ T5954] usb 1-1: config 0 descriptor?? [ 375.697698][ T5954] smsc75xx v1.0.0 [ 375.701460][ T5954] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 375.745793][ T5954] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 377.041818][ T8761] binder: 8757:8761 ioctl c0306201 0 returned -14 [ 377.459541][ T5940] usb 1-1: USB disconnect, device number 21 [ 377.891590][ T7852] usb 4-1: USB disconnect, device number 18 [ 378.993242][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.999953][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.953024][ T8785] binder: 8775:8785 ioctl c0306201 0 returned -14 [ 380.142429][ T8785] syz.2.684 (8785): drop_caches: 1 [ 380.380520][ T8785] syz.2.684 (8785): drop_caches: 1 [ 381.097426][ T8791] binder: 8777:8791 ioctl c0306201 0 returned -14 [ 382.723432][ T8808] syz.1.689 (8808): drop_caches: 1 [ 382.950694][ T8808] syz.1.689 (8808): drop_caches: 1 [ 383.804685][ T8827] binder: 8815:8827 ioctl c0306201 0 returned -14 [ 383.953496][ T8827] syz.4.691 (8827): drop_caches: 1 [ 384.100763][ T8827] syz.4.691 (8827): drop_caches: 1 [ 384.276579][ T8825] syz.3.692 (8825): drop_caches: 1 [ 384.852603][ T8825] syz.3.692 (8825): drop_caches: 1 [ 385.285483][ T8836] binder: 8830:8836 ioctl c0306201 0 returned -14 [ 385.602940][ T8836] syz.0.694 (8836): drop_caches: 1 [ 385.743766][ T8836] syz.0.694 (8836): drop_caches: 1 [ 390.449015][ T8885] binder: 8871:8885 ioctl c0306201 0 returned -14 [ 390.661229][ T8885] syz.3.705 (8885): drop_caches: 1 [ 390.990085][ T8885] syz.3.705 (8885): drop_caches: 1 [ 391.334014][ T8896] binder: 8888:8896 ioctl c0306201 0 returned -14 [ 391.519891][ T8896] syz.1.708 (8896): drop_caches: 1 [ 391.579064][ T8901] binder: 8891:8901 ioctl c0306201 0 returned -14 [ 391.705881][ T8903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.898199][ T8896] syz.1.708 (8896): drop_caches: 1 [ 393.670991][ T8923] binder: 8915:8923 ioctl c0306201 0 returned -14 [ 393.849096][ T8923] syz.1.714 (8923): drop_caches: 1 [ 393.999890][ T8923] syz.1.714 (8923): drop_caches: 1 [ 394.706943][ T8929] netlink: 'syz.4.717': attribute type 5 has an invalid length. [ 396.082629][ T8942] binder: 8936:8942 ioctl c0306201 0 returned -14 [ 396.337810][ T8945] syz.4.719 (8945): drop_caches: 1 [ 396.488127][ T8945] syz.4.719 (8945): drop_caches: 1 [ 397.155426][ T8942] syz.1.718 (8942): drop_caches: 1 [ 397.647172][ T8954] syz.0.720 (8954): drop_caches: 1 [ 397.760334][ T8954] syz.0.720 (8954): drop_caches: 1 [ 398.104052][ T8942] syz.1.718 (8942): drop_caches: 1 [ 398.714186][ T8963] syz.3.722 (8963): drop_caches: 1 [ 399.019331][ T8963] syz.3.722 (8963): drop_caches: 1 [ 399.291198][ T8970] binder: 8966:8970 ioctl c0306201 0 returned -14 [ 400.884305][ T8980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.457079][ T5941] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 401.652231][ T5941] usb 4-1: config 0 has no interfaces? [ 401.760538][ T5941] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 401.782146][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.009267][ T5941] usb 4-1: Product: syz [ 402.013785][ T5941] usb 4-1: Manufacturer: syz [ 402.052873][ T5941] usb 4-1: SerialNumber: syz [ 402.090650][ T5941] usb 4-1: config 0 descriptor?? [ 402.592731][ T8987] program syz.3.729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.606918][ T8987] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 402.999781][ T9009] binder: 9003:9009 ioctl c0306201 0 returned -14 [ 404.044160][ T9018] syz.0.735 (9018): drop_caches: 1 [ 404.163450][ T9018] syz.0.735 (9018): drop_caches: 1 [ 404.938902][ T9028] syz.2.737 (9028): drop_caches: 1 [ 405.037906][ T9028] syz.2.737 (9028): drop_caches: 1 [ 405.249812][ T5940] usb 4-1: USB disconnect, device number 19 [ 405.352491][ T9027] syz.4.736 (9027): drop_caches: 1 [ 405.614936][ T9027] syz.4.736 (9027): drop_caches: 1 [ 406.559972][ T9036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.997598][ T9047] binder: 9039:9047 ioctl c0306201 0 returned -14 [ 407.250487][ T9047] syz.4.740 (9047): drop_caches: 1 [ 407.265400][ T9045] syz.1.742 (9045): drop_caches: 1 [ 407.385021][ T9047] syz.4.740 (9047): drop_caches: 1 [ 407.563548][ T9045] syz.1.742 (9045): drop_caches: 1 [ 408.496337][ T9062] sctp: [Deprecated]: syz.2.744 (pid 9062) Use of int in maxseg socket option. [ 408.496337][ T9062] Use struct sctp_assoc_value instead [ 408.862447][ T9062] netlink: 'syz.2.744': attribute type 10 has an invalid length. [ 408.891403][ T9062] veth0_vlan: left promiscuous mode [ 408.904999][ T9062] veth0_vlan: entered promiscuous mode [ 409.008521][ T9062] team0: Device veth0_vlan failed to register rx_handler [ 410.145802][ T5852] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 410.276433][ T9085] syzkaller1: entered promiscuous mode [ 410.308050][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 410.334116][ T9085] syzkaller1: entered allmulticast mode [ 410.359683][ T5852] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 410.461294][ T5852] usb 2-1: config 0 has no interface number 0 [ 410.553114][ T5852] usb 2-1: config 0 interface 184 has no altsetting 0 [ 410.595207][ T5852] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 410.615312][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.633245][ T5852] usb 2-1: Product: syz [ 410.638469][ T5852] usb 2-1: Manufacturer: syz [ 410.643360][ T5852] usb 2-1: SerialNumber: syz [ 410.716739][ T5852] usb 2-1: config 0 descriptor?? [ 410.725900][ T5852] smsc75xx v1.0.0 [ 410.729573][ T5852] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 410.744175][ T5852] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 410.760123][ T9091] binder: 9087:9091 ioctl c0306201 0 returned -14 [ 411.366405][ T9097] binder: 9092:9097 ioctl c0306201 0 returned -14 [ 411.584381][ T9097] syz.0.751 (9097): drop_caches: 1 [ 411.715219][ T9097] syz.0.751 (9097): drop_caches: 1 [ 412.097209][ T9091] syz.3.750 (9091): drop_caches: 1 [ 412.389007][ T9106] syz.2.753 (9106): drop_caches: 1 [ 412.505952][ T9106] syz.2.753 (9106): drop_caches: 1 [ 413.064840][ T9091] syz.3.750 (9091): drop_caches: 1 [ 413.576670][ T10] usb 2-1: USB disconnect, device number 20 [ 414.385019][ T9129] binder: 9118:9129 ioctl c0306201 0 returned -14 [ 414.548402][ T9129] syz.4.757 (9129): drop_caches: 1 [ 414.679056][ T9129] syz.4.757 (9129): drop_caches: 1 [ 414.959840][ T9136] binder: 9121:9136 ioctl c0306201 0 returned -14 [ 415.737798][ T9136] syz.3.758 (9136): drop_caches: 1 [ 416.430171][ T9142] binder: 9141:9142 ioctl c0306201 0 returned -14 [ 417.014988][ T9142] syz.4.762 (9142): drop_caches: 1 [ 417.072864][ T9159] binder: 9151:9159 ioctl c0306201 0 returned -14 [ 417.206131][ T9159] syz.2.765 (9159): drop_caches: 1 [ 417.344291][ T9159] syz.2.765 (9159): drop_caches: 1 [ 417.370181][ T9142] syz.4.762 (9142): drop_caches: 1 [ 417.387272][ T9150] syzkaller0: entered promiscuous mode [ 417.393024][ T9150] syzkaller0: entered allmulticast mode [ 418.709679][ T9170] syz.4.767 (9170): drop_caches: 1 [ 418.884689][ T9170] syz.4.767 (9170): drop_caches: 1 [ 420.861713][ T9189] binder: 9183:9189 ioctl c0306201 0 returned -14 [ 421.448953][ T9189] syz.4.770 (9189): drop_caches: 1 [ 421.709342][ T9189] syz.4.770 (9189): drop_caches: 1 [ 422.839186][ T9198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.857877][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.868666][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.089605][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.100383][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.001043][ T9216] binder: 9205:9216 ioctl c0306201 0 returned -14 [ 425.067011][ T9217] binder: 9213:9217 ioctl c0306201 0 returned -14 [ 425.107909][ T9217] syz.0.776 (9217): drop_caches: 1 [ 425.223988][ T9216] syz.1.775 (9216): drop_caches: 1 [ 425.288132][ T9216] syz.1.775 (9216): drop_caches: 1 [ 425.751728][ T9217] syz.0.776 (9217): drop_caches: 1 [ 428.474546][ T9242] binder: 9231:9242 ioctl c0306201 0 returned -14 [ 428.980463][ T9242] syz.1.779 (9242): drop_caches: 1 [ 428.997856][ T9248] binder: 9235:9248 ioctl c0306201 0 returned -14 [ 429.197393][ T9242] syz.1.779 (9242): drop_caches: 1 [ 429.364899][ T9248] syz.3.781 (9248): drop_caches: 1 [ 429.424078][ T9248] syz.3.781 (9248): drop_caches: 1 [ 429.617853][ T5907] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 429.626090][ T5907] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 429.633494][ T5907] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 429.654171][ T5907] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 429.680205][ T5907] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 429.697252][ T5907] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 429.798989][ T5907] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 429.848369][ T5907] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 429.883570][ T5907] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 429.891467][ T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 429.951412][ T5907] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 429.996884][ T5907] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 430.058850][ T10] usb 1-1: config 0 has no interfaces? [ 430.065672][ T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 430.075044][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.092738][ T5907] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 430.126367][ T5907] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 430.140116][ T10] usb 1-1: config 0 descriptor?? [ 430.177164][ T5907] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 430.383460][ T5907] hid-generic 00A0:0006:0003.0003: hidraw0: HID v0.05 Device [syz1] on syz0 [ 430.507928][ T9253] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 431.112606][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 431.122040][ T9270] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 431.129826][ T9270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.845195][ T9273] syz.1.786 (9273): drop_caches: 1 [ 432.288630][ T9283] binder: 9275:9283 ioctl c0306201 0 returned -14 [ 432.475963][ T5943] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 432.486720][ T5943] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 432.573254][ T9283] syz.2.787 (9283): drop_caches: 1 [ 432.578906][ T5943] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 432.615567][ T5943] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 432.627952][ T5943] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 432.668380][ T9273] syz.1.786 (9273): drop_caches: 1 [ 432.677373][ T5943] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 432.695136][ T5943] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 432.797658][ T5943] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 432.826362][ T5852] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 432.875530][ T5943] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 432.895577][ T5943] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 432.903006][ T5943] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 432.936965][ T5943] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 433.018365][ T5852] usb 4-1: config 0 has no interfaces? [ 433.024194][ T5852] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 433.045645][ T5943] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 433.103424][ T5942] usb 1-1: USB disconnect, device number 22 [ 433.115371][ T5943] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 433.123350][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.188997][ T9283] syz.2.787 (9283): drop_caches: 1 [ 433.245256][ T5852] usb 4-1: config 0 descriptor?? [ 433.269456][ T5943] hid-generic 00A0:0006:0003.0004: hidraw1: HID v0.05 Device [syz1] on syz0 [ 433.385780][ T31] INFO: task kworker/0:2:977 blocked for more than 143 seconds. [ 433.394004][ T31] Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 [ 433.438251][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.612180][ T31] task:kworker/0:2 state:D stack:21384 pid:977 tgid:977 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 434.065337][ T31] Workqueue: usb_hub_wq hub_event [ 434.270547][ T31] Call Trace: [ 434.424016][ T31] [ 434.442236][ T31] __schedule+0x16f5/0x4d00 [ 434.460374][ T31] ? schedule+0x165/0x360 [ 434.496785][ T31] ? __pfx___schedule+0x10/0x10 [ 434.510129][ T31] ? schedule+0x91/0x360 [ 434.584559][ T31] schedule+0x165/0x360 [ 434.600607][ T31] schedule_timeout+0x9a/0x270 [ 435.582922][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 435.708473][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 435.741374][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.764652][ T31] ? wait_for_completion+0x267/0x5d0 [ 435.792791][ T31] wait_for_completion+0x2bf/0x5d0 [ 435.811559][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 436.203857][ T31] i2c_del_adapter+0x581/0x6e0 [ 436.295747][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.335989][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 436.635789][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 436.698086][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 436.778511][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 436.805730][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 436.812766][ T31] usb_probe_interface+0x644/0xbc0 [ 437.296239][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 437.331567][ T31] really_probe+0x26d/0x9a0 [ 437.371507][ T31] __driver_probe_device+0x18c/0x2f0 [ 437.402161][ T31] driver_probe_device+0x4f/0x430 [ 437.425806][ T31] __device_attach_driver+0x2ce/0x530 [ 437.453687][ T31] bus_for_each_drv+0x24e/0x2e0 [ 437.523389][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 437.601767][ T5852] usb 4-1: USB disconnect, device number 20 [ 437.642190][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 437.664124][ T31] __device_attach+0x2b8/0x400 [ 437.705237][ T31] ? __pfx___device_attach+0x10/0x10 [ 437.783742][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 437.968382][ T31] bus_probe_device+0x185/0x260 [ 438.023378][ T31] device_add+0x7b6/0xb50 [ 438.061526][ T31] usb_set_configuration+0x1a87/0x20e0 [ 438.246896][ T31] usb_generic_driver_probe+0x8d/0x150 [ 438.252640][ T31] usb_probe_device+0x1c1/0x390 [ 438.428984][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 438.446518][ T31] really_probe+0x26d/0x9a0 [ 438.462591][ T31] __driver_probe_device+0x18c/0x2f0 [ 438.591003][ T31] driver_probe_device+0x4f/0x430 [ 438.667180][ T31] __device_attach_driver+0x2ce/0x530 [ 438.678813][ T31] bus_for_each_drv+0x24e/0x2e0 [ 438.683977][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 438.694037][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 438.700928][ T31] __device_attach+0x2b8/0x400 [ 438.711022][ T31] ? __pfx___device_attach+0x10/0x10 [ 438.735338][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 438.749844][ T31] bus_probe_device+0x185/0x260 [ 438.781013][ T31] device_add+0x7b6/0xb50 [ 438.787088][ T31] usb_new_device+0xa39/0x16c0 [ 438.792136][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 438.801788][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.808786][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.814391][ T31] hub_event+0x2941/0x4a00 [ 438.822744][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 438.829432][ T31] ? __pfx_hub_event+0x10/0x10 [ 438.834525][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.844905][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.851847][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.862052][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.869192][ T31] process_scheduled_works+0xae1/0x17b0 [ 438.874849][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 438.891571][ T31] worker_thread+0x8a0/0xda0 [ 438.899367][ T31] kthread+0x70e/0x8a0 [ 438.903562][ T31] ? __pfx_worker_thread+0x10/0x10 [ 438.913522][ T31] ? __pfx_kthread+0x10/0x10 [ 438.919369][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.924913][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.934025][ T31] ? __pfx_kthread+0x10/0x10 [ 438.940127][ T31] ret_from_fork+0x3fc/0x770 [ 438.944794][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 438.954199][ T31] ? __switch_to_asm+0x39/0x70 [ 438.960294][ T31] ? __switch_to_asm+0x33/0x70 [ 438.965217][ T31] ? __pfx_kthread+0x10/0x10 [ 438.973697][ T31] ret_from_fork_asm+0x1a/0x30 [ 438.979813][ T31] [ 438.983453][ T31] [ 438.983453][ T31] Showing all locks held in the system: [ 439.006645][ T31] 1 lock held by khungtaskd/31: [ 439.011943][ T31] #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 439.028648][ T31] 5 locks held by kworker/0:2/977: [ 439.033823][ T31] #0: ffff8881436fdd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 439.088541][ T31] #1: ffffc90003887bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 439.113086][ T31] #2: ffff888028b6e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 439.125769][ T31] #3: ffff888024341198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 439.135210][ T31] #4: ffff88807df85160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 439.149761][ T31] 2 locks held by getty/5611: [ 439.154704][ T31] #0: ffff888035bf20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 439.169568][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 439.180464][ T31] 5 locks held by syz-executor/5837: [ 439.190295][ T31] [ 439.192674][ T31] ============================================= [ 439.192674][ T31] [ 439.202248][ T31] NMI backtrace for cpu 1 [ 439.202266][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 439.202289][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.202301][ T31] Call Trace: [ 439.202309][ T31] [ 439.202317][ T31] dump_stack_lvl+0x189/0x250 [ 439.202344][ T31] ? __wake_up_klogd+0xd9/0x110 [ 439.202374][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.202398][ T31] ? __pfx__printk+0x10/0x10 [ 439.202439][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 439.202470][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 439.202492][ T31] ? _printk+0xcf/0x120 [ 439.202524][ T31] ? __pfx__printk+0x10/0x10 [ 439.202554][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 439.202577][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 439.202641][ T31] watchdog+0xfee/0x1030 [ 439.202662][ T31] ? watchdog+0x1de/0x1030 [ 439.202690][ T31] kthread+0x70e/0x8a0 [ 439.202721][ T31] ? __pfx_watchdog+0x10/0x10 [ 439.202739][ T31] ? __pfx_kthread+0x10/0x10 [ 439.202768][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.202797][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.202824][ T31] ? __pfx_kthread+0x10/0x10 [ 439.202852][ T31] ret_from_fork+0x3fc/0x770 [ 439.202877][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 439.202905][ T31] ? __switch_to_asm+0x39/0x70 [ 439.202929][ T31] ? __switch_to_asm+0x33/0x70 [ 439.202953][ T31] ? __pfx_kthread+0x10/0x10 [ 439.202981][ T31] ret_from_fork_asm+0x1a/0x30 [ 439.203023][ T31] [ 439.203031][ T31] Sending NMI from CPU 1 to CPUs 0: [ 439.363833][ C0] NMI backtrace for cpu 0 [ 439.363852][ C0] CPU: 0 UID: 0 PID: 5907 Comm: kworker/0:3 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 439.363873][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.363883][ C0] Workqueue: events free_obj_work [ 439.363911][ C0] RIP: 0010:lock_acquire+0x154/0x360 [ 439.363931][ C0] Code: 8d e8 f0 23 d1 09 b8 ff ff ff ff 65 0f c1 05 f3 50 02 11 83 f8 01 0f 85 c9 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 [ 439.363945][ C0] RSP: 0018:ffffc90004bd7438 EFLAGS: 00000046 [ 439.363958][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ea2bfb34e2b41900 [ 439.363969][ C0] RDX: 0000000000000000 RSI: ffffffff8db869e8 RDI: ffffffff8be29e00 [ 439.363980][ C0] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5 [ 439.363991][ C0] R10: ffffc90004bd75f8 R11: ffffffff81ad03a0 R12: 0000000000000002 [ 439.364002][ C0] R13: ffffffff8e13f160 R14: 0000000000000000 R15: 0000000000000246 [ 439.364012][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 439.364025][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.364036][ C0] CR2: 00007f21d42deccc CR3: 0000000034e72000 CR4: 00000000003526f0 [ 439.364053][ C0] Call Trace: [ 439.364060][ C0] [ 439.364068][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 439.364088][ C0] ? stack_trace_save+0x9c/0xe0 [ 439.364109][ C0] ? unwind_next_frame+0xa5/0x2390 [ 439.364125][ C0] unwind_next_frame+0xc2/0x2390 [ 439.364142][ C0] ? unwind_next_frame+0xa5/0x2390 [ 439.364158][ C0] ? arch_stack_walk+0xe4/0x150 [ 439.364180][ C0] ? __unwind_start+0x5b9/0x760 [ 439.364199][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 439.364220][ C0] arch_stack_walk+0x11c/0x150 [ 439.364241][ C0] ? stack_trace_save+0x9c/0xe0 [ 439.364262][ C0] stack_trace_save+0x9c/0xe0 [ 439.364282][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 439.364307][ C0] kasan_save_track+0x3e/0x80 [ 439.364355][ C0] ? free_obj_work+0x342/0x480 [ 439.364374][ C0] kasan_save_free_info+0x46/0x50 [ 439.364396][ C0] __kasan_slab_free+0x62/0x70 [ 439.364413][ C0] kmem_cache_free+0x18f/0x400 [ 439.364434][ C0] free_obj_work+0x342/0x480 [ 439.364457][ C0] ? __pfx_free_obj_work+0x10/0x10 [ 439.364478][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.364499][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 439.364516][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 439.364533][ C0] process_scheduled_works+0xae1/0x17b0 [ 439.364562][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 439.364586][ C0] worker_thread+0x8a0/0xda0 [ 439.364604][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 439.364629][ C0] ? __kthread_parkme+0x7b/0x200 [ 439.364652][ C0] kthread+0x70e/0x8a0 [ 439.364679][ C0] ? __pfx_worker_thread+0x10/0x10 [ 439.364696][ C0] ? __pfx_kthread+0x10/0x10 [ 439.364717][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.364737][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.364758][ C0] ? __pfx_kthread+0x10/0x10 [ 439.364778][ C0] ret_from_fork+0x3fc/0x770 [ 439.364796][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 439.364814][ C0] ? __switch_to_asm+0x39/0x70 [ 439.364834][ C0] ? __switch_to_asm+0x33/0x70 [ 439.364852][ C0] ? __pfx_kthread+0x10/0x10 [ 439.364872][ C0] ret_from_fork_asm+0x1a/0x30 [ 439.364899][ C0] [ 439.722412][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 439.729429][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 439.741526][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.751825][ T31] Call Trace: [ 439.755346][ T31] [ 439.758326][ T31] dump_stack_lvl+0x99/0x250 [ 439.762979][ T31] ? __asan_memcpy+0x40/0x70 [ 439.767649][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.773002][ T31] ? __pfx__printk+0x10/0x10 [ 439.777738][ T31] panic+0x2db/0x790 [ 439.781852][ T31] ? __pfx_panic+0x10/0x10 [ 439.786394][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 439.792328][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 439.797746][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 439.804252][ T31] watchdog+0x102d/0x1030 [ 439.808662][ T31] ? watchdog+0x1de/0x1030 [ 439.813141][ T31] kthread+0x70e/0x8a0 [ 439.817265][ T31] ? __pfx_watchdog+0x10/0x10 [ 439.821979][ T31] ? __pfx_kthread+0x10/0x10 [ 439.826733][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.831977][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.837239][ T31] ? __pfx_kthread+0x10/0x10 [ 439.841991][ T31] ret_from_fork+0x3fc/0x770 [ 439.846739][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 439.852021][ T31] ? __switch_to_asm+0x39/0x70 [ 439.856843][ T31] ? __switch_to_asm+0x33/0x70 [ 439.861837][ T31] ? __pfx_kthread+0x10/0x10 [ 439.866477][ T31] ret_from_fork_asm+0x1a/0x30 [ 439.871303][ T31] [ 439.874550][ T31] Kernel Offset: disabled [ 439.878892][ T31] Rebooting in 86400 seconds..