last executing test programs: 13m42.333272808s ago: executing program 0 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x64) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) recvmmsg(r5, &(0x7f000000cf00), 0x400000000000062, 0x2, 0x0) 13m38.368525008s ago: executing program 0 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x40003) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000200)='./file0/file1/file0\x00', 0x0, 0x109000, 0x0) read$FUSE(r3, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x3f5, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x6, 0x0) 13m29.166848528s ago: executing program 0 (id=70): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 13m23.750229041s ago: executing program 0 (id=78): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0', 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x500, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x20, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000800000000029500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) unlink(&(0x7f0000000300)='./config\x00') 13m22.50618056s ago: executing program 0 (id=80): socket$nl_route(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x58}}, 0x4080) syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13m15.132902388s ago: executing program 0 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x114c6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xd}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 12m59.62830789s ago: executing program 32 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x114c6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xd}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m56.413945663s ago: executing program 2 (id=1310): memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x105401, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) unshare(0x20000400) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xffff, @multicast2}, {0x2, 0x200, @empty}, {0x2, 0x4e24, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x401}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 2m52.59716583s ago: executing program 2 (id=1320): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x12141, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000400)={0xfffffff8, {{0xa, 0x4e21, 0x9, @mcast1, 0x8}}, 0x0, 0x5, [{{0xa, 0x4e21, 0x1, @mcast2, 0x1}}, {{0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x7}}, {{0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}, 0x100}}]}, 0x310) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c091}, 0x4) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 2m48.160375041s ago: executing program 2 (id=1330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 2m46.577049967s ago: executing program 2 (id=1334): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m42.777491374s ago: executing program 2 (id=1337): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x33) ioctl$BLKZEROOUT(r5, 0xc01070ce, &(0x7f0000000040)={0x1, 0xffff}) ioctl$PPPIOCDISCONN(r5, 0x7439) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000180)=0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020) 2m42.50248422s ago: executing program 2 (id=1340): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904"], 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x281841d, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) listen(r2, 0x5) listen(r2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m26.358581328s ago: executing program 33 (id=1340): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904"], 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x281841d, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) listen(r2, 0x5) listen(r2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 20.630727931s ago: executing program 6 (id=1598): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='0\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vidtv/unbind\x00', 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xba, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000020630712204000010203010902a80003060000950904000000010100000a2401d4003d000201020a240703060001de3fc509240602060103000407240401f347ec0924030205030205fc09240303060301060807240801810087090401000001020000090401010101020000072401f5f900000e2402010604b1020c47148017f30905010910"], 0x0) write(r0, &(0x7f0000000300)='vidtv.0\x00', 0x40) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f2", 0x54f, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)=@secondary) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={r2, 0xa0, 0x44}, &(0x7f0000000940)=ANY=[], &(0x7f0000000780)="9965dec8cd49c199baff34da0040ae02fa5c2b4e084a14442dcb98f49220edc739b2091b93ac4f9d3aa296e8aa132a3897bec9af8e40373e2910601cc5411bf78c5ee29319a33be91331b33bf55219861e9f98bb3392ac1269eb00000000bb6d3d831b9a98e8eab107072c0e7731b5387dad10f6493d5d93cc3f5f0fb733b54853e3af388304c8e9bcca80655584be5d5393561f9b4d7ce98418698aa9a67d41", &(0x7f0000000840)="8000d7ad424303531719c179724223169bc6203f78f0ffbf225c88c0d593389071c3c74f6a1908f9c71f911d0e2198a2f21d647f7af9b5ec21c74cdbafe0ff7b1bf4deca") syz_usb_connect(0x2, 0x2b, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000200000040a61b0100000001020301090219000200000000f2a2000001ff00000007058102000200e67f20fab26abfcc66c587bf7bd0f285dd930fa0319aca24d73c1a90dea7d491a14c71a79f2db349f8dad3337298d4bbfbe4e373e2b6cbbfb299e7e9486d2c58f8b81dbb7bc6f4556dd71528fac015a4243d4703beeaeaa1b533cedf12aeea785604ee081b68d3f764e61fe60f9d840907a6379d05480595606d55cd09f6466255c60e767d20427584f9349827a585ae805f391efea13ed433978547da41fcef481438f662174dee361533a9be29c337f7598651d66d1cdf17ce0acffec931193b6b966211649c3aeebdd73ac4b41e97fbe1397a68f5bb7e49981c78d4b8e2c735a42fedc8d764a7142b2a5d8c1a5735557d3630ca11886fea52f988d0b779a065a567cef6aa83fafce31070f9154533a2deba82b6150188fcd4eb5aa32ea194bee81b74d6b5fe1cad2c93dcb9a669e2f39012f387c98e02cb042d63ab29371284075d374221da5d533f27e257f3852cbf8372d2acd38dadc08907"], 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) read(0xffffffffffffffff, &(0x7f0000000b40)=""/82, 0x52) io_setup(0x0, &(0x7f0000000000)) io_setup(0xe, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r5) r6 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x1) write(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_usb_connect$uac1(0x2, 0xe4, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0x1, 0x20, 0x17, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x1a}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0xff, "ae07de956ddd"}, @mixer_unit={0x5, 0x24, 0x4, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xc51c, 0x7fff, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x8, 0xdf, "e0882495f2fa52"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x1, 0x0, 0x7, "01"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x7, 0x5, "6c070184"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x2, 0x7, {0x7, 0x25, 0x1, 0x4, 0xd, 0x3558}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0xb9, 0x5, ']'}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xb66, 0x3, 0x6d, "955559"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa8, 0x2, 0x1, 0x8, "9f60b0462da481"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x3, 0x1, 0xa, 0x8, "8ba20e", "30a8f3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x6, 0x40, {0x7, 0x25, 0x1, 0xc, 0x2, 0xf5}}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x250, 0xd2, 0x8, 0x5, 0x8, 0x7}, 0x8, &(0x7f0000000a00)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x7a, &(0x7f0000000a40)=@string={0x7a, 0x3, "f148f780c3bf1d1dc22e0434319dacb3ad7f6e2dd158cf349977235bd919eafb211d94fb1e20b29cfc7f37a0e72c6e16546b53ca5a7c2c112aa7c872c281f8fd1221aff42cdb875f810cfb8610bff596c7755a50b5ed62e7c8d25950c7467f23be5874a5c8bc2b9e36316edac8fca89c4ae418a28ac03203"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1407}}]}) 15.361223781s ago: executing program 6 (id=1607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f000000cf00), 0x400000000000062, 0x2, 0x0) 15.226866653s ago: executing program 3 (id=1608): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e145000905"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="200310"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 13.544583692s ago: executing program 6 (id=1610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x23d1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x801, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) 12.926402316s ago: executing program 5 (id=1612): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x12141, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000400)={0xfffffff8, {{0xa, 0x4e21, 0x9, @mcast1, 0x8}}, 0x0, 0x5, [{{0xa, 0x4e21, 0x1, @mcast2, 0x1}}, {{0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x7}}, {{0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}, 0x100}}]}, 0x310) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c091}, 0x4) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) 12.132584434s ago: executing program 1 (id=1614): r0 = socket(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000003380)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) recvmmsg(r0, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)=""/117, 0x75}], 0x1}}], 0x1, 0x20b0, 0x0) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="93", 0x1}], 0x1}}], 0x1, 0x4044810) 11.129981057s ago: executing program 5 (id=1615): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0xa, &(0x7f0000000180)={0x26, 0x6, 0x50}) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) gettimeofday(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000090) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 9.613303101s ago: executing program 5 (id=1617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x33) 9.495250424s ago: executing program 3 (id=1618): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x33) ioctl$BLKZEROOUT(r5, 0xc01070ce, &(0x7f0000000040)={0x1, 0xffff}) ioctl$PPPIOCDISCONN(r5, 0x7439) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000180)=0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020) 9.460753035s ago: executing program 1 (id=1619): symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x105401, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) unshare(0x20000400) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xffff, @multicast2}, {0x2, 0x200, @empty}, {0x2, 0x4e24, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x401}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 9.124102512s ago: executing program 3 (id=1620): prlimit64(0x0, 0xe, 0x0, 0x0) getpgid(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.325052213s ago: executing program 6 (id=1622): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x15) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(0xffffffffffffffff, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd05, &(0x7f0000000000)="04000000020000") 7.082987419s ago: executing program 5 (id=1623): socket$nl_route(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x58}}, 0x4080) syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7.02435704s ago: executing program 6 (id=1624): getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000001500)=0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000140), 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x2400) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000001080)=0x91b) read$dsp(r2, &(0x7f0000001300)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1, 0xfffffffc}, 0x0, &(0x7f0000000100), &(0x7f0000000140)) syz_ublk_setup_queues(r5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0xffffffff00000000, 0x8) read$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x3, 0x1, &(0x7f0000000180)=""/181, 0x0, 0x0, 0x3000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 6.978222731s ago: executing program 3 (id=1625): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="2008000008d216e0b1770ebd02ee1150c60436913122c8872f0f959f2252cb409b", @ANYRESDEC=r1, @ANYRESHEX=r0], 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x54000, 0x58000, 0xa, 0xb, 0xb, 0xe6, 0x40, 0xb, 0x0, 0x1, 0x9}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0xc3, 0x75, 0x6, 0x37, 0x4, 0x7, 0x87}, {0x1000, 0xdddd0000, 0x0, 0x5, 0x9, 0x7, 0x0, 0x9, 0xb, 0xa4, 0x5, 0x1}, {0x1, 0xeee84000, 0xf, 0x6, 0x5, 0xfa, 0xb, 0xff, 0x18, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x27, 0x30, 0x9, 0xab, 0x8, 0x7, 0x49, 0xf7, 0x97}, {0xf000, 0xdddd0000, 0xe, 0xa0, 0xb5, 0x8, 0xc4, 0xa1, 0x82, 0x2f, 0x1, 0x7}, {0x4, 0xfec2e000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x10, 0x9e, 0x81, 0x40, 0x70}, {0xffff1000, 0x4000, 0x8, 0x1f, 0xed, 0x7, 0x1, 0x1, 0x42, 0xc, 0xb0, 0x9}, {0xd000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x40200c, 0x2, 0x0, 0x100000, [0x0, 0xe51, 0x3, 0x200000000000008]}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0x3, 0x40, 0x7e, 0x42, 0x9, 0x1, 0x4, 0x0, 0x9, 0x4}, {0x3, 0x8080, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x5, 0x8, 0x7, 0xfd, 0x40, 0x8, 0x5, 0x2, 0x3}], 0x4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r2, 0xa00}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13d, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f0000000380), r8}}, 0x18) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r9, &(0x7f0000000500)="000000020104", 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0b00001900010027bd7000ef9a5da0d3b6fba3fddbdf350a14140bf103000a00220000"], 0x1c}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) r10 = socket$inet(0x2, 0x803, 0x3) getsockopt(r10, 0xff, 0xfffffffd, 0x0, 0x0) r11 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80800) getsockopt$bt_BT_SNDMTU(r11, 0x112, 0xc, 0x0, &(0x7f00000000c0)) setsockopt$MRT_DEL_MFC_PROXY(r10, 0x0, 0xd3, &(0x7f0000000100)={@loopback, @dev={0xac, 0x14, 0x14, 0x42}, 0x0, "e48be7ca4044d71faa89ad405d361751dacdea9f9312c32ff4df36857e8de3c4", 0x8, 0x4, 0x7, 0x3}, 0x3c) 6.949229792s ago: executing program 4 (id=1626): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x12141, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000400)={0xfffffff8, {{0xa, 0x4e21, 0x9, @mcast1, 0x8}}, 0x0, 0x5, [{{0xa, 0x4e21, 0x1, @mcast2, 0x1}}, {{0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x7}}, {{0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}, 0x100}}]}, 0x310) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c091}, 0x4) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) 6.010642894s ago: executing program 4 (id=1627): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0xa, &(0x7f0000000180)={0x26, 0x6, 0x50}) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) gettimeofday(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000090) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 5.998265333s ago: executing program 1 (id=1628): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0', 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x500, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x20, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000800000000029500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) unlink(&(0x7f0000000300)='./config\x00') 4.907050769s ago: executing program 1 (id=1629): r0 = socket(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000003380)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) recvmmsg(r0, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)=""/117, 0x75}], 0x1}}], 0x1, 0x20b0, 0x0) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="93", 0x1}], 0x1}}], 0x1, 0x4044810) 4.169673235s ago: executing program 1 (id=1630): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x33) ioctl$BLKZEROOUT(r5, 0xc01070ce, &(0x7f0000000040)={0x1, 0xffff}) ioctl$PPPIOCDISCONN(r5, 0x7439) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000180)=0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020) 4.091587607s ago: executing program 5 (id=1631): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) 3.934135141s ago: executing program 1 (id=1632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x4000) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f0000000000)=0x6, 0x4) 2.942281883s ago: executing program 4 (id=1633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r3, &(0x7f0000000000)=""/43, 0x2b) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x23d1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x801, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) 2.916272864s ago: executing program 3 (id=1634): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x15) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(0xffffffffffffffff, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd05, &(0x7f0000000000)="04000000020000000000") 2.915840424s ago: executing program 5 (id=1635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x33) 2.914999204s ago: executing program 6 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpgid(0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.65633058s ago: executing program 3 (id=1637): syz_open_dev$hidraw(0x0, 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) epoll_create1(0x80000) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000000400)=@file={0x1, './bus\x00'}, 0x6e) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x400, 0x9, 0x7, 0x1}, {0x9, 0x5, 0xa, 0x2, 0x8, 0x53, 0x2, 0x9}, {0x9, 0x5, 0x7, 0x3, 0x3ff, 0x7f, 0xb, 0x2b}}}}}}]}}, 0x0) 1.983625855s ago: executing program 4 (id=1638): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x12141, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000400)={0xfffffff8, {{0xa, 0x4e21, 0x9, @mcast1, 0x8}}, 0x0, 0x5, [{{0xa, 0x4e21, 0x1, @mcast2, 0x1}}, {{0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x7}}, {{0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}, 0x100}}]}, 0x310) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c091}, 0x4) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) 1.742659371s ago: executing program 4 (id=1639): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0', 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x500, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x20, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000800000000029500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) unlink(&(0x7f0000000300)='./config\x00') 0s ago: executing program 4 (id=1640): r0 = socket(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000003380)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) recvmmsg(r0, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)=""/117, 0x75}], 0x1}}], 0x1, 0x20b0, 0x0) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="93", 0x1}], 0x1}}], 0x1, 0x4044810) kernel console output (not intermixed with test programs): ind symbol tda8083_attach() [ 533.688768][ T4358] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 533.698321][ T127] usbtouchscreen: probe of 6-1:0.214 failed with error -71 [ 533.740687][ T127] usb 6-1: USB disconnect, device number 11 [ 533.788768][ T7456] netlink: 76 bytes leftover after parsing attributes in process `syz.4.768'. [ 534.095325][ T127] usb 3-1: USB disconnect, device number 19 [ 534.192403][ T4358] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 534.301829][ T4985] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 534.355301][ T7470] sctp_transport_update_pmtu: 49 callbacks suppressed [ 534.355332][ T7470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 534.411979][ T4358] usb 2-1: Using ep0 maxpacket: 32 [ 534.423461][ T7470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 534.434131][ T4358] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 534.445001][ T7470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 534.459123][ T7470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 534.474914][ T7470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 534.485969][ T7470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 534.497130][ T7470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 534.508084][ T7470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 534.519581][ T7470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 534.530671][ T7470] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 534.649317][ T4358] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 534.738710][ T4358] usb 2-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 534.879325][ T4358] usb 2-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 535.016555][ T4358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.100772][ T4358] usb 2-1: Product: syz [ 535.143401][ T4358] usb 2-1: Manufacturer: syz [ 535.195191][ T4358] usb 2-1: SerialNumber: syz [ 535.613084][ T4358] usb 2-1: Fast Track Pro config OK [ 535.626066][ T7473] ip_tables: iptables: counters copy to user failed while replacing table [ 535.765970][ T4358] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 535.787334][ T4358] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 535.793779][ T4985] usb 4-1: too many configurations: 234, using maximum allowed: 8 [ 535.804751][ T4358] usb 2-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 535.827525][ T4358] usb 2-1: 0:2 : does not exist [ 535.845875][ T4358] usb 2-1: unit 5 not found! [ 535.850546][ T4358] usb 2-1: unit 6 not found! [ 535.854502][ T4985] usb 4-1: config index 0 descriptor too short (expected 151, got 72) [ 535.882936][ T4985] usb 4-1: config index 1 descriptor too short (expected 151, got 72) [ 535.922527][ T4985] usb 4-1: config index 2 descriptor too short (expected 151, got 72) [ 535.960986][ T4985] usb 4-1: config index 3 descriptor too short (expected 151, got 72) [ 535.979724][ T4985] usb 4-1: config index 4 descriptor too short (expected 151, got 72) [ 536.010262][ T4985] usb 4-1: config index 5 descriptor too short (expected 151, got 72) [ 536.040768][ T4985] usb 4-1: config index 6 descriptor too short (expected 151, got 72) [ 536.041756][ T4358] usb 2-1: USB disconnect, device number 10 [ 536.071489][ T4985] usb 4-1: config index 7 descriptor too short (expected 151, got 72) [ 536.092846][ T4985] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 536.121839][ T4985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.140509][ T4985] usb 4-1: Product: syz [ 536.152997][ T7359] udevd[7359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 536.173456][ T4985] usb 4-1: Manufacturer: syz [ 536.178160][ T4985] usb 4-1: SerialNumber: syz [ 536.250712][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 536.289944][ T4985] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 536.723795][ T2122] usb 4-1: USB disconnect, device number 13 [ 536.763521][ T7489] nvme_fabrics: missing parameter 'transport=%s' [ 536.775579][ T7489] nvme_fabrics: missing parameter 'nqn=%s' [ 537.371806][ T4985] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 537.379044][ T4985] ath9k_htc: Failed to initialize the device [ 537.893561][ T2122] usb 4-1: ath9k_htc: USB layer deinitialized [ 537.973413][ T7510] ip_tables: iptables: counters copy to user failed while replacing table [ 538.066253][ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.789'. [ 539.381826][ T4985] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 540.255172][ T7540] ip_tables: iptables: counters copy to user failed while replacing table [ 540.405615][ T4985] usb 4-1: too many configurations: 234, using maximum allowed: 8 [ 540.438784][ T4985] usb 4-1: config index 0 descriptor too short (expected 151, got 72) [ 540.489688][ T4985] usb 4-1: config index 1 descriptor too short (expected 151, got 72) [ 540.536273][ T4985] usb 4-1: config index 2 descriptor too short (expected 151, got 72) [ 540.565043][ T4985] usb 4-1: config index 3 descriptor too short (expected 151, got 72) [ 540.605394][ T4985] usb 4-1: config index 4 descriptor too short (expected 151, got 72) [ 540.645016][ T4985] usb 4-1: config index 5 descriptor too short (expected 151, got 72) [ 540.685362][ T4985] usb 4-1: config index 6 descriptor too short (expected 151, got 72) [ 540.716228][ T4985] usb 4-1: config index 7 descriptor too short (expected 151, got 72) [ 540.755414][ T4985] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 540.787230][ T4985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.815332][ T4985] usb 4-1: Product: syz [ 540.830328][ T4985] usb 4-1: Manufacturer: syz [ 540.850653][ T4985] usb 4-1: SerialNumber: syz [ 540.898784][ T4985] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 541.313606][ T3654] usb 4-1: USB disconnect, device number 14 [ 541.540129][ T7560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.803'. [ 541.931811][ T4985] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 541.939016][ T4985] ath9k_htc: Failed to initialize the device [ 541.976601][ T3654] usb 4-1: ath9k_htc: USB layer deinitialized [ 542.270419][ T7574] ip_tables: iptables: counters copy to user failed while replacing table [ 544.138504][ T7594] sctp_transport_update_pmtu: 107 callbacks suppressed [ 544.138554][ T7594] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 544.209371][ T7594] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 544.220445][ T7594] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 544.231422][ T7594] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 544.244594][ T7594] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 544.255802][ T7594] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 544.267484][ T7594] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 544.281698][ T7594] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 544.292881][ T7594] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 544.311190][ T7594] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 545.018905][ T7597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.821'. [ 548.420558][ T7618] netlink: 48 bytes leftover after parsing attributes in process `syz.2.827'. [ 550.396186][ T7640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.835'. [ 551.329218][ T4985] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 551.572223][ T4985] usb 4-1: Using ep0 maxpacket: 32 [ 551.598227][ T4985] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 551.618711][ T4985] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 551.628843][ T4985] usb 4-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 551.662602][ T4985] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 551.691685][ T4985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.709903][ T4985] usb 4-1: Product: syz [ 551.730149][ T4985] usb 4-1: Manufacturer: syz [ 551.736467][ T4985] usb 4-1: SerialNumber: syz [ 551.786745][ T4985] usb 4-1: Fast Track Pro config OK [ 552.092503][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.153762][ T7655] sctp_transport_update_pmtu: 48 callbacks suppressed [ 552.153822][ T7655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 552.173281][ T7655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 552.184704][ T7655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 552.199239][ T7655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 552.210291][ T7655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 552.221351][ T7655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 552.233315][ T7655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 552.245082][ T7655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 552.263286][ T7655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 552.274799][ T7655] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 552.442763][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.510724][ T4985] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 553.543984][ T4985] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 553.555620][ T4985] usb 4-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 553.578911][ T4985] usb 4-1: 0:2 : does not exist [ 553.584571][ T4985] usb 4-1: unit 5 not found! [ 553.590398][ T4985] usb 4-1: unit 6 not found! [ 553.694232][ T4985] usb 4-1: USB disconnect, device number 15 [ 554.851554][ T53] block nbd5: Attempted send on invalid socket [ 554.858082][ T53] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 554.873004][ T7668] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 555.812281][ T7674] netlink: 48 bytes leftover after parsing attributes in process `syz.3.845'. [ 555.899866][ T7678] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 555.931706][ T3654] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 556.188500][ T3654] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 556.221881][ T3654] usb 6-1: config 0 has no interface number 0 [ 556.228275][ T3654] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 556.685207][ T3654] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 556.757356][ T3654] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 556.789438][ T3654] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 556.846298][ T3654] usb 6-1: Manufacturer: syz [ 556.854458][ T3654] usb 6-1: SerialNumber: syz [ 556.951242][ T3654] usb 6-1: config 0 descriptor?? [ 558.425237][ T3654] usbtouchscreen: probe of 6-1:0.214 failed with error -71 [ 558.554599][ T3654] usb 6-1: USB disconnect, device number 12 [ 559.631121][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.851'. [ 561.014688][ T7709] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 562.545426][ T7722] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.734336][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.740795][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.361740][ T4482] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 566.810635][ T7750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.865'. [ 568.135297][ T94] block nbd4: Attempted send on invalid socket [ 568.141543][ T94] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 568.169402][ T7765] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 568.521669][ T2122] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 568.724219][ T2122] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 568.739104][ T2122] usb 5-1: config 0 has no interface number 0 [ 568.758172][ T2122] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 568.809362][ T2122] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 568.858714][ T2122] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 568.888341][ T2122] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 568.908580][ T2122] usb 5-1: Manufacturer: syz [ 569.003570][ T7777] hub 8-0:1.0: USB hub found [ 569.010916][ T7777] hub 8-0:1.0: 1 port detected [ 569.095524][ T2122] usb 5-1: SerialNumber: syz [ 569.535273][ T2122] usb 5-1: config 0 descriptor?? [ 570.076177][ T2122] usbtouchscreen 5-1:0.214: Failed to read FW rev: -32 [ 570.093136][ T2122] usbtouchscreen: probe of 5-1:0.214 failed with error -32 [ 570.300235][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.877'. [ 571.434164][ T3654] usb 5-1: USB disconnect, device number 17 [ 577.909702][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 578.131663][ T3654] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 578.220985][ T94] block nbd1: Attempted send on invalid socket [ 578.227302][ T94] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.237704][ T7827] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 578.349108][ T3654] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.367191][ T3654] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 578.377431][ T3654] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 578.390855][ T4358] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 578.411519][ T3654] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 578.423820][ T3654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.432686][ T3654] usb 3-1: Product: syz [ 578.619453][ T3654] usb 3-1: Manufacturer: syz [ 578.624271][ T3654] usb 3-1: SerialNumber: syz [ 578.645109][ T3654] usb 3-1: Found UVC 1.00 device syz (046d:0821) [ 578.651863][ T3654] usb 3-1: No streaming interface found for terminal 2. [ 579.415118][ T127] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 579.452136][ T4358] usb 5-1: Using ep0 maxpacket: 32 [ 579.482210][ T4358] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 579.523059][ T4358] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 579.576703][ T4358] usb 5-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 579.591706][ T4985] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 579.606084][ T127] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 579.633207][ T127] usb 2-1: config 0 has no interface number 0 [ 579.644298][ T4358] usb 5-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 579.661764][ T127] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 579.683414][ T4358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.701718][ T127] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 579.731677][ T4358] usb 5-1: Product: syz [ 579.736142][ T4358] usb 5-1: Manufacturer: syz [ 579.740788][ T4358] usb 5-1: SerialNumber: syz [ 579.748221][ T127] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 579.763953][ T127] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 579.776255][ T4358] usb 5-1: Fast Track Pro config OK [ 579.801796][ T4985] usb 4-1: Using ep0 maxpacket: 32 [ 579.802769][ T127] usb 2-1: Manufacturer: syz [ 579.827949][ T4985] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 579.832955][ T127] usb 2-1: SerialNumber: syz [ 579.845253][ T4985] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 579.861971][ T4985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.870410][ T4985] usb 4-1: Product: syz [ 579.874724][ T4985] usb 4-1: Manufacturer: syz [ 579.879379][ T4985] usb 4-1: SerialNumber: syz [ 579.898692][ T4985] usb 4-1: config 0 descriptor?? [ 579.913779][ T127] usb 2-1: config 0 descriptor?? [ 580.031852][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.042802][ T4985] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 580.050873][ T4985] dvb-usb: bulk message failed: -22 (2/0) [ 580.122525][ T127] usbtouchscreen 2-1:0.214: Failed to read FW rev: -32 [ 580.131791][ T127] usbtouchscreen: probe of 2-1:0.214 failed with error -32 [ 580.145938][ T4985] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 580.156042][ T4985] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 580.164320][ T4985] usb 4-1: media controller created [ 580.180057][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.194571][ T4985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 580.315929][ T4985] usb 4-1: selecting invalid altsetting 7 [ 580.359878][ T7843] Bluetooth: MGMT ver 1.22 [ 580.367719][ T4985] cxusb: set interface failed [ 580.377881][ T4985] dvb-usb: bulk message failed: -22 (1/0) [ 580.514755][ T127] usb 3-1: USB disconnect, device number 20 [ 580.660044][ T4985] DVB: Unable to find symbol lgdt330x_attach() [ 580.669138][ T4985] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 580.951738][ T4985] rc_core: IR keymap rc-dvico-portable not found [ 580.958282][ T4985] Registered IR keymap rc-empty [ 580.975657][ T4985] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 581.009333][ T4985] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input14 [ 581.041900][ T4985] dvb-usb: schedule remote query interval to 100 msecs. [ 581.051740][ T4985] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 581.089697][ T4985] usb 4-1: USB disconnect, device number 16 [ 581.225974][ T4985] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 581.253485][ T4358] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 581.261395][ T4358] usb 5-1: 1:1 : format type 0 is detected, processed as PCM [ 581.296598][ T4358] usb 5-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 581.308951][ T4482] usb 2-1: USB disconnect, device number 12 [ 581.334338][ T4358] usb 5-1: 0:2 : does not exist [ 581.339392][ T4358] usb 5-1: unit 5 not found! [ 581.381891][ T4358] usb 5-1: unit 6 not found! [ 581.461395][ T4358] usb 5-1: USB disconnect, device number 18 [ 582.675116][ T7751] udevd[7751]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 585.669694][ T53] block nbd3: Attempted send on invalid socket [ 585.676962][ T53] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 585.715275][ T7885] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 586.081775][ T3654] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 586.142936][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.900'. [ 586.295245][ T3654] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 586.309440][ T3654] usb 4-1: config 0 has no interface number 0 [ 586.321402][ T3654] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 586.347655][ T3654] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 587.948781][ T3654] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 587.972346][ T3654] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 587.980407][ T3654] usb 4-1: Manufacturer: syz [ 587.997638][ T3654] usb 4-1: SerialNumber: syz [ 588.195223][ T3654] usb 4-1: config 0 descriptor?? [ 588.438479][ T3654] usbtouchscreen 4-1:0.214: Failed to read FW rev: -32 [ 588.445653][ T3654] usbtouchscreen: probe of 4-1:0.214 failed with error -32 [ 589.361018][ T7934] sctp_transport_update_pmtu: 48 callbacks suppressed [ 589.361048][ T7934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 589.426081][ T7934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 589.437401][ T7934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 589.449041][ T7934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 589.464704][ T7934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 589.476231][ T7934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 589.487397][ T7934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 589.498885][ T7934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 589.509967][ T7934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 589.521211][ T7934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 590.275009][ T4358] usb 4-1: USB disconnect, device number 17 [ 591.801885][ T4985] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 592.031719][ T4985] usb 2-1: Using ep0 maxpacket: 8 [ 592.049505][ T4985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.061008][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.927'. [ 592.070231][ T4985] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 592.079982][ T4985] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 592.091708][ T4985] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 592.103629][ T4985] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 592.114732][ T4985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.222828][ T4985] hub 2-1:1.0: bad descriptor, ignoring hub [ 592.230234][ T4985] hub: probe of 2-1:1.0 failed with error -5 [ 592.242236][ T4985] cdc_wdm 2-1:1.0: skipping garbage [ 592.247947][ T4985] cdc_wdm 2-1:1.0: skipping garbage [ 592.271381][ T4985] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 592.277957][ T4985] cdc_wdm 2-1:1.0: Unknown control protocol [ 593.612559][ T127] usb 2-1: USB disconnect, device number 13 [ 593.961667][ T4358] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 594.193936][ T4358] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.221622][ T4358] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 594.230649][ T4358] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 594.282336][ T4358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.306200][ T4358] usb 4-1: config 0 descriptor?? [ 594.749541][ T7989] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.759043][ T7989] F2FS-fs (loop3): Unable to read 1th superblock [ 594.766593][ T7989] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.776033][ T7989] F2FS-fs (loop3): Unable to read 2th superblock [ 596.934738][ T7998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.941'. [ 597.140024][ T4358] usb 4-1: USB disconnect, device number 18 [ 597.761728][ T27] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 597.993663][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.008954][ T27] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.031719][ T27] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 598.051037][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.112172][ T4985] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 598.321739][ T4985] usb 3-1: Using ep0 maxpacket: 32 [ 598.421881][ T4985] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.441609][ T4985] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.459151][ T4985] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 598.472813][ T4985] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 598.481349][ T4985] usb 3-1: Product: syz [ 598.485701][ T4985] usb 3-1: Manufacturer: syz [ 598.502472][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 598.508861][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 598.520546][ T4985] hub 3-1:4.0: USB hub found [ 598.726155][ T4985] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 598.782321][ T4985] usb 3-1: USB disconnect, device number 21 [ 598.824787][ T27] DVB: Unable to find symbol stv0299_attach() [ 598.942226][ T4358] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 599.004768][ T27] DVB: Unable to find symbol tda8083_attach() [ 599.012100][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 599.144918][ T4358] usb 4-1: Using ep0 maxpacket: 8 [ 599.156851][ T4358] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.181708][ T4358] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 599.197762][ T4358] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 599.231332][ T4358] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 599.282861][ T4358] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 599.304735][ T4358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.339852][ T4358] hub 4-1:1.0: bad descriptor, ignoring hub [ 599.350012][ T4358] hub: probe of 4-1:1.0 failed with error -5 [ 599.376395][ T4358] cdc_wdm 4-1:1.0: skipping garbage [ 599.386284][ T4358] cdc_wdm 4-1:1.0: skipping garbage [ 599.391696][ T27] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 599.429221][ T4358] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 599.435349][ T4358] cdc_wdm 4-1:1.0: Unknown control protocol [ 599.582647][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.628948][ T27] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 599.715034][ T27] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 599.751694][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.775826][ T27] usb 2-1: config 0 descriptor?? [ 600.550760][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 600.563163][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 600.570953][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 600.579257][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 600.587499][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 600.595728][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 600.627629][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 600.683718][ T8041] sctp_transport_update_pmtu: 48 callbacks suppressed [ 600.683739][ T8041] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 600.701429][ T8041] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 600.712325][ T8041] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 600.723475][ T8041] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 600.775195][ T8041] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 600.786071][ T8041] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 600.797290][ T8041] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 600.808361][ T8041] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 600.819393][ T8041] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 600.830737][ T8041] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 602.630763][ T3654] usb 5-1: USB disconnect, device number 19 [ 602.650470][ T27] usb 2-1: USB disconnect, device number 14 [ 602.732826][ T127] usb 4-1: USB disconnect, device number 19 [ 603.971651][ T4358] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 604.055363][ T8080] tipc: Failed to remove unknown binding: 66,0,0/0:3004018760/3004018762 [ 604.066076][ T8077] tipc: Failed to remove unknown binding: 66,0,0/0:1490130242/1490130243 [ 604.075006][ T8077] tipc: Failed to remove unknown binding: 66,0,0/0:1490130242/1490130243 [ 604.091857][ T127] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 604.206626][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 604.219812][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 604.227924][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 604.235824][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 604.244688][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 604.252899][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 604.285942][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 604.904397][ T4358] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.921911][ T4358] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 604.931091][ T4358] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 604.940847][ T4358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.953262][ T4358] usb 4-1: config 0 descriptor?? [ 604.983753][ T127] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.001669][ T127] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.021687][ T127] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 605.041471][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.434416][ T127] dvb_ttusb_budget: ttusb_init_controller: error [ 606.441815][ T127] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 606.555990][ T8098] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.571891][ T8098] F2FS-fs (loop3): Unable to read 1th superblock [ 606.609493][ T8098] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 606.839597][ T8106] sctp_transport_update_pmtu: 106 callbacks suppressed [ 606.839634][ T8106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 606.896746][ T8106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 606.908593][ T8106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 606.919987][ T8106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 606.933530][ T8106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 606.944966][ T8106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 606.956576][ T8106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 606.968503][ T8106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 606.980278][ T8106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 606.991385][ T8106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 608.757216][ T8098] F2FS-fs (loop3): Unable to read 2th superblock [ 609.553301][ T127] DVB: Unable to find symbol stv0299_attach() [ 610.489636][ T4358] usb 4-1: USB disconnect, device number 20 [ 611.163583][ T8121] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 611.217986][ T127] DVB: Unable to find symbol tda8083_attach() [ 611.229428][ T127] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 612.149713][ T127] usb 3-1: USB disconnect, device number 22 [ 614.601645][ T127] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 614.844568][ T8157] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 614.893668][ T127] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.921722][ T127] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.956079][ T127] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 614.966523][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.603060][ T4358] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 616.610794][ T127] dvb_ttusb_budget: ttusb_init_controller: error [ 618.169098][ T127] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 618.249398][ T127] DVB: Unable to find symbol stv0299_attach() [ 619.133304][ T127] DVB: Unable to find symbol tda8083_attach() [ 619.167221][ T127] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 619.180296][ T127] usb 2-1: USB disconnect, device number 15 [ 619.214894][ T8207] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 619.814817][ T27] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 620.016225][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.039155][ T27] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.091192][ T27] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 620.125575][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.134449][ T4482] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 620.348818][ T4482] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.562422][ T4482] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 620.684597][ T4482] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 620.757683][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 620.769157][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 620.836206][ T4482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.040634][ T4482] usb 5-1: config 0 descriptor?? [ 621.367816][ T27] DVB: Unable to find symbol stv0299_attach() [ 622.152451][ T8239] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.174811][ T8239] F2FS-fs (loop4): Unable to read 1th superblock [ 622.213098][ T8239] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.223515][ T8239] F2FS-fs (loop4): Unable to read 2th superblock [ 622.322003][ T4358] usb 5-1: USB disconnect, device number 21 [ 622.787563][ T8238] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.174592][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.180911][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.432622][ T27] DVB: Unable to find symbol tda8083_attach() [ 624.446596][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 624.553308][ T27] usb 3-1: USB disconnect, device number 23 [ 624.772174][ T8252] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 627.802892][ T4985] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 627.991667][ T4985] usb 3-1: Using ep0 maxpacket: 32 [ 628.004470][ T8290] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.018845][ T4985] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.139744][ T4985] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.255899][ T4985] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 628.344113][ T4985] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 628.417944][ T4985] usb 3-1: Product: syz [ 628.460103][ T4985] usb 3-1: Manufacturer: syz [ 628.583385][ T4985] hub 3-1:4.0: USB hub found [ 628.602699][ T8295] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 628.773405][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 628.783912][ T4985] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 628.832290][ T4985] usb 3-1: USB disconnect, device number 24 [ 630.811639][ T127] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 631.582949][ T8318] program syz.5.1048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.403362][ T8318] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 633.965939][ T8338] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 635.545158][ T8347] ieee802154 phy0 wpan0: encryption failed: -22 [ 637.030184][ T127] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 638.666266][ T127] usb 2-1: Using ep0 maxpacket: 32 [ 638.673517][ T127] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.738008][ T127] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.791866][ T127] usb 2-1: string descriptor 0 read error: -71 [ 638.798173][ T127] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 638.831872][ T127] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 638.852910][ T127] usb 2-1: can't set config #4, error -71 [ 638.883565][ T127] usb 2-1: USB disconnect, device number 16 [ 639.043210][ T4391] Bluetooth: hci5: Frame reassembly failed (-84) [ 641.053089][ T4286] Bluetooth: hci5: command 0xfc11 tx timeout [ 641.053146][ T4272] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 642.490438][ T8380] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 643.006510][ T8385] program syz.1.1067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 643.017884][ T8385] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 646.359196][ T8400] ieee802154 phy0 wpan0: encryption failed: -22 [ 647.531774][ T3654] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 647.721710][ T3654] usb 3-1: Using ep0 maxpacket: 32 [ 647.729967][ T3654] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 647.771677][ T3654] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 647.785850][ T26] audit: type=1800 audit(1787523556.816:7): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1076" name="host_addr" dev="configfs" ino=47475 res=0 errno=0 [ 647.831802][ T3654] usb 3-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 647.896215][ T3654] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 647.961660][ T3654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.990075][ T3654] usb 3-1: Product: syz [ 648.000191][ T3654] usb 3-1: Manufacturer: syz [ 648.010332][ T3654] usb 3-1: SerialNumber: syz [ 648.068448][ T3654] usb 3-1: Fast Track Pro config OK [ 649.643392][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.658560][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.112699][ T3654] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 650.120602][ T3654] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 650.181762][ T3654] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 650.223327][ T3654] usb 3-1: 0:2 : does not exist [ 650.228337][ T3654] usb 3-1: unit 5 not found! [ 650.251647][ T3654] usb 3-1: unit 6 not found! [ 652.372708][ T3654] usb 3-1: USB disconnect, device number 25 [ 653.233120][ T7749] udevd[7749]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 656.142012][ T8462] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 661.841660][ T27] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 662.051693][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 662.058469][ T27] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 662.087596][ T27] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 662.134391][ T27] usb 2-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 662.180973][ T27] usb 2-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 662.223336][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.256522][ T27] usb 2-1: Product: syz [ 663.143013][ T27] usb 2-1: Manufacturer: syz [ 663.147699][ T27] usb 2-1: SerialNumber: syz [ 663.204586][ T27] usb 2-1: Fast Track Pro config OK [ 663.378558][ T27] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 663.401963][ T27] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 663.633042][ T27] usb 2-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 663.783931][ T27] usb 2-1: 0:2 : does not exist [ 663.810555][ T27] usb 2-1: unit 5 not found! [ 663.825049][ T27] usb 2-1: unit 6 not found! [ 663.895215][ T27] usb 2-1: USB disconnect, device number 17 [ 665.458823][ T7839] udevd[7839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 666.493239][ T4272] Bluetooth: hci5: command 0xfc11 tx timeout [ 666.499589][ T4286] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 667.313817][ T8536] support for cryptoloop has been removed. Use dm-crypt instead. [ 669.107259][ T8552] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 669.175616][ T4391] Bluetooth: hci5: Frame reassembly failed (-84) [ 669.184389][ T4391] Bluetooth: hci5: Frame reassembly failed (-84) [ 669.275193][ T8554] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 669.771718][ T3654] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 671.184791][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 671.211838][ T3654] usb 4-1: Using ep0 maxpacket: 32 [ 671.234741][ T3654] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 672.067368][ T3654] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 672.076770][ T3654] usb 4-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 672.167693][ T3654] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 672.187276][ T3654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.209181][ T3654] usb 4-1: Product: syz [ 672.216753][ T3654] usb 4-1: Manufacturer: syz [ 672.221411][ T3654] usb 4-1: SerialNumber: syz [ 672.727698][ T3654] usb 4-1: can't set config #6, error -71 [ 672.740187][ T3654] usb 4-1: USB disconnect, device number 21 [ 674.972077][ T4272] Bluetooth: hci5: command 0xfc11 tx timeout [ 674.973071][ T4286] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 677.062927][ T8594] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 679.519042][ T8616] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 679.620431][ T47] Bluetooth: hci5: Frame reassembly failed (-84) [ 679.858322][ T8617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1136'. [ 680.215561][ T4276] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 680.310026][ T8633] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 680.481713][ T27] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 680.831658][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 681.541780][ T8587] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 683.796905][ T27] usb 3-1: device descriptor read/all, error -71 [ 684.091793][ T8587] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 684.099756][ T4276] Bluetooth: hci5: command 0xfc11 tx timeout [ 685.614566][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.620952][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.719215][ T4358] kernel write not supported for file /sequencer2 (pid: 4358 comm: kworker/0:9) [ 685.899010][ T8662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1151'. [ 685.958026][ T8668] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 686.128379][ T8672] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 686.142251][ T8672] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 686.150695][ T8672] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 686.158915][ T8672] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 686.167232][ T8672] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 686.175544][ T8672] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 686.194042][ T8672] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 688.107829][ T8686] program syz.3.1157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.915762][ T8686] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 689.331669][ T4316] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 689.521606][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 689.528878][ T4316] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 689.586255][ T4316] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 689.620427][ T4316] usb 3-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 689.656732][ T4316] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 689.678635][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.712774][ T4316] usb 3-1: Product: syz [ 689.723017][ T4316] usb 3-1: Manufacturer: syz [ 689.733310][ T4316] usb 3-1: SerialNumber: syz [ 689.756599][ T4316] usb 3-1: Fast Track Pro config OK [ 689.955203][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.982264][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.172622][ T8587] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 692.180342][ T4276] Bluetooth: hci5: command 0xfc11 tx timeout [ 693.148300][ T4316] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 693.236894][ T4316] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 693.345714][ T4316] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 693.451078][ T4316] usb 3-1: 0:2 : does not exist [ 693.514248][ T4316] usb 3-1: unit 5 not found! [ 693.564041][ T4316] usb 3-1: unit 6 not found! [ 694.078985][ T4316] usb 3-1: USB disconnect, device number 28 [ 694.677871][ T7839] udevd[7839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 694.973995][ T8716] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 696.276150][ T8736] program syz.5.1169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 697.134960][ T8736] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 698.640501][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 698.650947][ T8723] infiniband syz1: set active [ 698.656563][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 698.664458][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 698.672269][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 698.680073][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 698.688011][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 698.702640][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 701.612263][ T4482] lo speed is unknown, defaulting to 1000 [ 702.328952][ T4985] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 702.843177][ T4745] Bluetooth: hci5: Frame reassembly failed (-84) [ 702.849753][ T67] Bluetooth: hci5: Frame reassembly failed (-84) [ 702.973343][ T4985] usb 4-1: Using ep0 maxpacket: 32 [ 702.980617][ T4985] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 703.003287][ T4985] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 703.049070][ T4985] usb 4-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 703.112478][ T4985] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 703.138343][ T4985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.188446][ T4985] usb 4-1: Product: syz [ 703.206062][ T8769] ieee802154 phy0 wpan0: encryption failed: -22 [ 703.238712][ T4985] usb 4-1: Manufacturer: syz [ 703.286831][ T4985] usb 4-1: SerialNumber: syz [ 705.042291][ T4276] Bluetooth: hci5: command 0xfc11 tx timeout [ 705.048984][ T8587] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 705.194230][ T4985] usb 4-1: can't set config #6, error -71 [ 705.211122][ T4985] usb 4-1: USB disconnect, device number 22 [ 707.422722][ T8793] program syz.2.1182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 708.213411][ T8793] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 708.948370][ T8804] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1184'. [ 713.503267][ T8837] ieee802154 phy0 wpan0: encryption failed: -22 [ 715.004391][ T8853] program syz.1.1193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 715.816459][ T8853] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 716.952975][ T4985] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 717.151697][ T4985] usb 5-1: Using ep0 maxpacket: 32 [ 717.164217][ T4985] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 717.225877][ T4985] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 717.278322][ T4985] usb 5-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 717.380629][ T4985] usb 5-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 717.457660][ T4985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.602326][ T4985] usb 5-1: Product: syz [ 717.696320][ T4985] usb 5-1: Manufacturer: syz [ 717.774528][ T4985] usb 5-1: SerialNumber: syz [ 718.006063][ T4985] usb 5-1: Fast Track Pro config OK [ 718.309655][ T8867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.320432][ T8867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.202452][ T4985] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 720.219004][ T4985] usb 5-1: 1:1 : format type 0 is detected, processed as PCM [ 720.227719][ T4985] usb 5-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 720.245373][ T4985] usb 5-1: 0:2 : does not exist [ 720.250327][ T4985] usb 5-1: unit 5 not found! [ 720.310680][ T4985] usb 5-1: unit 6 not found! [ 720.406719][ T4985] usb 5-1: USB disconnect, device number 23 [ 720.805826][ T8898] udevd[8898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 721.121616][ T8776] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 721.313173][ T8776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 721.462889][ T8776] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 721.483178][ T8776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 721.494553][ T8776] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 721.571809][ T8776] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 721.583180][ T8776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.761459][ T8776] usb 5-1: config 0 descriptor?? [ 722.020794][ T8901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.084464][ T8901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.136419][ T8776] hdpvr 5-1:0.0: firmware version 0x40 dated „ [ 722.153019][ T8776] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 723.227899][ T8776] hdpvr 5-1:0.0: Could not setup controls [ 723.234205][ T8776] hdpvr 5-1:0.0: registering videodev failed [ 723.247092][ T8776] hdpvr: probe of 5-1:0.0 failed with error -71 [ 723.309176][ T8776] usb 5-1: USB disconnect, device number 24 [ 723.315396][ T4985] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 724.361764][ T4985] usb 4-1: Using ep0 maxpacket: 32 [ 724.377481][ T4985] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 724.465196][ T4985] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 724.531095][ T4985] usb 4-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 724.558755][ T4985] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 724.571746][ T4985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.581269][ T4985] usb 4-1: Product: syz [ 724.592405][ T4985] usb 4-1: Manufacturer: syz [ 724.597488][ T4985] usb 4-1: SerialNumber: syz [ 724.892521][ T4985] usb 4-1: Fast Track Pro config OK [ 725.042173][ T8926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.062109][ T8926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.459478][ T4985] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 725.528244][ T4985] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 725.552300][ T4985] usb 4-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 725.561480][ T4985] usb 4-1: 0:2 : does not exist [ 725.566977][ T4985] usb 4-1: unit 5 not found! [ 725.620528][ T4985] usb 4-1: unit 6 not found! [ 725.658783][ T4985] usb 4-1: USB disconnect, device number 23 [ 726.042285][ T8905] udevd[8905]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 728.092656][ T8979] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 728.102790][ T8979] infiniband syz1: set active [ 728.108122][ T8979] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 728.117556][ T8979] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 728.125630][ T8979] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 728.133444][ T8979] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 728.167726][ T8979] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 728.181777][ T8979] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 728.238781][ T8980] sctp_transport_update_pmtu: 48 callbacks suppressed [ 728.238811][ T8980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 728.256882][ T8980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 728.267876][ T8980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 728.331683][ T8980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 728.343267][ T8980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 728.354683][ T8980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 728.365839][ T8980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 728.376956][ T8980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 728.388088][ T8980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 728.400130][ T8980] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 729.995068][ T8776] lo speed is unknown, defaulting to 1000 [ 730.511865][ T4316] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 730.711750][ T4323] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 730.721731][ T4316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.739686][ T4316] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 730.756242][ T4316] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 730.779721][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.804388][ T4316] usb 4-1: config 0 descriptor?? [ 731.044290][ T4323] usb 3-1: Using ep0 maxpacket: 32 [ 731.085029][ T8986] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 731.095314][ T8986] F2FS-fs (loop3): Unable to read 1th superblock [ 731.102528][ T8986] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 731.111740][ T8986] F2FS-fs (loop3): Unable to read 2th superblock [ 731.121976][ T4323] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 731.142441][ T4323] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 731.150953][ T8776] usb 4-1: USB disconnect, device number 24 [ 731.162116][ T4323] usb 3-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 731.178739][ T4323] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 731.188472][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.196656][ T4323] usb 3-1: Product: syz [ 731.200972][ T4323] usb 3-1: Manufacturer: syz [ 731.205741][ T4323] usb 3-1: SerialNumber: syz [ 731.284348][ T4323] usb 3-1: Fast Track Pro config OK [ 731.429579][ T8992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.451490][ T8992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.809352][ T4323] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 731.841664][ T4323] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 731.849169][ T4323] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 731.865737][ T4323] usb 3-1: 0:2 : does not exist [ 731.870726][ T4323] usb 3-1: unit 5 not found! [ 732.005147][ T4323] usb 3-1: unit 6 not found! [ 733.353054][ T4323] usb 3-1: USB disconnect, device number 29 [ 734.742880][ T8748] udevd[8748]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 736.134756][ T127] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 736.393238][ T127] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.432679][ T127] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 736.473319][ T127] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 736.526725][ T127] usb 6-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 736.554228][ T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.571938][ T4482] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 736.584933][ T127] usb 6-1: Product: syz [ 736.589145][ T127] usb 6-1: Manufacturer: syz [ 736.622810][ T127] usb 6-1: SerialNumber: syz [ 736.668486][ T127] usb 6-1: Found UVC 1.00 device syz (046d:0821) [ 736.696837][ T127] usb 6-1: No streaming interface found for terminal 2. [ 736.799202][ T4482] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.820726][ T4482] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 736.850585][ T4482] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 736.880997][ T4482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.923882][ T4482] usb 4-1: config 0 descriptor?? [ 737.172950][ T9045] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 737.182314][ T9045] F2FS-fs (loop3): Unable to read 1th superblock [ 737.188815][ T9045] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 737.198032][ T9045] F2FS-fs (loop3): Unable to read 2th superblock [ 737.209539][ T4482] usb 4-1: USB disconnect, device number 25 [ 740.561646][ T127] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 740.749668][ T127] usb 5-1: device descriptor read/64, error -71 [ 740.772417][ T4316] usb 6-1: USB disconnect, device number 13 [ 741.045121][ T127] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 741.611576][ T127] usb 5-1: device descriptor read/64, error -71 [ 741.731947][ T127] usb usb5-port1: attempt power cycle [ 746.178251][ T9120] sctp_transport_update_pmtu: 48 callbacks suppressed [ 746.178282][ T9120] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.247879][ T9120] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.259380][ T9120] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.270744][ T9120] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.285562][ T9120] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.296767][ T9120] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.308241][ T9120] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.319607][ T9120] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.330849][ T9120] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 746.343034][ T9120] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 747.055100][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.061433][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.611649][ T4482] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 755.781676][ T4482] usb 2-1: device descriptor read/64, error -71 [ 756.071866][ T4482] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 756.193381][ T9185] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1297'. [ 756.377028][ T4482] usb 2-1: device descriptor read/64, error -71 [ 756.522582][ T4482] usb usb2-port1: attempt power cycle [ 757.051736][ T4482] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 757.110762][ T4482] usb 2-1: device descriptor read/8, error -71 [ 757.197581][ T8776] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 757.381858][ T4482] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 757.401685][ T8776] usb 3-1: Using ep0 maxpacket: 32 [ 757.439666][ T8776] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 757.493460][ T4482] usb 2-1: device descriptor read/8, error -71 [ 757.610963][ T8776] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 757.691743][ T4482] usb usb2-port1: unable to enumerate USB device [ 757.775551][ T8776] usb 3-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 757.903619][ T8776] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 757.950058][ T8776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.979369][ T8776] usb 3-1: Product: syz [ 758.000028][ T8776] usb 3-1: Manufacturer: syz [ 758.189134][ T8776] usb 3-1: SerialNumber: syz [ 758.210535][ T8776] usb 3-1: Fast Track Pro config OK [ 758.926932][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.942449][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.965158][ T8776] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 761.126605][ T9219] fuse: Bad value for 'user_id' [ 762.071607][ T8776] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 762.079703][ T8776] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 762.204190][ T8776] usb 3-1: 0:2 : does not exist [ 762.210147][ T8776] usb 3-1: unit 5 not found! [ 762.215230][ T8776] usb 3-1: unit 6 not found! [ 762.302878][ T8776] usb 3-1: USB disconnect, device number 30 [ 765.757977][ T9256] ieee802154 phy0 wpan0: encryption failed: -22 [ 766.824885][ T9266] fuse: Bad value for 'fd' [ 772.637814][ T9308] fuse: Bad value for 'fd' [ 773.662561][ T9316] ieee802154 phy0 wpan0: encryption failed: -22 [ 776.381897][ T4316] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 776.654591][ T8776] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 776.924224][ T8776] usb 3-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 776.957003][ T8776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.808005][ T8776] i2c-tiny-usb 3-1:1.0: version 1.00 found at bus 003 address 031 [ 777.893718][ T4316] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.928015][ T4316] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 777.946598][ T4316] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 777.958139][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.999094][ T4316] usb 6-1: config 0 descriptor?? [ 779.669216][ T9326] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 779.678507][ T9326] F2FS-fs (loop5): Unable to read 1th superblock [ 779.685049][ T9326] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 779.694363][ T9326] F2FS-fs (loop5): Unable to read 2th superblock [ 780.781657][ T8776] (null): failure setting delay to 10us [ 780.790096][ T8776] i2c-tiny-usb: probe of 3-1:1.0 failed with error -5 [ 780.901367][ T127] usb 6-1: USB disconnect, device number 14 [ 781.403477][ T9368] sctp: failed to load transform for md5: -2 [ 782.248841][ T9386] ieee802154 phy0 wpan0: encryption failed: -22 [ 785.069538][ T9403] fuse: Bad value for 'fd' [ 788.701112][ T9406] sctp_transport_update_pmtu: 48 callbacks suppressed [ 788.701131][ T9406] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 788.771647][ T9406] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 788.792474][ T9406] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 788.839848][ T9406] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 788.858747][ T9406] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 788.870456][ T9406] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 788.887513][ T9406] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 789.091714][ T4316] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 789.700000][ T9406] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 789.731572][ T9406] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 789.743400][ T9406] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 789.894006][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.929482][ T4316] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 789.993766][ T4316] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 790.072168][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.119891][ T4316] usb 5-1: config 0 descriptor?? [ 790.201992][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 790.210603][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 790.218154][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 790.225469][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 790.232987][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 790.240495][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 790.248073][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 790.348805][ T9421] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 790.358956][ T9421] F2FS-fs (loop4): Unable to read 1th superblock [ 790.366584][ T9421] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 790.376161][ T9421] F2FS-fs (loop4): Unable to read 2th superblock [ 790.398580][ T4316] usb 5-1: USB disconnect, device number 28 [ 790.469090][ T4985] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 790.691692][ T4985] usb 4-1: Using ep0 maxpacket: 32 [ 790.721164][ T4985] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 790.735993][ T4985] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 790.756181][ T4985] usb 4-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 790.807551][ T4985] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 790.819287][ T9441] mmap: syz.1.1360 (9441) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 790.884838][ T4985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.894064][ T4985] usb 4-1: Product: syz [ 790.901753][ T4985] usb 4-1: Manufacturer: syz [ 790.906540][ T4985] usb 4-1: SerialNumber: syz [ 790.946067][ T4985] usb 4-1: Fast Track Pro config OK [ 792.045355][ T9433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.071831][ T9433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.010899][ T9456] fuse: Bad value for 'fd' [ 793.904322][ T4985] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 793.931653][ T4985] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 793.939100][ T4985] usb 4-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 793.988094][ T4985] usb 4-1: 0:2 : does not exist [ 793.993777][ T4985] usb 4-1: unit 5 not found! [ 793.998464][ T4985] usb 4-1: unit 6 not found! [ 794.083688][ T4985] usb 4-1: USB disconnect, device number 26 [ 794.574580][ T9328] udevd[9328]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 796.203212][ T8587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 796.214208][ T8587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 796.223480][ T8587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 796.231387][ T8587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 796.240069][ T8587] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 796.247469][ T8587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 796.254677][ T3654] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 796.554038][ T3654] usb 4-1: device descriptor read/64, error -71 [ 796.597919][ T9486] lo speed is unknown, defaulting to 1000 [ 797.385326][ T9495] syz.4.1374 uses obsolete (PF_INET,SOCK_PACKET) [ 797.461705][ T3654] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 797.621596][ T8776] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 797.630278][ T3654] usb 4-1: device descriptor read/64, error -71 [ 798.155661][ T9500] fuse: Bad value for 'fd' [ 799.000227][ T8587] Bluetooth: hci5: command 0x0409 tx timeout [ 799.001886][ T3654] usb usb4-port1: attempt power cycle [ 799.123983][ T8776] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 799.152113][ T8776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.171348][ T8776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.212006][ T8776] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 799.241563][ T8776] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.260859][ T8776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.298083][ T8776] usb 6-1: config 0 descriptor?? [ 799.330367][ T9486] chnl_net:caif_netlink_parms(): no params data found [ 799.356025][ T3654] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 799.517855][ T3654] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 799.529542][ T9486] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.563952][ T9486] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.577963][ T3654] usb 4-1: Using ep0 maxpacket: 32 [ 799.586264][ T3654] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 799.648574][ T9486] device bridge_slave_0 entered promiscuous mode [ 799.655163][ T3654] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 799.684073][ T9486] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.697914][ T3654] usb 4-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 799.737609][ T9486] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.747661][ T3654] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 799.747843][ T8776] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 799.768818][ T9486] device bridge_slave_1 entered promiscuous mode [ 799.789944][ T3654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.811343][ T8776] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 799.835841][ T3654] usb 4-1: Product: syz [ 799.840066][ T3654] usb 4-1: Manufacturer: syz [ 799.868341][ T8776] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 799.887600][ T3654] usb 4-1: SerialNumber: syz [ 799.894265][ T9486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.920645][ T3654] usb 4-1: Fast Track Pro config OK [ 799.953569][ T9486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.991462][ T9493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.061001][ T9493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.124990][ T9509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.136528][ T9486] team0: Port device team_slave_0 added [ 800.143267][ T9509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.198093][ T8776] usb 6-1: USB disconnect, device number 15 [ 800.227731][ T9486] team0: Port device team_slave_1 added [ 800.250102][ T9518] fido_id[9518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 800.315703][ T9486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.339918][ T9486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.424426][ T9486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.453843][ T9486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.468779][ T9486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.657603][ T9486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.052922][ T8587] Bluetooth: hci5: command 0x041b tx timeout [ 801.096003][ T9486] device hsr_slave_0 entered promiscuous mode [ 801.106181][ T9486] device hsr_slave_1 entered promiscuous mode [ 801.116260][ T9486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 801.124863][ T9486] Cannot create hsr debugfs directory [ 801.442156][ T3654] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 801.450059][ T3654] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 801.501688][ T3654] usb 4-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 802.384052][ T3654] usb 4-1: 0:2 : does not exist [ 802.389051][ T3654] usb 4-1: unit 5 not found! [ 802.394112][ T3654] usb 4-1: unit 6 not found! [ 802.415063][ T3654] usb 4-1: USB disconnect, device number 30 [ 802.666846][ T9336] udevd[9336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 802.791743][ T8776] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 802.969613][ T9486] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 802.984395][ T8776] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 803.001211][ T8776] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 803.070592][ T9486] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 803.113547][ T8776] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 803.131631][ T8587] Bluetooth: hci5: command 0x040f tx timeout [ 803.141754][ T8776] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 803.150927][ T8776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.160741][ T8776] usb 5-1: Product: syz [ 803.165202][ T8776] usb 5-1: Manufacturer: syz [ 803.170549][ T8776] usb 5-1: SerialNumber: syz [ 803.183640][ T8776] usb 5-1: Found UVC 1.00 device syz (046d:0821) [ 803.190082][ T8776] usb 5-1: No streaming interface found for terminal 2. [ 803.203510][ T9486] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 803.263726][ T9486] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 803.484037][ T8776] usb 5-1: USB disconnect, device number 29 [ 803.614691][ T9486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.667651][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 803.693169][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 803.728080][ T9486] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.764972][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 803.791161][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 803.818030][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.825242][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.862050][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 803.889277][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 803.918366][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 803.942350][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.949534][ T4391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.975371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 804.021724][ T8776] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 804.040307][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 804.085063][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 804.116534][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 804.142836][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 804.175315][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 804.189702][ T8776] usb 4-1: device descriptor read/64, error -71 [ 804.217849][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 804.254371][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 804.282118][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 804.301035][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 804.320532][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 804.342824][ T9486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 804.471705][ T8776] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 804.481663][ T3654] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 804.631782][ T8776] usb 4-1: device descriptor read/64, error -71 [ 804.722257][ T3654] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.752692][ T3654] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 804.762294][ T8776] usb usb4-port1: attempt power cycle [ 804.781970][ T3654] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 804.791077][ T3654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.833106][ T3654] usb 5-1: config 0 descriptor?? [ 805.182031][ T8776] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 805.211696][ T8587] Bluetooth: hci5: command 0x0419 tx timeout [ 805.493946][ T8776] usb 4-1: device descriptor read/8, error -71 [ 805.689713][ T9573] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 805.699426][ T9573] F2FS-fs (loop4): Unable to read 1th superblock [ 805.706058][ T9573] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 805.715431][ T9573] F2FS-fs (loop4): Unable to read 2th superblock [ 805.774112][ T3654] usb 5-1: USB disconnect, device number 30 [ 805.811688][ T8776] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 805.812615][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 806.844149][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 806.863523][ T9486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.923102][ T8776] usb 4-1: device descriptor read/8, error -71 [ 807.048628][ T8776] usb usb4-port1: unable to enumerate USB device [ 807.781795][ T8776] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 807.984002][ T8776] usb 5-1: Using ep0 maxpacket: 32 [ 807.997005][ T8776] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 808.170317][ T8776] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 808.294367][ T8776] usb 5-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 808.455494][ T8776] usb 5-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 808.494833][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.501225][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.563183][ T8776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.866435][ T8776] usb 5-1: Product: syz [ 810.877841][ T8776] usb 5-1: Manufacturer: syz [ 810.882857][ T8776] usb 5-1: SerialNumber: syz [ 810.925380][ T8776] usb 5-1: can't set config #6, error -71 [ 810.957182][ T8776] usb 5-1: USB disconnect, device number 31 [ 811.064742][ T53] block nbd2: Possible stuck request ffff8880256e8000: control (read@0,512B). Runtime 30 seconds [ 812.571839][ T4316] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 812.792983][ T4316] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.810455][ T4316] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 812.833908][ T4316] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 814.285124][ T4316] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 814.286356][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 814.303785][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 814.326715][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 814.341570][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.349623][ T4316] usb 5-1: Product: syz [ 814.350072][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 814.379690][ T9486] device veth0_vlan entered promiscuous mode [ 814.382024][ T4316] usb 5-1: Manufacturer: syz [ 814.397666][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 814.400899][ T4316] usb 5-1: SerialNumber: syz [ 814.411374][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 814.426713][ T4316] usb 5-1: Found UVC 1.00 device syz (046d:0821) [ 814.449482][ T4316] usb 5-1: No streaming interface found for terminal 2. [ 814.459006][ T9486] device veth1_vlan entered promiscuous mode [ 814.521131][ T4316] usb 5-1: USB disconnect, device number 32 [ 814.543003][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 814.561944][ T3654] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 814.581152][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 814.609562][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 814.632100][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 814.653939][ T9486] device veth0_macvtap entered promiscuous mode [ 814.667471][ T9486] device veth1_macvtap entered promiscuous mode [ 814.731672][ T3654] usb 6-1: device descriptor read/64, error -71 [ 815.008428][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.048444][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.081590][ T3654] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 815.098007][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.118738][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.139634][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.162337][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.185935][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.206877][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.227519][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.252847][ T3654] usb 6-1: device descriptor read/64, error -71 [ 815.258705][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.282085][ T9486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.289474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 815.320157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 815.329009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 815.348330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 815.372452][ T3654] usb usb6-port1: attempt power cycle [ 815.391706][ T127] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 815.407291][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.431737][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.451735][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.481514][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.501578][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.516129][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.530476][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.543942][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.559740][ T9486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.572995][ T9486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.584907][ T9486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.591954][ T127] usb 2-1: Using ep0 maxpacket: 8 [ 815.597479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 815.607208][ T127] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.628401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 815.644033][ T127] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 815.665503][ T9486] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.666260][ T127] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 815.689800][ T9486] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.709576][ T127] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 815.718611][ T9486] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.741315][ T127] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 815.743823][ T9486] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.779474][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.791635][ T3654] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 815.829419][ T127] hub 2-1:1.0: bad descriptor, ignoring hub [ 815.836458][ T3654] usb 6-1: device descriptor read/8, error -71 [ 815.851661][ T127] hub: probe of 2-1:1.0 failed with error -5 [ 815.883182][ T127] cdc_wdm 2-1:1.0: skipping garbage [ 815.888499][ T127] cdc_wdm 2-1:1.0: skipping garbage [ 815.939006][ T127] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 815.969362][ T127] cdc_wdm 2-1:1.0: Unknown control protocol [ 816.031175][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.049005][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.077284][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 816.123975][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.198020][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.461892][ T4985] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 817.009795][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 817.102123][ T4482] usb 2-1: USB disconnect, device number 23 [ 817.162365][ T4985] usb 4-1: Using ep0 maxpacket: 32 [ 817.169851][ T4985] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 817.193775][ T4985] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 817.218351][ T4985] usb 4-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 817.265058][ T4985] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 817.286876][ T4985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.307126][ T4985] usb 4-1: Product: syz [ 817.311357][ T4985] usb 4-1: Manufacturer: syz [ 817.337477][ T4985] usb 4-1: SerialNumber: syz [ 817.370201][ T4985] usb 4-1: Fast Track Pro config OK [ 817.437393][ T9655] ieee802154 phy0 wpan0: encryption failed: -22 [ 817.558706][ T9643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.217493][ T9643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.148547][ T4985] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 820.156610][ T4985] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 820.164593][ T4985] usb 4-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 820.207513][ T4985] usb 4-1: 0:2 : does not exist [ 820.231637][ T4985] usb 4-1: unit 5 not found! [ 820.236368][ T4985] usb 4-1: unit 6 not found! [ 820.511965][ T4985] usb 4-1: USB disconnect, device number 35 [ 820.863764][ T9469] udevd[9469]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 820.888391][ T4985] kernel write not supported for file /sequencer2 (pid: 4985 comm: kworker/1:9) [ 822.901601][ T4985] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 823.061583][ T4985] usb 5-1: device descriptor read/64, error -71 [ 824.115001][ T4985] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 824.331629][ T4985] usb 5-1: device descriptor read/64, error -71 [ 826.074897][ T4985] usb usb5-port1: attempt power cycle [ 829.301707][ T4985] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 829.481597][ T4985] usb 4-1: Using ep0 maxpacket: 32 [ 829.492931][ T4985] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 829.513516][ T4985] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 829.537522][ T4985] usb 4-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 829.636263][ T4985] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 829.795862][ T4985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.925882][ T4985] usb 4-1: Product: syz [ 829.982961][ T4985] usb 4-1: Manufacturer: syz [ 830.052143][ T4985] usb 4-1: SerialNumber: syz [ 830.260253][ T4985] usb 4-1: Fast Track Pro config OK [ 830.420372][ T9730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.474075][ T9730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.755125][ T9745] fuse: Bad value for 'group_id' [ 831.619134][ T4985] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 831.650273][ T4985] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 831.708441][ T4985] usb 4-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 831.771756][ T4985] usb 4-1: 0:2 : does not exist [ 831.776724][ T4985] usb 4-1: unit 5 not found! [ 831.856063][ T4985] usb 4-1: unit 6 not found! [ 831.944618][ T4985] usb 4-1: USB disconnect, device number 36 [ 833.297069][ T9469] udevd[9469]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 833.411591][ T8776] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 834.101823][ T8776] usb 5-1: device descriptor read/64, error -71 [ 834.372153][ T8776] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 834.571683][ T8776] usb 5-1: device descriptor read/64, error -71 [ 834.665772][ T9771] tipc: Failed to remove unknown binding: 66,0,0/0:1277046028/1277046030 [ 834.693792][ T8776] usb usb5-port1: attempt power cycle [ 834.982017][ T4316] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 835.301804][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 835.317997][ T4316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 835.585473][ T4316] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 835.783832][ T4316] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 835.861533][ T4316] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 835.937492][ T4316] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 835.981666][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.043246][ T4316] hub 4-1:1.0: bad descriptor, ignoring hub [ 836.049238][ T4316] hub: probe of 4-1:1.0 failed with error -5 [ 836.077499][ T4316] cdc_wdm 4-1:1.0: skipping garbage [ 836.087546][ T4316] cdc_wdm 4-1:1.0: skipping garbage [ 837.126240][ T4316] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 837.132374][ T4316] cdc_wdm 4-1:1.0: Unknown control protocol [ 838.732071][ T3654] usb 4-1: USB disconnect, device number 37 [ 840.681628][ T4316] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 841.352374][ T53] block nbd2: Possible stuck request ffff8880256e8000: control (read@0,512B). Runtime 60 seconds [ 841.531598][ T4316] usb 5-1: Using ep0 maxpacket: 32 [ 841.538878][ T4316] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 841.585128][ T4316] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 842.441328][ T4316] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 842.466786][ T4316] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 842.480590][ T4316] usb 5-1: Product: syz [ 842.496111][ T4316] usb 5-1: Manufacturer: syz [ 844.862716][ T4316] usb 5-1: USB disconnect, device number 39 [ 845.765192][ T9862] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1458'. [ 846.791822][ T9868] program syz.5.1461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 847.392213][ T9868] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 848.250060][ T9873] fuse: Bad value for 'rootmode' [ 850.655532][ T26] audit: type=1326 audit(1787523759.686:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.4.1467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd63899e0d9 code=0x0 [ 858.765654][ T9925] fuse: Unknown parameter 'use00000000000000000000' [ 860.041601][ T4323] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 860.151660][ T27] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 860.233326][ T4323] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 860.251506][ T4323] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.262307][ T4323] usb 5-1: config 0 has no interface number 0 [ 860.268519][ T4323] usb 5-1: config 0 interface 214 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 860.294515][ T4323] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 860.321578][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 860.350047][ T4323] usb 5-1: Manufacturer: syz [ 860.360175][ T4323] usb 5-1: SerialNumber: syz [ 860.365537][ T27] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.381500][ T27] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 860.386194][ T4323] usb 5-1: config 0 descriptor?? [ 860.440501][ T27] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 860.470808][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.714047][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 860.734633][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 862.810991][ T27] DVB: Unable to find symbol stv0299_attach() [ 863.180630][ T4985] usb 5-1: USB disconnect, device number 40 [ 863.769566][ T27] DVB: Unable to find symbol tda8083_attach() [ 863.781048][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 863.923021][ T27] usb 7-1: USB disconnect, device number 2 [ 865.453463][ T9968] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.513811][ T26] audit: type=1326 audit(1787523774.546:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.3.1482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed3879e0d9 code=0x0 [ 868.811808][ T3654] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 868.979631][T10007] sctp_transport_update_pmtu: 106 callbacks suppressed [ 868.979677][T10007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 869.028428][T10007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 869.039602][T10007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 869.050551][T10007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 869.064582][T10007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 869.076369][T10007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 869.097699][ T3654] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.130466][T10007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 869.142453][T10007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 869.154280][T10007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 869.165667][T10007] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 869.245389][ T3654] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 869.406321][ T3654] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 869.614294][ T3654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.846444][ T3654] usb 2-1: config 0 descriptor?? [ 870.092097][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.098592][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.544244][ T27] usb 2-1: USB disconnect, device number 24 [ 871.751604][ T3654] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 871.929216][T10027] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.978617][ T53] block nbd2: Possible stuck request ffff8880256e8000: control (read@0,512B). Runtime 90 seconds [ 872.246029][ T3654] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 872.362031][ T3654] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.372314][ T3654] usb 7-1: config 0 has no interface number 0 [ 872.378461][ T3654] usb 7-1: config 0 interface 214 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 872.977253][ T3654] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 872.991580][ T3654] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 872.999887][ T3654] usb 7-1: Manufacturer: syz [ 873.005440][ T3654] usb 7-1: SerialNumber: syz [ 873.052656][ T3654] usb 7-1: config 0 descriptor?? [ 875.287595][ T4316] usb 7-1: USB disconnect, device number 3 [ 875.457976][ T26] audit: type=1326 audit(1787523784.486:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10054 comm="syz.3.1508" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed3879e0d9 code=0x0 [ 876.461566][ T4316] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 876.490183][T10071] sctp_transport_update_pmtu: 48 callbacks suppressed [ 876.490201][T10071] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 876.542240][T10071] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 876.553463][T10071] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 876.564558][T10071] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 876.578307][T10071] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 876.590144][T10071] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 876.629284][T10071] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 876.640756][T10071] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 876.654964][T10071] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 876.666893][T10071] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 877.124069][ T4316] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.353615][ T4316] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 877.471601][ T4316] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 877.495564][ T4316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.526696][ T4316] usb 7-1: config 0 descriptor?? [ 882.151409][ T27] usb 7-1: USB disconnect, device number 4 [ 882.761566][ T4316] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 883.012794][ T4316] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 883.021072][ T4316] usb 6-1: config 0 has no interface number 0 [ 883.168342][ T4316] usb 6-1: config 0 interface 214 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 883.210319][ T4316] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 883.235741][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 883.591331][ T4316] usb 6-1: Manufacturer: syz [ 883.611743][ T4316] usb 6-1: SerialNumber: syz [ 883.623505][ T4316] usb 6-1: config 0 descriptor?? [ 885.550351][T10139] ieee802154 phy0 wpan0: encryption failed: -22 [ 885.773196][ T4316] usb 6-1: USB disconnect, device number 20 [ 889.082835][T10163] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 889.099201][ T4534] Bluetooth: hci6: Frame reassembly failed (-84) [ 891.133453][ T8587] Bluetooth: hci6: command 0x1003 tx timeout [ 891.140092][ T4272] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 894.703239][T10216] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 895.033797][T10219] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 895.182009][ T4347] Bluetooth: hci6: Frame reassembly failed (-84) [ 897.143143][ T4276] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 897.143207][ T4272] Bluetooth: hci6: command 0x1003 tx timeout [ 898.204630][T10243] fuse: Unknown parameter 'user_i00000000000000000000' [ 899.241557][ T4985] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 900.421693][ T4985] usb 5-1: Using ep0 maxpacket: 32 [ 900.429408][ T4985] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 900.469242][ T4985] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 900.498773][ T4985] usb 5-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 901.360555][ T4985] usb 5-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 901.380573][ T4985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.388976][ T4985] usb 5-1: Product: syz [ 901.413535][ T4985] usb 5-1: can't set config #6, error -71 [ 901.420924][ T4985] usb 5-1: USB disconnect, device number 41 [ 902.609086][ T53] block nbd2: Possible stuck request ffff8880256e8000: control (read@0,512B). Runtime 120 seconds [ 903.022156][T10277] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 903.236268][ T4330] Bluetooth: hci7: Frame reassembly failed (-84) [ 904.258210][T10284] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 904.574275][ T4985] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 904.869293][ T8587] Bluetooth: hci6: command 0xfc11 tx timeout [ 904.879191][ T4276] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 904.975414][ T4985] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 904.990400][ T4985] usb 2-1: config 0 has no interface number 0 [ 904.997866][ T4985] usb 2-1: config 0 interface 214 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 905.020548][ T4985] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 905.041135][ T4985] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 905.060556][ T4985] usb 2-1: Manufacturer: syz [ 905.070681][ T4985] usb 2-1: SerialNumber: syz [ 905.085608][ T4985] usb 2-1: config 0 descriptor?? [ 905.639111][T10296] fuse: Unknown parameter 'user_id00000000000000000000' [ 906.468102][ T4276] Bluetooth: hci7: command 0x1003 tx timeout [ 906.469563][ T4272] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 908.060186][ T4323] usb 2-1: USB disconnect, device number 25 [ 909.322878][ T4316] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 909.511666][ T4316] usb 5-1: Using ep0 maxpacket: 32 [ 909.522571][ T4316] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 909.571579][ T4316] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 909.601205][ T4316] usb 5-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 910.153270][ T4316] usb 5-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 910.168781][T10323] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.220202][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.262591][ T4316] usb 5-1: Product: syz [ 910.275859][T10327] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 910.286235][ T4316] usb 5-1: Manufacturer: syz [ 910.291194][ T4316] usb 5-1: SerialNumber: syz [ 910.327275][ T4316] usb 5-1: Fast Track Pro config OK [ 910.509810][T10311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.529881][T10311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.135732][T10336] fuse: Unknown parameter 'user_id00000000000000000000' [ 912.051668][ T4985] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 912.089460][ T4316] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 912.107364][ T4316] usb 5-1: 1:1 : format type 0 is detected, processed as PCM [ 912.141485][ T4316] usb 5-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 912.219740][T10342] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 912.413124][ T8587] Bluetooth: hci6: command 0xfc11 tx timeout [ 912.427399][ T4272] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 912.436718][ T4316] usb 5-1: 0:2 : does not exist [ 912.444730][ T4316] usb 5-1: unit 5 not found! [ 912.453199][ T9446] Bluetooth: hci7: Frame reassembly failed (-84) [ 912.459671][ T4316] usb 5-1: unit 6 not found! [ 912.516673][ T4316] usb 5-1: USB disconnect, device number 42 [ 912.561559][ T4985] usb 2-1: Using ep0 maxpacket: 8 [ 912.568865][ T4985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.584563][ T4985] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 912.599391][ T4985] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.609707][ T4985] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 912.619505][ T4985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.634985][ T4985] hub 2-1:1.0: bad descriptor, ignoring hub [ 912.641142][ T4985] hub: probe of 2-1:1.0 failed with error -5 [ 912.647874][ T4985] cdc_wdm 2-1:1.0: skipping garbage [ 912.653362][ T4985] cdc_wdm 2-1:1.0: skipping garbage [ 912.658729][ T4985] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 913.159760][ T4985] usb 2-1: USB disconnect, device number 26 [ 913.251538][ T4316] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 913.412195][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 913.449418][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 913.480325][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 913.508941][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 913.521555][ T27] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 913.585066][ T4316] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 913.603790][ T4316] usb 5-1: config 0 has no interface number 0 [ 913.631919][ T4316] usb 5-1: config 0 interface 214 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 913.654257][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 913.665863][ T4316] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 913.700287][T10352] sctp_transport_update_pmtu: 48 callbacks suppressed [ 913.700304][T10352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 913.707940][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 913.721868][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 913.752411][T10352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 913.766299][ T27] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 913.773586][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 913.782176][ T4316] usb 5-1: Manufacturer: syz [ 913.786954][ T4316] usb 5-1: SerialNumber: syz [ 913.794171][ T27] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 913.814643][ T4316] usb 5-1: config 0 descriptor?? [ 913.815520][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.834603][T10352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 913.848171][ T27] usb 4-1: Product: syz [ 913.855806][ T27] usb 4-1: Manufacturer: syz [ 913.860456][ T27] usb 4-1: SerialNumber: syz [ 913.870865][T10352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 913.883104][T10344] udevd[10344]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 913.909937][ T27] usb 4-1: config 0 descriptor?? [ 913.935520][ T27] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 913.957367][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 913.998813][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 914.026156][T10352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 914.051976][ T27] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 914.066424][ T27] usb 4-1: media controller created [ 914.075041][T10355] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 914.075979][T10352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 914.102725][T10352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 914.122364][T10352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 914.165654][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 914.191971][T10360] cxusb: i2c wr: len=92 is too big! [ 914.191971][T10360] [ 914.202566][T10352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 914.219069][T10352] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 914.286172][ T27] usb 4-1: selecting invalid altsetting 7 [ 914.295831][ T27] cxusb: set interface failed [ 914.300569][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 914.440072][ T27] DVB: Unable to find symbol lgdt330x_attach() [ 914.455464][ T27] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 914.491690][ T4276] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 917.811135][ T27] rc_core: IR keymap rc-dvico-portable not found [ 917.845590][ T27] Registered IR keymap rc-empty [ 917.924012][ T4323] usb 5-1: USB disconnect, device number 43 [ 917.932220][ T27] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 918.043180][ T27] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input17 [ 918.076080][T10382] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 918.112010][ T27] dvb-usb: schedule remote query interval to 100 msecs. [ 918.134309][ T27] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 918.176053][ T27] usb 4-1: USB disconnect, device number 38 [ 918.696193][T10387] fuse: Unknown parameter 'user_id00000000000000000000' [ 919.583080][ T4318] dvb-usb: bulk message failed: -22 (1/0) [ 919.803265][ T27] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 919.861834][ T3654] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 920.191726][ T3654] usb 7-1: Using ep0 maxpacket: 32 [ 920.213124][ T3654] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 920.550570][ T3654] usb 7-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 920.559987][ T3654] usb 7-1: config 6 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 920.579345][ T3654] usb 7-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 920.659522][ T3654] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.697657][ T3654] usb 7-1: Product: syz [ 920.702257][ T3654] usb 7-1: Manufacturer: syz [ 920.706898][ T3654] usb 7-1: SerialNumber: syz [ 920.757180][ T3654] usb 7-1: Fast Track Pro config OK [ 920.954362][T10404] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 921.046323][ T4330] Bluetooth: hci6: Frame reassembly failed (-84) [ 921.194577][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.508873][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.051696][ T4272] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 923.274252][ T3654] usb 7-1: 1:1 : no or invalid class specific endpoint descriptor [ 923.291253][ T3654] usb 7-1: 1:1 : format type 0 is detected, processed as PCM [ 923.311388][ T3654] usb 7-1: 1:1 : sample bitwidth 177 in over sample bytes 4 [ 923.335791][ T3654] usb 7-1: 0:2 : does not exist [ 923.341084][ T3654] usb 7-1: unit 5 not found! [ 923.346245][ T3654] usb 7-1: unit 6 not found! [ 923.416744][ T3654] usb 7-1: USB disconnect, device number 5 [ 923.463365][T10300] udevd[10300]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:6.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 925.034902][ T4272] Bluetooth: hci5: command 0x0406 tx timeout [ 925.205962][ T26] audit: type=1326 audit(1787523834.226:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10421 comm="syz.4.1601" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd63899e0d9 code=0x0 [ 925.317647][T10436] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 926.512050][ T27] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 927.071347][ T27] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 927.154132][ T27] usb 4-1: config 0 has no interface number 0 [ 928.006353][ T27] usb 4-1: config 0 interface 214 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 928.070507][ T27] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 928.100079][ T27] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 928.140724][ T27] usb 4-1: Manufacturer: syz [ 928.159872][ T27] usb 4-1: SerialNumber: syz [ 928.173973][ T27] usb 4-1: config 0 descriptor?? [ 929.190955][ T4323] usb 4-1: USB disconnect, device number 39 [ 929.200864][T10450] ieee802154 phy0 wpan0: encryption failed: -22 [ 929.382774][T10467] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 929.505616][ T4571] Bluetooth: hci6: Frame reassembly failed (-84) [ 931.384806][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.394797][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.506555][T10483] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 931.531638][ T4272] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 931.538470][ T4286] Bluetooth: hci6: command 0x1003 tx timeout [ 931.893616][ T26] audit: type=1326 audit(1787523840.926:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10490 comm="syz.6.1624" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa11e79e0d9 code=0x0 [ 932.684094][ T53] block nbd2: Possible stuck request ffff8880256e8000: control (read@0,512B). Runtime 150 seconds [ 932.751529][ T3654] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 933.801502][ T3654] usb 4-1: Using ep0 maxpacket: 32 [ 933.808822][ T3654] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 933.850008][ T3654] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 933.859988][ T4272] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 933.867880][ T4286] Bluetooth: hci6: command 0xfc11 tx timeout [ 933.891862][ T3654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.900004][ T3654] usb 4-1: Product: syz [ 933.920327][ T3654] usb 4-1: Manufacturer: syz [ 933.925646][ T3654] usb 4-1: SerialNumber: syz [ 933.940863][ T3654] usb 4-1: config 0 descriptor?? [ 933.953035][ T3654] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 933.965761][ T3654] dvb-usb: bulk message failed: -22 (2/0) [ 933.983053][ T3654] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 934.001068][ T3654] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 934.020534][ T3654] usb 4-1: media controller created [ 934.075923][ T3654] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 934.127830][ T3654] usb 4-1: selecting invalid altsetting 7 [ 934.146055][ T3654] cxusb: set interface failed [ 934.170834][ T3654] dvb-usb: bulk message failed: -22 (1/0) [ 934.390566][ T3654] DVB: Unable to find symbol lgdt330x_attach() [ 934.397458][ T3654] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 934.616006][ T3654] rc_core: IR keymap rc-dvico-portable not found [ 934.632689][ T3654] Registered IR keymap rc-empty [ 934.649247][ T3654] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 934.683469][ T3654] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input18 [ 934.712627][ T3654] dvb-usb: schedule remote query interval to 100 msecs. [ 934.729832][ T3654] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 934.776469][ T3654] usb 4-1: USB disconnect, device number 40 [ 934.834353][ T3654] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 935.844260][T10524] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 936.225943][T10534] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 936.238038][ T4407] Bluetooth: hci6: Frame reassembly failed (-84) [ 936.337606][ T4318] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 936.701558][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 936.708511][ T4318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.759554][ T4318] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 936.811674][ T4318] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.851338][ T4318] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 936.969351][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.040525][ T4318] hub 4-1:1.0: bad descriptor, ignoring hub [ 937.091028][ T4318] hub: probe of 4-1:1.0 failed with error -5 [ 937.109307][ T4318] cdc_wdm 4-1:1.0: skipping garbage [ 937.182614][ T4318] cdc_wdm 4-1:1.0: skipping garbage [ 937.231665][ T4318] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 938.370412][ T4286] Bluetooth: hci6: command 0x1003 tx timeout [ 938.378562][ T4272] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 938.671561][ T28] INFO: task syz.2.1340:9335 blocked for more than 144 seconds. [ 938.679274][ T28] Not tainted syzkaller #0 [ 938.684806][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 938.694077][ T28] task:syz.2.1340 state:D stack:26112 pid:9335 ppid:4278 flags:0x00004004 [ 938.703607][ T28] Call Trace: [ 938.707016][ T28] [ 938.710035][ T28] __schedule+0x107f/0x4030 [ 938.714769][ T28] ? release_firmware_map_entry+0x187/0x187 [ 938.739414][ T28] schedule+0xb9/0x180 [ 938.761525][ T28] schedule_timeout+0xbd/0x2d0 [ 938.766361][ T28] ? console_conditional_schedule+0x40/0x40 [ 938.781304][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 938.787637][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 938.800458][ T28] ? lock_chain_count+0x20/0x20 [ 938.806231][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 938.811402][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 938.818078][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 938.828643][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 938.853578][ T4323] usb 4-1: USB disconnect, device number 41 [ 938.871884][ T28] ? wait_for_completion+0x26f/0x590 [ 938.877559][ T28] wait_for_completion+0x2c2/0x590 [ 938.884023][ T28] ? io_schedule+0xd0/0xd0 [ 938.900061][ T28] ? __xfs_buf_submit+0x40c/0x860 [ 938.912767][ T28] ? __xfs_buf_submit+0x40c/0x860 [ 938.918117][ T28] xfs_buf_iowait+0xc8/0x4d0 [ 938.923478][ T28] __xfs_buf_submit+0x40c/0x860 [ 938.928705][ T28] xfs_buf_read_uncached+0x15d/0x230 [ 938.935006][ T28] xfs_readsb+0x172/0x650 [ 938.940130][ T28] ? xfs_sb_validate_fsb_count+0x80/0x80 [ 938.946482][ T28] xfs_fs_fill_super+0x5d3/0x1350 [ 938.953390][ T28] get_tree_bdev+0x3e6/0x610 [ 938.958466][ T28] ? xfs_mount_set_dax_mode+0x100/0x100 [ 938.964720][ T28] vfs_get_tree+0x88/0x270 [ 938.969510][ T28] do_new_mount+0x247/0xa40 [ 938.989778][ T28] __se_sys_mount+0x2e3/0x3d0 [ 938.995257][ T28] ? __x64_sys_mount+0xc0/0xc0 [ 939.001957][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 939.007545][ T28] ? __x64_sys_mount+0x1c/0xc0 [ 939.027432][ T28] do_syscall_64+0x4c/0xa0 [ 939.032595][ T28] ? clear_bhb_loop+0x60/0xb0 [ 939.039704][ T28] ? clear_bhb_loop+0x60/0xb0 [ 939.046445][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.066669][ T28] RIP: 0033:0x7f0ebef9e0d9 [ 939.074970][ T28] RSP: 002b:00007f0ebfe13028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 939.102393][ T28] RAX: ffffffffffffffda RBX: 00007f0ebf225fa0 RCX: 00007f0ebef9e0d9 [ 939.110728][ T28] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000080 [ 939.119494][ T28] RBP: 00007f0ebf035024 R08: 0000000000000000 R09: 0000000000000000 [ 939.131181][ T28] R10: 000000000281841d R11: 0000000000000246 R12: 0000000000000000 [ 939.167870][ T28] R13: 00007f0ebf226038 R14: 00007f0ebf225fa0 R15: 00007fff306d8518 [ 939.176490][ T28] [ 939.179824][ T28] [ 939.179824][ T28] Showing all locks held in the system: [ 939.188443][ T28] 1 lock held by rcu_tasks_kthre/12: [ 939.194243][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 939.205310][ T28] 1 lock held by rcu_tasks_trace/13: [ 939.210877][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 939.225134][ T28] 3 locks held by kworker/1:1/27: [ 939.240301][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 939.292512][ T28] #1: ffff8880b8f27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x36b/0x740 [ 939.304360][ T28] #2: ffffffff8cb2dc20 (rcu_read_lock_sched){....}-{1:2}, at: __virt_addr_valid+0x188/0x540 [ 939.314852][ T28] 1 lock held by khungtaskd/28: [ 939.319828][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 939.329995][ T28] 4 locks held by klogd/3627: [ 939.334825][ T28] #0: ffff8880b8e3ad18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x98/0x130 [ 939.345225][ T28] #1: ffff888025bb9258 (&ei->socket.wq.wait){..-.}-{2:2}, at: psi_task_switch+0x400/0x740 [ 939.364497][ T28] #2: ffff88807d44c618 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x5a/0x10b0 [ 939.393713][ T28] #3: ffffffff96e7bce0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x68/0x4f0 [ 939.406536][ T28] 2 locks held by getty/4029: [ 939.411488][ T28] #0: ffff88802fb2c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 939.421749][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 939.432277][ T28] 2 locks held by kworker/u4:15/6967: [ 939.441679][ T28] 1 lock held by syz.2.1340/9335: [ 939.446888][ T28] #0: ffff8880235580e0 (&type->s_umount_key#64/1){+.+.}-{3:3}, at: alloc_super+0x1fb/0x930 [ 939.457338][ T28] 1 lock held by syz.4.1640/10545: [ 939.470923][ T28] [ 939.475338][ T28] ============================================= [ 939.475338][ T28] [ 939.484613][ T28] NMI backtrace for cpu 1 [ 939.488998][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 939.496232][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 939.506326][ T28] Call Trace: [ 939.509641][ T28] [ 939.512604][ T28] dump_stack_lvl+0x188/0x24e [ 939.517333][ T28] ? irq_work_queue+0xb8/0x140 [ 939.522252][ T28] ? show_regs_print_info+0x12/0x12 [ 939.527504][ T28] ? load_image+0x410/0x410 [ 939.532053][ T28] ? vprintk_emit+0x59f/0x6a0 [ 939.536824][ T28] ? printk_sprint+0x460/0x460 [ 939.541759][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 939.546767][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 939.552951][ T28] ? _printk+0xda/0x130 [ 939.557128][ T28] ? load_image+0x410/0x410 [ 939.561653][ T28] ? load_image+0x410/0x410 [ 939.566189][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 939.572290][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 939.578394][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 939.584421][ T28] watchdog+0xf0e/0xf50 [ 939.588607][ T28] ? watchdog+0x1ed/0xf50 [ 939.592972][ T28] kthread+0x29d/0x330 [ 939.597061][ T28] ? hungtask_pm_notify+0x40/0x40 [ 939.602109][ T28] ? kthread_blkcg+0xd0/0xd0 [ 939.606718][ T28] ret_from_fork+0x1f/0x30 [ 939.611194][ T28] [ 939.615943][ T28] Sending NMI from CPU 1 to CPUs 0: [ 939.621227][ C0] NMI backtrace for cpu 0 [ 939.621237][ C0] CPU: 0 PID: 6967 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 939.621254][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 939.621265][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 939.621368][ C0] RIP: 0010:stack_trace_consume_entry+0x28/0x270 [ 939.621429][ C0] Code: 08 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00 00 00 00 fc ff df 4c 8d 47 10 4c 89 c5 48 c1 ed 03 0f b6 44 15 00 <84> c0 0f 85 04 01 00 00 44 8b 4f 10 4c 8d 77 08 4d 89 f5 49 c1 ed [ 939.621474][ C0] RSP: 0018:ffffc9000c53f6f8 EFLAGS: 00000a02 [ 939.621488][ C0] RAX: 0000000000000000 RBX: ffffc9000c53f800 RCX: dffffc0000000000 [ 939.621502][ C0] RDX: dffffc0000000000 RSI: ffffffff8170d8d6 RDI: ffffc9000c53f800 [ 939.621516][ C0] RBP: 1ffff920018a7f02 R08: ffffc9000c53f810 R09: ffffc9000c53f798 [ 939.621531][ C0] R10: dffffc0000000000 R11: fffff520018a7ef5 R12: ffff88802c4c8000 [ 939.621545][ C0] R13: 00000000ffffffff R14: ffffffff8170d920 R15: ffffc9000c53f748 [ 939.621559][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 939.621576][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.621589][ C0] CR2: 00007fd638bed158 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 939.621606][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 939.621616][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 939.621628][ C0] Call Trace: [ 939.621633][ C0] [ 939.621638][ C0] ? stack_trace_save+0xa6/0xf0 [ 939.621664][ C0] ? stack_trace_save+0xf0/0xf0 [ 939.621687][ C0] arch_stack_walk+0x100/0x140 [ 939.621721][ C0] ? stack_trace_save+0xa6/0xf0 [ 939.621746][ C0] stack_trace_save+0xa6/0xf0 [ 939.621769][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 939.621791][ C0] ? __kasan_slab_alloc+0x6b/0x80 [ 939.621837][ C0] ? slab_post_alloc_hook+0x4b/0x490 [ 939.621855][ C0] ? kmem_cache_alloc_node+0x1ad/0x310 [ 939.621873][ C0] ? __alloc_skb+0xf9/0x7d0 [ 939.621901][ C0] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 939.621926][ C0] ? memset+0x1e/0x40 [ 939.621961][ C0] kasan_set_track+0x4b/0x70 [ 939.622005][ C0] ? __kmem_cache_alloc_node+0x19d/0x270 [ 939.622024][ C0] __kasan_kmalloc+0x8e/0xa0 [ 939.622047][ C0] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 939.622070][ C0] __kmalloc_node_track_caller+0xb0/0x240 [ 939.622137][ C0] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 939.622160][ C0] __alloc_skb+0x226/0x7d0 [ 939.622185][ C0] nsim_dev_trap_report_work+0x24f/0xa80 [ 939.622213][ C0] ? process_one_work+0x7b4/0x1160 [ 939.622234][ C0] process_one_work+0x8ab/0x1160 [ 939.622259][ C0] ? worker_detach_from_pool+0x240/0x240 [ 939.622281][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 939.622302][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 939.622323][ C0] ? wq_worker_running+0x97/0x190 [ 939.622371][ C0] worker_thread+0xaf5/0x12a0 [ 939.622398][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 939.622430][ C0] kthread+0x29d/0x330 [ 939.622443][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 939.622462][ C0] ? kthread_blkcg+0xd0/0xd0 [ 939.622477][ C0] ret_from_fork+0x1f/0x30 [ 939.622506][ C0] [ 939.659870][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 939.659907][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 939.659968][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 939.660014][ T28] Call Trace: [ 939.660032][ T28] [ 939.660051][ T28] dump_stack_lvl+0x188/0x24e [ 939.660125][ T28] ? memcpy+0x3c/0x60 [ 939.660180][ T28] ? show_regs_print_info+0x12/0x12 [ 939.660241][ T28] ? load_image+0x410/0x410 [ 939.660328][ T28] panic+0x2d3/0x710 [ 939.660379][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 939.660465][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 939.660521][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 939.660672][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 939.660792][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 939.660884][ T28] watchdog+0xf4d/0xf50 [ 939.660961][ T28] ? watchdog+0x1ed/0xf50 [ 939.661044][ T28] kthread+0x29d/0x330 [ 939.661094][ T28] ? hungtask_pm_notify+0x40/0x40 [ 939.661156][ T28] ? kthread_blkcg+0xd0/0xd0 [ 939.661216][ T28] ret_from_fork+0x1f/0x30 [ 939.661312][ T28] [ 939.677936][ T28] Kernel Offset: disabled [ 940.047658][ T28] Rebooting in 86400 seconds..