last executing test programs: 11.630127991s ago: executing program 4 (id=212): mknod$loop(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x8003, 0x1, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 11.204868659s ago: executing program 4 (id=214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10.803994849s ago: executing program 4 (id=216): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) 7.641934407s ago: executing program 1 (id=228): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000004c0)={0x40, 0x18, 0x17, "10d833788ef11aa395b593b95b3b52c4317c48a84008ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.641567195s ago: executing program 4 (id=229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer], 0x0, 0x0, 0x0}) 7.525135461s ago: executing program 4 (id=230): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) close(r2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0xc45f3000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) shutdown(r5, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) fsopen(0x0, 0x0) 7.256811785s ago: executing program 0 (id=232): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f0033"], 0x3c}}, 0x10) 7.200457699s ago: executing program 0 (id=233): ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x18, 0x2d, 0x9c, 0x10, 0x930, 0xa13, 0x7644, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x2, 0x2, 0xff, 0xff, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x5509, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000700)=ANY=[@ANYBLOB="40156200000044dbe11bc4be4ed02a6d98d895b4dc62042ac72e1ed7f570f6382cb1ad63ddd210c8713ac9fd1b0cb26fe901165ff4db7d71bee41f9d031d37f01f4ac3c9502a9e7525a26e5f1782"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.623320352s ago: executing program 1 (id=242): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 4.195099225s ago: executing program 0 (id=243): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r0, 0x0, 0x0) 3.982526047s ago: executing program 4 (id=244): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000680)=ANY=[], 0x0) 3.748236816s ago: executing program 1 (id=245): syz_usb_connect(0x5, 0x8f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x96, 0x6d, 0xf, 0x8, 0x8087, 0xa5a, 0x5f2c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0xa2, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0xf6, 0x4, 0x3, 0x7e, 0x84, 0xe5, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0xf4, 0x8, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x10, 0x6000}]}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x27, 0x80}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x4, 0x37, 0xb0, 0x8b, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 2.653511077s ago: executing program 3 (id=248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.563045505s ago: executing program 3 (id=249): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) write$dsp(r1, &(0x7f0000000280)="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", 0x1000) 2.493488939s ago: executing program 0 (id=250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_create1(0x80000) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x58}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r3, 0x0, 0x0) 2.020156536s ago: executing program 0 (id=254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ftruncate(r3, 0x7f) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x3}, 0x1c) openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000100001042cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400400012800b0001006272696467650000300002800c002000040000000000000006000800a80900000c0021000500fcff010000000c001e00000000e0ad57e202"], 0x60}, 0x1, 0x0, 0x0, 0x20008880}, 0x20040844) 1.783224605s ago: executing program 1 (id=256): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x1, 0x8b, 0x3a, 0x20, 0x711, 0x210, 0x7c8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xd3, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x62, 0x1, 0x2, 0x5b, 0x37, 0xe1, 0x4, [], [{{0x9, 0x5, 0xc, 0x6, 0x200, 0xa, 0x7f, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x4, 0xdc, 0x9}}]}}]}}]}}, 0x0) syz_usb_connect$uac1(0x5, 0xe0, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x6, 0x40, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x8}, [@feature_unit={0x9, 0x24, 0x6, 0x2, 0x3, 0x1, [0x1], 0x9}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0x40, "20559392"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x306, 0x5, 0x4, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0xd, 0x3}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x6, "a8"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x9, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x8, 0x9d, "caa5", "e7"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x7f, 0x0, "90"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x5, 0x9, {0x7, 0x25, 0x1, 0x0, 0x7, 0xfaed}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x6, 0x66, "916fd8bf"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x1, 0x4, 0x8, "b53b9a0f01"}, @as_header={0x7, 0x24, 0x1, 0xd0, 0x8b, 0x3}, @as_header={0x7, 0x24, 0x1, 0xd, 0x5, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x7f7, 0x95, 0x5, 0xe1, {0x7, 0x25, 0x1, 0x0, 0x6, 0x3}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x19, 0x2, 0x4, 0x60, 0xd9}, 0x37, &(0x7f0000000180)={0x5, 0xf, 0x37, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x4, 0x2, 0x8000, 0xe7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x0, 0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xfc, 0x0, 0x3, 0x0, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0xc, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x81, 0x2, 0x4}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf09f}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x429}}]}) 1.493553167s ago: executing program 3 (id=259): ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x8, 0x81, 0x1, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1, 0x6904, 0x4, 0x9, 0x7, 0x0, 0x0, 0x8000000057], 0x1, 0x41707}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@arm64={0x3, 0xc, 0xf, '\x00', 0x10001}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.004065197s ago: executing program 3 (id=261): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x10001}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000044d564b"]) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000300), 0xc, 0x20c40) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0x9, &(0x7f0000001280)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x520e854a, 0x1000, &(0x7f0000002400)=""/4096, 0x41000, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x3, 0x7, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000800), &(0x7f0000000840)=[{0x0, 0x2, 0x1, 0x1}, {0x4, 0x5, 0x7, 0x8}, {0x1, 0x5, 0x6, 0x8}, {0x5, 0x1, 0xd, 0x9}, {0x5, 0x4, 0x5, 0x9}], 0x10, 0x7, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 960.14621ms ago: executing program 2 (id=262): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 724.266326ms ago: executing program 2 (id=263): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00'}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 668.239851ms ago: executing program 3 (id=264): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_create1(0x80000) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x58}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r3, 0x0, 0x0) 550.639462ms ago: executing program 2 (id=265): semtimedop(0x0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1f4, 0x0) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000040)=0x4) 427.131439ms ago: executing program 2 (id=266): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x54, 0x2c, 0xd2d, 0x0, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x400, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x54}}, 0x20000000) 280.660894ms ago: executing program 1 (id=267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800084000000008140005"], 0x5c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a8802, 0x0) write$tun(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xf8) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 257.531708ms ago: executing program 2 (id=268): mknod$loop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 255.047364ms ago: executing program 0 (id=269): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) write$dsp(r1, &(0x7f0000000280)="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", 0x1000) 104.810588ms ago: executing program 3 (id=270): r0 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x52, 0xe8, 0xe5, 0x10, 0x13b1, 0x42, 0xdcc4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x44, 0x0, 0x1, 0x2e, 0xaf, 0xb2, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x1e, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000004000000000000000008000018110000", @ANYBLOB, @ANYBLOB="0000000004000000b7124fffffffffff54730400ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b291000000000000b70200b70000000000000095000000000000007aee0f96a964c9849c8f1fb83237e00ca2ac7a51e698126e4e5894ea5395a87a8ecdc5df1b6550a90f5bad75c338bdb52cc87a0050771912f905acf178a9be0e11ed016d4f9488ef17b067473bfa6213d2b8551cb68ea385a3049d75"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xcd, &(0x7f0000000180)=""/205, 0x41000, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x5, 0x140, 0xfffffffe}, 0x10, 0x4564, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x3, 0x5, 0x4}], 0x10, 0x31, @void, @value}, 0x94) socket$inet6(0xa, 0x4, 0x2) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000)=r2, 0xfeb2) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000840)="baa035bfcaf6b5f2182d3b5050872b6064ca2db4971cef5858c82c9664cf5926a68d066e5aab8d701ea9fb9b8221a093718df80420f4e00dbfc2f8a8b47bad6e4d0b01b90f60f11a67a766a15d30ba7dde0789080e6e675f4779e11e48f7c52e0577ec91ef9e37b57305502ec59fadede73efe692148513e9c4330edc21d56", 0x7f}, {&(0x7f0000000000)='0', 0x1}], 0x2}}], 0x1, 0x0) 16.717779ms ago: executing program 2 (id=271): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'lo\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}}], 0x1, 0xc080) 0s ago: executing program 1 (id=272): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) exit(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) r3 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(0x0, &(0x7f00000000c0)=@random={'security.', '/dev/fuse\x00'}) ioctl$FS_IOC_RESVSP(r3, 0x80086601, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r4 = syz_genetlink_get_family_id$ethtool(0x0, r2) getsockname$packet(r2, 0x0, &(0x7f0000000380)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x80, 0xdd7, 0x2, {{0x18, 0x4, 0x1, 0x9, 0x60, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @cipso={0x86, 0x40, 0x0, [{0x5, 0x11, "61853379342bf9bc837101084905ae"}, {0x2, 0x6, "9b2f6985"}, {0x7, 0x6, "29d6b434"}, {0x2, 0x9, "4107220cb4ea41"}, {0x2, 0x8, "5c99b53f102e"}, {0x1, 0xc, "434c36e509a5c1062086"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xb0, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x14) unshare(0xc040400) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000340), 0xffff, r7}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. [ 79.012167][ T5824] cgroup: Unknown subsys name 'net' [ 79.147000][ T5824] cgroup: Unknown subsys name 'cpuset' [ 79.156255][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.890482][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.807416][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.815736][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.817818][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.824294][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.831576][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.838127][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.845061][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.851750][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.859330][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.866403][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.873203][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.879627][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.893981][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.959135][ T5157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.967072][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.988752][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.005677][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.013699][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.022048][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.030752][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.061804][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.072443][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.083902][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.095117][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.103556][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.686639][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 85.773005][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 85.807396][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 86.030991][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 86.073906][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 86.129556][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.137815][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.145526][ T5847] bridge_slave_0: entered allmulticast mode [ 86.153651][ T5847] bridge_slave_0: entered promiscuous mode [ 86.162489][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.169832][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.177026][ T5847] bridge_slave_1: entered allmulticast mode [ 86.185133][ T5847] bridge_slave_1: entered promiscuous mode [ 86.288640][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.296248][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.306131][ T5849] bridge_slave_0: entered allmulticast mode [ 86.313715][ T5849] bridge_slave_0: entered promiscuous mode [ 86.321533][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.329034][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.336235][ T5849] bridge_slave_1: entered allmulticast mode [ 86.343787][ T5849] bridge_slave_1: entered promiscuous mode [ 86.350874][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.358282][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.365469][ T5850] bridge_slave_0: entered allmulticast mode [ 86.373427][ T5850] bridge_slave_0: entered promiscuous mode [ 86.382318][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.389554][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.396815][ T5850] bridge_slave_1: entered allmulticast mode [ 86.404899][ T5850] bridge_slave_1: entered promiscuous mode [ 86.414836][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.465459][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.571744][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.585816][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.600135][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.613747][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.626721][ T5847] team0: Port device team_slave_0 added [ 86.634017][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.641305][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.648916][ T5854] bridge_slave_0: entered allmulticast mode [ 86.656762][ T5854] bridge_slave_0: entered promiscuous mode [ 86.665662][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.672989][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.680187][ T5854] bridge_slave_1: entered allmulticast mode [ 86.687938][ T5854] bridge_slave_1: entered promiscuous mode [ 86.749988][ T5847] team0: Port device team_slave_1 added [ 86.814000][ T5850] team0: Port device team_slave_0 added [ 86.844935][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.852526][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.861147][ T5853] bridge_slave_0: entered allmulticast mode [ 86.868631][ T5853] bridge_slave_0: entered promiscuous mode [ 86.880953][ T5849] team0: Port device team_slave_0 added [ 86.889583][ T5849] team0: Port device team_slave_1 added [ 86.897753][ T5850] team0: Port device team_slave_1 added [ 86.920765][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.928414][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.955317][ T5157] Bluetooth: hci1: command tx timeout [ 86.961041][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.979824][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.987398][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.013398][ T5157] Bluetooth: hci2: command tx timeout [ 87.013534][ T5157] Bluetooth: hci0: command tx timeout [ 87.029134][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.043400][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.056850][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.071270][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.078682][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.090786][ T5853] bridge_slave_1: entered allmulticast mode [ 87.097137][ T5836] Bluetooth: hci3: command tx timeout [ 87.105696][ T5853] bridge_slave_1: entered promiscuous mode [ 87.172851][ T5836] Bluetooth: hci4: command tx timeout [ 87.181067][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.189084][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.215329][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.317373][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.326063][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.352149][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.405035][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.416559][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.425345][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.452045][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.465904][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.472981][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.498996][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.523495][ T5847] hsr_slave_0: entered promiscuous mode [ 87.529916][ T5847] hsr_slave_1: entered promiscuous mode [ 87.539575][ T5854] team0: Port device team_slave_0 added [ 87.549265][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.585644][ T5854] team0: Port device team_slave_1 added [ 87.608736][ T5853] team0: Port device team_slave_0 added [ 87.678908][ T5853] team0: Port device team_slave_1 added [ 87.705467][ T5850] hsr_slave_0: entered promiscuous mode [ 87.711788][ T5850] hsr_slave_1: entered promiscuous mode [ 87.718338][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.727188][ T5850] Cannot create hsr debugfs directory [ 87.801363][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.808764][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.834781][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.853077][ T5849] hsr_slave_0: entered promiscuous mode [ 87.859477][ T5849] hsr_slave_1: entered promiscuous mode [ 87.866043][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.873673][ T5849] Cannot create hsr debugfs directory [ 87.880067][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.887227][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.913368][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.946157][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.953464][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.980430][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.999949][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.007455][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.033615][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.309601][ T5853] hsr_slave_0: entered promiscuous mode [ 88.317488][ T5853] hsr_slave_1: entered promiscuous mode [ 88.324091][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.331684][ T5853] Cannot create hsr debugfs directory [ 88.356979][ T5854] hsr_slave_0: entered promiscuous mode [ 88.363951][ T5854] hsr_slave_1: entered promiscuous mode [ 88.370048][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.377778][ T5854] Cannot create hsr debugfs directory [ 88.784698][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.799427][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.810798][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.865710][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.950526][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.962377][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.977929][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.005572][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.013828][ T5836] Bluetooth: hci1: command tx timeout [ 89.075996][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.094066][ T5836] Bluetooth: hci0: command tx timeout [ 89.099221][ T5157] Bluetooth: hci2: command tx timeout [ 89.105684][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.154679][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.166557][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.173480][ T5157] Bluetooth: hci3: command tx timeout [ 89.242298][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.253455][ T5157] Bluetooth: hci4: command tx timeout [ 89.291407][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.319670][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.331363][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.427539][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.434603][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.448261][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.460870][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.491967][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.586650][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.618124][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.625427][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.641962][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.667881][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.675084][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.711322][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.723608][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.759804][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.767009][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.792747][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.799883][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.886909][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.899828][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.951368][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.958522][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.990205][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.016906][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.024067][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.070674][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.092013][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.099256][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.119374][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.126584][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.200316][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.238758][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.260541][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.286782][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.294002][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.322067][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.329298][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.464367][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.475488][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.500099][ T5849] veth0_vlan: entered promiscuous mode [ 90.582000][ T5847] veth0_vlan: entered promiscuous mode [ 90.595586][ T5849] veth1_vlan: entered promiscuous mode [ 90.640830][ T5847] veth1_vlan: entered promiscuous mode [ 90.709386][ T5850] veth0_vlan: entered promiscuous mode [ 90.721114][ T5853] veth0_vlan: entered promiscuous mode [ 90.744736][ T5850] veth1_vlan: entered promiscuous mode [ 90.759047][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.780834][ T5849] veth0_macvtap: entered promiscuous mode [ 90.790832][ T5853] veth1_vlan: entered promiscuous mode [ 90.807069][ T5849] veth1_macvtap: entered promiscuous mode [ 90.858673][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.876591][ T5847] veth0_macvtap: entered promiscuous mode [ 90.899719][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.939848][ T5847] veth1_macvtap: entered promiscuous mode [ 90.952104][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.962464][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.972134][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.981027][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.996096][ T5853] veth0_macvtap: entered promiscuous mode [ 91.007909][ T5853] veth1_macvtap: entered promiscuous mode [ 91.069627][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.088866][ T5854] veth0_vlan: entered promiscuous mode [ 91.096858][ T5157] Bluetooth: hci1: command tx timeout [ 91.101301][ T5850] veth0_macvtap: entered promiscuous mode [ 91.117503][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.136989][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.155702][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.168837][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.178058][ T5157] Bluetooth: hci0: command tx timeout [ 91.191297][ T5157] Bluetooth: hci2: command tx timeout [ 91.198682][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.208260][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.217945][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.235570][ T5850] veth1_macvtap: entered promiscuous mode [ 91.253518][ T5157] Bluetooth: hci3: command tx timeout [ 91.281582][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.290841][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.300554][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.309672][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.333198][ T5157] Bluetooth: hci4: command tx timeout [ 91.382453][ T5854] veth1_vlan: entered promiscuous mode [ 91.411012][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.466019][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.504936][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.511350][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.519218][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.530905][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.531765][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.550577][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.560674][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.569719][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.617189][ T5854] veth0_macvtap: entered promiscuous mode [ 91.651868][ T5854] veth1_macvtap: entered promiscuous mode [ 91.715943][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.736929][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.750663][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.779962][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.796411][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.812499][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.865671][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.890758][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.891004][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.918846][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.927799][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.948989][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.975869][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.057815][ T1212] cfg80211: failed to load regulatory.db [ 92.150508][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.183597][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.221257][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.232016][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.257888][ T10] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 92.273458][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.277876][ T10] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 92.291879][ T10] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 92.312667][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.334137][ T10] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 92.353067][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.484513][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.506872][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.519861][ T5889] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.642511][ T5907] fido_id[5907]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.654826][ T5909] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.744182][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.758086][ T5911] dvmrp0: entered allmulticast mode [ 92.776157][ T5914] dvmrp0: left allmulticast mode [ 92.783142][ T5889] usb 5-1: config 0 has no interfaces? [ 92.788893][ T5889] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.802985][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.825276][ T5889] usb 5-1: config 0 descriptor?? [ 92.873843][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.884597][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.068517][ T43] usb 5-1: USB disconnect, device number 2 [ 93.103762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.180307][ T5157] Bluetooth: hci1: command tx timeout [ 93.253371][ T5836] Bluetooth: hci0: command tx timeout [ 93.258963][ T5157] Bluetooth: hci2: command tx timeout [ 93.279081][ T5923] binder_alloc: 5918: pid 5918 spamming oneway? 1 buffers allocated for a total size of 4096 [ 93.293666][ T5923] binder_alloc: 5918: pid 5918 spamming oneway? 2 buffers allocated for a total size of 5120 [ 93.336115][ T5157] Bluetooth: hci3: command tx timeout [ 93.419333][ T5157] Bluetooth: hci4: command tx timeout [ 93.698677][ T5931] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 93.886509][ T5932] Zero length message leads to an empty skb [ 94.103143][ T5934] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.483324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 95.538739][ T5955] binder_alloc: 5954: pid 5954 spamming oneway? 1 buffers allocated for a total size of 4096 [ 95.863224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.925490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.293852][ T5891] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.307358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.496290][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.508907][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.523219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.531909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.566753][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.639080][ T5891] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.671553][ T5969] netlink: 'syz.1.23': attribute type 1 has an invalid length. [ 96.679976][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.705506][ T5891] usb 3-1: config 0 descriptor?? [ 96.773143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.263028][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.339797][ T5978] delete_channel: no stack [ 97.404623][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.603407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.712800][ T1212] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.782425][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.979508][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.991461][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.005298][ T1212] usb 1-1: config 0 has no interfaces? [ 98.010866][ T1212] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.028562][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.038871][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.082830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 98.116487][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.123382][ T1212] usb 1-1: config 0 descriptor?? [ 98.165877][ T5981] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 98.194437][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.314013][ T3538] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.545691][ T3538] usb 4-1: Using ep0 maxpacket: 32 [ 98.561553][ T5986] loop2: detected capacity change from 0 to 7 [ 98.571325][ T1212] usb 1-1: USB disconnect, device number 2 [ 98.611897][ T5986] Dev loop2: unable to read RDB block 7 [ 98.618289][ T5986] loop2: unable to read partition table [ 98.634973][ T5986] loop2: partition table beyond EOD, truncated [ 98.698267][ T5986] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 98.781041][ T5993] binder_alloc: 5992: pid 5992 spamming oneway? 1 buffers allocated for a total size of 4096 [ 98.808637][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 98.815492][ T5891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 98.854122][ T5994] binder_alloc: 5992: pid 5992 spamming oneway? 2 buffers allocated for a total size of 5120 [ 98.942485][ T3538] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.973988][ T5891] usb 3-1: USB disconnect, device number 2 [ 99.002999][ T3538] usb 4-1: too many configurations: 105, using maximum allowed: 8 [ 99.065835][ T3538] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 99.240162][ T3538] usb 4-1: can't read configurations, error -71 [ 99.834406][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.35'. [ 99.852916][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 100.916920][ T30] audit: type=1326 audit(1748913114.791:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.42" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f751f78e969 code=0x0 [ 100.995520][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 101.022076][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 101.034225][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 101.048414][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 101.057885][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 101.401495][ T3538] usb 2-1: USB disconnect, device number 2 [ 101.535010][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.46'. [ 101.562252][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 101.600053][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.608395][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.132359][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.52'. [ 104.809783][ T6087] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.69' sets config #1 [ 107.671837][ T6125] binder_alloc: 6124: pid 6124 spamming oneway? 1 buffers allocated for a total size of 4096 [ 108.653336][ T6142] netlink: 'syz.0.89': attribute type 1 has an invalid length. [ 108.762301][ T6142] vlan2: entered allmulticast mode [ 108.792026][ T6142] veth1_to_batadv: entered allmulticast mode [ 109.746070][ T6159] binder_alloc: 6158: pid 6158 spamming oneway? 1 buffers allocated for a total size of 4096 [ 112.714483][ T6204] hub 8-0:1.0: USB hub found [ 112.738692][ T6204] hub 8-0:1.0: 1 port detected [ 115.085553][ T6266] process 'syz.0.111' launched './file0' with NULL argv: empty string added [ 115.401637][ T30] audit: type=1800 audit(1748913129.271:3): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.111" name="/" dev="fuse" ino=0 res=0 errno=0 [ 115.572330][ T6270] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 116.231290][ T6286] binder: 6285:6286 ioctl c0306201 200000000140 returned -11 [ 117.092491][ T6303] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 117.104855][ T30] audit: type=1326 audit(1748913130.981:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.0.128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f751f78e969 code=0x0 [ 117.413035][ T24] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 117.568327][ T24] usb 3-1: config 0 has no interfaces? [ 117.598332][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 117.616586][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.631687][ T24] usb 3-1: Product: syz [ 117.644577][ T24] usb 3-1: Manufacturer: syz [ 117.649662][ T24] usb 3-1: SerialNumber: syz [ 117.666364][ T24] usb 3-1: config 0 descriptor?? [ 117.883826][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.904340][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.947053][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.978230][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.036430][ T1212] usb 3-1: USB disconnect, device number 3 [ 120.882459][ T30] audit: type=1326 audit(1748913134.751:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.0.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f751f78e969 code=0x0 [ 120.901340][ T6375] netlink: 44 bytes leftover after parsing attributes in process `syz.4.146'. [ 120.963928][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 124.249492][ T6255] Set syz1 is full, maxelem 65536 reached [ 124.600922][ T30] audit: type=1326 audit(1748913138.471:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.3.162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92c338e969 code=0x0 [ 125.403282][ T5839] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.563022][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 125.574968][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.587712][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.599504][ T5839] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 125.609495][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.628519][ T5839] usb 3-1: config 0 descriptor?? [ 125.642946][ T1212] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.792933][ T1212] usb 4-1: device descriptor read/64, error -71 [ 126.088921][ T1212] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.125186][ T5839] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 126.272497][ T1212] usb 4-1: device descriptor read/64, error -71 [ 126.300480][ T5839] usb 3-1: USB disconnect, device number 4 [ 126.404757][ T1212] usb usb4-port1: attempt power cycle [ 126.782875][ T1212] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 126.832808][ T1212] usb 4-1: device descriptor read/8, error -71 [ 127.082803][ T1212] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.115579][ T1212] usb 4-1: device descriptor read/8, error -71 [ 127.139998][ T6503] binder_alloc: 6502: binder_alloc_buf, no vma [ 127.168609][ T6503] binder: 6502:6503 ioctl c0306201 200000000140 returned -11 [ 127.233292][ T1212] usb usb4-port1: unable to enumerate USB device [ 127.600001][ T30] audit: type=1326 audit(1748913141.471:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6508 comm="syz.2.179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ef1d8e969 code=0x0 [ 128.726020][ T6536] binder_alloc: 6535: binder_alloc_buf, no vma [ 128.763349][ T6536] binder: 6535:6536 ioctl c0306201 200000000140 returned -11 [ 129.110631][ T30] audit: type=1326 audit(1748913142.981:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6539 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751f78e969 code=0x7fc00000 [ 130.611765][ T30] audit: type=1326 audit(1748913144.481:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6563 comm="syz.1.196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94a2f8e969 code=0x0 [ 132.144269][ T6600] delete_channel: no stack [ 132.655841][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.826193][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.860031][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 132.909504][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.960502][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.017323][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.026024][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.130392][ T6602] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 133.194325][ T30] audit: type=1326 audit(1748913147.051:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.3.213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92c338e969 code=0x0 [ 133.254221][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.975041][ T5839] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.083549][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.160339][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.171982][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.182999][ T5839] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 134.230417][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.243622][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 134.244165][ T5839] usb 3-1: config 0 descriptor?? [ 134.260556][ T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 134.272948][ T24] usb 5-1: config 179 has no interface number 0 [ 134.291809][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 134.305251][ T5891] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.336718][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 134.370729][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.402450][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 134.432867][ T24] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 134.467952][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 134.487346][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 134.492826][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.508269][ T5891] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.518514][ T5891] usb 1-1: config 0 has no interface number 0 [ 134.526828][ T6630] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 134.553013][ T5891] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 134.586538][ T5891] usb 1-1: config 0 interface 1 has no altsetting 0 [ 134.611675][ T5891] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 134.637334][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.646133][ T5891] usb 1-1: Product: syz [ 134.650435][ T5891] usb 1-1: Manufacturer: syz [ 134.656143][ T5891] usb 1-1: SerialNumber: syz [ 134.679974][ T5891] usb 1-1: config 0 descriptor?? [ 134.688556][ T5839] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 134.704529][ T5839] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 134.712366][ T5839] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 134.726833][ T5839] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 134.739634][ T5839] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 134.776436][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 134.784886][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 134.818354][ T24] usb 5-1: USB disconnect, device number 3 [ 134.825649][ T5839] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 134.917552][ T5891] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 134.930075][ T5891] cx231xx 1-1:0.1: Failed to read PCB config [ 134.937927][ T5891] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 134.959852][ T5891] usb 1-1: USB disconnect, device number 3 [ 135.318118][ T5839] playstation 0003:054C:0DF2.0003: Failed to retrieve feature with reportID 5: -71 [ 135.327807][ T5839] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense calibration info: -71 [ 135.338499][ T5839] playstation 0003:054C:0DF2.0003: Failed to get calibration data from DualSense [ 135.351367][ T5839] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 135.361777][ T5839] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -71 [ 135.374562][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 135.378890][ T5839] usb 3-1: USB disconnect, device number 5 [ 135.442867][ T43] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 135.452040][ T5891] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.603875][ T5898] usb 2-1: USB disconnect, device number 3 [ 135.607230][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.626752][ T24] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 135.636977][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 135.642509][ T43] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.660016][ T43] usb 5-1: config 179 has no interface number 0 [ 135.667375][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.677087][ T43] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 135.688547][ T5891] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.698954][ T5891] usb 1-1: config 0 has no interface number 0 [ 135.707473][ T24] usb 4-1: config 0 descriptor?? [ 135.714738][ T43] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 135.733113][ T5891] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 135.751855][ T43] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 135.765171][ T5891] usb 1-1: config 0 interface 1 has no altsetting 0 [ 135.778504][ T43] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 135.792104][ T43] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.807016][ T5891] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 135.817267][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.825932][ T5891] usb 1-1: Product: syz [ 135.830168][ T5891] usb 1-1: Manufacturer: syz [ 135.835335][ T5891] usb 1-1: SerialNumber: syz [ 135.840035][ T43] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 135.852275][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.863407][ T5891] usb 1-1: config 0 descriptor?? [ 135.897867][ T6630] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 135.917955][ T6630] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 136.133530][ T5891] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 136.160391][ T5898] usb 5-1: USB disconnect, device number 4 [ 136.160390][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 136.160454][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 136.185766][ T5891] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 136.214963][ T24] petalynx 0003:18B1:0037.0004: unknown main item tag 0x5 [ 136.222238][ T24] petalynx 0003:18B1:0037.0004: unknown global tag 0xd [ 136.243482][ T24] petalynx 0003:18B1:0037.0004: item 0 2 1 13 parsing failed [ 136.251612][ T24] petalynx 0003:18B1:0037.0004: parse failed [ 136.259425][ T24] petalynx 0003:18B1:0037.0004: probe with driver petalynx failed with error -22 [ 136.313156][ T5891] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 136.332485][ T5891] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 136.355850][ T5891] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 136.401029][ T1212] usb 4-1: USB disconnect, device number 8 [ 136.483747][ T5891] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 136.496114][ T5891] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -110 [ 136.541141][ T5891] i2c i2c-2: Added multiplexed i2c bus 4 [ 136.563570][ T5891] i2c i2c-2: Added multiplexed i2c bus 5 [ 136.570232][ T5891] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 136.622845][ T5891] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 136.677740][ T5891] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -32 [ 136.709834][ T5891] usb 1-1: USB disconnect, device number 4 [ 136.877891][ T6664] binder_alloc: 6663: binder_alloc_buf, no vma [ 137.052963][ T6670] delete_channel: no stack [ 137.094256][ T1212] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 137.155705][ T5898] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.263573][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 137.275631][ T1212] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 137.293299][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 137.326215][ T5898] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 137.345639][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 137.346839][ T5891] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 137.363532][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.388060][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 137.435481][ T5898] usb 2-1: config 0 descriptor?? [ 137.491309][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 137.516589][ T5898] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 137.523064][ T5839] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.539889][ T5891] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.551744][ T5891] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 137.583596][ T1212] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 137.595145][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.606395][ T5891] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.618464][ T1212] usb 3-1: Product: syz [ 137.625442][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.632776][ T1212] usb 3-1: Manufacturer: syz [ 137.638421][ T1212] usb 3-1: SerialNumber: syz [ 137.656995][ T1212] usb 3-1: config 0 descriptor?? [ 137.701005][ T6670] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 137.725375][ T5839] usb 1-1: Using ep0 maxpacket: 16 [ 137.735252][ T5839] usb 1-1: config 4 has an invalid interface number: 15 but max is 0 [ 137.749201][ T5839] usb 1-1: config 4 has no interface number 0 [ 137.753106][ T5891] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.758959][ T5839] usb 1-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 137.775828][ T5839] usb 1-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 137.804139][ T5839] usb 1-1: config 4 interface 15 has no altsetting 0 [ 137.846566][ T5839] usb 1-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 137.867411][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.885393][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 137.892129][ T5839] usb 1-1: Product: syz [ 137.912339][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 137.929861][ T5839] usb 1-1: Manufacturer: syz [ 137.941816][ T5839] usb 1-1: SerialNumber: syz [ 137.949445][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 137.958295][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 137.976523][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 137.991911][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.002441][ T6674] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 138.019245][ T6674] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 138.027821][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.035390][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.071525][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.078705][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.098462][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.107653][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.119536][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.134638][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.141201][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.150300][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.161891][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.173349][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.180334][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.194241][ T1212] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 138.200819][ T1212] input input7: Timeout waiting for response from device. [ 138.243310][ T1212] usb 3-1: USB disconnect, device number 6 [ 138.273617][ T6674] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 138.293470][ T6674] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 138.975378][ T5898] gspca_stv06xx: HDCS-1020 sensor detected [ 139.234293][ T5898] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 139.250810][ T5898] usb 2-1: USB disconnect, device number 4 [ 139.523744][ T6697] binder_alloc: 6696: binder_alloc_buf, no vma [ 139.632928][ T1212] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.658067][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 139.674685][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 139.686661][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 139.698443][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 139.718040][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 139.731191][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 139.742342][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 139.761375][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 139.778660][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 139.793593][ T1212] usb 4-1: Using ep0 maxpacket: 16 [ 139.800237][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 139.817500][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 139.829481][ T1212] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 139.838872][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 139.850032][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.858640][ T5897] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.869919][ T1212] usb 4-1: Product: syz [ 139.876067][ T1212] usb 4-1: Manufacturer: syz [ 139.880865][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 139.894428][ T1212] usb 4-1: SerialNumber: syz [ 139.902279][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 139.918036][ T1212] usb 4-1: config 0 descriptor?? [ 139.925473][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 139.940707][ T1212] usb 4-1: selecting invalid altsetting 1 [ 139.947961][ T1212] technisat-usb2: could not set alternate setting to 0 [ 139.960391][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 139.971736][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 139.985730][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 139.998274][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 140.013876][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 140.030747][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 140.042820][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.054789][ T5897] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 140.055084][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 140.076808][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.088647][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 140.100445][ T5897] usb 3-1: config 0 descriptor?? [ 140.110014][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 140.129485][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 140.149668][ T1212] technisat-usb2: firmware version: 0.0 [ 140.156698][ T1212] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 140.168135][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 140.182409][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 140.195555][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 140.207096][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 140.234316][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 140.258147][ T5839] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 140.321203][ T5897] pwc: send_video_command error -71 [ 140.334671][ T5897] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 140.362588][ T5839] ax88179_178a 1-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, Toshiba USB Ethernet Adapter, 22:b7:f4:45:ed:49 [ 140.381520][ T5897] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 140.410880][ T5891] usb 5-1: USB disconnect, device number 5 [ 140.416911][ T5897] usb 3-1: USB disconnect, device number 7 [ 140.421467][ T5839] usb 1-1: USB disconnect, device number 5 [ 140.495698][ T5839] ax88179_178a 1-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, Toshiba USB Ethernet Adapter [ 140.583342][ T1212] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.656872][ T1212] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 140.706295][ T1212] usb 4-1: media controller created [ 140.745669][ T1212] technisat-usb2: i2c-error: out failed 53 = -22 [ 140.762205][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.777391][ T1212] dvb-usb: MAC address reading failed. [ 140.793670][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.856880][ T1212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.933834][ T1212] DVB: Unable to find symbol stv090x_attach() [ 140.952021][ T1212] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 141.023892][ T1212] rc_core: IR keymap rc-technisat-usb2 not found [ 141.030454][ T1212] Registered IR keymap rc-empty [ 141.040300][ T1212] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 141.053362][ T1212] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8 [ 141.058270][ T5891] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.064681][ T5897] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.088253][ T1212] dvb-usb: schedule remote query interval to 100 msecs. [ 141.162572][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.173745][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.183158][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.197029][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.208121][ T5839] dvb-usb: error -71 while querying for an remote control event. [ 141.219394][ T1212] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 141.227815][ T5891] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 141.237106][ T1212] usb 4-1: USB disconnect, device number 9 [ 141.244027][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.244056][ T5891] usb 5-1: Product: syz [ 141.244071][ T5891] usb 5-1: Manufacturer: syz [ 141.244085][ T5891] usb 5-1: SerialNumber: syz [ 141.249982][ T5891] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 141.256570][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 141.276004][ T5897] usb 2-1: config 162 has an invalid interface number: 246 but max is 1 [ 141.322329][ T5897] usb 2-1: config 162 has an invalid interface number: 245 but max is 1 [ 141.330638][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 141.357705][ T5897] usb 2-1: config 162 has no interface number 0 [ 141.387602][ T5897] usb 2-1: config 162 has no interface number 1 [ 141.398245][ T5897] usb 2-1: config 162 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 141.457221][ T5897] usb 2-1: config 162 interface 245 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 141.527279][ T5897] usb 2-1: config 162 interface 245 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 141.550431][ T1212] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 141.560753][ T5897] usb 2-1: config 162 interface 245 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 141.590268][ T5897] usb 2-1: config 162 interface 245 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 141.641090][ T5897] usb 2-1: config 162 interface 245 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 141.643295][ T43] usb 5-1: USB disconnect, device number 6 [ 141.692967][ T5897] usb 2-1: config 162 interface 246 has no altsetting 0 [ 141.701731][ T5897] usb 2-1: config 162 interface 245 has no altsetting 0 [ 141.721740][ T5897] usb 2-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 141.738195][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.764007][ T5897] usb 2-1: Product: syz [ 141.771098][ T5897] usb 2-1: Manufacturer: syz [ 141.784900][ T5897] usb 2-1: SerialNumber: syz [ 142.010670][ T6723] binder_alloc: 6722: binder_alloc_buf, no vma [ 142.074045][ T5897] Bluetooth: failed to set interface 0, alt 0 -22 [ 142.093136][ T5897] btusb 2-1:162.245: probe with driver btusb failed with error -22 [ 142.157017][ T5897] usb 2-1: USB disconnect, device number 5 [ 142.221071][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 142.240989][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 142.252231][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 142.270295][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 142.282347][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 142.386462][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 142.401062][ T24] ath9k_htc: Failed to initialize the device [ 142.416570][ T43] usb 5-1: ath9k_htc: USB layer deinitialized [ 142.511723][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.255'. [ 142.742912][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.938440][ T43] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice= 1.08 [ 142.948100][ T5889] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.977116][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.987160][ T43] usb 5-1: Product: syz [ 142.991401][ T43] usb 5-1: Manufacturer: syz [ 143.002943][ T43] usb 5-1: SerialNumber: syz [ 143.049115][ T6748] netlink: 48 bytes leftover after parsing attributes in process `syz.2.258'. [ 143.084674][ T6748] snd_dummy snd_dummy.0: control 0:0:129:syz0:264 is already present [ 143.142778][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 143.154878][ T43] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 143.165474][ T5889] usb 2-1: config 211 has an invalid interface number: 98 but max is 0 [ 143.174012][ T5889] usb 2-1: config 211 has no interface number 0 [ 143.180353][ T5889] usb 2-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 143.191500][ T5889] usb 2-1: config 211 interface 98 has no altsetting 0 [ 143.207535][ T5889] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 143.253033][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.261098][ T5889] usb 2-1: Product: syz [ 143.291565][ T5889] usb 2-1: Manufacturer: syz [ 143.307978][ T5889] usb 2-1: SerialNumber: syz [ 143.328710][ T6744] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 143.554805][ T6744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.574336][ T6744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.613124][ T5889] mct_u232 2-1:211.98: MCT U232 converter detected [ 143.621870][ T5889] mct_u232 ttyUSB0: expected endpoint missing [ 143.693966][ T5889] usb 2-1: USB disconnect, device number 6 [ 143.713967][ T5889] mct_u232 2-1:211.98: device disconnected [ 143.814045][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 143.823003][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 143.863652][ T43] usb 5-1: device descriptor read/64, error -71 [ 144.126885][ T43] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 144.231887][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 144.400825][ T5889] usb 5-1: driver API: 1.9.9 2016-02-15 [1-1] [ 144.430396][ T5889] usb 5-1: firmware API: 1.9.6 2012-07-07 [ 144.526792][ T10] usb 5-1: USB disconnect, device number 7 [ 144.527824][ C1] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 144.538864][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 144.550489][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.560583][ C1] RIP: 0010:__queue_work+0x9e/0xfe0 [ 144.565831][ C1] Code: 8b 1d de 93 11 11 31 ff 89 de e8 fd 95 35 00 85 db 0f 85 fc 0c 00 00 e8 b0 91 35 00 49 8d 97 c0 01 00 00 48 89 d5 48 c1 ed 03 <42> 0f b6 44 25 00 84 c0 48 89 54 24 08 0f 85 44 0d 00 00 8b 1a 89 [ 144.585565][ C1] RSP: 0018:ffffc900001d7428 EFLAGS: 00010002 [ 144.591681][ C1] RAX: ffffffff818ac930 RBX: 0000000000000000 RCX: 0000000000040000 [ 144.599678][ C1] RDX: 00000000000001c0 RSI: 00000000000001b0 RDI: 00000000000001b1 [ 144.607700][ C1] RBP: 0000000000000038 R08: ffff88803122bbf7 R09: 1ffff1100624577e [ 144.615699][ C1] R10: dffffc0000000000 R11: ffffed100624577f R12: dffffc0000000000 [ 144.623805][ C1] R13: ffff88803122bbf0 R14: 0000000000000008 R15: 0000000000000000 [ 144.631790][ C1] FS: 0000000000000000(0000) GS:ffff888125d5e000(0000) knlGS:0000000000000000 [ 144.640721][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.647308][ C1] CR2: 0000200000005b40 CR3: 00000000767ce000 CR4: 00000000003526f0 [ 144.655390][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.663364][ C1] DR3: 00000000e18e000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 144.671347][ C1] Call Trace: [ 144.674634][ C1] [ 144.677574][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 144.682819][ C1] queue_work_on+0x181/0x270 [ 144.687414][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 144.692525][ C1] ? carl9170_usb_submit_rx_urb+0x198/0x1d0 [ 144.698424][ C1] ? carl9170_usb_rx_complete+0x207/0x280 [ 144.704149][ C1] __usb_hcd_giveback_urb+0x41a/0x690 [ 144.709555][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 144.715455][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 144.721365][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 144.726746][ C1] dummy_timer+0x862/0x4550 [ 144.731348][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 144.736727][ C1] ? __lock_acquire+0xab9/0xd20 [ 144.741595][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 144.746627][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 144.751671][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 144.756665][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 144.761966][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 144.767713][ C1] ? read_tsc+0x9/0x20 [ 144.771789][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 144.777626][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 144.782780][ C1] handle_softirqs+0x283/0x870 [ 144.787589][ C1] ? schedule+0x165/0x360 [ 144.791944][ C1] ? run_ksoftirqd+0x9b/0x100 [ 144.797299][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 144.802594][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 144.807676][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 144.812713][ C1] run_ksoftirqd+0x9b/0x100 [ 144.817224][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 144.822337][ C1] smpboot_thread_fn+0x542/0xa60 [ 144.827283][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 144.832316][ C1] kthread+0x711/0x8a0 [ 144.836403][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 144.841869][ C1] ? __pfx_kthread+0x10/0x10 [ 144.846474][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.851683][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.856891][ C1] ? __pfx_kthread+0x10/0x10 [ 144.861579][ C1] ret_from_fork+0x3f9/0x770 [ 144.866178][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 144.871333][ C1] ? __switch_to_asm+0x39/0x70 [ 144.876133][ C1] ? __switch_to_asm+0x33/0x70 [ 144.880911][ C1] ? __pfx_kthread+0x10/0x10 [ 144.885509][ C1] ret_from_fork_asm+0x1a/0x30 [ 144.890367][ C1] [ 144.893473][ C1] Modules linked in: [ 144.897375][ C1] ---[ end trace 0000000000000000 ]--- [ 144.902829][ C1] RIP: 0010:__queue_work+0x9e/0xfe0 [ 144.908028][ C1] Code: 8b 1d de 93 11 11 31 ff 89 de e8 fd 95 35 00 85 db 0f 85 fc 0c 00 00 e8 b0 91 35 00 49 8d 97 c0 01 00 00 48 89 d5 48 c1 ed 03 <42> 0f b6 44 25 00 84 c0 48 89 54 24 08 0f 85 44 0d 00 00 8b 1a 89 [ 144.927646][ C1] RSP: 0018:ffffc900001d7428 EFLAGS: 00010002 [ 144.933769][ C1] RAX: ffffffff818ac930 RBX: 0000000000000000 RCX: 0000000000040000 [ 144.941774][ C1] RDX: 00000000000001c0 RSI: 00000000000001b0 RDI: 00000000000001b1 [ 144.949760][ C1] RBP: 0000000000000038 R08: ffff88803122bbf7 R09: 1ffff1100624577e [ 144.957737][ C1] R10: dffffc0000000000 R11: ffffed100624577f R12: dffffc0000000000 [ 144.965740][ C1] R13: ffff88803122bbf0 R14: 0000000000000008 R15: 0000000000000000 [ 144.973722][ C1] FS: 0000000000000000(0000) GS:ffff888125d5e000(0000) knlGS:0000000000000000 [ 144.982671][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.989274][ C1] CR2: 0000200000005b40 CR3: 00000000767ce000 CR4: 00000000003526f0 [ 144.997254][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.005315][ C1] DR3: 00000000e18e000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 145.013408][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 145.020967][ C1] Kernel Offset: disabled [ 145.025292][ C1] Rebooting in 86400 seconds..