last executing test programs: 29.149067851s ago: executing program 1 (id=1124): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "184194", 0x44, 0x6, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x1, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x7, 0x0, 0x3, 0x9, 0x3, 0x1, 0x3, 0x9, 0x3, 0x4e20, 0x4e20}, 0x3, 0x4}, 0x2}, 0x4}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x4001) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x240048c5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) r3 = syz_open_procfs(0x0, 0x0) write$USERIO_CMD_REGISTER(r3, 0x0, 0x0) 28.431540712s ago: executing program 1 (id=1125): prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x6000) shmctl$SHM_UNLOCK(r1, 0xc) 17.313782688s ago: executing program 3 (id=1143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x90000, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x1000) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x3, 0xffffffffffffffff}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x10, 0x3}, {0xf, 0xffff}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) 15.708255463s ago: executing program 3 (id=1146): socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x80001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/144, 0x90}, 0x3}, {{&(0x7f0000000940), 0x80, &(0x7f00000011c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x100}], 0x2, 0x40001023, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) 14.886491166s ago: executing program 1 (id=1148): mkdir(0x0, 0x54) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x315b83, 0x0) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x3, 0x664, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xee, 0xce, 0x10, 0x9022, 0xd630, 0x97a9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x652, 0x4, 0x6, 0x0, 0xc0, 0xc, [{{0x9, 0x4, 0x1c, 0x0, 0x6, 0x35, 0xc2, 0x69, 0x63, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xc023, 0x6, 0xa0}, @as_header={0x7, 0x24, 0x1, 0x0, 0x5, 0x3}]}, @generic={0xa2, 0xe, "a6e0c681e2bd48ae3570ecb50c35ce2ab4aa725178620c5f1fd5585aab6b36057de3b4390b0bdcddf156a60b66351f38515f727b4e8bab6b2777d73bc5c583afffc684f75f4edf92372389c58b3344e528ab51b3f38a71004b9c779be9d16c0ef65f6b6865236fe976e264f06245de006ca85968cd5399573b0e1b4125dc7335caf225bbd0c703502da0f4af943e50eda75cca641236138d923f6cb429e46c8c"}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x10, 0xec, 0x3, [@generic={0x92, 0x21, "c7eb06d07b34fd13ec1fd90497fae21be7cf1d9b7a3eb7ae400a5b3cb1a683b262f98d0bd54405b35dde8b03aa5f5ab3ee13f3f5bffa90420da408bba71dad2d25264c83ea250b780666dfe8bda405d09922e30f28cee0efe8be542d2f11e04ae534475eae5920be0ba9f723892aa8154fbbd16ce82ee776def83ef09efac7a379b032bf4f873fa3d004ae48abbf630f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x3, 0x3, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x1, 0x7, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x10, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x0, 0x6, 0x6, [@generic={0xf5, 0x23, "bae690d72f3c6488768865ba63c31a3899b8d8e0c13622063faeed6816d437249ee42ad10b28a6e4e3e754dd142f055a9dcdc28c3a6f4ff46c50b0ba14d575582dedd7d79047ad72a5bfb7b57fe85a803219b24868c1c35bd8acbb0e11a63b554f1189f504054ca283e7a81540ed7f6e6892034bdfb3c203991c58691cd8df1d9b49519ea4b10e58e58396869006f36e9880a2b85a90b98fa0cb659487a91f336d0333aac92b374e723456fe5ef723d95869c7b47a042d51ba4d0837cfd2a274e26fa4ba6ba0b717588ede1df2cc7e58404c1686318ecdce29585a246a366573adea3f76f3b70c82bcfe824db7f7c040dfdfee"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x628, 0x9, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}]}}, {{0x9, 0x4, 0x4, 0x5, 0x1, 0x84, 0xa0, 0x9a, 0x6, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "79ca75"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xb73, 0x3ff, 0x7}, [@dmm={0x7, 0x24, 0x14, 0xf5fc, 0x80}, @obex={0x5}, @acm={0x4, 0x24, 0x2, 0x3}, @dmm={0x7, 0x24, 0x14, 0xd, 0x7}, @mdlm_detail={0x5f, 0x24, 0x13, 0x8, "c4988a6a19a24b9158224cf65a1c2b798888a03828133b349da8eba330b38cf8d5c99946ee93a26409f2e05ae75c3d27c9b1308d0e439a72719679efc26c67a1373f85934dfc0800773dac5d2481516f93b35fd46189f3bde48515"}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x8, 0x9, 0x7}]}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x19, 0x4, 0xa4}}]}}, {{0x9, 0x4, 0x56, 0x9, 0xa, 0xff, 0x96, 0x46, 0xf8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "e6b8"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5cae, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x3, 0x30}, [@dmm={0x7, 0x24, 0x14, 0xa5, 0x6}, @obex={0x5, 0x24, 0x15, 0x2}, @dmm={0x7, 0x24, 0x14, 0x5, 0x8d}, @dmm={0x7, 0x24, 0x14, 0x400, 0x8}, @dmm={0x7, 0x24, 0x14, 0x7}]}], [{{0x9, 0x5, 0x5, 0x2, 0x440, 0x6, 0x40, 0x9, [@generic={0x16, 0x23, "6689eaf6943f05ae1bc3619df05b8f68c5a60fd9"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x9, 0x7, 0x27}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0x4, 0x8, [@generic={0xfc, 0xd, "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"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x9}, @generic={0xb9, 0x3, "883cc6f6d4c4918c1872d889b6039339738e118cc3c2dcb97dba1d85b4760abb43914c32f14d34e4c1152265c5b9785fe2863dd781a1bd28d2e40df4c576ae3c302d32aaa3b84883e76d275b0f2e10bbe02b93443bc232758fa0adfb01e80f93b28adf3bd2b44f5b3d3df619526aa1ee1d6da1a183ee57410e07e9a25266ae4f824ae8dc43a08d289f2a411f2c8e4cdce1d58f56102afe5aff46f90390d5767a452f6ba724d7a9f7c33f9f211abda94007ef43d34dd59a"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0xff, 0x7, 0x69}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0xe, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x1, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7b, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x80, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x28, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x8}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x4, 0x86, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x70, 0x1}]}}]}}, {{0x9, 0x4, 0xbf, 0x7, 0x2, 0xe0, 0xaa, 0x5e, 0xfb, [@generic={0x2, 0x24}, @uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x1, 0x3, 0x3, "241e9158494c5a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0x2, "9d58cc"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0xa, 0x3, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x9, 0xf, 0xe, [@generic={0x36, 0xe, "a2abdde1729358e3b3ebeddf97f74295e373f958589f3fff2bb4084aa9c341b279eeea145be0f0c53c401b83551e9320ce1d283a"}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xa2, 0x1, 0x9, 0xff, 0xbe}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x480a}}]}) 11.519105459s ago: executing program 1 (id=1151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x86) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rmdir(&(0x7f0000000180)='./file1\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.42554789s ago: executing program 3 (id=1152): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @initr0]}, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000340)={0xf8, 0x1}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.240682105s ago: executing program 3 (id=1157): r0 = socket(0x18, 0x6, 0x200000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newchain={0x74, 0x64, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0x4}, {0xffe0}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xffffff00, 0xffffff00]}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x9}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xff, 0x0, 0xffffffff]}]}}, @TCA_RATE={0x6, 0x5, {0x1c, 0x5}}]}, 0x74}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d5304961) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x410) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = accept4(r2, &(0x7f00000003c0)=@can, &(0x7f0000000440)=0x80, 0x0) sendmsg$nl_generic(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20010}, 0x0) read$msr(r2, &(0x7f00000016c0)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) open$dir(0x0, 0x20000, 0x41) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYBLOB="040005000000000008000500", @ANYRES32=r5, @ANYBLOB="080005", @ANYBLOB="100004000000000020000100"], 0x3c, 0x1) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4", 0x6c}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) 7.924032706s ago: executing program 1 (id=1159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) io_setup(0x10000, &(0x7f0000000800)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)) r4 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x2000, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) socket$inet_mptcp(0x2, 0x1, 0x106) 7.66263779s ago: executing program 3 (id=1161): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548010203010902120001049570810904006641f392"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)=0x101) 7.522836462s ago: executing program 4 (id=1162): socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x80001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/144, 0x90}, 0x3}, {{&(0x7f0000000940), 0x80, &(0x7f00000011c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x100}], 0x2, 0x40001023, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) 7.166156407s ago: executing program 2 (id=1163): socket(0x80000000000000a, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x29, 0x8, 0x0, 0x20b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.289654221s ago: executing program 4 (id=1165): writev(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6.080095965s ago: executing program 4 (id=1166): socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x1c6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=rdma,p']) 5.925351387s ago: executing program 2 (id=1167): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @initr0]}, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000340)={0xf8, 0x1}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.09276146s ago: executing program 0 (id=1168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000043c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) ioctl$SG_IO(r4, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffd, 0x6, 0x68, @buffer={0xfb, 0x8a, &(0x7f0000000500)=""/138}, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x10010, 0x4, 0x0}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) gettid() socket$alg(0x26, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4008000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500ffffffff000000002100000008000300", @ANYRES32=r2, @ANYBLOB="38002d800a00000002020202020202020200000a0000000101010000000000000004000a0000000202020202020000"], 0x54}}, 0x0) 4.993990902s ago: executing program 4 (id=1169): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000010008188040f80f85fcb76f5f586b9483f0000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x5, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0x100b, 0x40, 0x212c, 0x8, 0x8000100, 0x3, 0x0, 0x10, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180003, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xaa000000, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x6, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) syz_usb_connect$uac1(0x0, 0xa5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf", @ANYRES32=r3, @ANYBLOB="801400d09f97cc8143d0a50004210000c4cc783de62f310fe7835b6650ecada2a9b759d4f1ef1df9b2f0fff27764062922d117"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) socket$nl_route(0x10, 0x3, 0x0) 4.988761762s ago: executing program 2 (id=1170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x86) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rmdir(&(0x7f0000000180)='./file1\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.341328822s ago: executing program 3 (id=1171): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioperm(0x2, 0x7, 0x13) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) 4.200926644s ago: executing program 0 (id=1172): r0 = socket(0x18, 0x6, 0x200000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newchain={0x74, 0x64, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0x4}, {0xffe0}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xffffff00, 0xffffff00]}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x9}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xff, 0x0, 0xffffffff]}]}}, @TCA_RATE={0x6, 0x5, {0x1c, 0x5}}]}, 0x74}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d5304961) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x410) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = accept4(r2, &(0x7f00000003c0)=@can, &(0x7f0000000440)=0x80, 0x0) sendmsg$nl_generic(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20010}, 0x0) read$msr(r2, &(0x7f00000016c0)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) open$dir(0x0, 0x20000, 0x41) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYBLOB="040005000000000008000500", @ANYRES32=r5, @ANYBLOB="080005", @ANYBLOB="100004000000000020000100"], 0x3c, 0x1) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4", 0x6c}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) 3.752577271s ago: executing program 2 (id=1173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x24, r1, 0x201, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4884) 3.253416029s ago: executing program 2 (id=1174): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) ptrace(0x11, r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffd75, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) 2.625164699s ago: executing program 0 (id=1175): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0]}, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20000800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000340)={0xf8, 0x1}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.371014363s ago: executing program 1 (id=1176): prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x6000) shmctl$SHM_UNLOCK(r1, 0xc) 2.317467713s ago: executing program 0 (id=1177): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$swradio(&(0x7f0000003900), 0x1, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_LK(r0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.171428782s ago: executing program 0 (id=1178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r10, 0x0, 0x0, r11], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000480)) 1.133186212s ago: executing program 2 (id=1179): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = dup(0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x40, 0x0, 0x100, 0x70bd2c, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40801) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000340)="1e0eb2", 0x3}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) 1.013399734s ago: executing program 4 (id=1180): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @initr0]}, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000340)={0xf8, 0x1}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 622.2131ms ago: executing program 4 (id=1181): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x4}, 0x8) 0s ago: executing program 0 (id=1182): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() timer_create(0x1, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000400)={0x0, 0x0, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x62c3, 0x150) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0xb4, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfff}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xfffffff9}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0xfb}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_VF_PORTS={0x5c, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "2ada9da87c5d678903086c08fd12c999"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3ba6324faa03c6a87bc10cf8673d9938"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "11a6910a0f3e4b5959f4f2e00716140c"}]}]}]}, 0xb4}}, 0x4000010) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYBLOB="019800000000000020001280080001006772650014000280080001", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, 0x0, 0x0, 0x8841, &(0x7f000005ffe4)={0xa, 0x800, 0x6, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x20}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r11, 0x1) recvmmsg(r11, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {}, {0x9, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x81}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) kernel console output (not intermixed with test programs): syz.4.90'. [ 137.490279][ T4280] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.460015][ T4280] usb 4-1: Using ep0 maxpacket: 16 [ 138.467099][ T4280] usb 4-1: config 6 has an invalid interface number: 28 but max is 3 [ 138.500605][ T4280] usb 4-1: config 6 has an invalid interface number: 4 but max is 3 [ 138.508865][ T4280] usb 4-1: config 6 has an invalid interface number: 86 but max is 3 [ 138.666055][ T4280] usb 4-1: config 6 has an invalid interface number: 191 but max is 3 [ 138.683103][ T4280] usb 4-1: config 6 has no interface number 0 [ 138.689444][ T4280] usb 4-1: config 6 has no interface number 1 [ 138.703309][ T4280] usb 4-1: config 6 has no interface number 2 [ 138.716652][ T4280] usb 4-1: config 6 has no interface number 3 [ 138.725409][ T4280] usb 4-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 139.079992][ T126] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 139.484955][ T4280] usb 4-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 139.496163][ T4280] usb 4-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 139.507435][ T4280] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 139.518499][ T4280] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 139.529551][ T4280] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 139.944729][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.968208][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.061054][ T126] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.074191][ T126] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 140.085032][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.095809][ T4280] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 140.250933][ T126] usb 1-1: config 0 descriptor?? [ 140.285294][ T4280] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 140.381574][ T4280] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 140.416187][ T4280] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 140.427690][ T4280] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 140.440414][ T4280] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 140.453325][ T4280] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 141.115525][ T126] ryos 0003:1E7D:3232.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 141.136996][ T4280] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 141.256163][ T4750] netlink: 830 bytes leftover after parsing attributes in process `syz.3.95'. [ 141.747405][ T4280] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 141.773363][ T4280] usb 4-1: config 6 interface 4 has no altsetting 0 [ 141.788043][ T4280] usb 4-1: config 6 interface 86 has no altsetting 0 [ 141.796740][ T4280] usb 4-1: config 6 interface 191 has no altsetting 0 [ 141.816927][ T4280] usb 4-1: string descriptor 0 read error: -71 [ 141.830277][ T4280] usb 4-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 141.839557][ T4280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.864515][ T4280] usb 4-1: can't set config #6, error -71 [ 141.889257][ T4280] usb 4-1: USB disconnect, device number 2 [ 142.205970][ T4332] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 142.569919][ C0] hrtimer: interrupt took 54146 ns [ 142.924657][ T4430] usb 1-1: USB disconnect, device number 5 [ 145.162995][ T4777] netlink: 48 bytes leftover after parsing attributes in process `syz.3.102'. [ 145.724953][ T4777] netlink: 48 bytes leftover after parsing attributes in process `syz.3.102'. [ 145.897500][ T4784] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 145.978000][ T4784] netlink: 830 bytes leftover after parsing attributes in process `syz.4.104'. [ 147.084291][ T4801] netlink: 'syz.2.112': attribute type 21 has an invalid length. [ 147.092608][ T4801] netlink: 'syz.2.112': attribute type 6 has an invalid length. [ 147.100667][ T4801] netlink: 132 bytes leftover after parsing attributes in process `syz.2.112'. [ 147.710932][ T4808] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 147.736126][ T4805] netlink: 84 bytes leftover after parsing attributes in process `syz.0.113'. [ 149.710054][ T126] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.699986][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 150.727243][ T126] usb 3-1: config 6 has an invalid interface number: 28 but max is 3 [ 150.742041][ T126] usb 3-1: config 6 has an invalid interface number: 4 but max is 3 [ 150.788771][ T126] usb 3-1: config 6 has an invalid interface number: 86 but max is 3 [ 150.961372][ T126] usb 3-1: config 6 has an invalid interface number: 191 but max is 3 [ 151.018727][ T126] usb 3-1: config 6 has no interface number 0 [ 151.048428][ T126] usb 3-1: config 6 has no interface number 1 [ 151.059337][ T126] usb 3-1: config 6 has no interface number 2 [ 151.092614][ T126] usb 3-1: config 6 has no interface number 3 [ 151.150957][ T126] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 151.229440][ T126] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 151.354811][ T126] usb 3-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 151.459706][ T126] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 151.520548][ T126] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 151.625268][ T126] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 151.658421][ T126] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 151.705857][ T126] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 151.724751][ T126] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 151.773328][ T126] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 151.845984][ T126] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 151.994646][ T126] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 152.024576][ T126] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 152.116221][ T126] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 152.225191][ T126] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 152.266446][ T4848] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 152.387655][ T4848] netlink: 830 bytes leftover after parsing attributes in process `syz.3.123'. [ 152.701186][ T126] usb 3-1: config 6 interface 4 has no altsetting 0 [ 152.799218][ T126] usb 3-1: config 6 interface 86 has no altsetting 0 [ 153.010101][ T126] usb 3-1: config 6 interface 191 has no altsetting 0 [ 153.107740][ T4852] tmpfs: Bad value for 'mpol' [ 153.940723][ T126] usb 3-1: string descriptor 0 read error: -71 [ 153.983602][ T126] usb 3-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 154.110047][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.172382][ T4858] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 154.200177][ T126] usb 3-1: can't set config #6, error -71 [ 154.297193][ T126] usb 3-1: USB disconnect, device number 3 [ 154.925037][ T4868] netlink: 'syz.3.125': attribute type 21 has an invalid length. [ 154.933832][ T4868] netlink: 'syz.3.125': attribute type 6 has an invalid length. [ 154.945017][ T4868] netlink: 132 bytes leftover after parsing attributes in process `syz.3.125'. [ 157.868004][ T4895] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.917710][ T4895] F2FS-fs (loop5): Unable to read 1th superblock [ 157.937199][ T4895] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 157.950189][ T4895] F2FS-fs (loop5): Unable to read 2th superblock [ 159.825175][ T4920] tmpfs: Unknown parameter 'quota' [ 159.871418][ T4920] netlink: 830 bytes leftover after parsing attributes in process `syz.4.141'. [ 160.367941][ T4922] netlink: 'syz.3.142': attribute type 21 has an invalid length. [ 160.376187][ T4922] netlink: 'syz.3.142': attribute type 6 has an invalid length. [ 160.384105][ T4922] netlink: 132 bytes leftover after parsing attributes in process `syz.3.142'. [ 161.246740][ T4930] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 161.799732][ T4928] netlink: 830 bytes leftover after parsing attributes in process `syz.1.144'. [ 164.490036][ T4324] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 164.692242][ T4324] usb 1-1: config index 0 descriptor too short (expected 146, got 18) [ 164.815754][ T4324] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 164.960242][ T126] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 164.969145][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.990130][ T4324] usb 1-1: Product: syz [ 164.994805][ T4324] usb 1-1: Manufacturer: syz [ 165.003133][ T4324] usb 1-1: SerialNumber: syz [ 165.059663][ T4324] usb 1-1: config 0 descriptor?? [ 165.115923][ T4324] sierra 1-1:0.0: Sierra USB modem converter detected [ 165.168690][ T126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.184781][ T126] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 165.198671][ T126] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 165.212125][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.310816][ T126] usb 2-1: config 0 descriptor?? [ 165.328429][ T4324] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 165.395375][ T4324] usb 1-1: USB disconnect, device number 6 [ 165.461052][ T4324] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 165.674176][ T4324] sierra 1-1:0.0: device disconnected [ 167.602993][ T4978] syz.1.153 (4978) used greatest stack depth: 18176 bytes left [ 167.698111][ T35] usb 2-1: USB disconnect, device number 2 [ 167.850047][ T4324] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 168.084837][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.268194][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.290056][ T4324] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.202901][ T4997] netlink: 830 bytes leftover after parsing attributes in process `syz.4.159'. [ 169.379937][ T4324] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 169.390179][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.437038][ T4324] usb 3-1: config 0 descriptor?? [ 169.448251][ T4324] usb 3-1: can't set config #0, error -71 [ 169.548101][ T4324] usb 3-1: USB disconnect, device number 4 [ 170.076489][ T5002] netlink: 'syz.2.160': attribute type 21 has an invalid length. [ 170.084842][ T5002] netlink: 'syz.2.160': attribute type 6 has an invalid length. [ 170.099924][ T5002] netlink: 132 bytes leftover after parsing attributes in process `syz.2.160'. [ 170.695146][ T5007] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 170.785808][ T5007] netlink: 830 bytes leftover after parsing attributes in process `syz.0.161'. [ 171.404286][ T5013] fuse: Bad value for 'fd' [ 171.426391][ T5013] batman_adv: batadv0: Adding interface: dummy0 [ 171.432888][ T5013] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.458342][ T5013] batman_adv: batadv0: Interface activated: dummy0 [ 173.732707][ T5030] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 173.759262][ T5030] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 173.860280][ T4280] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 173.901576][ T5030] netlink: 'syz.3.167': attribute type 3 has an invalid length. [ 173.909501][ T5030] netlink: 44 bytes leftover after parsing attributes in process `syz.3.167'. [ 174.725849][ T4280] usb 2-1: config index 0 descriptor too short (expected 146, got 18) [ 175.709879][ C1] sched: RT throttling activated [ 175.741685][ T4280] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 175.819813][ T4280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.833677][ T4280] usb 2-1: Product: syz [ 175.837909][ T4280] usb 2-1: Manufacturer: syz [ 176.136549][ T4280] usb 2-1: SerialNumber: syz [ 176.159013][ T4280] usb 2-1: config 0 descriptor?? [ 176.178052][ T4280] sierra 2-1:0.0: Sierra USB modem converter detected [ 176.614843][ T4280] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 176.673133][ T4280] usb 2-1: USB disconnect, device number 3 [ 177.197179][ T4280] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 177.649132][ T4280] sierra 2-1:0.0: device disconnected [ 177.690645][ T5055] tipc: Started in network mode [ 177.715723][ T5055] tipc: Node identity 9ab9ff88011, cluster identity 4711 [ 178.243646][ T5055] tipc: Enabled bearer , priority 0 [ 178.309903][ T5058] netlink: 830 bytes leftover after parsing attributes in process `syz.4.177'. [ 178.336229][ T5060] device syzkaller0 entered promiscuous mode [ 178.504310][ T5055] tipc: Resetting bearer [ 178.576636][ T5054] tipc: Resetting bearer [ 178.715033][ T5054] tipc: Disabling bearer [ 179.360524][ T5073] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 179.408423][ T5072] netlink: 830 bytes leftover after parsing attributes in process `syz.4.179'. [ 180.195604][ T5077] netlink: 'syz.0.180': attribute type 21 has an invalid length. [ 180.209404][ T5077] netlink: 'syz.0.180': attribute type 6 has an invalid length. [ 180.217914][ T5077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.180'. [ 182.022929][ T5095] netlink: 6 bytes leftover after parsing attributes in process `syz.3.184'. [ 182.037709][ T5095] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 182.081929][ T5095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.959299][ T5109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.186'. [ 184.431418][ T5119] vivid-000: ================= START STATUS ================= [ 184.440708][ T5119] vivid-000: Radio HW Seek Mode: Bounded [ 184.447303][ T5119] vivid-000: Radio Programmable HW Seek: false [ 184.454462][ T5119] vivid-000: RDS Rx I/O Mode: Block I/O [ 184.460698][ T5119] vivid-000: Generate RBDS Instead of RDS: false [ 184.467485][ T5119] vivid-000: RDS Reception: true [ 184.473096][ T5119] vivid-000: RDS Program Type: 0 inactive [ 184.479280][ T5119] vivid-000: RDS PS Name: inactive [ 184.507096][ T5119] vivid-000: RDS Radio Text: inactive [ 184.513125][ T5119] vivid-000: RDS Traffic Announcement: false inactive [ 184.520431][ T5119] vivid-000: RDS Traffic Program: false inactive [ 184.527272][ T5119] vivid-000: RDS Music: false inactive [ 184.533286][ T5119] vivid-000: ================== END STATUS ================== [ 186.477020][ T5136] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 186.588037][ T5136] netlink: 830 bytes leftover after parsing attributes in process `syz.0.193'. [ 187.160760][ T4282] Bluetooth: hci4: command 0x0405 tx timeout [ 188.505620][ T5164] netlink: 'syz.3.199': attribute type 20 has an invalid length. [ 188.579513][ T5164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.199'. [ 194.370240][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.377021][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.422803][ T4398] sl0: compressed packet ignored [ 195.880066][ T4267] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 196.152117][ T4267] usb 4-1: config index 0 descriptor too short (expected 146, got 18) [ 196.160591][ T4267] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 196.168997][ T4267] usb 4-1: config 0 has no interface number 0 [ 196.178390][ T4267] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 196.191646][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.199686][ T4267] usb 4-1: Product: syz [ 196.204170][ T4267] usb 4-1: Manufacturer: syz [ 196.208890][ T4267] usb 4-1: SerialNumber: syz [ 196.241529][ T4267] usb 4-1: config 0 descriptor?? [ 196.263578][ T4267] sierra 4-1:0.153: Sierra USB modem converter detected [ 196.468292][ T4267] usb 4-1: USB disconnect, device number 3 [ 196.490143][ T4267] sierra 4-1:0.153: device disconnected [ 198.004686][ T5274] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 198.084218][ T5274] F2FS-fs (loop3): Unable to read 1th superblock [ 198.360480][ T5274] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 198.500154][ T5274] F2FS-fs (loop3): Unable to read 2th superblock [ 201.003391][ T5302] Cannot find add_set index 0 as target [ 201.653218][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 201.659334][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 201.660060][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 201.665595][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 201.677731][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 208.458820][ T5372] netlink: 32 bytes leftover after parsing attributes in process `syz.0.249'. [ 214.920049][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20510 ms [ 214.930170][ C1] sl0: transmit timed out, driver error? [ 214.984269][ T5433] vhci_hcd vhci_hcd.0: failed to lookup sock [ 215.289982][ T5399] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 215.488265][ T5399] usb 4-1: config index 0 descriptor too short (expected 146, got 18) [ 215.531998][ T5399] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 215.618262][ T5399] usb 4-1: config 0 has no interface number 0 [ 215.694224][ T5399] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 215.720084][ T5399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.728665][ T5399] usb 4-1: Product: syz [ 215.996209][ T5399] usb 4-1: Manufacturer: syz [ 216.001021][ T5399] usb 4-1: SerialNumber: syz [ 216.039409][ T5399] usb 4-1: config 0 descriptor?? [ 216.083807][ T5399] sierra 4-1:0.153: Sierra USB modem converter detected [ 216.286499][ T5399] usb 4-1: USB disconnect, device number 4 [ 216.323514][ T5399] sierra 4-1:0.153: device disconnected [ 216.415396][ T4325] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 216.951801][ T4325] usb 1-1: not running at top speed; connect to a high speed hub [ 216.981455][ T4325] usb 1-1: config index 0 descriptor too short (expected 2322, got 18) [ 216.998392][ T4325] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 217.037567][ T4325] usb 1-1: config 95 has no interface number 0 [ 217.078114][ T4325] usb 1-1: config 95 interface 1 has no altsetting 0 [ 217.112889][ T4325] usb 1-1: language id specifier not provided by device, defaulting to English [ 217.143321][ T4325] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 217.183392][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.220126][ T4325] usb 1-1: Product: syz [ 217.231077][ T4325] usb 1-1: Manufacturer: syz [ 217.241192][ T4325] usb 1-1: SerialNumber: syz [ 217.287098][ T5457] syz.3.268 uses obsolete (PF_INET,SOCK_PACKET) [ 217.611095][ T4325] usb 1-1: USB disconnect, device number 7 [ 217.825338][ T5468] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 218.049259][ T5467] netlink: 830 bytes leftover after parsing attributes in process `syz.1.270'. [ 218.307189][ T4810] udevd[4810]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.750099][ T5509] autofs4:pid:5509:autofs_fill_super: called with bogus options [ 222.263031][ T5515] device syzkaller0 entered promiscuous mode [ 222.892780][ T5515] tipc: Started in network mode [ 222.940041][ T5515] tipc: Node identity faf84d7a361, cluster identity 4711 [ 222.957003][ T5515] tipc: Enabled bearer , priority 0 [ 223.026070][ T5513] tipc: Resetting bearer [ 223.230878][ T5513] tipc: Disabling bearer [ 223.860014][ T22] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 224.470577][ T5526] netlink: 6 bytes leftover after parsing attributes in process `syz.4.283'. [ 224.500016][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 224.526255][ T22] usb 2-1: config 6 has an invalid interface number: 28 but max is 3 [ 224.604074][ T22] usb 2-1: config 6 has an invalid interface number: 4 but max is 3 [ 224.614065][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 224.621274][ T22] usb 2-1: config 6 has an invalid interface number: 86 but max is 3 [ 224.631196][ T22] usb 2-1: config 6 has an invalid interface number: 191 but max is 3 [ 224.639529][ T22] usb 2-1: config 6 has no interface number 0 [ 224.640501][ T5526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.679955][ T22] usb 2-1: config 6 has no interface number 1 [ 224.687030][ T22] usb 2-1: config 6 has no interface number 2 [ 224.703107][ T22] usb 2-1: config 6 has no interface number 3 [ 224.709470][ T22] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 225.101667][ T22] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 225.115590][ T22] usb 2-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 225.189553][ T22] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 225.270346][ T22] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 225.340085][ T22] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 225.391814][ T22] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 225.601790][ T22] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 225.613134][ T22] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 225.624630][ T22] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 226.114978][ T22] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 226.129643][ T22] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 226.152047][ T22] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 226.163347][ T22] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 226.239930][ T22] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 226.284573][ T22] usb 2-1: config 6 interface 4 has no altsetting 0 [ 226.463610][ T22] usb 2-1: config 6 interface 86 has no altsetting 0 [ 226.504712][ T22] usb 2-1: config 6 interface 191 has no altsetting 0 [ 226.529697][ T22] usb 2-1: string descriptor 0 read error: -71 [ 226.552017][ T22] usb 2-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 226.579137][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.579908][ T5536] comedi comedi3: reset error (fatal) [ 226.602663][ T5548] autofs4:pid:5548:autofs_fill_super: called with bogus options [ 227.658789][ T22] usb 2-1: can't set config #6, error -71 [ 227.762142][ T22] usb 2-1: USB disconnect, device number 4 [ 228.487012][ T1168] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 228.700054][ T1168] usb 5-1: Using ep0 maxpacket: 32 [ 228.731294][ T1168] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 228.760462][ T1168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.779919][ T1168] usb 5-1: Product: syz [ 228.784323][ T1168] usb 5-1: Manufacturer: syz [ 228.788980][ T1168] usb 5-1: SerialNumber: syz [ 228.957800][ T1168] usb 5-1: config 0 descriptor?? [ 229.093353][ T1168] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 230.179860][ T1168] gspca_stk1135: reg_w 0x0 err -110 [ 230.186188][ T1168] gspca_stk1135: serial bus timeout: status=0x00 [ 230.203461][ T1168] gspca_stk1135: Sensor write failed [ 230.209416][ T1168] gspca_stk1135: serial bus timeout: status=0x00 [ 230.227238][ T1168] gspca_stk1135: Sensor write failed [ 230.247633][ T1168] gspca_stk1135: serial bus timeout: status=0x00 [ 230.304441][ T1168] gspca_stk1135: Sensor read failed [ 230.309733][ T1168] gspca_stk1135: serial bus timeout: status=0x00 [ 230.356403][ T1168] gspca_stk1135: Sensor read failed [ 230.426747][ T1168] gspca_stk1135: Detected sensor type unknown (0x0) [ 230.918435][ T1168] gspca_stk1135: serial bus timeout: status=0x00 [ 230.941055][ T1168] gspca_stk1135: Sensor read failed [ 230.946375][ T1168] gspca_stk1135: serial bus timeout: status=0x00 [ 230.991242][ T1168] gspca_stk1135: Sensor read failed [ 230.999936][ T1168] gspca_stk1135: serial bus timeout: status=0x00 [ 231.019481][ T1168] gspca_stk1135: Sensor write failed [ 231.033668][ T1168] gspca_stk1135: serial bus timeout: status=0x00 [ 231.053445][ T1168] gspca_stk1135: Sensor write failed [ 231.070936][ T1168] stk1135: probe of 5-1:0.0 failed with error -110 [ 231.124356][ T1168] usb 5-1: USB disconnect, device number 4 [ 233.719937][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 233.877544][ T5602] ======================================================= [ 233.877544][ T5602] WARNING: The mand mount option has been deprecated and [ 233.877544][ T5602] and is ignored by this kernel. Remove the mand [ 233.877544][ T5602] option from the mount to silence this warning. [ 233.877544][ T5602] ======================================================= [ 233.949897][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 233.995395][ T14] usb 3-1: device descriptor read/all, error -71 [ 238.967650][ T5635] netlink: 6 bytes leftover after parsing attributes in process `syz.0.312'. [ 238.979150][ T5635] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 238.995910][ T5635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.282884][ T5674] netlink: 84 bytes leftover after parsing attributes in process `syz.2.317'. [ 243.156856][ T5700] Device name cannot be null; rc = [-22] [ 248.020051][ T1194] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 248.481922][ T1194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.510443][ T1194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.795445][ T1194] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.880061][ T1194] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 248.925672][ T1194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.987457][ T1194] usb 2-1: config 0 descriptor?? [ 249.041502][ T5742] tipc: Enabled bearer , priority 0 [ 249.049916][ T4267] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 249.096535][ T5743] device syzkaller0 entered promiscuous mode [ 249.193465][ T5746] netlink: 6 bytes leftover after parsing attributes in process `syz.0.333'. [ 249.203267][ T5746] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 249.218816][ T5746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.270194][ T4267] usb 4-1: Using ep0 maxpacket: 8 [ 249.647329][ T1194] ryos 0003:1E7D:3232.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 249.676359][ T4267] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 249.688678][ T5742] tipc: Resetting bearer [ 249.706132][ T4267] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 249.726562][ T4267] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 249.765846][ T4267] usb 4-1: config 250 has no interface number 0 [ 249.783787][ T4267] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 249.966844][ T4267] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 249.997971][ T4267] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.063869][ T5758] Device name cannot be null; rc = [-22] [ 250.794307][ T4267] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 250.910594][ T4267] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 251.047065][ T1194] usb 2-1: USB disconnect, device number 5 [ 251.109934][ T4267] usb 4-1: config 250 interface 228 has no altsetting 0 [ 251.145213][ T4353] tipc: Node number set to 3437776250 [ 251.174755][ T5741] tipc: Resetting bearer [ 251.190741][ T4267] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 251.203129][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 251.215896][ T4267] usb 4-1: Product: syz [ 251.222062][ T4267] usb 4-1: SerialNumber: syz [ 251.530984][ T4267] hub 4-1:250.228: bad descriptor, ignoring hub [ 251.537465][ T4267] hub: probe of 4-1:250.228 failed with error -5 [ 251.561177][ T5741] tipc: Disabling bearer [ 252.342448][ T4267] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 253.089346][ T4267] usb 4-1: USB disconnect, device number 5 [ 253.119606][ T4267] usblp0: removed [ 255.802659][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.810537][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.941362][ T4388] sl0: compressed packet ignored [ 257.534667][ T5820] fuse: Bad value for 'fd' [ 259.219006][ T5816] device syzkaller0 entered promiscuous mode [ 261.134988][ T5836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.355'. [ 261.832557][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.357'. [ 261.867968][ T5843] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.877059][ T5843] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.886040][ T5843] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.895052][ T5843] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.910791][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.357'. [ 263.247995][ T5852] Device name cannot be null; rc = [-22] [ 269.039946][ T4267] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 269.169921][ T1194] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 269.253289][ T4267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.279914][ T4267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.304975][ T4267] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.328262][ T4267] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 269.340773][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.360023][ T1194] usb 3-1: Using ep0 maxpacket: 32 [ 269.366343][ T4267] usb 2-1: config 0 descriptor?? [ 269.377099][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.409924][ T1194] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 269.440697][ T1194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.555385][ T1194] usb 3-1: config 0 descriptor?? [ 269.815000][ T4267] ryos 0003:1E7D:3232.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 270.091222][ T4332] usb 2-1: USB disconnect, device number 6 [ 270.371579][ T1194] hid-generic 0003:04D8:00DF.0005: item fetching failed at offset 0/2 [ 270.391854][ T1194] hid-generic: probe of 0003:04D8:00DF.0005 failed with error -22 [ 270.445205][ T5904] fido_id[5904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 270.549183][ T4280] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 270.593527][ T1194] usb 3-1: USB disconnect, device number 7 [ 270.818055][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 270.828040][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 271.537571][ T4280] usb 1-1: Using ep0 maxpacket: 16 [ 271.687705][ T4280] usb 1-1: config 6 has an invalid interface number: 28 but max is 3 [ 271.706878][ T4280] usb 1-1: config 6 has an invalid interface number: 4 but max is 3 [ 271.944138][ T4280] usb 1-1: config 6 has an invalid interface number: 86 but max is 3 [ 272.288355][ T4280] usb 1-1: config 6 has an invalid interface number: 191 but max is 3 [ 272.423348][ T5922] netlink: 'syz.1.378': attribute type 21 has an invalid length. [ 272.436908][ T5922] netlink: 'syz.1.378': attribute type 6 has an invalid length. [ 272.446108][ T5922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.378'. [ 272.588549][ T4280] usb 1-1: config 6 has no interface number 0 [ 272.616514][ T5896] sctp: failed to load transform for md5: -2 [ 273.059893][ T4280] usb 1-1: config 6 has no interface number 1 [ 273.280028][ T4280] usb 1-1: config 6 has no interface number 2 [ 273.382223][ T4280] usb 1-1: config 6 has no interface number 3 [ 273.516757][ T4280] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 273.565618][ T4280] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 273.584367][ T4280] usb 1-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 273.643352][ T4280] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 273.675665][ T4280] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 273.764166][ T4280] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 274.219898][ T4280] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 274.259938][ T4280] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 274.300272][ T4280] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 274.369955][ T4280] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 274.389877][ T4280] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 274.459879][ T4280] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 274.484298][ T4280] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 274.529978][ T4280] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 274.565531][ T4280] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 274.593292][ T4280] usb 1-1: config 6 interface 4 has no altsetting 0 [ 274.739966][ T4280] usb 1-1: config 6 interface 86 has no altsetting 0 [ 274.758816][ T4280] usb 1-1: config 6 interface 191 has no altsetting 0 [ 275.430958][ T4280] usb 1-1: string descriptor 0 read error: -71 [ 275.444725][ T4280] usb 1-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 275.454754][ T4280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.476541][ T4280] usb 1-1: can't set config #6, error -71 [ 275.484496][ T4280] usb 1-1: USB disconnect, device number 8 [ 276.279845][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20470 ms [ 276.288120][ C1] sl0: transmit timed out, driver error? [ 276.705047][ T5950] tipc: Started in network mode [ 276.746113][ T5950] tipc: Node identity 16a6eb60d74e, cluster identity 4711 [ 276.964924][ T5950] tipc: Enabled bearer , priority 0 [ 277.363712][ T5957] device syzkaller0 entered promiscuous mode [ 278.026750][ T5949] tipc: Resetting bearer [ 278.042024][ T4370] tipc: Node number set to 3253267296 [ 278.205876][ T5949] tipc: Disabling bearer [ 278.230037][ T4280] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 278.861923][ T4280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.919447][ T4280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.076232][ T4280] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 279.222367][ T5975] tmpfs: Unknown parameter 'quota' [ 279.377379][ T5975] netlink: 830 bytes leftover after parsing attributes in process `syz.0.392'. [ 279.621246][ T5976] netlink: 6 bytes leftover after parsing attributes in process `syz.1.390'. [ 279.631921][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 279.649038][ T5976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.718754][ T4280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.825321][ T4280] usb 5-1: config 0 descriptor?? [ 280.175648][ T5982] netlink: 'syz.3.394': attribute type 21 has an invalid length. [ 280.185945][ T5982] netlink: 'syz.3.394': attribute type 6 has an invalid length. [ 280.200464][ T5982] netlink: 132 bytes leftover after parsing attributes in process `syz.3.394'. [ 280.598876][ T4280] usb 5-1: language id specifier not provided by device, defaulting to English [ 280.828556][ T4280] uclogic 0003:256C:006D.0006: failed retrieving Huion firmware version: -71 [ 280.847231][ T4280] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 280.854977][ T4280] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 280.865993][ T4280] usb 5-1: USB disconnect, device number 5 [ 281.206634][ T5991] autofs4:pid:5991:autofs_fill_super: called with bogus options [ 281.788537][ T6000] Device name cannot be null; rc = [-22] [ 283.460088][ T4267] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 283.640034][ T6019] tmpfs: Unknown parameter 'quota' [ 283.650108][ T4267] usb 1-1: Using ep0 maxpacket: 16 [ 283.653675][ T6019] netlink: 830 bytes leftover after parsing attributes in process `syz.1.403'. [ 283.718306][ T4267] usb 1-1: config 6 has an invalid interface number: 28 but max is 3 [ 283.830510][ T4267] usb 1-1: config 6 has an invalid interface number: 4 but max is 3 [ 283.840046][ T4267] usb 1-1: config 6 has an invalid interface number: 86 but max is 3 [ 283.848296][ T4267] usb 1-1: config 6 has an invalid interface number: 191 but max is 3 [ 283.856988][ T4267] usb 1-1: config 6 has no interface number 0 [ 283.863469][ T4267] usb 1-1: config 6 has no interface number 1 [ 283.869927][ T4267] usb 1-1: config 6 has no interface number 2 [ 283.876174][ T4267] usb 1-1: config 6 has no interface number 3 [ 283.883042][ T4267] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 283.893882][ T4267] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 283.905459][ T4267] usb 1-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 283.916598][ T4267] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 283.927595][ T4267] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 283.939895][ T4267] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 283.950987][ T4267] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 283.965046][ T4267] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 283.984902][ T4267] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 284.180226][ T4267] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 284.196839][ T4267] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 284.210037][ T4267] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 284.221186][ T4267] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 284.335493][ T4267] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 284.389966][ T4267] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 284.401394][ T4267] usb 1-1: config 6 interface 4 has no altsetting 0 [ 284.414301][ T4267] usb 1-1: config 6 interface 86 has no altsetting 0 [ 284.430098][ T4267] usb 1-1: config 6 interface 191 has no altsetting 0 [ 285.606997][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.408'. [ 285.619413][ T6035] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.628433][ T6035] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.637203][ T6035] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.646292][ T6035] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.656886][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.408'. [ 285.969404][ T6040] Device name cannot be null; rc = [-22] [ 287.038090][ T6046] autofs4:pid:6046:autofs_fill_super: called with bogus options [ 287.945183][ T4267] usb 1-1: string descriptor 0 read error: -71 [ 287.999945][ T4267] usb 1-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 288.009096][ T4267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.250261][ T4267] usb 1-1: can't set config #6, error -71 [ 288.351737][ T4267] usb 1-1: USB disconnect, device number 9 [ 288.630871][ T6062] tmpfs: Unknown parameter 'quota' [ 288.670245][ T6062] netlink: 830 bytes leftover after parsing attributes in process `syz.0.414'. [ 289.163717][ T4280] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 289.813630][ T4280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.856990][ T4280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.923276][ T4280] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.007398][ T4280] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 290.172897][ T4280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.602461][ T4280] usb 5-1: config 0 descriptor?? [ 291.036950][ T4280] ryos 0003:1E7D:3232.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.4-1/input0 [ 291.237467][ T4267] usb 5-1: USB disconnect, device number 6 [ 291.298476][ T6080] fido_id[6080]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 291.473388][ T6084] netlink: 'syz.0.419': attribute type 20 has an invalid length. [ 291.530490][ T6085] Device name cannot be null; rc = [-22] [ 292.988140][ T6087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.419'. [ 294.485432][ T6114] tmpfs: Unknown parameter 'quota' [ 294.511687][ T6114] netlink: 830 bytes leftover after parsing attributes in process `syz.0.428'. [ 295.490088][ T5608] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 297.729980][ T4332] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 297.932498][ T4332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.969652][ T4332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.028146][ T4332] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.136831][ T4332] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 298.167331][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.286045][ T4332] usb 3-1: config 0 descriptor?? [ 298.704892][ T4332] ryos 0003:1E7D:3232.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 298.939056][ T4332] usb 3-1: USB disconnect, device number 8 [ 299.287689][ T6161] netlink: 6 bytes leftover after parsing attributes in process `syz.1.436'. [ 299.297240][ T6161] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 299.305890][ T6161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.349620][ T6157] fido_id[6157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 300.980332][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 302.113015][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 302.317302][ T7] usb 3-1: device descriptor read/64, error -32 [ 302.609923][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 302.812453][ T7] usb 3-1: config index 0 descriptor too short (expected 146, got 18) [ 302.961132][ T6188] tmpfs: Unknown parameter 'quota' [ 303.024191][ T6188] netlink: 830 bytes leftover after parsing attributes in process `syz.1.442'. [ 303.201167][ T7] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 303.379997][ T7] usb 3-1: config 0 has no interface number 0 [ 303.431928][ T7] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 303.460143][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.488713][ T7] usb 3-1: Product: syz [ 303.519304][ T7] usb 3-1: Manufacturer: syz [ 303.529432][ T7] usb 3-1: SerialNumber: syz [ 303.560905][ T7] usb 3-1: config 0 descriptor?? [ 303.594183][ T7] sierra 3-1:0.153: Sierra USB modem converter detected [ 303.817933][ T7] usb 3-1: USB disconnect, device number 10 [ 303.836176][ T7] sierra 3-1:0.153: device disconnected [ 304.857478][ T6200] netlink: 'syz.2.444': attribute type 21 has an invalid length. [ 304.988818][ T6200] netlink: 'syz.2.444': attribute type 6 has an invalid length. [ 304.998745][ T6200] netlink: 132 bytes leftover after parsing attributes in process `syz.2.444'. [ 305.050065][ T5399] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 305.254454][ T5399] usb 4-1: Using ep0 maxpacket: 16 [ 306.468283][ T5399] usb 4-1: unable to read config index 0 descriptor/all [ 306.693434][ T5399] usb 4-1: can't read configurations, error -71 [ 306.777498][ T6210] Device name cannot be null; rc = [-22] [ 308.990152][ T4332] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 309.631714][ T4332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.649466][ T4332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.843112][ T4332] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.863000][ T6232] tmpfs: Unknown parameter 'quota' [ 309.967286][ T6232] netlink: 830 bytes leftover after parsing attributes in process `syz.3.453'. [ 310.138868][ T4332] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 310.260735][ T4332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.462448][ T4332] usb 2-1: config 0 descriptor?? [ 310.840860][ T5399] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 311.295067][ T4332] ryos 0003:1E7D:3232.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 311.502057][ T5399] usb 4-1: config index 0 descriptor too short (expected 146, got 18) [ 311.808843][ T5399] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 311.913192][ T5399] usb 4-1: config 0 has no interface number 0 [ 311.929268][ T5399] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 312.055588][ T5399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.185165][ T5399] usb 4-1: Product: syz [ 312.199339][ T5399] usb 4-1: Manufacturer: syz [ 312.222048][ T5399] usb 4-1: SerialNumber: syz [ 312.252482][ T5399] usb 4-1: config 0 descriptor?? [ 312.315804][ T5399] sierra 4-1:0.153: Sierra USB modem converter detected [ 312.496131][ T5399] usb 4-1: USB disconnect, device number 9 [ 312.640279][ T5399] sierra 4-1:0.153: device disconnected [ 313.650718][ T6260] netlink: 'syz.0.459': attribute type 21 has an invalid length. [ 313.664060][ T6260] netlink: 'syz.0.459': attribute type 6 has an invalid length. [ 313.672669][ T6260] netlink: 132 bytes leftover after parsing attributes in process `syz.0.459'. [ 316.137635][ T6284] tmpfs: Unknown parameter 'quota' [ 316.164720][ T6284] netlink: 830 bytes leftover after parsing attributes in process `syz.3.465'. [ 317.511614][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.533741][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.544962][ T4482] sl0: compressed packet ignored [ 317.742399][ T4332] usb 2-1: USB disconnect, device number 7 [ 318.621680][ T6290] Device name cannot be null; rc = [-22] [ 322.947156][ T6335] tmpfs: Unknown parameter 'quota' [ 325.034218][ T6335] netlink: 830 bytes leftover after parsing attributes in process `syz.0.478'. [ 325.843643][ T6357] vivid-000: ================= START STATUS ================= [ 325.880001][ T6357] vivid-000: Interlaced VBI Format: false [ 325.886301][ T6357] vivid-000: ================== END STATUS ================== [ 328.260500][ T6379] Device name cannot be null; rc = [-22] [ 329.215811][ T6389] tmpfs: Unknown parameter 'quota' [ 329.265873][ T6389] netlink: 830 bytes leftover after parsing attributes in process `syz.4.492'. [ 329.689946][ T4280] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 330.301483][ T4280] usb 3-1: config index 0 descriptor too short (expected 146, got 18) [ 330.330093][ T4280] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 330.350122][ T4280] usb 3-1: config 0 has no interface number 0 [ 330.378740][ T4280] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 330.529435][ T4280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.559877][ T4280] usb 3-1: Product: syz [ 330.567323][ T4280] usb 3-1: Manufacturer: syz [ 330.572461][ T4280] usb 3-1: SerialNumber: syz [ 330.581878][ T4280] usb 3-1: config 0 descriptor?? [ 331.315241][ T4280] sierra 3-1:0.153: Sierra USB modem converter detected [ 331.350964][ T4280] usb 3-1: USB disconnect, device number 11 [ 331.367426][ T4280] sierra 3-1:0.153: device disconnected [ 334.868619][ T6422] Device name cannot be null; rc = [-22] [ 337.741935][ T6438] tmpfs: Unknown parameter 'quota' [ 338.170179][ T6438] netlink: 830 bytes leftover after parsing attributes in process `syz.2.505'. [ 338.359825][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20820 ms [ 338.367914][ C1] sl0: transmit timed out, driver error? [ 338.649949][ T5399] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 338.843541][ T5399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.877878][ T5399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.925691][ T5399] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.957718][ T5399] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 338.968531][ T5399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.014484][ T5399] usb 2-1: config 0 descriptor?? [ 339.561864][ T5399] ryos 0003:1E7D:3232.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 342.148341][ T6477] netlink: 'syz.4.513': attribute type 20 has an invalid length. [ 342.387079][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.513'. [ 342.760884][ T6485] Device name cannot be null; rc = [-22] [ 344.686291][ T6495] device syzkaller0 entered promiscuous mode [ 344.701383][ T6497] device vlan2 entered promiscuous mode [ 344.753090][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 346.474810][ T5399] usb 2-1: USB disconnect, device number 8 [ 346.985506][ T6527] Device name cannot be null; rc = [-22] [ 348.103263][ T6524] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 348.167357][ T6524] F2FS-fs (loop5): Unable to read 1th superblock [ 348.188774][ T6524] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 348.210054][ T6524] F2FS-fs (loop5): Unable to read 2th superblock [ 352.252215][ T6563] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 353.056296][ T6570] netlink: 56 bytes leftover after parsing attributes in process `syz.2.535'. [ 353.084787][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.535'. [ 353.169033][ T6573] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 353.231495][ T6573] netlink: 830 bytes leftover after parsing attributes in process `syz.4.537'. [ 354.329938][ T1168] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 354.677434][ T1168] usb 1-1: config index 0 descriptor too short (expected 146, got 18) [ 354.757261][ T1168] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 354.765967][ T1168] usb 1-1: config 0 has no interface number 0 [ 354.858535][ T1168] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 354.914552][ T1168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.941902][ T1168] usb 1-1: Product: syz [ 354.969404][ T1168] usb 1-1: Manufacturer: syz [ 354.977543][ T1168] usb 1-1: SerialNumber: syz [ 354.996440][ T1168] usb 1-1: config 0 descriptor?? [ 355.008077][ T1168] sierra 1-1:0.153: Sierra USB modem converter detected [ 355.300628][ T1168] usb 1-1: USB disconnect, device number 10 [ 355.388541][ T1168] sierra 1-1:0.153: device disconnected [ 355.552670][ T6590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 355.910960][ T6603] netlink: 6 bytes leftover after parsing attributes in process `syz.1.544'. [ 355.922596][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 355.939998][ T6603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.476435][ T6620] tmpfs: Unknown parameter 'quota' [ 358.508708][ T6620] netlink: 830 bytes leftover after parsing attributes in process `syz.2.548'. [ 359.527924][ T6629] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 362.559997][ T1168] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 362.982870][ T6659] tmpfs: Unknown parameter 'quota' [ 363.059672][ T6659] netlink: 830 bytes leftover after parsing attributes in process `syz.0.560'. [ 363.120044][ T1168] usb 3-1: Using ep0 maxpacket: 16 [ 363.134508][ T1168] usb 3-1: config 6 has an invalid interface number: 28 but max is 3 [ 363.279913][ T1168] usb 3-1: config 6 has an invalid interface number: 4 but max is 3 [ 363.302592][ T1168] usb 3-1: config 6 has an invalid interface number: 86 but max is 3 [ 363.341527][ T1168] usb 3-1: config 6 has an invalid interface number: 191 but max is 3 [ 363.374852][ T1168] usb 3-1: config 6 has no interface number 0 [ 363.381259][ T1168] usb 3-1: config 6 has no interface number 1 [ 363.387427][ T1168] usb 3-1: config 6 has no interface number 2 [ 363.400865][ T1168] usb 3-1: config 6 has no interface number 3 [ 363.407099][ T1168] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 363.424245][ T1168] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 363.436222][ T1168] usb 3-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 363.453441][ T1168] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 363.496173][ T1168] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 363.518078][ T1168] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 363.534318][ T1168] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 363.707822][ T1168] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 363.822264][ T1168] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 364.122694][ T1168] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 364.224208][ T1168] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 364.450008][ T1168] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 364.466788][ T1168] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 364.488995][ T1168] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 364.536151][ T1168] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 364.563291][ T1168] usb 3-1: config 6 interface 4 has no altsetting 0 [ 364.736659][ T1168] usb 3-1: config 6 interface 86 has no altsetting 0 [ 364.808999][ T1168] usb 3-1: config 6 interface 191 has no altsetting 0 [ 364.962319][ T6674] netlink: 'syz.4.563': attribute type 21 has an invalid length. [ 364.970579][ T6674] netlink: 'syz.4.563': attribute type 6 has an invalid length. [ 364.978416][ T6674] netlink: 132 bytes leftover after parsing attributes in process `syz.4.563'. [ 365.289501][ T1168] usb 3-1: string descriptor 0 read error: -71 [ 365.386959][ T1168] usb 3-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 365.492708][ T1168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.664701][ T1168] usb 3-1: can't set config #6, error -71 [ 365.717947][ T1168] usb 3-1: USB disconnect, device number 12 [ 365.883724][ T6686] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 367.302965][ T6686] batman_adv: batadv0: Adding interface: dummy0 [ 367.309423][ T6686] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.334860][ T6686] batman_adv: batadv0: Interface activated: dummy0 [ 368.077506][ T6697] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.134580][ T6697] F2FS-fs (loop3): Unable to read 1th superblock [ 368.170060][ T6697] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.181768][ T6697] F2FS-fs (loop3): Unable to read 2th superblock [ 368.547820][ T6707] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 368.643228][ T6707] netlink: 830 bytes leftover after parsing attributes in process `syz.4.571'. [ 369.106234][ T6708] netlink: 'syz.3.572': attribute type 20 has an invalid length. [ 369.733952][ T6705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.572'. [ 372.699955][ T4332] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 373.158034][ T6748] netlink: 56 bytes leftover after parsing attributes in process `syz.0.583'. [ 373.263129][ T4332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.380542][ T4332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.391281][ T4332] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.405227][ T4332] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 373.412367][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 373.414565][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.460710][ T4332] usb 3-1: config 0 descriptor?? [ 373.836109][ T6755] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 373.842718][ T6755] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 373.851313][ T6755] vhci_hcd vhci_hcd.0: Device attached [ 373.857074][ T6756] vhci_hcd: connection closed [ 373.881015][ T46] vhci_hcd: stop threads [ 374.130097][ T4353] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 374.229269][ T46] vhci_hcd: release socket [ 374.298846][ T46] vhci_hcd: disconnect device [ 374.518957][ T6767] netlink: 'syz.1.584': attribute type 21 has an invalid length. [ 374.528743][ T6767] netlink: 'syz.1.584': attribute type 6 has an invalid length. [ 374.537092][ T6767] netlink: 132 bytes leftover after parsing attributes in process `syz.1.584'. [ 374.991444][ T4332] ryos 0003:1E7D:3232.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 375.503895][ T6774] tmpfs: Unknown parameter 'quota' [ 375.547403][ T6774] netlink: 830 bytes leftover after parsing attributes in process `syz.1.586'. [ 378.111582][ T6789] netlink: 830 bytes leftover after parsing attributes in process `syz.1.589'. [ 378.684576][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.691025][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.700906][ T46] sl0: compressed packet ignored [ 378.726451][ T6793] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 378.735880][ T6793] F2FS-fs (loop7): Unable to read 1th superblock [ 378.742419][ T6793] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 378.751617][ T6793] F2FS-fs (loop7): Unable to read 2th superblock [ 379.990254][ T4353] vhci_hcd: vhci_device speed not set [ 381.755584][ T1168] usb 3-1: USB disconnect, device number 13 [ 382.080794][ T6820] tmpfs: Unknown parameter 'quota' [ 382.111047][ T6820] netlink: 830 bytes leftover after parsing attributes in process `syz.4.597'. [ 382.902193][ T6827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.600'. [ 383.982839][ T6833] netlink: 830 bytes leftover after parsing attributes in process `syz.0.601'. [ 384.599481][ T6836] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 384.636297][ T6835] netlink: 830 bytes leftover after parsing attributes in process `syz.4.602'. [ 389.075766][ T126] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 389.303468][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.346370][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.541965][ T6883] netlink: 830 bytes leftover after parsing attributes in process `syz.1.615'. [ 389.848610][ T126] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.861573][ T126] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 389.870852][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.914577][ T126] usb 5-1: config 0 descriptor?? [ 390.488937][ T126] ryos 0003:1E7D:3232.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.4-1/input0 [ 393.288579][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 393.328981][ T6904] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.337963][ T6904] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.346882][ T6904] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.355810][ T6904] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.372265][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 395.083981][ T4332] usb 5-1: USB disconnect, device number 7 [ 395.381009][ T6917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.626'. [ 397.478525][ T6920] netlink: 56 bytes leftover after parsing attributes in process `syz.2.627'. [ 397.651543][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 399.159792][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20470 ms [ 399.167885][ C1] sl0: transmit timed out, driver error? [ 402.236354][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'. [ 402.274349][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'. [ 402.915362][ T6967] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 402.942854][ T6966] netlink: 830 bytes leftover after parsing attributes in process `syz.0.638'. [ 403.776087][ T6976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.640'. [ 406.960509][ T6994] netlink: 'syz.3.646': attribute type 20 has an invalid length. [ 407.136600][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.646'. [ 408.946838][ T7013] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 408.978577][ T7013] netlink: 830 bytes leftover after parsing attributes in process `syz.2.651'. [ 409.593505][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 409.606547][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 411.484934][ T7035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.657'. [ 412.927148][ T7040] netlink: 830 bytes leftover after parsing attributes in process `syz.3.658'. [ 413.586544][ T7044] netlink: 56 bytes leftover after parsing attributes in process `syz.2.659'. [ 413.597692][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 414.844155][ T7056] tipc: Started in network mode [ 414.869975][ T7056] tipc: Node identity da865c30095e, cluster identity 4711 [ 415.028162][ T7056] tipc: Enabled bearer , priority 0 [ 415.140916][ T7061] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 415.407580][ T7059] netlink: 830 bytes leftover after parsing attributes in process `syz.1.664'. [ 415.491514][ T7056] tipc: Resetting bearer [ 415.680196][ T7055] tipc: Disabling bearer [ 416.740824][ T7077] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.752574][ T7077] F2FS-fs (loop7): Unable to read 1th superblock [ 416.759835][ T7077] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 416.769717][ T7077] F2FS-fs (loop7): Unable to read 2th superblock [ 417.595460][ T7083] netlink: 'syz.1.670': attribute type 20 has an invalid length. [ 418.540995][ T7087] netlink: 830 bytes leftover after parsing attributes in process `syz.3.671'. [ 418.579435][ T7085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.670'. [ 419.714623][ T4370] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 420.270562][ T4370] usb 1-1: Using ep0 maxpacket: 16 [ 420.287593][ T4370] usb 1-1: config 6 has an invalid interface number: 28 but max is 3 [ 420.349484][ T4370] usb 1-1: config 6 has an invalid interface number: 4 but max is 3 [ 420.366650][ T4370] usb 1-1: config 6 has an invalid interface number: 86 but max is 3 [ 420.521942][ T4370] usb 1-1: config 6 has an invalid interface number: 191 but max is 3 [ 420.577122][ T4370] usb 1-1: config 6 has no interface number 0 [ 420.636764][ T4370] usb 1-1: config 6 has no interface number 1 [ 420.684815][ T4370] usb 1-1: config 6 has no interface number 2 [ 420.749256][ T4370] usb 1-1: config 6 has no interface number 3 [ 420.761352][ T4370] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 420.956589][ T4370] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 421.051999][ T4370] usb 1-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 421.067190][ T4370] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 421.090842][ T4370] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 421.137875][ T4370] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 421.172430][ T4370] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 421.265945][ T4370] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 421.314367][ T4370] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 421.364390][ T4370] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 421.421137][ T4370] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 421.504248][ T4370] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 421.702793][ T4370] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 422.143929][ T4370] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 422.279926][ T4370] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 422.308682][ T4370] usb 1-1: config 6 interface 4 has no altsetting 0 [ 422.317696][ T4370] usb 1-1: config 6 interface 86 has no altsetting 0 [ 422.336454][ T4370] usb 1-1: config 6 interface 191 has no altsetting 0 [ 422.355342][ T4370] usb 1-1: string descriptor 0 read error: -71 [ 422.361734][ T4370] usb 1-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 422.375946][ T4370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.928562][ T4370] usb 1-1: can't set config #6, error -71 [ 423.062084][ T4370] usb 1-1: USB disconnect, device number 11 [ 427.972887][ T7158] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 428.066907][ T7158] netlink: 830 bytes leftover after parsing attributes in process `syz.3.688'. [ 428.281213][ T35] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 428.469854][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 428.476955][ T35] usb 5-1: config 6 has an invalid interface number: 28 but max is 3 [ 428.546955][ T35] usb 5-1: config 6 has an invalid interface number: 4 but max is 3 [ 428.577374][ T35] usb 5-1: config 6 has an invalid interface number: 86 but max is 3 [ 428.607717][ T35] usb 5-1: config 6 has an invalid interface number: 191 but max is 3 [ 428.655412][ T35] usb 5-1: config 6 has no interface number 0 [ 428.695128][ T35] usb 5-1: config 6 has no interface number 1 [ 428.808026][ T7167] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.817540][ T7167] F2FS-fs (loop1): Unable to read 1th superblock [ 428.824945][ T7167] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.834537][ T7167] F2FS-fs (loop1): Unable to read 2th superblock [ 428.931615][ T35] usb 5-1: config 6 has no interface number 2 [ 429.231865][ T35] usb 5-1: config 6 has no interface number 3 [ 429.244050][ T35] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 429.276714][ T35] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 429.458110][ T35] usb 5-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 429.489466][ T35] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 430.243397][ T35] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 430.254422][ T35] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 430.265853][ T35] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 430.277270][ T35] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 430.287163][ T35] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 430.298314][ T35] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 430.328548][ T35] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 430.361892][ T35] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 430.499194][ T35] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 430.510654][ T35] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 430.530167][ T35] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 430.550596][ T35] usb 5-1: config 6 interface 4 has no altsetting 0 [ 431.530053][ T35] usb 5-1: config 6 interface 86 has no altsetting 0 [ 431.547168][ T35] usb 5-1: config 6 interface 191 has no altsetting 0 [ 431.567257][ T35] usb 5-1: string descriptor 0 read error: -71 [ 431.573187][ T7178] netlink: 32 bytes leftover after parsing attributes in process `syz.0.694'. [ 431.574168][ T35] usb 5-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 431.595113][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.653847][ T35] usb 5-1: can't set config #6, error -71 [ 431.698601][ T35] usb 5-1: USB disconnect, device number 8 [ 434.465016][ T7201] fuse: Bad value for 'fd' [ 438.210565][ T7226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.710'. [ 440.123991][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.130566][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.283185][ T75] sl0: compressed packet ignored [ 440.379099][ T7242] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.388883][ T7242] F2FS-fs (loop9): Unable to read 1th superblock [ 440.396671][ T7242] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.408366][ T7242] F2FS-fs (loop9): Unable to read 2th superblock [ 441.027074][ T7248] fuse: Bad value for 'fd' [ 443.989857][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 444.008318][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 444.751474][ T7271] netlink: 'syz.4.722': attribute type 21 has an invalid length. [ 444.760054][ T7271] netlink: 'syz.4.722': attribute type 6 has an invalid length. [ 444.767897][ T7271] netlink: 132 bytes leftover after parsing attributes in process `syz.4.722'. [ 447.934450][ T7295] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.944399][ T7295] F2FS-fs (loop1): Unable to read 1th superblock [ 447.952059][ T7295] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.961830][ T7295] F2FS-fs (loop1): Unable to read 2th superblock [ 448.122145][ T7289] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 448.128732][ T7289] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 448.469949][ T7296] vhci_hcd: connection closed [ 448.472477][ T7289] vhci_hcd vhci_hcd.0: Device attached [ 448.485696][ T4388] vhci_hcd: stop threads [ 448.491525][ T4388] vhci_hcd: release socket [ 448.496704][ T4388] vhci_hcd: disconnect device [ 448.577530][ T7300] netlink: 'syz.3.729': attribute type 20 has an invalid length. [ 448.641403][ T7300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.729'. [ 450.789935][ T4370] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 451.000354][ T4370] usb 5-1: Using ep0 maxpacket: 16 [ 451.007367][ T4370] usb 5-1: config 6 has an invalid interface number: 28 but max is 3 [ 451.019907][ T4370] usb 5-1: config 6 has an invalid interface number: 4 but max is 3 [ 451.036778][ T4370] usb 5-1: config 6 has an invalid interface number: 86 but max is 3 [ 451.055391][ T4370] usb 5-1: config 6 has an invalid interface number: 191 but max is 3 [ 451.100356][ T4370] usb 5-1: config 6 has no interface number 0 [ 451.106512][ T4370] usb 5-1: config 6 has no interface number 1 [ 451.138607][ T4370] usb 5-1: config 6 has no interface number 2 [ 451.148666][ T4370] usb 5-1: config 6 has no interface number 3 [ 451.177056][ T4370] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 451.190555][ T4370] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 451.211523][ T4370] usb 5-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 451.222903][ T4370] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 451.234023][ T4370] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 451.245191][ T4370] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 451.257138][ T4370] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 451.278823][ T4370] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 451.299228][ T4370] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 451.319874][ T4370] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 451.339804][ T4370] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 451.369975][ T4370] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 451.388553][ T4370] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 451.400097][ T4370] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 451.411400][ T4370] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 451.422705][ T4370] usb 5-1: config 6 interface 4 has no altsetting 0 [ 451.429347][ T4370] usb 5-1: config 6 interface 86 has no altsetting 0 [ 451.436716][ T4370] usb 5-1: config 6 interface 191 has no altsetting 0 [ 451.458087][ T4370] usb 5-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 451.478057][ T4370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.495382][ T4370] usb 5-1: Product: syz [ 451.500254][ T4370] usb 5-1: Manufacturer: syz [ 451.505365][ T4370] usb 5-1: SerialNumber: syz [ 451.734054][ T4370] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 451.767696][ T4370] usb 5-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 451.793241][ T4370] usb 5-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 452.425988][ T7332] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 454.671844][ T7346] tmpfs: Unknown parameter 'quota' [ 455.919574][ T7349] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 455.926168][ T7349] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 455.934077][ T7349] vhci_hcd vhci_hcd.0: Device attached [ 455.947919][ T7350] vhci_hcd: connection closed [ 455.951114][ T5923] vhci_hcd: stop threads [ 456.209965][ T35] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 456.580850][ T5923] vhci_hcd: release socket [ 456.638461][ T5923] vhci_hcd: disconnect device [ 457.005738][ T7362] tipc: Enabling of bearer rejected, failed to enable media [ 458.689676][ T7381] netlink: 56 bytes leftover after parsing attributes in process `syz.3.749'. [ 458.723710][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 460.139772][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20010 ms [ 460.147946][ C1] sl0: transmit timed out, driver error? [ 461.050852][ T4332] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 461.714087][ T7400] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.726875][ T7400] F2FS-fs (loop9): Unable to read 1th superblock [ 461.740982][ T7400] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.751145][ T7400] F2FS-fs (loop9): Unable to read 2th superblock [ 461.810423][ T35] vhci_hcd: vhci_device speed not set [ 463.463717][ T7407] tmpfs: Unknown parameter 'quota' [ 465.852039][ T7416] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 465.858637][ T7416] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 465.866790][ T7417] vhci_hcd: connection closed [ 465.870026][ T7416] vhci_hcd vhci_hcd.0: Device attached [ 465.943505][ T11] vhci_hcd: stop threads [ 465.947837][ T11] vhci_hcd: release socket [ 466.021882][ T11] vhci_hcd: disconnect device [ 466.167607][ T7425] tipc: Enabling of bearer rejected, failed to enable media [ 467.084459][ T4332] usb 2-1: unable to read config index 0 descriptor/all [ 467.091586][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'. [ 467.117072][ T4332] usb 2-1: can't read configurations, error -71 [ 467.161268][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'. [ 467.568949][ T7447] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 473.344814][ T7487] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 475.200814][ T7504] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.210459][ T7504] F2FS-fs (loop3): Unable to read 1th superblock [ 475.218493][ T7504] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 475.228026][ T7504] F2FS-fs (loop3): Unable to read 2th superblock [ 477.452672][ T7528] netlink: 830 bytes leftover after parsing attributes in process `syz.0.786'. [ 478.290488][ T7516] netlink: 32 bytes leftover after parsing attributes in process `syz.1.784'. [ 479.209373][ T7536] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 480.045314][ T7546] netlink: 'syz.1.791': attribute type 20 has an invalid length. [ 480.768184][ T7542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.791'. [ 480.798267][ T7544] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.807783][ T7544] F2FS-fs (loop1): Unable to read 1th superblock [ 480.816025][ T7544] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.829780][ T7544] F2FS-fs (loop1): Unable to read 2th superblock [ 483.204730][ T7568] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 483.211320][ T7568] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 483.222096][ T7568] vhci_hcd vhci_hcd.0: Device attached [ 483.334626][ T7582] netlink: 6 bytes leftover after parsing attributes in process `syz.1.801'. [ 483.444406][ T7582] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 483.760639][ T7582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 483.829882][ T7] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 483.850129][ T7569] vhci_hcd: connection reset by peer [ 483.867232][ T29] vhci_hcd: stop threads [ 483.882152][ T29] vhci_hcd: release socket [ 483.905519][ T29] vhci_hcd: disconnect device [ 484.071510][ T7588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.802'. [ 484.529629][ T7589] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 486.779860][ T4332] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 487.167855][ T4332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.186609][ T4332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.198779][ T4332] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 487.218773][ T4332] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 487.557873][ T4332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.959600][ T4332] usb 1-1: config 0 descriptor?? [ 488.138433][ T7615] netlink: 'syz.4.810': attribute type 20 has an invalid length. [ 489.121963][ T4332] ryos 0003:1E7D:3232.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 489.183341][ T7624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.814'. [ 489.199956][ T7] vhci_hcd: vhci_device speed not set [ 489.315847][ T7615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.810'. [ 489.690248][ T4353] usb 1-1: USB disconnect, device number 12 [ 489.863097][ T7629] fido_id[7629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 491.800354][ T7652] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 498.904339][ T7691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.829'. [ 499.502070][ T7694] tipc: Enabling of bearer rejected, failed to enable media [ 499.695812][ T7705] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 501.582903][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.589271][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.596153][ T7720] netlink: 6 bytes leftover after parsing attributes in process `syz.4.837'. [ 501.605064][ T7720] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 501.613567][ T7720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.638611][ T9] sl0: compressed packet ignored [ 504.314058][ T7732] netlink: 830 bytes leftover after parsing attributes in process `syz.2.839'. [ 506.172676][ T7758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.845'. [ 506.594334][ T7745] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 506.600928][ T7745] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 506.681773][ T7751] vhci_hcd: connection closed [ 506.717885][ T7745] vhci_hcd vhci_hcd.0: Device attached [ 506.802021][ T4557] vhci_hcd: stop threads [ 506.806407][ T4557] vhci_hcd: release socket [ 506.818508][ T4557] vhci_hcd: disconnect device [ 507.550821][ T7767] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 508.072370][ T7770] tipc: Enabling of bearer rejected, failed to enable media [ 509.522698][ T7788] netlink: 6 bytes leftover after parsing attributes in process `syz.0.851'. [ 509.532089][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 509.549985][ T7788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.261624][ T7794] Device name cannot be null; rc = [-22] [ 511.176888][ T7797] netlink: 'syz.2.854': attribute type 21 has an invalid length. [ 511.185213][ T7797] netlink: 'syz.2.854': attribute type 6 has an invalid length. [ 511.193126][ T7797] netlink: 132 bytes leftover after parsing attributes in process `syz.2.854'. [ 514.341865][ T7816] netlink: 32 bytes leftover after parsing attributes in process `syz.2.858'. [ 516.999551][ T7827] tipc: Enabling of bearer rejected, failed to enable media [ 517.014013][ T4370] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 517.098917][ T4370] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 517.130348][ T4370] usb 5-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 517.169792][ T4370] usb 5-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 519.443539][ T7855] netlink: 'syz.2.869': attribute type 21 has an invalid length. [ 519.452589][ T7855] netlink: 'syz.2.869': attribute type 6 has an invalid length. [ 519.460710][ T7855] netlink: 132 bytes leftover after parsing attributes in process `syz.2.869'. [ 521.909720][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20280 ms [ 521.917814][ C1] sl0: transmit timed out, driver error? [ 522.973468][ T7885] Device name cannot be null; rc = [-22] [ 523.886584][ T7891] tipc: Enabling of bearer rejected, failed to enable media [ 525.232016][ T7902] netlink: 'syz.4.883': attribute type 21 has an invalid length. [ 525.252966][ T7902] netlink: 'syz.4.883': attribute type 6 has an invalid length. [ 525.261839][ T7902] netlink: 132 bytes leftover after parsing attributes in process `syz.4.883'. [ 525.921687][ T7913] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 525.931043][ T7913] F2FS-fs (loop1): Unable to read 1th superblock [ 525.937533][ T7913] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 525.946770][ T7913] F2FS-fs (loop1): Unable to read 2th superblock [ 527.592586][ T7934] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 529.151085][ T7943] Device name cannot be null; rc = [-22] [ 530.489957][ T7954] netlink: 'syz.1.896': attribute type 21 has an invalid length. [ 530.498169][ T7954] netlink: 'syz.1.896': attribute type 6 has an invalid length. [ 530.506177][ T7954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.896'. [ 532.239798][ T35] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 532.929778][ T35] usb 4-1: Using ep0 maxpacket: 8 [ 532.936708][ T35] usb 4-1: config 162 has an invalid interface number: 97 but max is 0 [ 533.027877][ T35] usb 4-1: config 162 has no interface number 0 [ 533.047518][ T35] usb 4-1: config 162 interface 97 has no altsetting 0 [ 533.077227][ T35] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 533.106760][ T35] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.115280][ T35] usb 4-1: Product: syz [ 533.119574][ T35] usb 4-1: Manufacturer: syz [ 533.124335][ T35] usb 4-1: SerialNumber: syz [ 534.134646][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 534.186302][ T35] metro_usb 4-1:162.97: Metrologic USB to Serial converter detected [ 534.200917][ T4353] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 534.252548][ T35] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 534.321371][ T35] usb 4-1: USB disconnect, device number 10 [ 534.366453][ T35] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 534.407608][ T35] metro_usb 4-1:162.97: device disconnected [ 534.421497][ T4353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.466789][ T4353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.524421][ T4353] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 534.564954][ T4353] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 534.606915][ T4353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.659250][ T4353] usb 1-1: config 0 descriptor?? [ 535.077524][ T4353] ryos 0003:1E7D:3232.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 535.832758][ T4353] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 536.355465][ T35] usb 1-1: USB disconnect, device number 13 [ 536.449968][ T4353] usb 4-1: Using ep0 maxpacket: 16 [ 536.457904][ T4353] usb 4-1: config 6 has an invalid interface number: 28 but max is 3 [ 536.771185][ T4353] usb 4-1: config 6 has an invalid interface number: 4 but max is 3 [ 536.780876][ T4353] usb 4-1: config 6 has an invalid interface number: 86 but max is 3 [ 537.041962][ T4353] usb 4-1: config 6 has an invalid interface number: 191 but max is 3 [ 537.051082][ T4353] usb 4-1: config 6 has no interface number 0 [ 537.057368][ T4353] usb 4-1: config 6 has no interface number 1 [ 537.063870][ T4353] usb 4-1: config 6 has no interface number 2 [ 537.071240][ T4353] usb 4-1: config 6 has no interface number 3 [ 537.078277][ T4353] usb 4-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 537.089099][ T4353] usb 4-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 537.100344][ T4353] usb 4-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 537.111854][ T4353] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 537.123197][ T4353] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 537.134039][ T4353] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 537.148494][ T4353] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 537.199010][ T4353] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 537.220186][ T4353] usb 4-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 537.243517][ T4353] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 537.340372][ T4353] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 537.351443][ T4353] usb 4-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 537.373161][ T4353] usb 4-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 537.384607][ T4353] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 537.396109][ T4353] usb 4-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 537.410178][ T4353] usb 4-1: config 6 interface 4 has no altsetting 0 [ 537.417875][ T4353] usb 4-1: config 6 interface 86 has no altsetting 0 [ 537.426846][ T4353] usb 4-1: config 6 interface 191 has no altsetting 0 [ 537.471004][ T4353] usb 4-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 537.486817][ T4353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.505351][ T4353] usb 4-1: Product: syz [ 537.517322][ T4353] usb 4-1: Manufacturer: syz [ 537.525685][ T4353] usb 4-1: SerialNumber: syz [ 539.050640][ T4353] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 540.513839][ T8022] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 540.520452][ T8022] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 540.763483][ T8022] vhci_hcd vhci_hcd.0: Device attached [ 541.006687][ T8024] vhci_hcd: connection closed [ 541.022126][ T4523] vhci_hcd: stop threads [ 541.040744][ T4523] vhci_hcd: release socket [ 541.916682][ T4332] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 541.931988][ T4523] vhci_hcd: disconnect device [ 543.549444][ T8042] netlink: 'syz.1.921': attribute type 20 has an invalid length. [ 545.245173][ T8047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.921'. [ 545.274046][ T8057] netlink: 56 bytes leftover after parsing attributes in process `syz.2.924'. [ 545.316867][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 547.539882][ T4332] vhci_hcd: vhci_device speed not set [ 551.560697][ T126] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 552.233403][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.448463][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.569345][ T126] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.582744][ T126] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 552.648674][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.737318][ T126] usb 1-1: config 0 descriptor?? [ 553.180512][ T126] ryos 0003:1E7D:3232.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 554.069844][ T8119] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 554.076410][ T8119] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 554.084251][ T8119] vhci_hcd vhci_hcd.0: Device attached [ 554.435986][ T35] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 554.456567][ T8120] vhci_hcd: connection reset by peer [ 554.463720][ T4401] vhci_hcd: stop threads [ 554.468028][ T4401] vhci_hcd: release socket [ 554.528718][ T4401] vhci_hcd: disconnect device [ 554.562058][ T126] usb 1-1: USB disconnect, device number 14 [ 556.969317][ T8147] Device name cannot be null; rc = [-22] [ 557.760927][ T8149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.950'. [ 559.559820][ T35] vhci_hcd: vhci_device speed not set [ 559.909875][ T126] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 560.423762][ T8162] netlink: 6 bytes leftover after parsing attributes in process `syz.4.953'. [ 560.433060][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 560.473539][ T8162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.579810][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 560.638492][ T126] usb 1-1: config 6 has an invalid interface number: 28 but max is 3 [ 561.047440][ T126] usb 1-1: config 6 has an invalid interface number: 4 but max is 3 [ 561.548787][ T126] usb 1-1: config 6 has an invalid interface number: 86 but max is 3 [ 561.567169][ T126] usb 1-1: config 6 has an invalid interface number: 191 but max is 3 [ 561.576011][ T126] usb 1-1: config 6 has no interface number 0 [ 561.604688][ T126] usb 1-1: config 6 has no interface number 1 [ 561.619812][ T126] usb 1-1: config 6 has no interface number 2 [ 561.640501][ T126] usb 1-1: config 6 has no interface number 3 [ 561.786077][ T126] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 561.797268][ T126] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 561.808631][ T126] usb 1-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 561.820081][ T126] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 562.250661][ T8180] Device name cannot be null; rc = [-22] [ 562.865218][ T126] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 562.923553][ T126] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 563.104437][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.110798][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.130080][ T4427] sl0: compressed packet ignored [ 563.150769][ T126] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 563.183567][ T8188] netlink: 'syz.3.961': attribute type 20 has an invalid length. [ 563.210578][ T126] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 563.239347][ T126] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 563.259760][ T126] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 563.270074][ T126] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 563.309852][ T126] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 563.329741][ T126] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 563.340729][ T126] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 563.351665][ T126] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 563.437364][ T126] usb 1-1: config 6 interface 4 has no altsetting 0 [ 563.454665][ T126] usb 1-1: config 6 interface 86 has no altsetting 0 [ 563.478624][ T126] usb 1-1: config 6 interface 191 has no altsetting 0 [ 563.505738][ T126] usb 1-1: string descriptor 0 read error: -71 [ 563.974035][ T126] usb 1-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 563.991631][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.067228][ T8188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.961'. [ 564.071610][ T126] usb 1-1: can't set config #6, error -71 [ 564.351726][ T126] usb 1-1: USB disconnect, device number 15 [ 567.974107][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.969'. [ 570.680251][ T126] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 571.279802][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 571.377260][ T126] usb 1-1: config 6 has an invalid interface number: 28 but max is 3 [ 573.901309][ T126] usb 1-1: config 6 has an invalid interface number: 4 but max is 3 [ 573.909481][ T126] usb 1-1: config 6 has an invalid interface number: 86 but max is 3 [ 574.439077][ T126] usb 1-1: config 6 has an invalid interface number: 191 but max is 3 [ 574.635422][ T126] usb 1-1: config 6 has no interface number 0 [ 574.651822][ T126] usb 1-1: config 6 has no interface number 1 [ 574.668465][ T126] usb 1-1: config 6 has no interface number 2 [ 574.675445][ T126] usb 1-1: config 6 has no interface number 3 [ 574.691041][ T126] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 574.706770][ T126] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 574.950613][ T126] usb 1-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 574.968351][ T126] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 575.382412][ T126] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 575.405376][ T126] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 575.596808][ T126] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 576.381432][ T126] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 576.397750][ T126] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 576.409948][ T126] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 576.421115][ T126] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 576.437035][ T126] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 576.450401][ T126] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 576.466742][ T126] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 576.479749][ T126] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 576.491749][ T126] usb 1-1: config 6 interface 4 has no altsetting 0 [ 576.499654][ T126] usb 1-1: config 6 interface 86 has no altsetting 0 [ 576.507889][ T126] usb 1-1: config 6 interface 191 has no altsetting 0 [ 576.534655][ T126] usb 1-1: string descriptor 0 read error: -71 [ 576.838773][ T126] usb 1-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 577.135435][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.756187][ T126] usb 1-1: can't set config #6, error -71 [ 577.768950][ T126] usb 1-1: USB disconnect, device number 16 [ 578.443228][ T4353] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 578.445725][ T4370] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 578.832363][ T4353] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 578.842036][ T4353] usb 4-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 578.851723][ T4353] usb 4-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 578.991331][ T8282] fuse: Bad value for 'fd' [ 581.912513][ T4370] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 583.031548][ T8290] netlink: 'syz.3.986': attribute type 20 has an invalid length. [ 583.131091][ T8290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.986'. [ 583.269797][ T7] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 583.480705][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20370 ms [ 583.488954][ C1] sl0: transmit timed out, driver error? [ 586.093211][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.418248][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.522203][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 587.629138][ T7] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 587.653538][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.781519][ T7] usb 1-1: config 0 descriptor?? [ 587.799960][ T7] usb 1-1: can't set config #0, error -71 [ 587.961741][ T7] usb 1-1: USB disconnect, device number 17 [ 588.872663][ T8316] device syzkaller0 entered promiscuous mode [ 588.979480][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.996'. [ 588.992067][ T8321] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.001018][ T8321] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.009755][ T8321] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.018457][ T8321] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.244555][ T126] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 589.459902][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 589.466756][ T126] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 589.535554][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.559403][ T126] usb 1-1: config 0 descriptor?? [ 589.585832][ T126] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 591.494581][ T126] gspca_vc032x: reg_w err -71 [ 591.515878][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.529795][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.535390][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.562417][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.568793][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.592825][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.605787][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.613249][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.618853][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.626925][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.633907][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.639317][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.647881][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.655077][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.662786][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.668243][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.676330][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.683446][ T126] gspca_vc032x: I2c Bus Busy Wait 00 [ 591.688881][ T126] gspca_vc032x: Unknown sensor... [ 591.697404][ T126] vc032x: probe of 1-1:0.0 failed with error -22 [ 591.751807][ T126] usb 1-1: USB disconnect, device number 18 [ 593.219338][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'. [ 593.228936][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'. [ 593.901282][ T8383] netlink: 'syz.0.1010': attribute type 20 has an invalid length. [ 594.686495][ T8383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1010'. [ 596.363276][ T8401] Device name cannot be null; rc = [-22] [ 600.311978][ T8427] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1023'. [ 600.321503][ T8427] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 600.339272][ T8427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.305534][ T8445] Device name cannot be null; rc = [-22] [ 604.234552][ T8459] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 606.679980][ T4280] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 606.930226][ T4280] usb 3-1: Using ep0 maxpacket: 16 [ 606.940199][ T4280] usb 3-1: config 6 has an invalid interface number: 28 but max is 3 [ 606.978954][ T4280] usb 3-1: config 6 has an invalid interface number: 4 but max is 3 [ 607.051506][ T4280] usb 3-1: config 6 has an invalid interface number: 86 but max is 3 [ 607.116116][ T4280] usb 3-1: config 6 has an invalid interface number: 191 but max is 3 [ 607.147723][ T4280] usb 3-1: config 6 has no interface number 0 [ 607.166634][ T4280] usb 3-1: config 6 has no interface number 1 [ 607.190009][ T4280] usb 3-1: config 6 has no interface number 2 [ 607.196274][ T4280] usb 3-1: config 6 has no interface number 3 [ 607.202546][ T4280] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 607.213937][ T4280] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 607.224834][ T4280] usb 3-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 607.235748][ T4280] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 607.246567][ T4280] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 607.271025][ T4280] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 607.339458][ T4280] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 607.603143][ T4280] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 607.641742][ T8490] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1037'. [ 607.651225][ T8490] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 607.670353][ T8490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 608.074427][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 608.088567][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 608.551369][ T4280] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 608.562399][ T4280] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 608.572533][ T4280] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 608.587493][ T4280] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 608.609860][ T4280] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 608.638771][ T4280] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 608.657800][ T4280] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 608.679017][ T4280] usb 3-1: config 6 interface 4 has no altsetting 0 [ 608.720944][ T4280] usb 3-1: config 6 interface 86 has no altsetting 0 [ 608.832114][ T4280] usb 3-1: config 6 interface 191 has no altsetting 0 [ 608.870179][ T4280] usb 3-1: string descriptor 0 read error: -71 [ 608.877333][ T4280] usb 3-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 608.892443][ T4280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.938582][ T4280] usb 3-1: can't set config #6, error -71 [ 608.957662][ T4280] usb 3-1: USB disconnect, device number 14 [ 609.217647][ T8501] Device name cannot be null; rc = [-22] [ 609.994796][ T8502] device syzkaller0 entered promiscuous mode [ 612.624143][ T8521] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 614.563251][ T8536] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1050'. [ 614.576212][ T8536] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 614.589520][ T8536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 615.668911][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1051'. [ 615.751024][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1051'. [ 621.889830][ T8585] Device name cannot be null; rc = [-22] [ 622.588206][ T8584] netlink: 'syz.1.1061': attribute type 20 has an invalid length. [ 622.906817][ T8589] tmpfs: Unknown parameter 'quota' [ 624.337522][ T8596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1061'. [ 624.355064][ T8598] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 624.448031][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.460022][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.509724][ T4467] sl0: compressed packet ignored [ 625.932088][ T8605] nvme_fabrics: missing parameter 'transport=%s' [ 625.938895][ T8605] nvme_fabrics: missing parameter 'nqn=%s' [ 626.249055][ T8610] netlink: 'syz.2.1069': attribute type 21 has an invalid length. [ 626.264014][ T8610] netlink: 'syz.2.1069': attribute type 6 has an invalid length. [ 626.272428][ T8610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1069'. [ 628.573821][ T8622] fuse: Bad value for 'fd' [ 630.639848][ T4280] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 631.371640][ T4280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.388926][ T4280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.900955][ T4280] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.278387][ T4280] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 632.288918][ T4280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.308108][ T4280] usb 2-1: config 0 descriptor?? [ 632.843797][ T4280] ryos 0003:1E7D:3232.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 633.718775][ T8663] netlink: 'syz.0.1082': attribute type 21 has an invalid length. [ 633.727239][ T8663] netlink: 'syz.0.1082': attribute type 6 has an invalid length. [ 633.736487][ T8663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1082'. [ 634.024085][ T4280] usb 2-1: USB disconnect, device number 11 [ 634.462275][ T8669] fuse: Bad value for 'fd' [ 638.239044][ T8659] fido_id[8659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 640.346062][ T4370] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 640.346933][ T4353] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 640.411365][ T4370] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 640.527255][ T4370] usb 5-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 640.556459][ T4370] usb 5-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 641.342015][ T4353] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 641.650933][ T8709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1094'. [ 644.689530][ T8722] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1096'. [ 644.773331][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'. [ 644.920839][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20460 ms [ 644.929461][ C1] sl0: transmit timed out, driver error? [ 645.088549][ T8728] fuse: Bad value for 'fd' [ 647.696243][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1105'. [ 647.705443][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1105'. [ 647.717695][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1105'. [ 647.726846][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1105'. [ 649.662910][ T8763] netlink: 'syz.1.1108': attribute type 20 has an invalid length. [ 651.463632][ T8770] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1109'. [ 651.484230][ T8772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1108'. [ 651.933949][ T8775] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 653.712194][ T8793] fuse: Bad value for 'fd' [ 656.096468][ T8800] fuse: Unknown parameter 'f€ 0xffffffffffffffff1844674407370955161500000000000000000000ÿÿÿÿ00000000000000000000' [ 656.293348][ T8800] fuse: Bad value for 'fd' [ 657.684660][ T8810] netlink: 'syz.0.1120': attribute type 20 has an invalid length. [ 659.973533][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1120'. [ 661.960210][ T8837] fuse: Bad value for 'fd' [ 663.564672][ T8841] usb usb8: usbfs: process 8841 (syz.0.1129) did not claim interface 0 before use [ 666.305861][ T8855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.380234][ T8855] device batadv_slave_1 entered promiscuous mode [ 666.429974][ T8855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.480610][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'. [ 668.753713][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 668.762907][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1137'. [ 668.774369][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 668.783464][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1137'. [ 669.145285][ T8878] netlink: 'syz.2.1138': attribute type 20 has an invalid length. [ 669.762670][ T8879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1138'. [ 669.841184][ T8883] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1139'. [ 669.872458][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1139'. [ 674.688302][ T8916] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1147'. [ 674.701534][ T8916] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 675.585968][ T8916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.939779][ T4267] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 676.159763][ T4267] usb 2-1: Using ep0 maxpacket: 16 [ 676.308538][ T4267] usb 2-1: config 6 has an invalid interface number: 28 but max is 3 [ 677.100103][ T4267] usb 2-1: config 6 has an invalid interface number: 4 but max is 3 [ 677.108175][ T4267] usb 2-1: config 6 has an invalid interface number: 86 but max is 3 [ 677.551283][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 677.563124][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 677.574999][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 677.584078][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 678.750136][ T4267] usb 2-1: config 6 has an invalid interface number: 191 but max is 3 [ 678.758444][ T4267] usb 2-1: config 6 has no interface number 0 [ 678.799734][ T4267] usb 2-1: config 6 has no interface number 1 [ 678.806005][ T4267] usb 2-1: config 6 has no interface number 2 [ 678.824956][ T4267] usb 2-1: config 6 has no interface number 3 [ 678.846925][ T4267] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 678.894422][ T4267] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 679.085058][ T4267] usb 2-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 679.875933][ T4267] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 679.932235][ T4267] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 680.411621][ T4267] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 680.422586][ T4267] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 680.437947][ T4267] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 680.448320][ T4267] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 680.519182][ T4267] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 680.553916][ T8944] netlink: 'syz.2.1156': attribute type 20 has an invalid length. [ 680.577788][ T4267] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 680.779520][ T4267] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 680.799863][ T4267] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 681.127906][ T4267] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 681.169315][ T4267] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 681.193236][ T4267] usb 2-1: config 6 interface 4 has no altsetting 0 [ 681.225230][ T4267] usb 2-1: config 6 interface 86 has no altsetting 0 [ 681.254788][ T4267] usb 2-1: config 6 interface 191 has no altsetting 0 [ 681.312299][ T4267] usb 2-1: string descriptor 0 read error: -71 [ 681.357178][ T4267] usb 2-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 681.393594][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.423902][ T4267] usb 2-1: can't set config #6, error -71 [ 681.432384][ T4267] usb 2-1: USB disconnect, device number 12 [ 681.439067][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1156'. [ 685.432734][ T8991] netlink: 'syz.4.1169': attribute type 10 has an invalid length. [ 685.531039][ T8991] device veth0_macvtap left promiscuous mode [ 685.569264][ T8991] batman_adv: batadv0: Adding interface: macvtap0 [ 685.576254][ T8991] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.608798][ T8991] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 685.664321][ T9000] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1171'. [ 685.705481][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 685.913167][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.924870][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.956489][ T5923] sl0: compressed packet ignored [ 686.429448][ T9007] netlink: 'syz.2.1174': attribute type 20 has an invalid length. [ 686.492518][ T9007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1174'. [ 687.958069][ T9017] nvme_fabrics: missing parameter 'transport=%s' [ 687.964607][ T9017] nvme_fabrics: missing parameter 'nqn=%s' [ 689.221157][ T27] INFO: task udevd:4811 blocked for more than 144 seconds. [ 689.265921][ T27] Not tainted 6.1.146-syzkaller #0 [ 689.299990][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 689.360680][ T27] task:udevd state:D stack:25648 pid:4811 ppid:3638 flags:0x00004002 [ 689.399099][ T27] Call Trace: [ 689.423804][ T27] [ 689.435236][ T9035] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 689.474036][ T27] __schedule+0x10e9/0x40d0 [ 689.497522][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 689.529876][ T9035] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 689.630626][ T27] ? __mutex_trylock_common+0x80/0x250 [ 689.645064][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'. [ 689.658348][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 689.684203][ T27] schedule+0xb9/0x180 [ 689.735763][ T27] schedule_preempt_disabled+0xf/0x20 [ 689.763000][ T27] __mutex_lock+0x555/0xaf0 [ 689.776720][ T27] ? __mutex_lock+0x3a5/0xaf0 [ 689.787628][ T27] ? uevent_show+0x16c/0x320 [ 689.824172][ T27] ? mutex_lock_nested+0x10/0x10 [ 689.872059][ T27] uevent_show+0x16c/0x320 [ 689.958512][ T27] dev_attr_show+0x50/0xb0 [ 689.980978][ T27] sysfs_kf_seq_show+0x349/0x4b0 [ 689.986465][ T27] ? device_get_ownership+0xa0/0xa0 [ 690.008284][ T27] seq_read_iter+0x49b/0xd50 [ 690.050038][ T27] ? common_file_perm+0x171/0x1c0 [ 690.056836][ T27] vfs_read+0x434/0x920 [ 690.063495][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 690.079854][ T27] ? kernel_read+0x1e0/0x1e0 [ 690.085583][ T27] ? __x64_sys_newfstat+0x171/0x1c0 [ 690.095538][ T27] ? __fdget_pos+0x2b5/0x360 [ 690.102058][ T27] ksys_read+0x143/0x240 [ 690.107624][ T27] ? vfs_write+0x960/0x960 [ 690.114399][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 690.121957][ T27] do_syscall_64+0x4c/0xa0 [ 690.128702][ T27] ? clear_bhb_loop+0x60/0xb0 [ 690.135761][ T27] ? clear_bhb_loop+0x60/0xb0 [ 690.141568][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.149313][ T27] RIP: 0033:0x7fdc4c8a7407 [ 690.199081][ T27] RSP: 002b:00007ffe3b357080 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 690.449735][ T27] RAX: ffffffffffffffda RBX: 00007fdc4cf83880 RCX: 00007fdc4c8a7407 [ 690.458726][ T27] RDX: 0000000000001000 RSI: 000055bee35efa10 RDI: 0000000000000008 [ 690.470120][ T27] RBP: 00007fdc4c9efff0 R08: 0000000000000000 R09: 0000000000000000 [ 690.479053][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 690.536009][ T27] R13: 00007fdc4c9efea0 R14: 0000000000000000 R15: 000055bee35f0f30 [ 690.567553][ T27] [ 690.570793][ T27] [ 690.570793][ T27] Showing all locks held in the system: [ 690.589095][ T27] 1 lock held by rcu_tasks_kthre/12: [ 690.594587][ T27] #0: ffffffff8cb2b7b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 690.615620][ T27] 1 lock held by rcu_tasks_trace/13: [ 690.621089][ T27] #0: ffffffff8cb2bfd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 690.644402][ T27] 1 lock held by khungtaskd/27: [ 690.649816][ T27] #0: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 690.665874][ T27] 2 locks held by getty/4027: [ 690.679731][ T27] #0: ffff88814d2a1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 690.695215][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 690.706639][ T27] 5 locks held by kworker/1:7/4353: [ 690.718877][ T27] #0: ffff88801c2a6938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 690.731689][ T27] #1: ffffc90004a6fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 690.749929][ T27] #2: ffff888027979190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210 [ 690.759187][ T27] #3: ffff8880790fa190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 690.770519][ T27] #4: ffff888059eac118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 690.780678][ T27] 6 locks held by kworker/0:6/4370: [ 690.786724][ T27] #0: ffff88801c2a6938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 690.801442][ T27] #1: ffffc90004a5fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 690.814250][ T27] #2: ffff888027991190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210 [ 690.823582][ T27] #3: ffff8880583a3190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 690.833205][ T27] #4: ffff88802d5b7118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 690.843659][ T27] #5: ffffffff8c9d79b0 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0xec/0x2a0 [ 690.862073][ T27] 4 locks held by udevd/4810: [ 690.867643][ T27] #0: ffff888024a73d58 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 690.881575][ T27] #1: ffff888056fc3088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 [ 690.891135][ T27] #2: ffff888057e5c3a8 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 [ 690.900933][ T27] #3: ffff88802d5b7118 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 690.910887][ T27] 4 locks held by udevd/4811: [ 690.915823][ T27] #0: ffff888079a610a0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 690.928816][ T27] #1: ffff8880779f9488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 [ 690.938424][ T27] #2: ffff88802769b830 (kn->active#5){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 [ 690.949331][ T27] #3: ffff8880790fa190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 690.958910][ T27] 2 locks held by kworker/u4:20/5605: [ 690.965763][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 690.981945][ T27] #1: ffffc90005417d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 691.006005][ T27] [ 691.009341][ T27] ============================================= [ 691.009341][ T27] [ 691.030810][ T27] NMI backtrace for cpu 0 [ 691.035225][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0 [ 691.043154][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 691.053261][ T27] Call Trace: [ 691.056574][ T27] [ 691.059532][ T27] dump_stack_lvl+0x168/0x22e [ 691.064251][ T27] ? show_regs_print_info+0x12/0x12 [ 691.069485][ T27] ? load_image+0x3b0/0x3b0 [ 691.074031][ T27] ? vprintk_emit+0x571/0x680 [ 691.078755][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 691.083717][ T27] ? lock_chain_count+0x20/0x20 [ 691.088589][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 691.094794][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 691.100449][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 691.105679][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 691.111767][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 691.117765][ T27] watchdog+0xeee/0xf30 [ 691.121938][ T27] ? watchdog+0x1ed/0xf30 [ 691.126288][ T27] kthread+0x29d/0x330 [ 691.130391][ T27] ? hungtask_pm_notify+0x40/0x40 [ 691.135430][ T27] ? kthread_blkcg+0xd0/0xd0 [ 691.140050][ T27] ret_from_fork+0x1f/0x30 [ 691.144499][ T27] [ 691.148239][ T27] Sending NMI from CPU 0 to CPUs 1: [ 691.153715][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 691.162526][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 691.162544][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0 [ 691.162569][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 691.162584][ T27] Call Trace: [ 691.162593][ T27] [ 691.162603][ T27] dump_stack_lvl+0x168/0x22e [ 691.162635][ T27] ? memcpy+0x3c/0x60 [ 691.162671][ T27] ? show_regs_print_info+0x12/0x12 [ 691.162696][ T27] ? load_image+0x3b0/0x3b0 [ 691.162741][ T27] panic+0x2c9/0x710 [ 691.162769][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 691.162800][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 691.162828][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 691.162869][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 691.162897][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 691.162924][ T27] watchdog+0xf2d/0xf30 [ 691.162955][ T27] ? watchdog+0x1ed/0xf30 [ 691.162988][ T27] kthread+0x29d/0x330 [ 691.163019][ T27] ? hungtask_pm_notify+0x40/0x40 [ 691.163045][ T27] ? kthread_blkcg+0xd0/0xd0 [ 691.163079][ T27] ret_from_fork+0x1f/0x30 [ 691.163126][ T27] [ 691.167841][ T27] Kernel Offset: disabled [ 691.282843][ T27] Rebooting in 86400 seconds..